KR101831158B1 - A terminal for providing banking services, a method for operating the terminal, a server for providing banking services and a method for operatin the server - Google Patents

Abstract

A method of operating a terminal for providing financial services according to an exemplary embodiment of the present invention includes: displaying an interface for acquiring image information for non-face real name authentication of the financial service, step; Acquiring image information according to a user input through the interface; And transmitting the acquired image information to authentication information for non-face-real-name authentication of the financial service to the server, wherein the image information includes first image information captured by the first image capturing means of the terminal, Face real name authentication of the financial service including the second image information photographed by the second photographing means of the terminal at the same time when the first image information is photographed.

Description

TECHNICAL FIELD [0001] The present invention relates to a terminal for providing financial services, a method of operating the same, a server for providing financial services, and a method of operating the same. [0003]

The present invention relates to a terminal for providing financial services, a method of operating the same, a server for providing financial services, and a method of operating the same, more specifically, to enhance personal information protection and security, The present invention relates to a terminal for providing financial services for providing enhanced Internet financial services, a method for operating the terminal, a server for providing financial services, and an operation method thereof.

In general, to open a bank branch and operate it, a specific space must be secured, and a safe box should be provided to store cash inside. A counter terminal, various auxiliary devices, and a communication network for managing and operating them are installed .

In addition, it should be equipped with office assistant to perform various financial services such as coin and bill counter, copier, scanner and various security equipment for safety and security.

As described above, in order to open a bank branch, not only a large space is required but also a high cost is required for installation of various equipments and services. Especially, due to competition with other financial institutions, There is a problem that not only the position preemption but also the cost burden for opening the branch becomes considerable.

To solve these problems, in recent years, along with the development of the IT industry, financial automation devices such as Internet banking and ATM (Automated Teller Machine) using terminals have been developed. As a result, customers visit their own bank Various financial services can be easily processed by using a computer, a portable terminal, or a financial automation device installed nearby.

In addition, through the simplification of such financial services, the Internet Primary Bank is emerging. Internet banking refers to banks that operate most of the banking business through the Internet, electronic media such as CDs and ATMs, without a few branches or branches, and the introduction of Internet banking has been implemented since mid 1990s It is spreading all over the world.

The interest in Internet banking has been stimulated by the development of IT technology and the increasing rate of internet usage, and has been triggered by management innovation and strategic factors such as cost reduction and service differentiation. Since its founding in the United States, SFNB (Security First Network Bank, 1995) has spread to the UK, Japan, EU, Hong Kong and Singapore.

As a result, it is expected that Internet professional banks will be attracting attention in Korea. Recently, there has been a move to reexamine the interpretation and practices of financial reforms that require confirmation of personal identification under the Financial Real Name Act.

However, the non - contact identification method of Internet banking requires a solution to solve or relax the legal constraints of the account opening or the burden of the customer, which poses the problem that there is no clear real name authentication system that can completely replace face - to - face verification.

Therefore, in order to solve the application of the financial real name system, it is necessary to establish a validated system capable of carrying out the real name authentication procedure through the Internet in place of the identity verification process, .

In recent years, there have been proposed methods of submitting a copy of a blindness check, video call, confirming when transferring an access medium, utilizing an existing account, utilizing results of other institutional verification, and verifying a plurality of personal information. However, And the plural methods must be complementary to each other.

In particular, the submission of a copy of the blindness check certificate is essential information required by law for opening an account, and it is basically necessary to enter the above plural methods. Accordingly, the customer must take a procedure by photographing or scanning the ID card to his / her terminal and submit it online, and by checking whether the ID card is authentic in the financial service providing server.

In addition, recently, a face image of a user is also photographed for multiple authentication using a user's video call or the like, and is transmitted to a financial service providing server. Accordingly, the non-face real name authentication can be performed by collating the face image information of the user and the ID image information on the server side.

However, in the verification process for the non-face real name authentication, the face image of the user and the image information of the ID image may be photographed separately at separate time points and separately transmitted separately. There is a problem that it is impossible to prevent illegal acts such as the case where one is individually up / modulated. For example, illegal authentication may be attempted using a face image of another person photographed at a different point in time and an ID image of the other person.

In addition, in order to photograph each image information as described above, the user has to go through two or more complicated procedures such as face photographing and ID image photographing in order to photograph two images or images, respectively. This poses a problem that causes time and inconvenience for non-face authentication.

In addition, although the image information and the ID image information transmitted in the above process can be securely processed in the communication section, the ID image and the image information stored temporarily or semi-permanently on the volatile storage medium of the customer terminal, Can easily be exposed to the outside. Particularly, in a general image input interface for capturing or inputting authentication information such as a user's own ID card or his / her face image, an image or image currently being photographed or indexed is displayed without filtering, and a screen mirroring, You can easily take it.

In addition, there is a problem that an exposed ID image or image can not be protected from access by other applications.

Thus, in order to construct a verified non - face authentication system for financial services, there is also a need to solve the above - mentioned problems of disclosure of personal information, reliability reduction, and security problems.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide an Internet financial service providing method capable of providing a financial service in which multiple authentication according to simultaneous photographing is performed, And a terminal for providing the apparatus and the Internet financial service.

It is another object of the present invention to establish a verified system that can perform the real name authentication procedure conveniently and reliably through the Internet in place of the identity verification process that must be confronted with for the new transaction of the Internet bank, .

According to another aspect of the present invention, there is provided a method of operating a terminal for providing a financial service, the method including displaying an interface for acquiring image information for non-face real name authentication of the financial service, step; Acquiring image information according to a user input through the interface; And transmitting the acquired image information to authentication information for non-face-real-name authentication of the financial service to the server, wherein the image information includes first image information captured by the first image capturing means of the terminal, Face real name authentication of the financial service including the second image information photographed by the second photographing means of the terminal at the same time when the first image information is photographed.

According to another aspect of the present invention, there is provided an apparatus for providing a financial service, the apparatus comprising: a display for displaying an interface for acquiring image information for non-face real name authentication of the financial service; part; And a controller for acquiring image information according to a user input through the interface and transmitting the acquired image information to authentication information for non-face real name authentication of the financial service through a communication unit to a server, Information includes first image information captured by a first camera of the terminal and second image information captured by a second camera of the terminal at the same time point when the first image information was captured.

According to another aspect of the present invention, there is provided a server for providing a financial service, the server providing an application including the financial service to a terminal, A communication unit for receiving original image information corresponding to the information; And authenticating the non-face-based real name authentication for the financial service based on the original image information, wherein the image information includes first image information captured by a first camera of the terminal, And the second image information photographed by the second camera of the terminal at the same time when the information is captured.

According to another aspect of the present invention, there is provided a computer program for use in a computer readable recording medium storing a computer program for causing a computer to execute the method.

According to the embodiment of the present invention, the authentication information for the non-face real name authentication of the financial service is composed of the multiple image information simultaneously photographed by using at least two photographing means provided in the terminal, so that the authentication procedure is shortened, Reliability can be improved.

