KR102551143B1 - Multiple authentication financial management server and operation method of the server - Google Patents

Abstract

The present invention provides a multi-authentication financial server and an operating method of the server. For example, a method of operating a multi-authentication financial management server according to the present invention includes receiving a transfer request message from a first client terminal; identifying a plurality of second client terminals having authentication authority for the transfer request message based on the transfer request message; performing a transfer authentication confirmation procedure for the plurality of second client terminals according to the transfer request message; a transfer authentication success or failure determining step of determining whether or not authentication for the transfer request message is successful based on a result of the transfer authentication confirmation procedure; and a service providing step of providing a related service to the first client terminal and the plurality of second client terminals according to whether the transfer authentication is successful.

Description

Multi-authentication financial management server and operation method of the server {Multiple authentication financial management server and operation method of the server}

The present invention relates to a multi-authentication financial management server and an operating method of the server. More specifically, the present invention relates to a multi-authentication financial management server capable of providing financial services according to multi-authentication for various assets and a method of operating the server.

A blockchain system, also called distributed ledger technology (DLT), is a technology that distributes and stores transaction information on multiple computers connected to a blockchain network rather than on one central server. With the rise of such a blockchain system, cryptocurrencies based on various blockchain systems at home and abroad (e.g. virtual assets such as FT (Fungible Token) and NFT (Non-Fungible Token)) have also been replaced by the existing financial system (aka institutional system). There is a movement to incorporate

Accordingly, when the number of types of assets managed by the financial system increases, various techniques for improving the stability of their management may be required. For example, online banking is activated and user convenience increases in proportion to the increase in erroneous deposit accidents due to user errors, etc., and technology development to prevent this may be required.

In this regard, Korean Patent Laid-open Publication No. 10-2018-0046221 discloses a configuration for obtaining separate approval from a guardian using an automated response service (ARS) service so that a transfer requested by a sender is made only under the approval of a guardian, there is. However, according to the patent, the transfer requested by the sender is completed through only one approval process, so there was a problem that the guardian's unwanted transfer could actually be easily made due to theft or hacking of the guardian's terminal.

Republic of Korea Patent Publication No. 10-2018-0046221 (2018.05.08)

An object of the present invention is to solve the above-mentioned conventional problems, and to provide a multi-authentication financial management server capable of providing financial services according to multi-authentication for various assets and an operating method of the server.

According to one embodiment for solving the object of the present invention, a method of operating a multi-authentication financial management server includes receiving a transfer request message from a first client terminal, a transfer request message receiving step; identifying a plurality of second client terminals having authentication authority for the transfer request message based on the transfer request message; performing a transfer authentication confirmation procedure for the plurality of second client terminals according to the transfer request message; a transfer authentication success or failure determining step of determining whether or not authentication for the transfer request message is successful based on a result of the transfer authentication confirmation procedure; and a service providing step of providing a service related to the success or failure of the transfer authentication to the first client terminal and the plurality of second client terminals.

In the present invention, the transfer request message may include at least one or more information of the type of the transfer requested asset, the size of the transfer requested asset, and the receiving account of the transfer requested asset. In this case, the identifying of the plurality of second client terminals may include identifying the plurality of second client terminals based on the at least one piece of information included in the transfer request message.

In the present invention, the performing of the transfer authentication confirmation procedure may include: simultaneously or sequentially transmitting a transfer authentication confirmation request message for the transfer request message to the plurality of second client terminals; determining whether an acknowledgment message for the transfer authentication confirmation request message is received from each of the plurality of second client terminals within a time window corresponding to each second client terminal; and when the confirmation response message is received from all of the plurality of second client terminals within a time window corresponding to each second client terminal, determining that the transfer authentication for the transfer request message is successful. .

In this case, all of the plurality of second client terminals may be set to have the same authentication level.

In the present invention, when the plurality of second client terminals include second client terminals having a first authentication level and second client terminals having a second authentication level higher than the first authentication level, the transfer authentication The step of performing the verification procedure is performed separately for the second client terminals having the first authentication level and the second client terminals having the second authentication level, and for the second client terminals having the second authentication level. The transfer authentication confirmation procedure for the transfer authentication may be performed after the transfer authentication for the second client terminals having the first authentication level is determined to be successful.

