KR20090011035A - System and terminal for a personal banking transactions - Google Patents

Abstract

A cyber individual finance transaction supporting system is provided to connect a card recognizer recognizing a credit card to the computer of a user and install a transaction-dedicated program in the computer of the user without connecting to the Internet banking site of a banking agency's server, thereby preventing the security vulnerability of a certificate system and supporting safe and quick financial transaction. If a user connects a card recognizer to a user computer by wire, the user computer confirms, automatically downloads, and installs the version of a transaction-dedicated program, a driver, and a hacking prevention tool through a bank server in a recent version(S302). A user selects a desiring transaction through a displayed guide screen and inputs information necessary for financial transaction (S312,S314). The card recognizer encrypts and decodes the inputted information necessary for the financial transaction and transmits the information to the user computer. The user computer performs the secondary encryption/decoding of the information necessary for the financial transaction and transmits the information to the bank server through the Internet. The bank server encrypts and decodes the information necessary for the financial transaction through the user computer and performs authorization confirmation whether the information complies with a legal user(S316). When the information complies with the legal user, the bank server normally completes the financial transaction which a user requests(S318).

Description

Cyber personal financial transaction support system {System and terminal for a personal banking transactions}

1 is a block diagram showing a general Internet financial transaction system.

2 is a block diagram of a cyber personal financial transaction support system according to an embodiment of the present invention.

3 is a view showing the internal configuration of the card recognizer according to an embodiment of the present invention.

4 is a flowchart illustrating a support step of a cyber personal financial transaction support system according to an embodiment of the present invention.

* Description of the symbols for the main parts of the drawings *

100: financial card 200: card reader

210: key input unit 220: card reader unit

230: connection unit 240: control unit

300: user computer 400: bank server

The present invention relates to a personal financial transaction support system using a computer, and more particularly, a card reader that recognizes a financial card to a user's computer without accessing an Internet banking site of a financial institution server, and connected to a user's computer. By installing a transaction-only program, it provides a cyber personal financial transaction support system that prevents security vulnerability of the accredited certificate system and supports fast and safe financial transactions.

In general, most people do business with one or more financial institutions and therefore have one or more bank accounts and trading accounts. Before the communication network developed, users must visit the bank in which the account was opened in order to view the banking operations such as balance inquiry and bank transfer.In recent years, financial automation devices or convenience stores installed in other banks without having to go to the bank. By using financial automation equipment installed at train stations or train stations, the hassle of having to visit the bank in person is greatly reduced.

Moreover, recently, due to the expansion of communication networks and the rapid development of related technologies, financial transactions called telebanking and internet banking have been actively performed. As a result, many people handle most financial transactions at home or at the office except for cash transactions. In the future, especially if only the security of financial transactions is ensured, the convenience of internet banking will increase the number of customers who use internet banking. It must be. In the position of financial institutions such as banks, in order to reduce the number of people who work at bank stores and to reduce costs, banks are inducing customers to use the Internet banking with the addition of financial automation equipment for cash and check deposit and withdrawal. Situation.

Looking at the current Internet financial transaction system using the Internet, as shown in Figure 1, the user is connected to the Internet banking site of the financial institution server through the Internet using a user PC and logged in the financial transaction system to issue a certificate After receiving the official certification, the bank transfers its financial transactions by entering its bank transfer password and security card number. In particular, in the case of a customer who has multiple accounts in various banks, each bank handles the financial transaction through the above procedure in order to perform the financial transaction.

However, in recent years, certificates have been stolen by hacking techniques, such as sniffing to read other people's accounts or passwords, and pharming to steal personal information by tampering with the domain or server's address. Increasingly, theft is being stolen, and individual customers are directly suffering financial losses. This reveals the weaknesses of the current accredited certificate system and clearly shows that it is impossible to exclude the possibility of mass financial accidents by stealing and stealing many unspecified certificates by hacking technology in cyberspace.

The present invention is to overcome the vulnerability of the public certificate system according to the prior art described above, and to securely perform financial inquiry and transactions through the Internet using a stronger security and authentication system. That is, an object of the present invention is to provide a key input unit for receiving information necessary for financial transactions from a user, a transaction-only program for supporting a cyber personal financial transaction, and a user computer with a driver for a card reader installed in a wired manner. And a connection unit for transmitting, a card reader unit for reading the user's financial card, and a controller for controlling the respective devices, and recognizing the financial card exclusively for the user so as to reliably perform user authentication. The control unit is configured to read information input through the key input unit and the information read through the card reader unit through the connection unit to the user computer through the connection, such as product number and installation date such that hacking or duplication is impossible. Characterized in that the encryption is performed using the information as a 'key', and the connection unit is used. In order to connect with a computer by wire, a cyber personal financial transaction support system comprising at least one of a USB jack, a UART, an earphone jack, and a 24-pin jack is provided.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

2 is an overall configuration diagram of a cyber personal financial transaction support system according to an embodiment of the present invention.

Referring to FIG. 2, the cyber personal financial transaction support system selects one or more from the financial card 100 and a plurality of information storage means provided in the financial card 100 according to the requirements of the financial transaction support system. The card reader 200 to be read, and can be connected to the Internet, the user computer 300 is connected to the card reader 200 by wire, and is connected to the user computer 300 is connected to the Internet, the user computer 300 It consists of a bank server 400 to provide a financial service requested by the).