According to the embodiment of the present invention, user convenience can be improved by providing a control application and an interface for easily simultaneously photographing using two or more photographing means.

In addition, the personal information protection area on the interface is identified and masked, and the personal information is protected by protecting the personal information by displaying the masked image information instead. Even if the masked image information is displayed, it is possible to recognize that the user is using the secured interface by notifying the user of the normal image shooting through the change of the guide image or the silhouette, It is possible to provide an application for photographing.

According to the embodiment of the present invention, since the original image information including the multiple authentication images is transmitted to the server providing the financial service separately from the masked image information, the existing real name authentication service can also be normally performed .

Accordingly, it is possible not only to provide a real name authentication service on a financial service in which personal information protection and security of a terminal is enhanced, but also to provide a plurality of users It is possible to construct a verified system capable of performing the real name authentication procedure with peace of mind.

1 is a conceptual diagram schematically showing an overall system according to an embodiment of the present invention.
2 is a block diagram illustrating a financial service providing server according to an embodiment of the present invention.
3 is a block diagram for explaining a terminal according to an embodiment of the present invention in more detail.
4 is a block diagram illustrating an image processing unit according to an embodiment of the present invention.
5 is a ladder diagram illustrating system operation according to an embodiment of the present invention.
6 is a ladder diagram illustrating system operation in accordance with another embodiment of the present invention.
7 is a flowchart illustrating an operation of a terminal according to an embodiment of the present invention.
8 to 12 are views showing interfaces output through a display according to an operation of a terminal according to an embodiment of the present invention.

The following merely illustrates the principles of the invention. Thus, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. Furthermore, all of the conditional terms and embodiments listed herein are, in principle, only intended for the purpose of enabling understanding of the concepts of the present invention, and are not to be construed as being limited to such specifically recited embodiments and conditions do.

It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. It is also to be understood that such equivalents include all elements contemplated to perform the same function irrespective of the currently known equivalents as well as the equivalents to be developed in the future, i.e., the structure.

Thus, it should be understood that all flow diagrams, state transitions, pseudo code, etc. are representative of various processes that may be substantially represented on a computer-readable medium and executed by a computer or processor, whether the computer or processor is explicitly shown .

The functions of the various elements shown in the figures, including the functional blocks depicted in the processor or similar concept, may be provided by use of dedicated hardware as well as hardware capable of executing software in connection with appropriate software. When provided by a processor, the functions may be provided by a single dedicated processor, a single shared processor, or a plurality of individual processors, some of which may be shared.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, in which: There will be. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

First, the terms used in the specification of the present invention will be briefly defined, and then an embodiment of the present invention will be described.

The term " terminal "described in this specification may include a mobile phone, a smart phone, a laptop computer, a digital broadcast terminal, a PDA (Personal Digital Assistants), a PMP (Portable Multimedia Player) The present invention is not limited thereto, and may be various devices capable of user input and information display.

Also, the term " financial service providing server "may mean a server and a device system for processing information related to financial transactions. For example, the financial service provision server may include a bank server for relaying financial accounts, a van server for relaying financial card electronic settlement, a credit card server for processing payment approval for credit card transactions, Various types of servers may be involved. As described above, the financial service providing server may include an Internet bank that operates most of the banking business through the Internet and electronic media such as CD and ATM without a few branches or sales offices. Depending on the specific function, the actual financial transaction function and other additional functions may be separated into separate server types.

1 is a conceptual diagram schematically showing an overall system according to an embodiment of the present invention.

Referring to FIG. 1, an overall system according to an embodiment of the present invention includes a financial service providing server 100, a terminal 200, an authentication server 300, and a financial institution DB 400.

The financial service providing apparatus 100 and the terminal 200 according to the embodiment of the present invention are configured such that a communication module is installed so as to enable a communication network connection to a mobile communication network or an Internet network and are interconnected through a communication network connection.

The financial service providing server 100 is connected to the financial institution DB 400 and the authentication server 300 either wirelessly or wirelessly and communicates with the terminal 200 via the Internet network or mobile communication network, Financial services can be provided. The financial service can be exemplified by various services such as opening a new account on the Internet, issuing a bankbook or a card, transferring money, and requesting a loan.

In addition, the financial service providing server 100 may perform the service process by performing the real name verification according to the operation with the terminal 200 according to the embodiment of the present invention, for the service requiring the real name confirmation in the financial service.

In order to confirm the real name and service of the financial service, the financial service providing server 100 may provide the financial service application to the terminal 200 in advance, and the service providing application, real name authentication and processing And an interface for confirming results can be provided.

For example, the terminal 200 may access an affiliate site on the user's Internet or an open market such as an Android market or an app store, download a financial service application, enter a user's information, It can be downloaded from the web after the authentication process.

At this time, uploading, updating information or other management of the financial service application may be performed in the financial service providing server 300 or in another type of server.

Meanwhile, the terminal 200 performs wireless communication through a general mobile communication network and transmits / receives at least one of various messages such as a Short Message Service (SMS), a Multimedia Messaging Service (MMS) Or a cellular phone. In addition, the terminal 200 may include a personal digital assistant (PDA) that can access the mobile communication network and transmit and receive data to and from an Internet Protocol (IP) network such as the Internet.

The terminal 200 according to the embodiment of the present invention can be connected to the financial service providing server 100 when the financial service application is executed. The terminal 200 may perform various functions related to financial transactions based on the information input on the interface.

In particular, the terminal 200 can perform an account opening application through a financial service application. The terminal 200 can input application information according to user input on the screen and input the real name authentication information to the financial service providing server 100. The financial service providing server 100 receives the real name The authentication information and the application information are received, and it is possible to confirm the real name and check whether the account is opened.

In particular, according to embodiments of the present invention, most of the processing procedures of financial services can be performed based on non-face authentication. In order to ensure reliability, separate authentication information for non-face authentication according to an embodiment of the present invention may be required.

Accordingly, the application information may include user information corresponding to at least one of a name, a resident number, and an address, and the real name authentication information may include one or more authentication information for confirming the user's real name.

In particular, in the case of an Internet professional banking service requiring non-face authentication, the real name authentication information may include information on a plurality of authentication means. Accordingly, the authentication information may include, for example, a blindness check image (front and back) such as a user's identification card, and may include image information of a user's face, real name verification affiliation information, And may further include one or more of the other account information for the account. Here, the blindness identification certificate may mean a certificate issued by the certification authority in response to the user's real name, for example, a resident registration card, a driver's license or a passport.

Then, the financial service providing server 100 can communicate with the authentication server 300 and the financial institution DB 400 according to the authentication information, and process the real name authentication confirmation by merging the respective methods.

More specifically, when the blindness check certificate image is received from the terminal 200, the financial service providing server 100 delivers the image to the authentication server 300 and receives a response thereto to determine whether the real name verification check image is authentic Can be confirmed. In this case, the authentication server 300 may be an issuing organization of the blindness certificate image or a server connected thereto.