In this case, when a confirmation response message for the transfer authentication confirmation request message is received from more than half of the second client terminals having the first authentication level, transfer authentication is performed for the second client terminals having the first authentication level. success can be determined.

According to another embodiment for solving the object of the present invention, the multi-authentication financial management server includes a transfer request confirmation unit receiving a transfer request message from a first client terminal and confirming the transfer request of the first client terminal; an additional authentication terminal identification unit that identifies a plurality of second client terminals having authentication authority for the transfer request message based on the transfer request message; Additional authentication is performed for the plurality of second client terminals, performing a transfer authentication confirmation procedure according to the transfer request message, and determining whether authentication is successful for the transfer request message based on a result of the transfer authentication confirmation procedure. wealth; and a service providing unit that provides a service related to the determined transfer authentication success or failure to the first client terminal and the plurality of second client terminals.

According to the present invention, by providing a financial service based on multi-authentication of a plurality of persons/organizations having separate authentication authority, it is possible to achieve financial management with higher stability compared to the prior art.

In addition, according to the present invention, in particular, it is possible to provide excellent stability for blockchain/digital wallets that may not be recoverable/recoverable in the event of loss due to the anonymity of the withdrawal/transfer target.

1 is a simplified diagram of a financial system according to one embodiment of the present invention.
2 is a diagram simply illustrating a conventional financial management server and a transfer service based thereon.
3 is a diagram simply illustrating a multi-authentication financial management server and a transfer service based thereon according to the present invention.
4 is a configuration diagram of a multi-authentication financial management server according to an example of the present invention.
5 is a diagram showing an example of operation of a multi-authentication financial management server according to the present invention.

Hereinafter, a multi-authentication financial management server and a method of operating the server according to the present invention will be described in detail with reference to the accompanying drawings. At this time, the present invention is not limited or limited by the above-described embodiments. In addition, in describing the present invention, detailed descriptions of well-known functions or configurations may be omitted to clarify the gist of the present invention.

1 is a simplified diagram of a financial system according to one embodiment of the present invention.

As shown in FIG. 1, the financial system according to the present invention may include a first client terminal 10, a plurality of second client terminals 20, a multi-authentication financial management server 30, and the like.

In the present invention, the first client terminal 10 and / or the second client terminal 20 is a portable terminal such as a smart phone, a tablet PC (Personal Computer), or a computer device capable of accessing a server or other terminals through a network. can be implemented At this time, the portable terminal may include a wireless communication device capable of wireless access through a communication system such as 4G LTE (Long Term Evolution), 5G, Wi-Fi, and the like, and the computer device may include a web browser or a related application (e.g., application etc.) may include a desktop, a laptop, etc. installed thereon.

In the present invention, a network may be implemented as a wired network such as a local area network (LAN) and a wide area network (WAN), or a wireless network such as a mobile communication network or a satellite communication network. Thus, the above-described first client terminal 10 and / or second client terminal 20 may transmit and receive signals with the multi-authentication financial management server 30 through a communication system supported by the network.

In the present invention, the multi-authentication financial management server 30 may establish and operate a web page or application service that interoperates with the first client terminal 10 and/or the second client terminal 20 .

More specifically, the multi-authentication financial management server 30 according to the present invention is an account related to the first client terminal 10 (eg, an account of a natural person / corporation accessed / authenticated through the first client terminal 10 or the above It can support transfer/remittance services of various assets (eg, financial assets, digital/virtual assets such as cryptocurrencies, etc.) included in accounts related to natural persons/corporations. Hereinafter, for convenience of description, an operation of transferring one or more assets included in an account to another account is collectively referred to as 'transfer', regardless of the type of asset. In other words, moving not only the currency in the account (eg, won, dollar, etc.), but also a separate virtual asset (eg, cryptocurrency such as Bitcoin and Ethereum, NFT based on a blockchain system, etc.) from the account to another account All of these are referred to as 'transfer'.

Hereinafter, embodiments applicable to the multi-authentication financial management server according to the present invention will be described in detail.

2 is a diagram simply showing a conventional financial management server and a transfer service based thereon, and FIG. 3 is a diagram simply illustrating a multi-authentication financial management server and a transfer service based thereon according to the present invention.

