KR102079667B1 - System for proving financial transaction service - Google Patents

Abstract

The present invention relates to a financial transaction service providing system, and a technical problem to be solved is to improve the security of financial transactions more quickly and conveniently when financial transactions using Internet banking and ATM (Automatic Teller Machine).
For example, the present invention relates to a system for providing an internet financial transaction service using an application installed on a user terminal and a financial transaction approval server, wherein the application includes a queue including financial transaction information input by a user through a bank website system. If the link information is converted into an identification code and output, the identification code is scanned through the user terminal to obtain the queue-link information, and the obtained queue-link information is transmitted to the financial transaction approval server. The financial transaction approval server generates the queue-link information based on the financial transaction information received from the bank website system and transmits the queue-link information to the bank website system, and the queue-link generated by the financial transaction approval server. Whether the information and the queue-link information received from the application match. Accordingly, the present invention discloses a financial transaction service providing system that receives a transaction approval message for the financial transaction information from the application and delivers the transaction approval message to the bank website system.

Description

Financial Transaction Service Provision System {SYSTEM FOR PROVING FINANCIAL TRANSACTION SERVICE}

An embodiment of the present invention relates to a financial transaction service providing system for using Internet banking and ATM (Automatic? Teller? Machine) respectively.

With the development of network and data communication technology, services such as issuing public documents, banking, shopping, and securities trading through the Internet are provided online.

User authentication technology is applied to provide such online services. A certificate is electronic information generated by a Certificate Authority (CA) to verify your identity online.

Such a certificate is generally stored in a hard disk, a removable disk, etc. of a computer or a smart device, which may cause the exposure or hacking of a password. In addition, the user can perform the user authentication with the official certificate by entering the number recorded on the financial security card issued offline from the financial institution during the financial transaction.

However, this method has to check the financial security card for each financial transaction, and if the financial security card is lost, not only can not perform the financial transaction, but also hassle to visit a financial institution and be reissued.

Accordingly, recently, one time password (OTP) using a one-time password has been proposed. OTP is a one-time password generated for user verification of a public certificate.

However, OTPs are issued by financial institutions, which cost money and must be carried for financial transactions, so they can be lost and exploited for crime.

An embodiment of the present invention provides a financial transaction service providing system that is faster, more convenient, and improves security of financial transactions during financial transactions using Internet banking and ATM (Automatic? Teller? Machine).

The financial transaction service providing system according to an embodiment of the present invention relates to a system for providing an internet financial transaction service using an application installed on a user terminal and a financial transaction approval server. The application includes a bank website system. When the cue-link information including the financial transaction information input by the user is converted into an identification code and outputted, the identification code is scanned through the user terminal to obtain the cue-link information, and the obtained cue-link information is obtained. Transmits the information to the financial transaction approval server, the financial transaction approval server generates the queue-link information based on the financial transaction information received from the bank website system, and transmits the information to the bank website system. The queue-link information and the application generated by the financial transaction approval server The queue received from the illustrations - depending on whether or not the link information by matching the received transaction approval message to the financial transaction information from the application will be forwarded to the bank's Web site system.

In addition, the identification code may be output in the form of at least one of QR code, bar code and NFC tag information.

In addition, the financial transaction information may include at least one of a deposit and withdrawal account and a transfer amount.

In addition, the application, when receiving the user approval request from the financial transaction approval server receives the user's authentication information through the user terminal and performs the user authentication, and when the user authentication is completed, the transaction approval message to the financial transaction approval server The transmission may include at least one of a password and biometric information.

The financial transaction approval server may include a sub black box and a main black box, wherein the sub black box receives the financial transaction information from the bank website system to generate the queue-link information, and generates the queue-link information. Transmits cue-link information to the bank website system and the main black box, respectively, wherein the main black box receives the cue-link information from the application, and receives the sub-black box and the application respectively. If there is matched cue-link information by matching the cue-link information with each other, requesting the user approval to the application to receive the transaction approval message from the application, and the transaction to the bank website system through the sub black box. You can send an acknowledgment message.

The financial transaction service providing system according to another embodiment of the present invention relates to a system for using a financial service of an ATM (Automatic Teller Machine) using an application installed on a user terminal and a financial transaction approval server. When the queue-link information including the financial service information selected by the user through the ATM is converted into an identification code and outputted, the identification code is scanned through the user terminal to obtain the queue-link information, and the obtained queue is obtained. -Transfer link information and user identification information to the financial transaction approval server, receive transaction account information from a user, and transmit the link account information and the user identification information to the financial transaction approval server, and the financial transaction approval server receives the financial service information received from the ATM. Generate and transmit the queue-link information to the ATM based on the Request to select the transaction account information from the application based on the queue-link information generated by the transaction transaction approval server and the queue-link information and the user identification information received from the application, and receive the request through the application. The received transaction account information is transmitted to the ATM.