Further, for example, the financial service providing server 100 may further receive image information from which the face of the user is photographed from the terminal 200. [ In this case, the image information may include a video call image captured by the user in real time or within a predetermined time. At this time, the financial service providing server 100 may process the real name verification according to a comparison between the received image information and the face image of the blindness check. The financial service providing server 100 may be provided with a face recognition system to check whether the face images are matched or not, and display the image information and the blindness verification image so that the manager can directly input the verification result.

Meanwhile, when the affiliated organization information is received from the terminal 200, the financial service providing server 100 may request the blindness confirmation certificate to the blindness verification affiliate through the authentication server 300. [ In this case, a copy of the blindness check certificate may be received from the authentication server 300.

When the account information is received from the terminal 200, the financial service providing server 100 can confirm whether an account opened through another financial institution exists in response to the user information through the financial institution DB 400 . The financial service providing server 100 can request a deposit and withdrawal transaction with an account opened in another financial institution. When the transaction is completed, the financial service providing server 100 can complete the user's real name authentication.

As the real name authentication is completed, the financial service providing server 100 can provide the approval result information to the terminal 200. [

According to the embodiment of the present invention, the terminal 200 can perform personal information protection and security processing on the blindness check image stored in the memory. The security processing may be executed according to the above-described financial service application or the OS itself of the terminal 200. [

In order to protect personal information, the terminal 200 stores a real name verification check image for non-face real name verification of the financial service in a specific area of the memory, manages the photographing time information of the real name verification check image, According to the time information, when the real name verification proof image has been taken a predetermined time or more from the time when the image was taken, the real name verification proof image can be deleted from the specific area of the memory.

Here, the specific area may be a separate secured folder. For security processing, the terminal 200 searches the image information stored in the memory and identifies the real name verification proof image for non-face real name authentication of the user's financial service from the image information, Monitoring the access information corresponding to the folder and the access information corresponding to the identified blindness check identification image, and checking whether an external access other than the application for non-face real name authentication of the financial service is confirmed from the access information , It may require additional authentication for provision of the blindness check image.

Here, the additional authentication may include authentication of at least one of a password for biometric authentication or biometric information, and the biometric information may include at least one of fingerprint information, iris information, grammar information, vein information, and DNA information . In this specification, fingerprint information is described as an example of biometric information, but the biometric information of the present invention is not limited thereto and may include other biometric information or a combination of biometric information.

Also, according to an embodiment of the present invention, the terminal 200 displays an interface for acquiring image information for non-face real name authentication of the financial service, Or masks the personal information protection area from the obtained original image information, and displays the mask information on the masked personal information protection area through the interface have.

According to the embodiment of the present invention, the terminal 200 has two or more photographing means such as a camera and generates multiple authentication information obtained by simultaneously photographing the image of the user 12 and the image of the blindness verifying 10 To the server (100). In this case, the image information may include information indicating that the first image information captured by the first image capturing means of the terminal 200 and the second image information captured by the second image capturing means of the terminal 200 Face image real-time authentication of the financial service including the second image information.

Accordingly, in the terminal 200, the face image of the user 12 and the image of the blindness check 10 can be easily transmitted to the server 100 at the same time. Accordingly, the user can shorten the complex real name authentication process to one procedure, and the server 100 can process the ID image and the face authentication by one data transmission / reception, thereby improving the processing speed. In addition, it is possible to prevent the problem of the reliability lowering of the blindness authentication service caused by the difference in the shooting timing of each image. The specific configuration and operation of the server 100 and the terminal 200 will be described later.

2 is a block diagram illustrating a financial service providing server according to an embodiment of the present invention.

2, the financial service providing server 100 according to the embodiment of the present invention includes a communication unit 120, a financial service providing unit 130, a real name confirmation unit 140, an application management unit 150, a storage unit 160 and an output unit 170.

The controller 110 generally controls the operation of each component and the execution of the functions to provide financial services of the financial service providing apparatus 100. For example, the control unit 110 may be implemented as a processor for controlling all or a part of financial service application provision, real name verification, authentication information output, and financial service provision functions or a program for executing the functions.

The communication unit 120 enables wireless communication between the financial service providing apparatus 100 and a wireless communication system including a mobile communication network or the Internet network or between a network where the financial service providing apparatus 100 and the terminal 200 are located One or more communication modules. The communication unit 120 may include a modem for encoding and modulating the transmitted signal, demodulating and decoding the received signal, and an RF front end for processing the RF signal.

On the other hand, the financial service providing unit 130 performs a process necessary for providing financial services corresponding to the application information, based on the application information of the user received from the terminal 200. The financial service providing unit 130 can perform a process of opening a financial account by communicating with the financial institution DB 400 through the communication unit 120, for example, in response to a user's request for opening an account. The financial service providing unit 130 may perform the account transfer processing according to the user's account transfer request. In addition, the financial service providing unit 130 may check the availability of the loan according to the user's request for loan, and may perform the process of lending to the account of the user, if possible.

In particular, when the financial service provider 130 needs confirmation of the real name of the user, such as lending or opening an account, it transmits the authentication information received from the terminal 200 to the real name confirmation unit 140 to confirm whether or not the real name is authenticated, Only when the authentication is completed, the processing for providing the financial service can be performed.

Accordingly, the real name verification unit 140 can perform the real name verification process based on the authentication information received from the terminal 200 through the communication unit 120. [

As described above, the authentication information for real name verification may include a plurality of authentication means. The plurality of authentication means may include at least two or more of, for example, a blindness certificate image, image information, affiliation information, or other account information.

The real name confirmation unit 140 checks whether or not the real name authentication is performed in cooperation with the authentication server 300 and the financial institution DB 400 through the communication unit 120 and transmits the result to the financial service provider 130 have.

More specifically, the real name verification unit 140 directly confirms the authenticity of the real name verification proof image included in the authentication information, extracts the characteristic information, transmits it to the authentication server 300, And confirms the authenticity of the real name verification proof image.

In addition, the real name verification unit 140 can confirm the real name authentication only when the degree of similarity is equal to or greater than a predetermined value, by collating the user's personal image obtained from the real-time video call information with the real name verification proof image.

In addition, the real name confirmation unit 140 can identify the user's portrait image and the real name verification proof image from the original image information as described above. Here, the original image information may be information of the first camera or the first camera of the terminal 200 and the second camera of the terminal 200 at the same time as the first image information and the first image information, And the second image information captured by the second image capturing unit. The original image information including the multiple authentication information may be different from the masked image information displayed on the terminal 200.

The real name verification unit 140 may acquire the real name verification proof image or the user image of the user from the original image information to approve the non-face real name authentication for the financial service.

Meanwhile, in the embodiment of the present invention, the blindness verifying unit 140 obtains the photographing time information that is simultaneously photographed from the multiple authentication information, compares the photographing time information and the current time information, .