Referring to Figure 2, the conventional financial management server operates as follows.

When a conventional financial management server receives a transfer request from a first client (or a first client terminal), it checks the transfer request and requests the first client to confirm authority for it. Correspondingly, the first client performs authorization check and provides authorization information to the conventional financial management server.

Subsequently, the conventional financial management server checks the received authority information to determine whether or not to finally approve (transfer). At this time, if the final approval is failure (N in FIG. 2), the conventional financial management server provides a failure alarm to the first client. On the other hand, if the final approval is successful (Y in FIG. 2), the conventional financial management server may confirm transfer approval through a (separate) financial processing service and request actual processing thereof. These actual processing requests can be implemented on currency banks or blockchain FT/NFTs. In addition, the conventional financial management server may provide a notification of changes in account information according to the transfer process to the first client.

As such, the conventional financial management server provides a transfer service based only on the approval/authentication of the first client requesting/requesting the transfer. In particular, most companies have a separate management system to prevent misuse and misuse of the company's major assets through a decision-making process within the company. ) had a problem in that it was performed through the work process of the person in charge alone. In this way, in the past, without a separate supplementary system, there was no choice but to rely only on the morality of the individual in charge, which inevitably led to various social problems such as embezzlement and breach of trust.

For this reason, the present invention intends to provide a financial management server that can be systematically defended by applying a multi-approval system to a financial system in which actual financial services are performed/processed. Accordingly, the financial management server may operate as shown in FIG. 3 .

As shown in FIG. 3, the multi-authentication financial management server according to the present invention confirms the transfer request from the first client, the additional authorized person for the requested transfer service (ie, the additional authorized person for the transfer service) personnel), and the approval request can be forwarded to the relevant personnel. At this time, the above-described additional authority identification operation may be performed simultaneously with or with a time difference with the operation of the multi-authentication financial management server requesting authority confirmation for the first client, or confirming authority information from the first client. can be performed later.

Subsequently, the multi-authentication financial management server confirms approval from at least one of the plurality of persons (eg, second client A, second client B, ..., second client Z, etc.) requesting (additional) approval. can be received In other words, the multi-authentication financial management server may receive approval confirmation (for the requested transfer service) from all of the plurality of persons, or may receive approval confirmation from only some (not all) of the plurality of persons. may be received. At this time, the multi-authentication financial management server may confirm the approval of the additional authorized person(s) based on the approval confirmation received from the one or more second clients according to a preset rule.

Subsequently, the multi-authentication financial management server according to the present invention determines whether or not to finalize approval by using the authority information of the first client and the additional approval information of the second client(s), and accordingly, not only the first client but also the plurality of second clients. Provides a failure alarm to clients (N in FIG. 3), confirms transfer approval, requests actual transfer processing for a currency bank or block chain FT/NFT, and reminds an alarm of changes in account information according to the transfer process It can be provided to the first client and the plurality of second clients.

Hereinafter, based on the above-described embodiment, various operational examples of the multi-authentication financial management server applicable to the present invention will be described in detail.

4 is a configuration diagram of a multi-authentication financial management server according to an example of the present invention, and FIG. 5 is a diagram illustrating an operation example of the multi-authentication financial management server according to the present invention.

As shown in FIG. 4, the multi-authentication financial management server 30 according to the present invention receives a transfer request message from the first client terminal and confirms the transfer request of the first client terminal (32 ), an additional authentication terminal identification unit 34 for identifying a plurality of second client terminals that perform additional authentication for the transfer request, and performing additional authentication for performing additional authentication for the plurality of second client terminals. It may include a unit 36 and a service providing unit 38 that provides a service according to whether the additional authentication according to the additional authentication unit 36 is successful.

Multi-authentication financial management server according to the present invention may operate as shown in FIG. 5 based on the above configuration.

More specifically, the multi-authentication financial management server 30 may receive a transfer request message from the first client terminal 10 (S510). At this time, the transfer request message is sent to an account related to the first client terminal 10 (eg, an account of a natural person/corporate accessed/certified through the first client terminal 10 or an account related to the natural person/corporate). It can respond to messages requesting transfer services for various included assets (eg, financial assets, virtual assets such as cryptocurrencies, etc.). In the present invention, the multi-authentication financial management server 30 may perform step S510 through the transfer request confirmation unit 32.