In addition, the identification code may be output in the form of at least one of QR code, bar code and NFC tag information.

In addition, the transaction account information may include at least one information of the user's trading bank, the account number of the trading bank, the transaction amount and the ID of the electronic wallet.

The application may be configured to perform user authentication by receiving authentication information of the user through the user terminal. When the user authentication is completed, the application transmits the transaction account information selected by the user to the financial transaction approval server. The authentication information of may include at least one of a password and biometric information.

The financial transaction approval server may include a first sub black box, a main black box, and a second sub black box, and the first sub black box may receive the financial service information from the ATM to receive the queue-link information. And generate the queue-link information to the ATM and the main black box, respectively, wherein the main black box receives the queue-link information from the application, and transmits the first sub black box and the first sub black box. When the queue-link information is matched by matching the queue-link information respectively received from an application, the application requests and receives the transaction account information from the application, and the financial service to the ATM through the first sub black box. A transaction approval message for the information, and the second sub black box is -Receive link information and request to provide the transaction account information, and receive a request for provision of the transaction account information from the main black box using the queue-link information received from the application, and receive the transaction account information. Can be provided to the application.

According to an embodiment of the present invention, it is possible to provide a financial transaction service providing system that is faster, more convenient, and more secure for financial transactions when using financial transactions using Internet banking and ATM (Automatic? Teller? Machine).

1 is a block diagram showing the configuration of a financial transaction service providing system for using Internet banking according to an embodiment of the present invention.
2 is a diagram illustrating an operation procedure of a financial transaction service providing system for using Internet banking in a PC environment according to an embodiment of the present invention.
3 is a diagram illustrating an operation sequence of a financial transaction service providing system for using Internet banking in a mobile environment according to an embodiment of the present invention.
4 is a block diagram showing the configuration of a financial transaction service providing system for using an automatic teller machine (ATM) according to another embodiment of the present invention.
FIG. 5 is a diagram illustrating an operation sequence of a financial transaction service providing system when using a cash withdrawal device according to another embodiment of the present invention.
FIG. 6 is a diagram illustrating an operation sequence of a financial transaction service providing system when using an electronic wallet through an ATM according to another embodiment of the present invention.
7, 8, and 11 are views illustrating the functions and effects of the financial transaction service providing system through the QR code scan according to an embodiment of the present invention.
9 is a diagram illustrating a login process of a financial transaction service providing system through a QR code scan according to an embodiment of the present invention.
10 is a view comparing a security authentication solution of the financial transaction service providing system through a QR code scan according to an embodiment of the present invention.
12 is a view showing the flow of security authentication work of the financial transaction service providing system through a QR code scan according to an embodiment of the present invention.
13 is a diagram illustrating a transaction authentication process of the financial transaction service providing system through a QR code scan according to an embodiment of the present invention.

Terms used herein will be briefly described, and the present invention will be described in detail.

The terms used in the present invention have been selected as widely used general terms as possible in consideration of the functions in the present invention, but this may vary according to the intention or precedent of the person skilled in the art, the emergence of new technologies, and the like. In addition, in certain cases, there is a term arbitrarily selected by the applicant, and in this case, the meaning will be described in detail in the description of the invention. Therefore, the terms used in the present invention should be defined based on the meanings of the terms and the general contents of the present invention, rather than simply the names of the terms.

When a part of the specification is to "include" any component, this means that it may further include other components, except to exclude other components unless specifically stated otherwise. In addition, the terms "... unit", "module", etc. described in the specification mean a unit that processes at least one function or operation, which may be implemented by hardware or software or a combination of hardware and software. .

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

1 is a block diagram showing the configuration of a financial transaction service providing system for using Internet banking according to an embodiment of the present invention.

Referring to FIG. 1, the financial transaction service providing system 100 for using internet banking according to an embodiment of the present invention may include at least one of an application 110 and a financial transaction approval server 120. In connection with the bank website system 10, a financial transaction service may be provided.

The bank website system 10 is a system for providing a website for using an internet banking service such as bank transfer. The bank website system 10 is executed through a web browser or a mobile browser and can be used while being logged in for each user.

The bank website system 10 may receive financial transaction information through a specific web page while a user is logged in to the bank website. The financial transaction information may include at least one of bank transfer information and amount information. The bank transfer information may include the name of the bank to deposit and withdraw and the bank account number of the bank. The amount information may include a transfer amount.