In addition, the obtained photographing time information may be encrypted through the application in the terminal. Therefore, the real name verification unit 140 indexes the decryption key issued in advance corresponding to the application, decrypts the photographing time information, and based on the decrypted photographing time information, only when the photographing time is less than a predetermined time The real name authentication can be approved. This makes it possible to increase the reliability of the real name authentication.

If the time has elapsed, the terminal 200 may be automatically deleted through the application, but it may have been transmitted. Therefore, the real name confirmation unit 140 may notify the terminal 200 of a warning message such as failure or hacking And can perform processing corresponding thereto.

Then, the real name confirmation unit 140 first extracts the photographing time information obtained from the original image information, and performs scanning when the photographing time is within a predetermined time. Then, the real name confirmation unit 140 scans the real name verification proof image included in the authentication information, extracts the face image information from the ID image, and displays the text information (name, resident registration number, address, Can be extracted. Also, the real name confirmation unit 140 can extract the fingerprint image from the backside image information of the ID card, and transmit the extracted face image information, fingerprint image information, and text information to the authentication server 300 through the communication unit 120 Registration and inquiry system to verify authenticity.

Also, the real name confirmation unit 140 identifies the person image information including the user's face acquired from the original image information in the authentication information, and confirms the real name according to the contrast between the person image information and the face image information of the real name verification check Can be processed. The real name confirmation unit 140 may include a face recognition system to check whether or not the face image of the person image information matches the feature information extracted from the face image of the blindness check. In addition, the real name verification unit 140 may output the person image information and the real name verification proof image through the output unit 170 so that the administrator directly inputs the verification result. The feature information may include, for example, facial feature information of the user. The facial feature information includes, for example, facial contour information, mouth pattern information, eye pattern information, nose pattern information, pupil pattern information, ear pattern information extracted from each part in accordance with a mask and a scaling operation of a video image with respect to the face area And may include at least one.

In addition, when the user's video call information is included in the authentication information for non-face authentication, the real name verification unit 140 may output the video information and the voice information identified from the video call information through the output unit 170 . To this end, the output 170 may include one or more display modules for video and audio output and a voice output module.

On the other hand, when the affiliated organization information is received from the terminal 200, the real name confirmation unit 140 may request the real name verification certificate to the affiliated agency through the communication unit 120. [ In this case, a copy of the blindness certificate may be received from the partner organization. In this case, the authentication server 300 may correspond to an affiliate agency server.

When the account information is received from the terminal 200, the real name confirmation unit 140 accesses the financial institution DB 400 through the communication unit 120, and in response to the user information included in the application information, You can check whether the account opened through the agency exists. The real name confirmation unit 140 may request the deposit and withdrawal transaction with the account opened in another financial institution. When the transaction is completed, the real name confirmation unit 140 completes the real name authentication of the user, To the providing unit 130.

Upon completion of the real name authentication of the real name verification unit 140 as described above, the financial service provider 130 completes the procedure necessary for providing the financial service and transmits the approval result information to the terminal 200 ).

Meanwhile, the application management unit 150 may generate an application for providing a financial service and deliver it to the terminal 200 through the communication unit 120. [ For example, the application management unit 150 can access an affiliate site on the Internet or an open market such as an Android market or an app store, upload a financial service application, and manage update information.

Meanwhile, the storage unit 160 may store information to be processed in each component and a financial service application. The storage unit 160 may be implemented as a random access memory (RAM), a flash memory, a ROM (Read Only Memory), an EPROM (Erasable Programmable ROM), an EEPROM (Electronically Erasable and Programmable ROM) Or the like, as well as a detachable type storage device such as a USB memory.

3 is a block diagram for explaining a terminal according to an embodiment of the present invention in more detail.

3, a terminal 200 according to an embodiment of the present invention includes a control unit 210, a communication unit 220, a memory 230, a financial service processing unit 240, an input unit 250, a display unit 260, An audio output unit 270, an image processing unit 290, a camera 281, and a microphone 282.

The communication unit 220 includes at least one module that enables wireless communication between the terminal 200 and the financial service providing apparatus 100 or a network in which the terminal 200 and the financial service providing apparatus 100 are located .

The communication unit 220 includes a wired / wireless communication module for wirelessly or wiredly communicating with a local area network (LAN) and an Internet network, a USB interface module for communicating via a USB (Universal Serial Bus) (Short-range wireless communication module) that performs a communication function according to the 3GPP (3rd Generation Partnership Project), LTE (Long Term Evolution), NFC (Near Field Communication), Wi- And a communication module for communicating with the communication network.

On the other hand, the input unit 250 receives a user input for operating the terminal 200. In particular, the input unit 250 may receive a user input for executing a financial service application interface, and the user inputs application information and authentication information for applying for a financial service to the input unit 250 through an operation corresponding to the interface .

Here, the input unit 250 may include various types of buttons, a touch sensor that receives a touch input to the display unit 260, a proximity sensor that receives motion that is not directly connected to the surface of the display unit 260, And a microphone for receiving the microphone. However, the present invention is not limited thereto and may be implemented in any form capable of receiving user input.

The financial service processing unit 240 processes an application operation for providing a financial service. The financial service processing unit 240 can perform processing of application information for providing a financial service, confirmation of authentication information, encryption, and communication between the financial service providing apparatuses 100 through the communication unit 220.

In particular, the financial service processing unit 240 may display, through the display unit 260, an interface for receiving user information for providing the financial service through the input unit 250.

In addition, the financial service processing unit 240 may receive a user input corresponding to the authentication information through the input unit 250. [ In particular, the financial service processing unit 240 can photograph the face image information of the user and the proof of real name confirmation through the camera 281 according to user input.

Particularly, in the embodiment of the present invention, the financial service processing unit 240 outputs an interface for photographing the user's face image information and the blindness check image at the same time according to the user input through the display unit 260 can do.

More specifically, the camera 281 may include two or more photographing means for photographing the user image and the blindness verification image, respectively. For example, the camera 281 may include a first camera and a second camera, the first camera may be a front camera 281A of the terminal 200, Camera 281B.

As the interface is displayed, the front camera 281A and the rear camera 281B can be activated at the same time. For this, the control unit 210 can synchronize the operations of the front camera 281A and the rear camera 281B. The control unit 210 can simultaneously activate and activate the operation power of the front camera 281A and the rear camera 281B to acquire image information of each camera at the same time.

The first image information photographed by the front camera 281A and the second image information photographed by the rear camera 281B may be output on the interface according to the activation of the front camera 281A and the rear camera 281B have. For example, the first image information may include face image information of a user, and the second image information may include a user's real name verification image. Accordingly, the terminal 200 can output the simultaneous photographing interface in which the face and the blindness verification image of the same name are simultaneously photographed at the same time, and the user can easily generate the multiple authentication information using the interface .

Accordingly, the financial service processing unit 240 can receive not only the real name verification proof image but also the image information of the user at the same time point through the camera 281 corresponding to the user information. In this case, the financial service processing unit 240 may generate the multiple authentication information in which the face image information or the video call information of the user and the blindness check identification image are synthesized to perform the blind verification.