In an embodiment applicable to the present invention, the transfer request message may include at least one or more of the following information:

- Type of asset requested for transfer

- Amount/size of assets requested for transfer

- The receiving account of the asset requested for transfer

The multi-authentication financial management server 30 may identify a plurality of second client terminals having (additional) authentication authority for the transfer request message based on the above-described transfer request message (S520). In the present invention, the multi-authentication financial management server 30 may perform step S520 through the additional authentication terminal identification unit 34.

In an embodiment applicable to the present invention, the multi-authentication financial management server 30 may use information included in the transfer request message to identify a plurality of second client terminals corresponding to the transfer request message. For example, the multi-authentication financial management server 30 is based on information included in the transfer request message (eg, the type of asset requested for transfer, the amount/size of the asset requested for transfer, the receiving account of the requested asset, etc.) Thus, a plurality of second client terminals corresponding to the transfer request message may be identified. To this end, information on a plurality of second client terminals according to a combination of the above information may be stored in a separate database. As a specific example, when the transfer-requested asset is a financial asset (eg, won, dollar, etc.), information on a plurality of second client terminals corresponding to the range of the amount/size of the transfer-requested asset is displayed in the separate can be stored in the database. Alternatively, if the transfer-requested asset is a digital/virtual asset, information on a plurality of second client terminals corresponding to the type of the digital/virtual asset requested for transfer and the range of amount/size of the asset is displayed as the separate asset. can be stored in the database. Alternatively, information on a plurality of second client terminals respectively corresponding to each other according to whether past transfer history to the corresponding receiving account may be stored in the separate database.

As an additional embodiment, the multi-authentication financial management server 30 identifying the plurality of second client terminals having authentication authority for the transfer request message not only recognizes the plurality of second client terminals, but also identifies the plurality of second client terminals. It may include recognizing an authentication level for each of the second client terminals. At this time, the authentication level may have one or more values. Accordingly, all of the plurality of second client terminals may have the same authentication level or may have individually set authentication levels. A specific authentication confirmation method according to the authentication level will be described in detail later.

The multi-authentication financial management server 30 performs a transfer authentication confirmation procedure according to the transfer request message for the plurality of second client terminals identified through the above method, and based on the result of the transfer authentication confirmation procedure, the It is possible to determine whether the authentication success for the transfer request message is successful (S530). In the present invention, the multi-authentication financial management server 30 may perform step S530 through the additional authentication performing unit 36.

As an additional embodiment, the multi-authentication financial management server 30 may perform a separate authority confirmation procedure for the first client terminal separately from step S530 (eg, FIG. 3 ). Subsequently, the multi-authentication financial management server 30 succeeds in (final) authentication of the transfer request message using the transfer authentication confirmation result for the plurality of second clients together with the separate authority confirmation result for the first client terminal. can decide whether

In the present invention, the multi-authentication financial management server 30 may perform a transfer authentication confirmation procedure in various ways as follows according to various embodiments.

For example, the multi-authentication financial management server 30 transmits a transfer authentication confirmation request message for the transfer request message simultaneously or sequentially to a plurality of second client terminals, and from each of the plurality of second client terminals. It may be determined whether a confirmation response message for the transfer authentication confirmation request message is received within a time window corresponding to each second client terminal. In this case, the time window may be set to a period having a predetermined length of time from the time when the transfer authentication confirmation request message is transmitted to the corresponding second client terminal. Subsequently, when the confirmation response message is received from all of the plurality of second client terminals within a time window corresponding to each second client terminal, the multi-authentication financial management server 30 transfers the transfer request message. It can be determined by authentication success.

In the above example, sequentially transmitting the transfer authentication confirmation request message to the plurality of second client terminals includes sequentially transmitting the transfer authentication confirmation request message according to the order set for the plurality of second client terminals. can do. Here, the transmission of the transfer authentication confirmation request message to the N+1-th second client terminal is performed after a predetermined time from the time of transmission of the transfer authentication confirmation request message to the N-th second client terminal, or the N-th second client It may be performed after receiving an acknowledgment message from the terminal.

