KR20030020906A - Security system and the method for on-line banking - Google Patents

Abstract

PURPOSE: A system for financial security and an operating method thereof are provided to perform the security set for online access and to fast and smoothly meet robbery and missing of the financial information such as an ID and a password by suggesting a financial security system free to change the password to connect to the server with a user ID code. CONSTITUTION: A user connects to a security service server by using a terminal(200) connectable to a network(100). A user database(410) stores the personal information. A certification performing part(420) performs the security certification by comparing the information inputted by the user through the terminal(200) with the information stored in the user database(410). A connection management part(430) decides the connection to a financial server(300) according to a result of the security certification and performs the connection. A user information modification part(440) enables a certified user to modify the personal information stored in the user database(410). A connection time setting part(450) enables the certified user to set up the time connecting to the financial server.

Description

Financial security system and its method {Security system and the method for on-line banking}

The present invention relates to a financial security system, and more particularly, to a system for realizing a reliability of a financial service by increasing the security level between a system supporting a financial service and a user online, and a method of realizing the same.

The electronic financial system using wired / wireless means is a system for safer and faster financial business such as payment settlement and transfer using PC communication, ARS and Internet in the current financial window visit processing method. In addition, it is rapidly spreading due to the development of information technology and the increase of the use of the Internet because it can reduce cash possessions and overcome space and time constraints.

Existing financial systems can be broadly divided into: 1) credit card payment system, 2) internet banking system, and 3) internet shopping mall payment system. Hereinafter, each system will be briefly described.

First, in the conventional credit card payment system, when a credit card member (buyer) presents a credit card to a credit card merchant for purchase, the credit card merchant requests a credit card use authorization request to a VAN (Value Added Network) company through a card inquiry machine. do. The VAN operator analyzes the credit card information sent from the merchant and requests transaction approval to the card company, and the credit card company verifies its membership status and credit limit, and then approves the transaction to the VAN company. Send it. The VAN operator prints the approval information of the card company to the merchant credit card inquiry, and the merchant completes the credit transaction by receiving the member's signature on the slip printed by the credit card inquiry. In this case, if the documents for the card company are collected and submitted to the relevant bank or card company, the remaining amount of the transaction slip will be settled after 2-7 days excluding the card fee corresponding to the predetermined percentage of sales. It is deposited into the account.

Next, referring to Internet banking, a user who wants to use Internet banking receives an ID and password for accessing an internet banking server issued by a financial institution such as a bank, and also describes a user security identification method such as a security card or a public certificate. It is a method of processing a user's financial business after accessing a banking server.

Finally, a description of the Internet shopping mall payment system, a user who accesses the shopping mall server through the wired / wireless Internet selects a desired product, and then requests payment for it.

The shopping mall server receiving the payment request for the selected product from the user connects to a separate payment server equipped with a payment solution, and connects the financial information (ie, bank account information, credit card information, etc.) input by the user to the corresponding financial server (ie , Internet banking server or card company server) to determine the user's membership, financial information, credit limit, etc.

In general, the financial services described above allow a user to process a financial business by using a user identification code (i.e., an ID) and a password to request a connection to a financial server. Do not perform security devices (e.g., log out or log off), or fundamental measures against the disclosure and illegal use of user IDs and passwords resulting from the loss, theft, and duplication of accounts, cards, etc. Inevitably, the method is inadequate.

In order to solve the above problems, the present invention proposes a method for performing a security setting for the online access itself in the use of online financial services, and proposes a fundamental security method for online financial services. There is this.

In addition, users can quickly and flexibly prevent theft and loss of financial information such as IDs and passwords by presenting a financial security system that allows users to change their passwords to access servers that support online financial services using their user identification codes. The purpose of this paper is to suggest a financial security method that can be coped with.

1 is a diagram briefly illustrating a configuration of a financial security system according to the present invention.

2 is a diagram illustrating a detailed system configuration for a financial security system according to the present invention.

3 is a service flow diagram for explaining the operation of the financial security system according to the present invention;

<Description of the symbols for the main parts of the drawings>

100: network 200: terminal

300: financial server 400: security service server

410: user DB420: certification execution unit

430: connection management unit 440: user information change unit

450: connection time setting unit

In order to achieve the above object, the present invention is a network including wired and wireless; Network connection means for connecting to said network; Financial service providing means loaded on the network and including first security authentication means which is a user authentication means for performing authentication on a user's connection request; Security service having a second security authentication means for controlling the connection time between the network connection means and the financial service providing means according to the setting of an authenticated user for accessing the financial service providing means through the network connection means. We propose a financial security system that includes provision.

Financial security system according to the present invention composed of such means, more specifically, a wired and wireless network network including the Internet network; A terminal for accessing the network; A financial server loaded in the network; In order to provide a security service for performing a connection to the financial server by using the terminal, a user DB storing user personal information, the information entered by the user through the terminal and the information stored in the user DB An authentication performing unit performing security authentication through comparison, a connection management unit for determining whether to connect with the financial server according to the security authentication result, and performing the authentication, and an authorized user to change personal information stored in the user DB. A security service server including a user information changing unit for enabling a user and an access time setting unit for allowing an authenticated user to set an access time with the financial server is presented.