When the bank website system 10 receives the financial transaction information through the corresponding web page, the bank website system 10 may transmit the input financial transaction information to the financial transaction approval server to request queue-link information. The cue-link information is information for generating an identification code, as well as financial transaction information, timestamp, session key, session information, message authentication code, processing type information, and the corresponding web. It may further include at least one of the domain information of the site. The processing type information may include information on the processing type called 'account transfer processing request'. Since such a website is hosted through a web server, it is assumed that the website includes a specific function of the web server for convenience of description.

When the bank website system 10 receives the cue-link information from the financial transaction approval server 120, the bank website system 10 may convert the received cue-link information into an identification code and output the converted code. Here, the identification code may be output in the form of at least one of QR code, barcode and NFC tag information. For example, if the identification code is a QR code or a barcode can be output by being displayed through the screen of the display device displaying the website, in the case of NFC tag information can be output as an electrical signal having a specific frequency through the NFC module. Can be.

Meanwhile, the bank website system 10 may not only generate cue-link information in the form of at least one of QR code, barcode, and NFC tag information, but also short-range wireless communication or text message such as Bluetooth. It can also be generated as an identification code of various forms for delivery to the user terminal through.

The application 110 is software that is downloaded and installed to the user terminal. When the identification code is output from the bank website system 10, the identification code is scanned through the user terminal to obtain cue-link information. The cue-link information may be transmitted to the financial transaction approval server 120 through the user terminal.

More specifically, the application 110, when the identification code is output from the bank website system 10 in the form of a QR code or a barcode, it can be scanned through the camera function of the user terminal, NFC tag information, etc. When the identification code is output in the form of, by receiving the NFC tag information through the NFC reader of the user terminal can scan the corresponding identification code. Of course, the identification code may be transmitted to the user terminal through a short-range wireless communication such as Bluetooth or a text message as described above.

The application 110 transmits the cue-link information including the financial transaction information obtained from the bank website system 10 to the financial transaction approval server 120 to transmit the cue-link information from the financial transaction approval server 120. You can get approval for In this case, the approval of the cue-link information may mean that the cue-link information transmitted from the application 110 is approved in the financial transaction approval server 120 and whether the corresponding information is correct information.

When the application 110 receives the approval for the cue-link information from the financial transaction approval server 120, the application 110 may display the details of the financial transaction information and perform user authentication for the financial transaction approval. The user authentication information is information for user authentication for the application 110 and includes information on at least one of a password and biometric information. The password means a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication. The password refers to a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication.

The financial transaction approval server 120 generates cue-link information based on the financial transaction information received from the bank website system 10, and transmits the cue-link information to the bank website system 10, and the financial transaction approval server 120. After receiving the transaction approval message by requesting approval of the financial transaction information from the application 110 according to whether the queue-link information generated in the application and the queue-link information received from the application 110 match, the bank website system Can be delivered as

To this end, the financial transaction approval server 120 may include at least one of the sub black box 121 and the main black box 122. One main black box 122 may be connected to a plurality of sub black boxes 121 to form a unit group, and the financial transaction approval server 120 may include a plurality of unit groups.

The sub black box 121 communicates with the bank website system 10 and processes or generates necessary information in response to a request of the bank website system 10. More specifically, when the sub black box 121 receives the financial transaction information from the bank website system 10, the sub black box 121 may generate cue-link information including the financial transaction information. The financial transaction information may include at least one of bank transfer information and amount information, and the bank transfer information may include a name of a bank to deposit and withdraw money and a deposit and withdrawal account number of the bank, and the amount information may include a transfer amount. have. The queue-link information may include not only financial transaction information but also at least one of a timestamp, a session key, session information, a message authentication code, processing type information, and domain information of a corresponding website. It may further include. The processing type information may include information on the processing type called 'account transfer processing request'.

The sub black box 121 may transmit the generated cue-link information to the bank website system 10 and the main black box 122, respectively. In this case, cue-link information received from the sub black box 121 may be registered in the main black box 122.

The main black box 122 may register the cue-link information received from the sub black box 121 and receive the cue-link information from the application 110 to be registered by the sub black box 121. After matching the queue-link information with the queue-link information received from the application 110 to confirm that there is matched queue-link information, the application 110 may request user approval. In this case, at least one of the financial transaction information, for example, the name of the bank to be deposited / withdrawn, the deposit and withdrawal account number of the corresponding bank, and the transfer amount may be displayed together with the user approval request through the application 110. In addition, user authentication for financial transaction approval may be performed through the application 110. The user authentication information is information for user authentication for the application 110 and includes information on at least one of a password and biometric information. The password means a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication. The password refers to a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication.