As another example, when an authentication level is set for a plurality of second client terminals, a transfer authentication confirmation procedure may be performed in a different way according to aspects of the set authentication level.

More specifically, when all of the plurality of second client terminals have the same authentication level, the multi-authentication financial management server 30 determines whether transfer authentication is successful for the plurality of second client terminals according to the transfer authentication confirmation procedure described above. can judge

In contrast, when multiple authentication levels are set for a plurality of second client terminals (eg, a plurality of second client terminals are second client terminals having a first authentication level and second client terminals having a higher authentication level than the first authentication level). In the case of including second client terminals having authentication levels, etc.), transfer authentication procedures may be performed in order from a lower authentication level to a higher authentication level.

More specifically, the multi-authentication financial management server 30 may classify and perform transfer authentication confirmation procedures according to authentication levels. Accordingly, the multi-authentication financial management server 30, only when the authentication of the second client terminals having a (relatively) low authentication level succeeds, allows the second client terminals having a (relatively) high authentication level. You can perform a transfer authentication confirmation procedure for

As a specific example, when the plurality of second client terminals identified through step S520 include second client terminals having a first authentication level and second client terminals having a second authentication level higher than the first authentication level. , The multi-authentication financial management server 30 may individually perform a transfer authentication confirmation procedure for the second client terminals having the first authentication level and the second client terminals having the second authentication level. At this time, the transfer authentication confirmation procedure for the second client terminals having the second authentication level may be performed after the transfer authentication for the second client terminals having the first authentication level is determined to be successful.

As a further embodiment, when several authentication levels are set for a plurality of second client terminals, second client terminal(s) having a higher authentication level exist, among the second client terminals having a lower authentication level. Even if approval confirmation is obtained from some (eg, more than half), it may be determined that transfer authentication for the lower authentication level is successful.

The multi-authentication financial management server 30 may provide related services to the first client terminal and the plurality of second client terminals according to whether the transfer authentication is successful or not determined through the various methods described above (S540). In the present invention, the multi-authentication financial management server 30 may perform step S530 through the service provider 38.

More specifically, the multi-authentication financial management server 30, depending on whether the transfer authentication is successful or not determined through the above-described various methods, when the transfer authentication fails, not only the first client terminal 10 but also a plurality of second client terminals ( 20) to provide a failure alarm, or if transfer authentication is successful, confirm transfer approval, request actual transfer processing for a currency bank or blockchain FT/NFT, and notify the change of account information due to the transfer process to the first It can be provided to one client terminal 10 and the plurality of second client terminals 20 .

In the present invention, the multi-authentication financial management server may provide the above-described financial management service in the form of an Internet web or mobile application. At this time, the above-described internet web program or mobile application program may be read by a processor (CPU) of the user device through a device interface of the user device so that the user device reads the program and executes the methods implemented as a program. It may include codes coded in computer languages such as C, C++, JAVA, and machine language. These codes may include functional codes related to functions defining necessary functions for executing the methods, and control codes related to execution procedures necessary for the processor of the user device to execute the functions according to a predetermined procedure. can include In addition, these codes further include memory reference related codes for which location (address address) of the user device's internal or external memory should be referenced for additional information or media required for the processor of the user device to execute the functions. can do. In addition, when the processor of the user device needs to communicate with any other remote user device or server in order to execute the functions, the code uses the communication module of the user device to communicate with any other remote user device. It may further include communication-related codes for how to communicate with a server or the like, and what information or media to transmit/receive during communication.

The storage medium is not a medium that stores data for a short moment, such as a register, cache, or memory, but a medium that stores data semi-permanently and is readable by a device. Specifically, examples of the storage medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, etc., but are not limited thereto. That is, the program may be stored in various recording media on various servers accessible by the computer or various recording media on the user's computer. In addition, the medium may be distributed to computer systems connected through a network, and computer readable codes may be stored in a distributed manner.

As described above, the preferred embodiments of the present invention have been described with reference to the drawings, but those skilled in the art can make various modifications to the present invention within the scope not departing from the spirit and scope of the present invention described in the claims below. may be modified or changed.