The financial server is characterized by having a user authentication system for performing user authentication.

In addition, the terminal is characterized in that it comprises a computer terminal, wired and wireless telephone, ATM terminal device.

In addition, the user personal information of the user DB is characterized in that it comprises a user ID and password.

Financial security method using a financial service system according to the present invention having the above configuration comprises the steps of: storing user personal information by inputting the user DB; Accessing the security service server using the terminal; A user inputs his or her personal information, and the authentication performing unit performs user authentication using the inputted information and the information stored in the user DB; If the user authentication is legitimately confirmed, the user selects a connection to the user information changing unit or the connection time setting unit; When the user accesses the user information changing unit, changing a personal information and storing the changed information in the user DB; Setting a connection time with the financial server when the user connects to the connection time setting unit; The connection manager is realized through the step of connecting the financial server and the terminal during the set connection time.

If the authentication performed by the authentication performing unit is determined to be an invalid user, the method may further include requesting re-entry of user personal information or ending the connection with the security service server.

The method may further include requesting additional user personal information and performing user re-authentication by the authentication performing unit in accessing the user information changing unit.

The connection management unit may further include forcibly terminating the connection between the terminal and the financial server when the set access time expires.

In addition, the user further comprises the step of forcibly terminating the connection between the terminal and the financial server through the connection management unit.

Hereinafter, a detailed description of the financial security system and method according to the present invention having the configuration and features as described above will be described with the accompanying drawings.

1 is a diagram briefly showing a configuration of a financial security system according to the present invention, in which the network connection means 20 is connected to the financial service providing means 30 loaded on the same network 10. When the access time between the financial service providing means 30 and the network connection means 20 is set through the first security authentication means 41 of the provided security service providing means 40, and the set time expires, The connection with the financial service providing means is forcibly terminated. Of course, the first security authentication means 31 is a user authentication means provided by the financial service providing means 30 itself.

2 is a diagram illustrating a detailed system configuration of the financial security system according to the present invention, wherein the financial security system according to the present invention includes wired / wireless telephones, computer terminals, ATM (Automatic Teller Machine) terminals, and dedicated access terminals. The user DB 410 that stores user personal information using the terminal 200 that can be connected to the network 100 including the Internet and the telephone network for the purpose, the information input by the user through the terminal And an authentication performing unit 420 for performing security authentication by comparing with the information stored in the user DB, and a connection management unit 430 for determining whether to connect with the financial server according to the security authentication result. And a user information changing unit 440 for allowing an authenticated user to change personal information stored in the user DB, and an authenticated user accessing the financial server. It performs a connection to a security service server 400 having an access time setting section 450 to set that the liver.

Of course, the financial server 300 is loaded on the network 100, the server of any institution that supports online financial transaction services such as banks, card companies, financial settlement agencies, authorized certification agencies, Internet shopping malls, securities companies, insurance companies, etc. This is the case.

Of course, the financial server 300 may include an authentication system or a security system (not shown) built therein.

The user DB 410 stores the personal information for the member users using the financial security system according to the present invention, the basic information is stored name, resident number, contact information, user identification code (ie, ID), password, and the like, and may additionally include financial information including an address, an account number, and a card number.

The authentication performing unit 420 is configured to identify whether the user is a member when the user wants to use the service by accessing the financial security system according to the present invention, and an ID and password (or other personal information given to each member user). ) Is requested to determine whether to allow access to the security service server 400 by comparing the input information with the user personal information stored in the user DB.

The connection management unit 430 performs a function such as network connection connection or disconnection between the terminal 200 and the financial server 300 for a user who is authenticated as a valid member by the authentication performing unit 420. Perform.

The user information changing unit 440 is a component that provides a service that enables the modification of the personal information for the member user authenticated access to the security service server 400, which supports security activities by the user himself. To change the password at any time is the main purpose.

The access time setting unit 450 is a portion for performing the use time setting for the use of the financial server 300 of the member user authenticated access to the security service server 400, which is the financial server 300 It is a configuration to prevent illegal use such as hacking through an external line by setting and limiting the use time of the user.

That is, the user sets the financial business time through the connection to the financial server 300 through the access time setting unit 450 of the security service server 400, thereby automatically disconnecting after the set time (that is, Log out) to have the advantage that the security device owned by the financial server 300 operates.

A description of the operation of the financial security system according to the present invention having the configuration as described above will be described with reference to the flowchart of FIG.

First, the user is in a state in which personal information, an ID, and a password are stored in the user DB 410 through a service application for use of the financial security system according to the present invention.