The control unit 210 synthesizes the first image information including the user's face image information and the second image information including the user's real name verification image through the image processing unit 290, Multiple authentication images can be generated and the multiple authentication images can be included in the multiple authentication information and transmitted to the server 100. [

The financial service processing unit 240 transmits the user information and the multiple authentication information to the financial service providing server 100 through the secure channel using the communication unit 220 and transmits the user information and the multiple authentication information Face real name authentication completion message from the financial service providing server 100. [

Meanwhile, the financial service processing unit 240 may store the multiple authentication images for non-face real name authentication of the financial service in the memory 230. [ Here, the image including the blindness confirmation certificate such as the multiple authentication image can be generated and stored not only by the financial service processing unit 240 but also by other external applications, and needs to be secured. Accordingly, the financial service processing unit 240 can manage the multiple authentication image corresponding to the blindness verification ID for non-face real name authentication, the blindness verification image included therein, and related information.

To this end, the financial service processing unit 240 includes an image identification module 241, a monitoring module 242, an authentication module 243 and a time information management module 244, Personal information protection, and secure processing and management corresponding to the personal information.

The image identification module 241 searches for image information stored in the memory and identifies an image containing a blindness check for non-face real name authentication of the user's financial service from the image information. Here, the image including the blindness confirmation image may be an image captured and stored through the camera 281, and generally, the shooting time point information may be stored together with the metadata of the image file.

More specifically, the image identification module 241 detects the degree of similarity between the image information stored in the memory 230 and the image of the blindness check sample image, and determines the image including the blindness confirmation certificate if there is a portion having a similarity degree of a predetermined value or more , And the file position information corresponding thereto can be separately stored and managed. In addition, the time information management module 244 can separately manage the shooting time information of the metadata corresponding to the image including the proof of real name verification.

In addition, the image identification module 241 determines whether or not the feature information of the face image, the text information (name, resident registration number, address, issuance date, issuing agency) is extracted by the OCR method from the image determined as the image including the real- It is possible to more clearly discriminate whether or not the image is a real name verification check image.

In addition, in one embodiment, the control unit 210 performs folder movement and time information management of the image including the identified real name verification bell in cooperation with the financial service processing unit 240 and the time information management module 244 . For example, the control unit 210 may move an image including the real name verification certificate to a separate secured folder.

The control unit 210 monitors the access information corresponding to the image folder including the identified blindness check image through the monitoring module 242.

In particular, the monitoring module 242 may reside in the BACKGROUND memory and monitor the access information corresponding to the blindness verification image even when the financial service application is not operating in the foreground.

Therefore, the monitoring module 242 can check whether or not another external application accesses the real name verification check image file and folder from the information processed in the control unit 210, based on the related information. The external application may be, for example, an image editing application, a file management application, or an image sharing application.

For this, the monitoring module 242 periodically checks the operation information of another external application on the OS processed by the control unit 210, and accesses the file including the request for the file path corresponding to the image including the real- Information can be monitored.

If an unauthorized external access other than the application for the non-face-real-name authentication of the financial service is confirmed from the access information, the authentication module 243 performs an additional authentication for providing the image including the real- Demand.

The authentication module 243 may request additional authentication and block the folder access to the external application and the provision of the image including the blindness check. The authentication module 243 displays an additional authentication request message through the display unit 250 and can provide folder access and images to the external application only when the additional authentication of the user is completed.

Meanwhile, the time information management module 244 may manage the real name verification proof image based on the photographing time information under the control of the control unit 210. [ As described above, when the photographing time of the real name verification proof image has elapsed more than a predetermined time based on the photographing time information, the control unit 210 can perform the process of deleting the image including the real name verification proof , And the time information management module 244 may periodically identify shooting time information of an image including the respective blindness check certificates for this purpose and provide the information to the controller 210. [

In addition, the time information management module 244 encrypts the shooting time information for security management of shooting time information, and transmits the encrypted shooting time information to a meta information corresponding to the shooting time information of the image including the real name verification token Can be inserted into the data. Accordingly, an image including the real name verification certificate in the state in which the encrypted photographing time information is inserted as the metadata can be transmitted to the financial service providing server 100, and accordingly, the security of the terminal 200 However, it is possible to improve the security in the transmission process and to prevent the operation of the time information or the risk of hacking.

Also, the time information management module 244 may receive the encryption key or the decryption key for encryption or decryption from the server providing the financial service through the application. In the periodic check of the photographing time information, the decryption key So that the encrypted photographing time information can be decrypted. To this end, the time information management module 244 may further include a separate encryption unit and a decryption unit.

In this case, the financial service providing server 100 receives the multi-authentication image including the image of the real name verification image, but does not include the encrypted image taking time information, or the decoded image taking time information has passed the predetermined time An approval rejection and a warning message may be transmitted to the terminal 200.

In addition, the financial service processing unit 240 may further include an encryption unit and a decryption unit in order to provide and block images for the external application. The encryption unit of the financial service processing unit 240 may encrypt the real name verification image itself with the encryption key if the real name verification proof image is identified from the multiple authentication image information. When the authentication is completed in the authentication module 243, the decryption unit of the financial service processing unit 240 may decrypt the real name verification proof image with the decryption key corresponding to the encryption key.

Accordingly, when the additional authentication of the authentication module 243 is not completed, the encrypted image in which the photographing time information is encrypted can be provided to the external application. If the additional authentication is completed, the decrypted image Or may be provided to the external application.

In addition, the authentication module 243 may comprise one or more physical or software authentication means for further authentication.

For example, the authentication module 243 may include a password authentication unit for software authentication. Accordingly, the user can input the additional authentication password to complete the additional authentication.

In addition, the authentication module 243 may include biometric authentication means for the additional authentication. Accordingly, the biometric information corresponding to the user may be stored in the memory 230 in advance, and the biometric information may include at least one of fingerprint information, iris information, grammar information, DNA information, and vein information.

Meanwhile, the financial service may include an Internet banking account opening service. The image identification module 241, the monitoring module 242, the authentication module 243, and the time information management module 244 may include a non- And the application for non-face real name authentication may be included in a financial service provision application for the Internet banking account opening service.

According to the operations of the financial service processing unit 240, the image identification module 241, the monitoring module 242, the authentication module 243, and the time information management module 244, the real- Can be monitored, managed and protected in real time for a certain period of time. Thereafter, the protection of personal information can be enhanced and the user can be relieved by additional authentication request and encryption / decryption at the time of external access can do.

Meanwhile, the image processing unit 290, in cooperation with the financial service processing unit 240, generates a multi-authentication image for non-face real name authentication according to an embodiment of the present invention, And performs image processing.

In order to protect personal information, when an interface for acquiring image information under the control of the control unit 210 is displayed on the display unit 260, the image processing unit 290 controls the front camera 281A, And the rear camera 281B, respectively, to synthesize the multiple authentication images, and identifies and masks the personal information protection area from the obtained original image information.