10: first client terminal
20: second client terminal
30: multi-authentication financial management server
32: transfer request confirmation unit
34: additional authentication terminal identification unit
36: additional authentication unit
38: service provider

Claims (7)

In the method of operating a multi-authentication financial management server,
A transfer request message receiving step of receiving a transfer request message from a first client terminal;
identifying a plurality of second client terminals having authentication authority for the transfer request message based on the transfer request message;
For the plurality of second client terminals, a transfer authentication confirmation procedure is performed according to the transfer request message, and based on a result of the transfer authentication confirmation procedure, whether or not authentication for the transfer request message is successful is determined. Performing the procedure and determining whether the transfer authentication is successful or not; and
A service providing step of providing a service related to the transfer authentication success or failure to the first client terminal and the plurality of second client terminals,
In the step of performing the transfer authentication verification procedure and determining whether the transfer authentication is successful,
When the plurality of second client terminals all have the same authentication level:
simultaneously transmitting a transfer authentication confirmation request message for the transfer request message to the plurality of second client terminals;
determining whether an acknowledgment message for the transfer authentication confirmation request message is received from each of the plurality of second client terminals within a time window corresponding to each second client terminal; and
When the confirmation response message is received for all of the plurality of second client terminals within a time window corresponding to each second client terminal, determining that the transfer authentication for the transfer request message is successful;
When the plurality of second client terminals include second client terminals having a first authentication level and second client terminals having a second authentication level higher than the first authentication level:
performing a transfer authentication confirmation procedure for second client terminals having the first authentication level;
performing a transfer authentication confirmation procedure for second client terminals having the second authentication level only when the transfer authentication for the second client terminals having the first authentication level is determined to be successful; and
Based on the result of the transfer authentication confirmation procedure for the second client terminals having the second authentication level, determining whether authentication succeeds for the transfer request message, characterized in that, of the multi-authentication financial management server how it works. According to claim 1,
The transfer request message includes at least one information of the type of asset requested for transfer, the size of the asset requested for transfer, and the receiving account of the asset requested for transfer;
The step of identifying the plurality of second client terminals,
And identifying the plurality of second client terminals based on the at least one piece of information included in the transfer request message. delete delete delete According to claim 1,
When the plurality of second client terminals include second client terminals having a first authentication level and second client terminals having a second authentication level higher than the first authentication level:
When receiving a confirmation response message for the transfer authentication confirmation request message from more than half of the second client terminals having the first authentication level, transfer authentication for the second client terminals having the first authentication level is determined to be successful Characterized in that, a method of operating a multi-authentication financial management server. In the multi-authentication financial management server,
a transfer request confirmation unit that receives a transfer request message from a first client terminal and confirms the transfer request of the first client terminal;
an additional authentication terminal identification unit that identifies a plurality of second client terminals having authentication authority for the transfer request message based on the transfer request message;
Additional authentication is performed for the plurality of second client terminals, performing a transfer authentication confirmation procedure according to the transfer request message, and determining whether authentication is successful for the transfer request message based on a result of the transfer authentication confirmation procedure. wealth; and
A service providing unit that provides a service related to the determined transfer authentication success or failure to the first client terminal and the plurality of second client terminals,
The additional authentication unit,
When the plurality of second client terminals all have the same authentication level:
Simultaneously sending a transfer authentication confirmation request message for the transfer request message to the plurality of second client terminals,
Determining whether a confirmation response message for the transfer authentication confirmation request message is received from each of the plurality of second client terminals within a time window corresponding to each second client terminal;
When the confirmation response message is received for all of the plurality of second client terminals within a time window corresponding to each second client terminal, it is determined that the transfer authentication for the transfer request message is successful,
When the plurality of second client terminals include second client terminals having a first authentication level and second client terminals having a second authentication level higher than the first authentication level:
Performing a transfer authentication confirmation procedure for second client terminals having the first authentication level;
Only when the transfer authentication for the second client terminals having the first authentication level is determined to succeed, performing a transfer authentication confirmation procedure for the second client terminals having the second authentication level,
Based on the result of the transfer authentication confirmation procedure for the second client terminals having the second authentication level, the multi-authentication financial management server determines whether authentication succeeds for the transfer request message.

Images