When the user authentication is completed through the application 110, the main black box 122 may receive a transaction approval message for approving the financial transaction information from the application 110. Herein, the transaction approval message may be read through the sub black box 121 as an encrypted authentication message for approving the financial transaction and may be signed by the user's private key.

The sub black box 121 receives the transaction approval message from the main black box 122 and transmits the transaction approval message to the bank website system 10 to approve the corresponding financial transaction, and the bank website system 10 receives the bank system 20. ) Can be transferred to the financial transaction information to be processed. Accordingly, the corresponding financial transaction may be processed to update the corresponding web page.

2 is a diagram illustrating an operation procedure of a financial transaction service providing system for using Internet banking in a PC environment according to an embodiment of the present invention.

First, a user accesses a bank website system 10 through a web browser of a PC, and accesses an account including at least one of financial transaction information, for example, a bank name, a deposit and withdrawal account number, and a transfer amount through a corresponding web page. Transfer information can be entered (①).

Next, the bank website system 10 may request the queue-link information from the financial transaction approval server 120 when the user inputs the financial transaction information through a web browser and then selects a transfer execution. In this case, the bank website system 10 may request not only the financial transaction information but also the timestamp, session key, session information, message authentication code, and processing type for the queue-link information request. At least one of the information and the domain information of the corresponding website may be transmitted to the financial transaction approval server 120.

Next, the financial transaction approval server 120 may generate cue-link information using at least one of the information received from the bank website system 10 and transmit the queue-link information to the bank website system 10 ( ②).

Next, the bank website system 10 may convert the queue-link information received from the financial transaction approval server 120 into an identification code and output it (③). Here, the identification code includes cue-link information and may be output in at least one form of a QR code, a barcode, and NFC tag information. For example, in the case of a QR code or a barcode, the identification code may be output by being displayed through the screen of the corresponding PC, and in the case of the NFC tag information, the identification code may be output as an electrical signal having a specific frequency through the NFC module mounted on the PC. have.

Next, the application 110 may acquire the cue-link information included in the identification code by the user terminal scans the identification code output from the screen of the PC (④).

Next, the application 110 may perform user authentication (⑤). The user authentication information may include information on at least one of a password and biometric information. The password means a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication. The password refers to a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication.

Next, when the user authentication is completed through the application 110, a transaction approval message for a financial transaction may be transmitted from the application 110 to the financial transaction approval server 120, and the transaction approval message may be sent to the bank website system 10. ), The banking system can proceed with the corresponding financial transaction (account transfer) (⑥).

Thereafter, the bank website system 10 updates the corresponding web page to output the transfer result (⑦).

3 is a diagram illustrating an operation procedure of a financial transaction service providing system for using Internet banking in a mobile environment according to an embodiment of the present invention.

First, the user accesses the bank website system 10 through his mobile browser of the user terminal and displays at least one or more of the financial transaction information, for example, the bank name, the deposit and withdrawal account number, and the transfer amount through the corresponding web page. You can enter the account transfer information to include (①).

Next, the bank website system 10 may request the queue-link information from the financial transaction approval server 120 when the user inputs the financial transaction information through the mobile browser and selects the transfer execution. In this case, the bank website system 10 may request not only the financial transaction information but also the timestamp, session key, session information, message authentication code, and processing type for the queue-link information request. At least one of the information and the domain information of the corresponding website may be transmitted to the financial transaction approval server 120.

Next, the financial transaction approval server 120 may generate cue-link information using at least one of the information received from the bank website system 10 and transmit the queue-link information to the bank website system 10 ( ②).

Next, the bank website system 10 may convert the queue-link information received from the financial transaction approval server 120 into an identification code and output it (③). Here, the identification code may be output in the form of at least one of a QR code and a barcode. For example, in the case of the QR code or the barcode, the identification code may be output by being displayed through the screen of the user terminal.

Next, when the user selects or clicks the identification code output through the user terminal's own screen, the application 110 may be automatically identified to obtain cue-link information included in the identification code (④).

Next, the application 110 may perform user authentication (⑤). The user authentication information may include information on at least one of a password and biometric information. The password means a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication. The password refers to a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication.

Next, when the user authentication is completed through the application 110, a transaction approval message for a financial transaction may be transmitted from the application 110 to the financial transaction approval server 120, and the transaction approval message may be sent to the bank website system 10. ), The banking system can proceed with the corresponding financial transaction (account transfer) (⑥).

Thereafter, the bank website system 10 updates the corresponding web page to output the transfer result (⑦).