Accordingly, the control unit 210 may control the interface output through the display unit 260 to display the masked image information in place of the multi-authentication image according to the original image. Accordingly, it is possible to limit exposure of personal information output on the display unit 260 during non-face-to-face real name authentication, and to block hacking means such as screen mirroring or scanning in advance.

In addition, the control unit 210 transmits the original image information in the multiple authentication information separately from the masked image information through the communication unit 220, so that the non-face real name authentication procedure can proceed normally.

Here, the image processing unit 290 is included in the control unit 210 as a module, but it may be included in the financial service processing unit 240 or may be implemented as an algorithm that operates as an independent module on the display unit 260 or the OS And is not limited to the subject. For example, the operation of the image processing unit 290 may be replaced with the operation of the control unit 210.

Hereinafter, the configuration of the image processing unit 290 will be described in more detail with reference to FIGS. 3 and 4. FIG.

4 is a block diagram illustrating an image processing unit according to an embodiment of the present invention.

4, the image processing unit 290 includes a scanning unit 291, a region identifying unit 292, a masking processing unit 293, and a multi-authentication image combining unit 293.

The scanning unit 291 according to the embodiment of the present invention can acquire the feature information by scanning each of two or more original images respectively input from the front camera 281A and the rear camera 281B through the interface. In addition, the scanning unit 291 can acquire text information by scanning two or more original images.

More specifically, the scanning unit 291 can acquire the user's facial feature information from each original image information. For example, the present embodiment can be applied when each original image information includes a portrait image of a user for a real-time video call, a face image of a user's face is captured, or a photograph is included in a blindness verification image . The facial feature information includes, for example, facial contour information, mouth pattern information, eye pattern information, nose pattern information, pupil pattern information, ear pattern information extracted from each part in accordance with a mask and a scaling operation of a video image with respect to the face area And may include at least one.

In addition, the scanning unit 291 can acquire the fingerprint feature information from the original image information. For example, when the original image information includes the back side of the physical identification certificate image, the scanning unit 291 can acquire the fingerprint feature information using a fingerprint recognition algorithm such as feature extraction or area recognition.

In addition, the scanning unit 291 can acquire text information from the original image information. For example, when the original image information includes the real verification proof image, the scanning unit 291 can extract text information (name, resident registration number, address, issue date, issuing agency) through a known OCR method.

However, in the embodiment of the present invention, the scanning unit 291 can only check whether the feature information or the text information can be acquired, independently of actually extracting and analyzing the feature information or the text information or permanently storing the information in the memory 230 have. Accordingly, the scanning unit 291 can scan only the identification information of the extractable pixels of the feature information.

When the feature information or the text information is identified as described above, the scanning unit 291 includes the information of the pixels corresponding to the feature information or the text information, the feature information or the text information in the scanning information, ).

The area identifying unit 292 determines the personal information protection area from the pixel information corresponding to the characteristic information or the text information. For example, the area identifying unit 292 can determine a two-dimensional area formed by an outline of the pixels constituting the feature information or the text information as the personal information protection area. Thus, the area identification unit 292 can generate the area information corresponding to the personal information protection area.

Based on the scanning information received by the scanning unit 291, the area identification unit 292 can confirm the attribute information indicating whether the determined personal information protection area is a character area or a text area.

The area identification unit 292 also transfers the area information and attribute information corresponding to the identified personal information protection area to the masking processing unit 293. [

Accordingly, the masking processing unit 293 generates a masking image corresponding to the area information and attribute information, overlays the masking image with the original image information, synthesizes the masking image with the original image information, and generates masked image information do. For example, the masking processing unit 293 overlays two images by constructing a masking image as a layer separate from the original image information, or synthesizes an image in which the masking image is overlaid on the original image information to generate the masked image You may.

The masked image information may be displayed on the interface for providing the financial service through the display unit 260 under the control of the control unit 210. [ With such a configuration, personal information is masked and displayed on the photographed images of the front and rear cameras 281A and 281B displayed on the display unit 260, the video call screen, or the blindness check image.

For example, the masking processing unit 293 may generate a masking image corresponding to the character area, and may generate image information in which the character area is masked by overlaying the original image information. In addition, the masking processing unit 293 may overlay the masking image corresponding to the text area on the original image information to generate image information in which the text area is masked.

If the original image information includes image information for real-time video communication, the masking processing unit 293 generates a silhouette image corresponding to the user's character area from the original image information, It is also possible to perform real-time masking processing of the video information.

On the other hand, since the masked image information is displayed, it may be difficult for the user to grasp whether or not the current screen is normally photographed. Accordingly, the control unit 210 may control the image processing unit 290 to provide a message, a guide image, and a masking image change to notify the user whether the original image information is normally photographed.

For this, the control unit 210 can periodically check whether or not information processed in the image processing unit 290 is normally extracted. For example, if the facial feature information is not extracted from the original image information input through the video call interface in the scanning unit 291, or if the text information is not included in the original image information input on the blindness check image input interface, Face authentication can not be performed when a masking image is not normally generated in the masking processing unit 293 because the region identification unit 292 does not extract the region or the region is not specified in the region identification unit 292. [

According to the control of the control unit 210, the masking processing unit 293 can change at least one of the color, shape, or shape of the masking image or the silhouette image according to whether the non-face authentication of the original image information is possible.

Also, the controller 210 displays a guide interface on the interface for acquiring original image information through the display unit 260, and can output whether the non-face authentication of the currently photographed image is possible using the guide interface have. For example, the control unit 210 may output information on non-face authentication through the display unit 260 in the form of characters, images, animations, or the like.

Meanwhile, the multi-authenticated image composer 293 synthesizes each image information photographed at the same point in time by the front camera 281A and the rear camera 281B according to the user's input to generate a multi-authentication image (or a multi-authentication video image) can do. The multiple authentication images are transmitted to the server 100, and the server 100 can process the blindness certificate authentication and the face authentication authentication at one time. In addition, since the authentication information including the face image information synchronized with the photographing time is transmitted rather than the simple blindness verification proof image, the reliability can be improved.

In addition, the user can use the convenient financial service application by shortening the processing procedure even in the state where the personal information is protected, and can easily use the masking image (or the silhouette image) It is possible to provide information on whether or not the user is normally photographed to perform the service, thereby improving user convenience for providing financial services and authenticating non-face-real names.

5 is a ladder diagram illustrating system operation according to an embodiment of the present invention.

5, the financial service providing apparatus 100 provides an application for providing a financial service to the communication unit 220 of the terminal 200 through the application management unit 150 (S101).

The terminal 200 installs an application through the control unit 210 and executes an application for providing a financial service according to an input to the input unit 250 (S103).

Thereafter, the user creates and inputs financial service application information for use of the financial service through the input unit 250 of the terminal 200 (S105), and inputs a multiple authentication image for real name authentication (S107).