Next, the user accesses the security service server 400 using the terminal 200 in an internet network, a telephone network, an ATM computer network, and the like. (S2)

The user connected to the security service server 400 inputs an ID and a password through the terminal 200 (S3), and the input personal information is authenticated by the authentication performing unit 420 to determine whether the user is a member. This authentication is performed (S4). Of course, the authentication is performed by comparing with the information of the stored member user.

When it is determined that the authentication result performed by the authentication performing unit 420 justifies the user's membership, the user selects the connection to the user information changing unit 440 or the connection time setting unit 450. (S5) Of course, if it is determined that the authentication result by the authentication performing unit 420 is an invalid user, re-enter user personal information or terminate the connection with the security service server 400. (S6)

When the authenticated user selects the access to the user information changing unit 440, the user changes or modifies the personal information stored in the user DB 410. (S7) Of course, the changed personal information is the user DB. 410 is restored.

When the authenticated user selects the connection to the connection time setting unit 450, the user sets the connection connection time with the financial server 300 for the financial business (S8).

When the setting of the access time by the user is completed, the connection management unit 430 performs a connection between the financial server 300 and the user terminal 200. That is, the terminal 200 and the financial The security for the connection between the servers 300 will be released.

When the set access time expires, the connection manager 430 forcibly terminates the connection between the financial server 300 and the terminal 200. (S10)

Thereafter, the connection with the financial server 300 is selected to retry or to terminate the use of the service.

Of course, in order to change the user's personal information through access to the user information changing unit 440, it is natural that a re-authentication procedure may be performed by inputting separate personal information.

In addition, even if the connection connection time with the financial server 300 has not expired, the user may perform a forced connection termination command through the connection management unit 430.

Of course, even if the financial server 300 and the terminal 200 is connected, it is a matter of course to go through the security solution provided by the financial server 300 itself.

The financial security system and the security method according to the present invention as described above has an advantage in that it proposes a fundamental solution to the access itself to the financial server that provides financial services through online.

In other words, by setting the connection time with the financial server and when the set time expires, the forced termination of the connection enables secure financial services.

In addition, it is difficult and difficult to change the user identification code and password for the access of the online financial server provided by each financial sector, the present invention has the advantage that the financial security is further enhanced by the user itself easy to change.

Claims (10)

A network including wired and wireless; Network connection means for connecting to said network; Financial service providing means loaded on the network and including first security authentication means which is a user authentication means for performing authentication on a user's connection request; Security service having a second security authentication means for controlling the connection time between the network connection means and the financial service providing means according to the setting of an authenticated user for accessing the financial service providing means through the network connection means. Means of providing Financial security system including A wired and wireless network including an internet network; A terminal for accessing the network; A financial server loaded in the network; In order to provide a security service for performing a connection to the financial server by using the terminal, a user DB storing user personal information, the information entered by the user through the terminal and the information stored in the user DB An authentication performing unit performing security authentication through comparison, a connection management unit for determining whether to connect with the financial server according to the security authentication result, and performing the authentication, and an authorized user to change personal information stored in the user DB. Security service server provided with a user information change unit for enabling the connection time setting unit for setting the connection time with the financial server, the authenticated user Financial security system including The method according to claim 2, The financial server includes a user authentication system for performing user authentication. The method according to claim 2, The terminal is a financial security system, characterized in that it comprises a computer terminal, wired and wireless telephone, ATM terminal device The method according to claim 2, User security information of the user DB includes a financial security system, characterized in that it comprises a user ID and password A wired and wireless network including an internet network; A terminal for accessing the network; A financial server loaded in the network; In order to provide a security service for performing a connection to the financial server by using the terminal, a user DB storing user personal information, the information entered by the user through the terminal and the information stored in the user DB An authentication performing unit performing security authentication through comparison, a connection management unit for determining whether to connect with the financial server according to the security authentication result, and performing the authentication, and an authorized user to change personal information stored in the user DB. For the operation of the financial security system including a security service server having a user information change unit for enabling and the connection time setting unit for setting an access time with the financial server, the authenticated user, Inputting and storing user personal information in the user DB; Accessing the security service server using the terminal; A user inputs his or her personal information, and the authentication performing unit performs user authentication using the inputted information and the information stored in the user DB; If the user authentication is legitimately confirmed, the user selects a connection to the user information changing unit or the connection time setting unit; When the user accesses the user information changing unit, changing a personal information and storing the changed information in the user DB; Setting a connection time with the financial server when the user connects to the connection time setting unit; Connecting the financial server to the terminal during the set connection time; Financial security method including The method of claim 6, If the authentication by the authentication execution unit is determined to be an invalid user, requesting re-entry of user personal information or ending the connection with the security service server; Financial security method further comprising The method of claim 6, In the access to the user information changing unit, requesting a separate user personal information to perform a user re-authentication by the authentication performing unit Financial security method further comprising The method of claim 6, Forcibly terminating the connection between the terminal and the financial server when the set access time expires; Financial security method further comprising The method of claim 6, Forcing a user to terminate the connection between the terminal and the financial server through the connection manager; Financial security method further comprising