4 is a block diagram showing the configuration of a financial transaction service providing system for using an ATM (Automatic Teller Machine) according to another embodiment of the present invention.

Referring to FIG. 4, the financial transaction service providing system 400 according to another embodiment of the present invention may include at least one of an application 410 and a financial transaction approval server 420.

The ATM (Automatic Teller Machine) 40 is an automatic teller machine or an automatic financial transaction terminal, such as cash, such as a work performed by a teller at a teller during a non-business hours or a holiday where a customer of a financial institution cannot pass through a window of a branch. It may be a device that automatically makes payments, cash deposits, bank transfers, and exchanges of bills.

The ATM 40 transmits at least the corresponding financial service information to the financial transaction approval server 420 when the user selects the service menu information provided by the ATM such as financial service information, for example, deposit, withdrawal, or bank transfer. Queue-link information may be requested. At this time, the ATM 40 not only financial service information, but also at least one of a timestamp, a session key, session information, a message authentication code, and domain information of a corresponding ATM management server. It may further include the financial transaction approval server 420. Accordingly, the financial transaction approval server 420 may generate the queue-link information based on at least one of the information received from the ATM 40 and transmit it to the ATM 40.

In addition, when the ATM 40 receives the cue-link information from the financial transaction approval server 420, the ATM 40 may convert the cue-link information into an identification code and output it. Here, the identification code may be output in the form of at least one of QR code, barcode and NFC tag information. For example, if the identification code is a QR code or a barcode can be output by being displayed through the screen of the ATM 40, in the case of NFC tag information can be output as an electrical signal having a specific frequency through a separate NFC module. .

The application 410 may acquire the queue-link information by scanning the identification code output from the ATM 40 through the user terminal. In addition, the application 410 may transmit the cue-link information and the user identification information to the financial transaction approval server 420 to check whether the corresponding cue-link information is registered in the financial transaction approval server 420 through a matching process. . At this time, if it is confirmed that the queue-link information is registered through the financial transaction approval server 420, the application 410, using the user identification information, the transaction account information of the user from the financial transaction approval server 420 Can be provided.

The user identification information is information for identifying a user, and may include at least one of user information and hardware information of a user terminal. Here, the user information may include an application login ID of the user, and the hardware information may include an ID of the user terminal or a serial number of the user terminal. The financial transaction approval server 420 stores bank-related information registered by the user, and may extract the transaction account information using the user identification information and provide it to the application 110. The transaction account information may include bank list information, and the bank list information may include a bank name of an account held by the user. For example, banking list information can be expressed as 'Uri Bank', 'Shinhan Bank' or 'Kookmin Bank'. In addition, the transaction account information may include information about the account number for each bank possessed by the user. You can have one account number for a bank, or you can have multiple account numbers. Therefore, the transaction account information, in addition to the bank list information may further include information on all account numbers held for each bank. In addition, when using the deposit and withdrawal service from the ATM 40 using the electronic wallet, the transaction account information may further include ID information of the electronic wallet.

When the application 110 receives bank list information from the financial transaction approval server 420, at least one bank name among a plurality of bank lists may be selected by the user. At this time, the application 110 may request the account list information for the bank to the financial transaction approval server 420, and receives the account list information of the bank from the financial transaction approval server 420 according to the request, the user One of the account list can be selected by. In this case, when requesting the account list information to the financial transaction approval server 420, after verifying that the request is the correct request in the financial transaction approval server 420 itself, if approved, the application list information of the bank 110 Can be sent to. This will be described in more detail later.

The financial transaction approval server 420 may include at least one of the first sub black box 421, the main black box 422, and the second sub black box 423.

The first sub black box 421 may receive financial service information from the ATM 40, generate cue-link information, and transmit the same to the ATM 40. At this time, the first sub black box 421 is not only financial service information from the ATM 40 but also a timestamp, a session key, a session information, a message authentication code, and a corresponding ATM management. At least one of the domain information of the server may be further transmitted to the financial transaction approval server 420. Accordingly, the financial transaction approval server 420 may generate the queue-link information based on at least one of the information received from the ATM 40 and transmit it to the ATM 40. In addition, the first sub black box 421 may transmit the generated cue-link information to the main black box 422 so that the cue-link information may be registered in the main black box 422.

The main black box 422 may register the cue-link information transmitted from the first sub black box 421 and receive the cue-link information from the application 410. In addition, the main black box 421 matches the queue-link information received from the application 410 with the pre-registered queue-link information, and if there is matched queue-link information, the queue received from the application 410. The link information can be approved.