Herein, the input of multiple authentication images may include an input for the user to simultaneously activate the front camera 281A and the rear camera 281B to photograph each image information at the same time. The control unit 210 can simultaneously activate the front camera 281A and the rear camera 281B and display the multiple authentication simultaneous photographing interfaces through the display unit 260. [ In addition, the controller 210 may perform a masking process on the personal information protection area of the image information on the interface.

Then, the terminal 200 checks whether the multiple authentication image and the application information are normally input through the financial service processing unit 240 (S109). If the authentication is successful, the terminal 200 transmits the financial service through the secure channel using the communication unit 220 And sends the application information and the proof of real name confirmation to the device 100 (S111).

Herein, the multi-authentication image may include a name of the user who has not been masked and the original image information about the face image.

Then, the financial service providing apparatus 100 performs real name authentication according to communication with the authentication server 300 through the real name confirmation unit 140 (S113). The real name authentication method is as described above. Particularly, the real name verification unit 140 can determine whether or not to approve based on the photographing time information included in the multiple authentication images. For example, the real name verification unit 140 can primarily determine whether to accept the approval based on whether or not the photographing time information of the blindness check certificate included in the multiple authentication images is encrypted and within a predetermined time from the current time.

Thereafter, the financial service providing apparatus 100 transmits an authentication failure message to the terminal 200 through the financial service provider 130 according to the completion of the real name authentication confirmed by the real name confirmation unit 140 (S115) (S117) and communicates with the financial institution DB 400 through the financial service providing unit 130 to process financial services such as account opening based on the application information (S119).

The financial service providing apparatus 100 transmits a financial service processing completion message to the terminal 200 through the financial service providing unit 130 in step S121. The financial service processing unit 240 of the terminal 200, (Step S123).

6 is a ladder diagram illustrating system operation according to another embodiment of the present invention.

Referring to FIG. 6, the financial service providing apparatus 100 first transmits the authentication information to the communication unit 220 of the terminal 200 through the application management unit 150 An application for providing financial services is provided (S201).

Similarly, the terminal 200 installs an application through the control unit 210 and executes an application for providing a financial service according to an input to the input unit 250 (S203). The user creates and inputs financial service application information for use of the financial service through the input unit 250 of the terminal 200 (S105), and performs a multi-authentication process for photographing the image through the front camera 281A and the rear camera 281B The multi-authentication image information is inputted through the interface (S207). Then, the terminal 200 determines whether the multiple authentication image and the application information are normal through the financial service processing unit 240 (S209).

Here, the user's personal area on the interface for capturing the respective image information and the personal information protection area of the blindness verification mark can be masked through the control unit 210. [

The multiple authentication image including the input image information is transmitted to the financial service providing apparatus 100 together with the application information and the real name verification proof image through the communication unit 220 (S213).

Here, the image information of the multiple authentication image may include image and audio information for video communication. In the financial service providing apparatus 100, the received image information is outputted through the output unit 170 (S215) The verification unit 140 processes the real name authentication based on the image verification between the blindness verification image and the facial image and the real image verification image based on the output image and voice (S217).

Thereafter, the financial service providing apparatus 100 transmits an authentication failure message to the terminal 200 through the financial service provider 130 according to the completion of the real name authentication confirmed by the real name confirmation unit 140 (S219) (S221), and communicates with the financial institution DB 400 through the financial service providing unit 130 to process financial services such as account opening based on the application information (S223).

The financial service providing apparatus 100 transmits a financial service processing completion message to the terminal 200 through the financial service providing unit 130 at step S225 and the financial service processing unit 240 of the terminal 200 displays, (Step S227). ≪ / RTI >

7 is a flowchart illustrating an operation of a terminal according to an embodiment of the present invention.

7 illustrates an interface operation for inputting a blindness verification image. Referring to FIG. 7, the terminal 200 outputs an interface for inputting multiple authentication information to the display unit 260 through the control unit 210 (S301).

As described above, the multiple authentication information may include multiple authentication image information such as multiple authentication images or video calls. The interface for capturing the multiple authentication information may include a multiple photographing interface for acquiring respective pieces of image information from the front camera 281A and the rear camera 281B, which are the first camera and the second camera, at the same time .

In accordance with the user input, the terminal 200 acquires the original image information from the first camera and the second camera through the control unit 210, and generates multiple authentication information (S303).

The control unit 210 of the terminal 200 may synchronize the front camera 281A and the rear camera 281B according to a user input to acquire respective original image information photographed at the same point in time. Here, when the multiple authentication information includes real-time image information such as a video call, the control unit 210 receives each frame from the preview information of the front camera 281A and the rear camera 281B, and obtains the real- can do. Here, in consideration of the operation speed and the efficiency, the control unit 210 may acquire only a part of frames periodically and masking processing without processing all the frames. Accordingly, the picture quality or the frame rate of the masked video call screen may be lower than the image quality or the frame rate of the real-time original image information.

In addition, the control unit 210 may combine the original image information with the multiple authentication image composition unit 293 to generate multiple authentication information including multiple authentication images or multiple authentication image information.

Then, the terminal 200 identifies the personal information protection area from the original image information through the image processing unit 290 (S305), and generates a masking image corresponding to the identified personal information protection area (S309).

To this end, the scanning unit 291 of the image processing unit 290 scans the person feature information, the face feature information, the text information, or the fingerprint feature information from the original image information, and the region identification unit 292 scans the scanned feature information The masking processing unit 293 obtains the area information from the pixels corresponding to the text information, and the masking processing unit 293 can generate the masking image corresponding to the area information.

In addition, the terminal 200 can identify the user silhouette from the original image information through the image processing unit 290 and generate a masking image corresponding to the identified user silhouette. The scanning unit 291 of the image processing unit 290 scans the person feature information or the face feature information from the original image information and the region identification unit 292 acquires the silhouette area information from the pixels corresponding to the scanned feature information , The masking processing unit 293 can generate a masking image corresponding to the silhouette area information in the form of a silhouette.

The terminal 200 performs masking processing by overlaying the masking image on the original image information through the masking processing unit 293 of the image processing unit 290 in operation S309 and displays the masking image on the display unit 260 through the control unit 210. [ So that the masked image information is output (S311).

On the other hand, the control unit 210 of the terminal 200 determines whether normal input is possible according to whether non-face real name authentication is possible or not based on the original image information (S313), and if not, (S315). ≪ / RTI >

For example, the notification indicating that the real name authentication can not be performed may include at least one of outputting a character notification, changing a guide image, changing a masking image, or changing a masking image in the form of a silhouette. This will be described again with reference to the drawings.

If the normal input is possible, the control unit 210 of the terminal 200 transmits the multiple authentication information including the original image information to the server or continuously provides the video call according to the original image information (S317) And receives the approval information in accordance with the result of the verification processing of the blindness check images in the service providing server 100. When the real name authentication is completed, the terminal 200 can receive the approval message and the financial service processing result information from the server 100.

8 to 12 are views showing interfaces output through a display according to an operation of a terminal according to an embodiment of the present invention.

FIG. 8 shows an application interface 201 for applying for a financial service through a financial service application according to an embodiment of the present invention.

9, the user can write the financial service application information including the user information through the application interface 201, select the multi-shot authentication interface menu 202 at the bottom, Can be input. As shown in FIG. 8, other authentication methods other than the multi-shot authentication may be used in combination. For example, the other authentication methods may be used when confirming when transferring access media, checking existing account information, As shown in FIG.

9 to 12 show a multiple authentication interface 203 for providing simultaneous photographing for photographing the identification check and the face image of the user at the same time. 9 to 12, the user can photograph the face image of the user 12 and the image of the blindness check 10 at the same time point through the multiple authentication interface 203, and at the same time, And the combined image information can be combined to form multiple authentication image information. In addition, the shooting time information at the time when the user inputs the shooting button may be encrypted and inserted into the metadata of the multi-authentication video information.

10, according to the operation of the image processing unit 290 according to the embodiment of the present invention, the user's face image 203B displayed on the multiple authentication interface 203, 10A can be displayed with the personal information protection area (person area, face area, text area and fingerprint area) masked. In addition, the terminal 200 can display a masking image of a silhouette shape for masking a person area through the image processing unit 290, overlaying the mask image on the user's face image 203B.

In addition, the control unit 210 may provide a notification message for informing whether or not a normal image is captured on the multiple authentication interface 203 and a guide image 203A for guiding a normal image capture. The control unit 210 notifies the multi-authentication interface 203 of a notification indicating whether or not the user has taken a normal picture by color or shape of the character or guide image 203A, Can be provided as a change.

For example, as shown in FIG. 10, the terminal 200 displays the original image information of the user ID image of the user photographed by the rear camera 281B and the original image information of the face of the user photographed by the front camera 281A To the multi-authentication interface 203 that the image is a normally captured image or image that can be authenticated.

11, when the normal text information or the facial feature information is not extracted from the blindness check image 10A photographed by the rear face camera 281B, the terminal 200 displays the multiple authentication interface 203 ) May be provided as a change in the color or shape of the character or guide image 203A.

12, the control unit 210 of the terminal 200 displays the user image 203B on the multiple authentication interface 203 in accordance with whether the user image photographed by the front camera 281A is normally photographed It is possible to intuitively inform the user by changing at least one of the color, shape, and shape of the masking image.

For example, as shown in FIG. 12, a case where a user is talking too far can be exemplified. In this case, the control unit 210 displays the color of the masking image of the silhouette in red, exaggerates the size of the mask, or changes the color of the guide image 203A or displays a text message indicating this, It is possible to induce the photographing of a normal face image. Accordingly, even when the user can not directly confirm his / her face according to the masking image, effective non-face real name authentication can be induced.

According to such a configuration and system, it is possible to conveniently generate multiple authentication images that improve the reliability of non-face authentication and to shorten, manage, delete, It is possible to provide a convenient financial service, and it is possible to easily establish a reliable non-face real name authentication system.

The method according to the present invention may be implemented as a program for execution on a computer and stored in a computer-readable recording medium. Examples of the computer-readable recording medium include a ROM, a RAM, a CD- , A floppy disk, an optical data storage device, and the like, and may also be implemented in the form of a carrier wave (for example, transmission over the Internet).

The computer readable recording medium may be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And, functional programs, codes and code segments for implementing the above method can be easily inferred by programmers of the technical field to which the present invention belongs.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It should be understood that various modifications may be made by those skilled in the art without departing from the spirit and scope of the present invention.

100: Financial service provider
200: terminal
300: authentication server
400: Financial institution DB

Claims (16)

A method of operating a terminal for providing financial services,
Displaying an interface for generating a multiple authentication image by photographing a user's face image information and a real name verification proof image at the same time point for non-face real name authentication of the financial service;
A front camera for photographing the face image information and a rear face camera for photographing the real name verification check image are activated at the same time according to a user input corresponding to the interface, ; And
And transmitting the authentication information for non-face real name authentication of the financial service to the server by including the multiple authentication images synthesized and generated from the obtained original image information,
Wherein the multi-authentication image is transmitted to the server and used for non-face-real-name authentication of the financial service,
Wherein the displaying comprises:
Displaying, in place of the multi-authentication image, an interface for generating the multi-authentication image in real time, wherein the personal information protection area identified from the original image information is overlaid with the masking image in real time;
A method of operating a terminal for providing financial services. delete delete delete delete delete The method according to claim 1,
Wherein the displaying comprises:
A masking image corresponding to the identified personal information protection area is identified by identifying each personal information protection area on the front camera interface screen and the rear camera interface screen simultaneously displayed on the interface, Overlaying the masking image on the original image information including the blindness verification image and synthesizing the masking image with the original image information to generate and display the masked image information
A method of operating a terminal for providing financial services. A terminal for providing financial services,
A display unit for displaying an interface for generating a multiple authenticated image by photographing a user's face image information and a real name verification proof image at the same time point for non-face real name authentication of the financial service;
A front camera for photographing the face image information and a rear face camera for photographing the real name verification check image are activated at the same time according to a user input through the interface, And a controller for transmitting the acquired original image information to the server through a communication unit, the authentication information for non-face real name authentication of the financial service,
The image information includes a blindness check image photographed by a rear face camera of the terminal at the same time as the face image information photographed by the front face camera of the terminal and the face image information is photographed, The multi-authentication image being transmitted to the server,
Wherein the display unit displays image information in which a personal information protection area identified from the original image information is overlaid in real time as a masking image in place of the multi-authentication image on an interface for generating the multi-authentication image
A terminal that provides financial services. delete delete delete delete delete 9. The method of claim 8,
Wherein the display unit generates a masking image corresponding to a personal information protection area identified from the front camera screen and the rear camera screen, and superimposes the masking image on the original image information including the face image information and the blindness check image, And synthesizes the original image information, thereby generating and displaying masked image information
A terminal that provides financial services. A server for providing financial services,
A communication unit for providing an application including the financial service to a terminal and receiving original image information corresponding to user information from an application including the financial service; And
And a real name confirmation unit for approving the non-face-based real name authentication for the financial service based on the original image information,
Wherein the original image information includes multiple face authentication information including face image information captured by a front camera of the terminal and a blindness check image photographed by a rear face camera of the terminal at the same time point when the face image information is captured ,
An interface for capturing the face image information of the user and the image of the real name verification image at the same time point and generating the multiple authentication image is displayed on the terminal,
Wherein the original image information is obtained by activating the front camera for photographing the face image information and the rear face camera for photographing the real name verification check image at the same time and applying operation power to the terminal,
The multi-authentication image synthesized from the original image information is received through the communication unit,
Wherein the terminal displays image information in which a personal information protection area identified from the original image information is overlaid in real time with a masking image in place of the multiple authentication image on an interface for generating the multiple authentication image
Server for providing financial services. delete

Images