Meanwhile, the main black box 422 receives the user identification information together with the cue-link information from the application 410, and searches or extracts the bank list information for the corresponding user by using the user identification information. Can be sent to. The bank list information may include the name of the user's bank. For example, banking list information can be expressed as 'Uri Bank', 'Shinhan Bank' or 'Kookmin Bank'.

The application 410 allows one of the bank list to be selected by the user and requests the account list information for the selected bank to the second sub black box 423. In this case, when the application 410 requests the account list information to the second sub black box 423, the application 410 may transmit cue-link information and information for identifying the corresponding bank.

The second sub black box 423 transmits the cue-link information received from the application 410 to the main black box 422 to confirm whether the request for the account list information of the application 410 is a correct request. Can be. In this case, the main black box 422 checks whether the cue-link information received from the second sub black box 423 is pre-registered information. The request may be acknowledged as a correct request and informed to the second sub black box 423. Accordingly, according to the approval of the main black box 422, the second sub black box 423 may list the account number information held through the corresponding bank and transmit the list to the application 410.

The application 410 may receive account list information from the second sub black box 423, and if any one of the corresponding account lists is selected by the user, may perform user authentication. The user authentication information is information for user authentication on the application 410 and includes information on at least one of a password and biometric information. The password means a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication. The password refers to a password designated by the user, and the biometric information may be at least one of fingerprint, foot print, iris, blood vessel, and facial image information. In addition, the authentication information may be utilized as information for automatic login as well as user authentication.

When the user authentication is completed, the application 410 may encrypt and sign the bank identification information and the account number information and transmit the same to the main black box 422.

The main black box 422 transmits the bank identification information and the account number information received from the application 410 to the first sub black box 421 and to the ATM 40 through the first sub black box 421. Can be.

The ATM 40 may execute a service based on financial service information input by a user, that is, withdrawal, deposit or transfer of money, based on the bank identification information and the account number information received from the first sub black box 421. have. At this time, the user may enter the account password in the ATM 40 to proceed with the subsequent procedure. For example, in the case of withdrawal, when the withdrawal amount is additionally input, the ATM 40 withdraws the corresponding amount according to the balance state of the corresponding account, and in the case of the withdrawal, operates with receiving cash or check from the user. In case of transfer, additional account number of recipient should be entered.

As such, the first sub black box 421 is a means for interworking with the bank of the ATM 40, and the second sub black box 423 is a means for interworking with the bank of the account held by the user. When depositing and withdrawing the account of the bank at the ATM of the bank, the first and second sub black boxes 421 and 423 may be assigned and operate as the same black box.

In the above, the deposit and withdrawal and transfer of the ATM have been described. However, if the user owns the account to be used as an electronic wallet, the above-described configuration and method can be used.

FIG. 5 is a diagram illustrating an operation sequence of a financial transaction service providing system when using cash withdrawal in an ATM according to another embodiment of the present invention.

First, the user may select whether to proceed with the financial transaction information, for example, the financial transaction menu of deposit, withdrawal, and account transfer in the ATM 40 (①).

Next, the ATM 40 may receive cue-link information from the financial transaction approval server 420 (②), and generate and output an identification code using the received cue-link information (③). Here, the identification code may be output in at least one form of QR code, barcode, NFC tag information. For example, in the case of a QR code or a barcode, the identification code may be output by being displayed through the screen of the ATM 40. In addition, the NFC tag information may be output as an electrical signal having a specific frequency through the NFC module mounted on the PC.

Next, the application 410 may acquire the cue-link information included in the identification code by scanning the identification code from the screen of the ATM 40 using the user terminal (④).

Next, the application 410 may perform an authentication process for receiving transaction account information from the financial transaction approval server 420 (⑤).

Next, the application 410 may obtain the transaction account information from the financial transaction approval server 420 and output the account list (⑥).

Next, the application 410 may select an account from the user, input the deposit or withdrawal amount, and in the case of bank transfer, may additionally input the recipient's account number (⑦).

Next, the application 410 may enter the password of the account in the ATM (8).

Next, the bank system approves the financial transaction information, that is, withdrawal, deposit or bank transfer (⑨), and the user can withdraw or deposit cash from the ATM (40). In addition, when the account transfer is to be made, the account transfer is completed and the transaction details may be output through the screen of the ATM 40.

FIG. 6 is a diagram illustrating an operation sequence of a financial transaction service providing system when using an electronic wallet through an ATM according to another embodiment of the present invention.

First, the user may select a deposit or withdrawal menu in the ATM 40 (1).

ATM 40 may then obtain a queue-link from financial transaction approval server 420 (2).

Next, the ATM 40 may output the identification code using the queue-link. Here, the identification code may be output in the form of at least one of QR code, barcode and NFC tag information as described above (③).

Next, the ATM 40 may scan the identification code using the application 410 (④).

Next, the user completes the authentication (⑤).

Next, the ATM 40 may bring the user's electronic wallet information (6).

Next, the user may put cash in the ATM 40 in case of a deposit, or input a withdrawal amount in the ATM 40 in case of withdrawal and input an authentication password (⑦).

Next, the bank system can approve the deposit and renew the user's electronic wallet (⑧). In the case of withdrawal, the banking system may approve the withdrawal and renew the user's electronic wallet (⑧).

Thereafter, the ATM 40 may output a deposit result (⑨), and in the case of withdrawal, may receive cash from the ATM 40 (⑨).

7, 8, and 11 are views illustrating the functions and effects of the financial transaction service providing system through a QR code scan according to an embodiment of the present invention, Figure 9 is a QR code scan according to an embodiment of the present invention FIG. 10 is a diagram illustrating a login process of a financial transaction service providing system through FIG. 10, and FIG. 10 is a diagram comparing a security authentication solution of a financial transaction service providing system using a QR code scan according to an embodiment of the present invention. FIG. FIG. 13 is a flowchart illustrating a security authentication operation of the financial transaction service providing system through a QR code scan according to an embodiment of the present invention, and FIG. It is a figure which shows.

7, 8, and 11, the financial transaction service providing system through the QR code scan according to an embodiment of the present invention is not required for Active X, PKI-type authorized certificate, OTP smart You can replace all security certificates with your phone, a security certificate app (ie the FASSKEY BANK app).

That is, the financial transaction service providing system through the QR code scan according to an embodiment of the present invention provides an internet banking flow through the QR code scan, and fundamentally blocks logical hacking and FAKE and realizes strong identity authentication. In addition, an embodiment of the present invention is a solution for security identity authentication and security transfer for all banks around the world, hacking source blocking of MITM, strong security identity authentication, the effect of replacing the authorized authentication, OTP replacement and parallel, possible of three steps It can provide effects such as security transfer, no activeX, non-hackable architecture, and increased user convenience.

That is, the embodiment of the present invention can make it impossible to hack the Internet / app banking by integrating and managing all financial transactions and logins most securely with only one APP.

As shown in FIG. 9, a login process that forms a financial transaction service providing system through a QR code scan according to an embodiment of the present invention includes a website provided by a financial server from a black box server BB. Obtaining a QR code, receiving the QR code from the website by the user terminal, providing the QR code to the main black box server (MBB) for checking, and allowing the user terminal to authenticate the website The process of receiving an authentication key from the main black box server, the user terminal sending a TLE (TLE protocol) response with the user's signature to the website, the process of the website passing the response to the black box server, and the black box server Approving and passing the user ID, the login is completed by the user, the process of updating the website. In the drawing, V denotes a VPN connection, T denotes a TLE protocol, and S denotes an optional SSL / TLS connection state.

Accordingly, as shown in Figure 11, the security authentication solution of the financial transaction service providing system through the QR code scan according to an embodiment of the present invention can provide all the security X, public certificate, OTP-free Internet banking Can be.

In addition, as shown in Figure 12, the security authentication operation of the financial transaction service providing system through the QR code scan according to an embodiment of the present invention is a strong security algorithm and protocol for strong security authentication operation when Internet banking using a smart phone Can be provided.

As shown in Figure 13, the transaction authentication process forming a financial transaction service providing system by scanning a QR code according to an embodiment of the present invention is a process of requesting a QR code to the black box server, the black box server main The process of informing the black box server of the new QR code and TD, the process of providing the QR code to the website by the black box server, the process of sending the QR code to the user's terminal, and the user's terminal using the QR code as the main black box server. Sending to the user terminal, receiving the approval and TD from the main black box server, decrypting and displaying the TD by the user terminal, approving the transfer through the user terminal, and returning the user terminal including the TD , The main blackbox server passes the reply to the blackbox server, the blackbox server passes the approval to the website, Site includes a process for updating the process, website pages that deliver on the bank transfer system in conjunction with the financial server. In this case, when the user terminal approves the transfer, fingerprint recognition or OTP may be used.

Therefore, the financial transaction service providing system and method through the QR code scan according to an embodiment of the present invention can manage all financial transactions and logins most safely without fear of hacking through the Internet or an app through a smartphone application. . In addition, an embodiment of the present invention can provide an Internet banking service through scanning a QR code that does not require ActiveX, public certificate or OTP.

What has been described above is only one embodiment for implementing the financial transaction service providing system according to the present invention, and the present invention is not limited to the above embodiment, and as claimed in the following claims, the gist of the present invention Without departing from the technical spirit of the present invention to the extent that any person skilled in the art to which the present invention pertains various modifications can be said.

100: financial transaction service providing system
110: application
120: financial transaction approval server
121: sub black box
122: main black box
400: financial transaction service providing system
410: application
420: financial transaction approval server
421: First sub black box
422: main black box
423: second sub black box
1: user
10: Bank Website System
20: banking system
40: ATM

Claims (10)

The present invention relates to a system for providing an internet financial transaction service using an application installed on a user terminal and a financial transaction approval server.
The application may include financial transaction information, a timestamp, a session key, session information, a message authentication code, processing type information, and a corresponding website input by a user through a bank website system. When the cue-link information including the domain information of is converted into an identification code and outputted, the identification code is scanned through the user terminal to obtain the cue-link information, and the obtained cue-link information is used for the financial transaction. Send it to the authorization server,
The financial transaction approval server generates the cue-link information based on the financial transaction information received from the bank website system and transmits the cue-link information to the bank website system, and the queue- generated by the financial transaction approval server. Receiving a transaction approval message for the financial transaction information from the application according to link information and the queue-link information received from the application, and forwarding the transaction approval message to the bank website system;
The financial transaction information includes at least one of a deposit and withdrawal account and a transfer amount,
The application receives user authentication information through the user terminal, performs user authentication, and when user authentication is completed, transmits a transaction approval message for the financial transaction information selected by the user to the financial transaction approval server. ,
The authentication information of the user is a financial transaction service providing system, characterized in that the biometric information including at least one of fingerprint, foot prints, iris, blood vessels and facial image information.
According to claim 1,
The identification code is a financial transaction service providing system, characterized in that output in the form of at least one of QR code, barcode and NFC tag information.
delete delete According to claim 1,
The financial transaction approval server includes a sub black box and a main black box,
The sub black box receives the financial transaction information from the bank website system to generate the cue-link information, and transmits the generated cue-link information to the bank website system and the main black box, respectively. ,
The main black box receives the cue-link information from the application, and matches the sub-black box and the cue-link information received from each of the applications to each other to match the queue-link information. And requesting a user approval to receive the transaction approval message from the application, and transmit the transaction approval message to the bank website system through the sub black box.
The present invention relates to a system for using a financial service of an automatic teller machine (ATM) using an application installed on a user terminal and a financial transaction approval server.
The application, the financial service information selected by the user through the ATM, timestamp (timestamp), session key (session key), session information, message authentication code (message authentication code), processing type information and domain information of the website When the cue-link information including the converted into the identification code is outputted, the identification code is scanned through the user terminal to obtain the cue-link information, and the obtained cue-link information and the user identification information to the financial Send to the transaction approval server, receive the transaction account information from the user and transmit to the financial transaction approval server,
The financial transaction approval server generates the queue-link information based on the financial service information received from the ATM and transmits the queue-link information to the ATM, and from the application and the queue-link information generated by the financial transaction approval server. Requesting selection of the transaction account information from the application on the basis of the received queue-link information and the user identification information, and transmitting the transaction account information received through the application to the ATM,
The transaction account information includes at least one of a user's trading bank, the account number of the trading bank, the transaction amount and the ID of the electronic wallet,
The application receives the user's authentication information through the user terminal, performs user authentication, and when the user authentication is completed, transmits the transaction account information selected by the user to the financial transaction approval server,
The authentication information of the user is a financial transaction service providing system, characterized in that the biometric information including at least one of fingerprint, foot prints, iris, blood vessels and facial image information.
The method of claim 6,
The identification code is a financial transaction service providing system, characterized in that output in the form of at least one of QR code, bar code and NFC tag information.
delete delete The method of claim 6,
The financial transaction approval server includes a first sub black box, a main black box and a second sub black box,
The first sub black box receives the financial service information from the ATM to generate the queue-link information, and transmits the generated queue-link information to the ATM and the main black box, respectively.
The main black box receives the cue-link information from the application, and matches the first sub black box with the cue-link information received from the application, respectively, and if there is matched cue-link information. Request and receive the transaction account information from an application, and transmit a transaction approval message for the financial service information to the ATM through the first sub black box,
The second sub black box receives the queue-link information from the application and is requested to provide the transaction account information, and uses the queue-link information received from the application to transmit the transaction account from the main black box. The financial transaction service providing system, characterized in that to receive the request for the provision of information to provide the transaction account information to the application.

Images