When the card reader 200 is connected to the user computer 300, the user computer 300 automatically calls a transaction-only program. Subsequently, when the user recognizes the financial card 100 in the card recognizer 200 and inputs information necessary for financial transactions through the card recognizer 200 according to the guide screen of the user computer 300, the card recognizer 200 The financial card 100 information and the information necessary for the financial transaction are encrypted and transmitted to the user computer 300. Subsequently, the user computer 300 secondarily encrypts / decodes the data received through the card recognizer 200 and then transmits the data to the bank server 400 through the Internet, and the bank server 400 transmits the data through the user computer 300. Check the received data to see if it is a legitimate user and if it is a legitimate user, perform financial transactions.

The financial card 100 uses an IC card, such as a magnetic stripe (MS-Magnetic Stripe Card) or a smart card, such as a general cash card, credit card, debit card, RF cards can also be used.

The user computer 300 blocks any intrusion from the outside, and the hacking prevention tool operates to prevent the hacking program from operating inside. The hack room tool is pre-installed on the user's computer, or is automatically downloaded and installed when not installed. The hacking prevention tool is applied to a computer network, such as the Internet (Internet), and is particularly activated in conjunction with a private network, such as an intranet, such as a company or a public organization. A known firewall is installed between the intranet and the Internet for its security. A firewall is a series of associated programs located on a network gateway server that protects the resources of a private network from other network users. The firewall prevents outsiders from accessing their non-public resources and ensures that requests from outside come from acceptable domain names or IP addresses. Such firewalls typically have features such as usage logs, reports, and graphical user interfaces for automatic alerts and control of intrusions.

The bank server 400 determines whether the data of the user received from the user computer 300 is a legitimate user and performs a financial transaction requested by the user when it is determined to be a legitimate user. The bank server 400 provides a transaction-only program that supports cyber personal financial transactions, the driver of the card reader 200, the latest program of the hacking prevention tool of the computer, and the programs to the user computer 300 to the latest version Manage to install. In addition, the transaction-only program and the server block hacking and theft by the appropriate level of key exchange and encryption / decryption in the process of transmitting / receiving the customer's financial transaction information.

The card reader 200 is a separate electronic recognition device capable of recognizing the financial card 100, and reads the information stored in the magnetic strip or the information stored in the IC chip to the user computer 300 connected by wire. It is a means of conducting financial transactions by transmitting. In addition, the built-in security program blocks the copying and theft, and in the case of data transmission / reception between the user computer 300 and the card reader 200, such as product number and installation date such that hacking or copying is impossible. Encryption / decryption is performed as the key. This card reader 200 will be described in detail with reference to FIG. 3.

3 is a view showing the internal configuration of the card recognizer according to an embodiment of the present invention.

Referring to FIG. 3, the card reader of the present invention includes a key input unit 210 receiving a user's key input, a connection unit 230 connected to a user computer by wire, a card reader unit 220 reading a financial card, and the like. The controller 240 controls the devices.

The key input unit 210 is a general input device that receives a user's key input, and is provided in the key input unit 210 when inputting a password or inputting transaction information such as a transaction amount when a user requires authentication / confirmation in a financial transaction. When a user inputs using a button of the keyboard, various functions related to the input such as encryption of the input password and input data transmission are performed.

The connection unit 230 makes it easy to connect with an existing user computer, and includes at least one or more of a USB jack, a UART (Serial), an earphone jack, and a 24-pin jack to connect with an existing user computer by wire.

The card reader unit 220 is provided with a card reader that can read the information storage means of each financial card, magnetic belt reader, IC chip reader, RF controller, antenna for RF-IC, one-dimensional barcode reader and two-dimensional A card reader with bar code readers is installed.

The controller 240 controls and manages the devices and reads predetermined information or data from the financial card. When the financial card corresponds to the magnetic card, the controller 240 selects the magnetic card from the magnetic card according to the ISO / IEC 7810 standard. Information or data is read, or if the financial card corresponds to an IC card, predetermined information or data is read from the IC card according to the ISO / IEC 7816/14443 standard. In addition, when the information inputted through the key input unit 210 and the information read through the card reader unit 220 are transmitted to the user computer through the connection unit 230, information such as the product number and installation date is not provided so that hacking or duplication is impossible. Perform encryption / decryption with 'key'.

4 is a flowchart illustrating a support step of the cyber personal financial transaction support system according to the present invention.

First, when the user connects the card reader to the user's computer by wire (S302), the user computer recognizes the connection of the card reader and checks the version of the transaction-only program, the driver, and the hacking prevention tool through the bank server to automatically update to the latest version. Download and install, if the latest version of the transaction-only program, driver and hacking prevention tool is already installed, automatically calls the installed transaction-only program (S304).

The transaction-only program, driver, and hacking prevention tool prevent computer intrusion and hacking, and perform appropriate level encryption / decryption necessary for data communication, so that the user can safely perform the financial transaction desired.

Then, when the user recognizes the financial card through the card reader (S306), it is checked whether the financial card is justified (S308). If the financial card is legitimate, a transaction-only program is driven to display a financial transaction guide screen to the user through the display device of the user computer (S310).

The user selects a desired transaction through the displayed guide screen (S312) and inputs information necessary for a financial transaction (S314). Information necessary for the financial transaction includes an account password, social security number, remittance account number, remittance amount and the like.

Subsequently, the card recognizer encrypts / decodes the information necessary for the received financial transaction and transmits the information to the user computer, and the user computer performs the secondary encryption / decryption operation to the bank server via the Internet. do. Therefore, the cyber personal financial transaction support system of the present invention supports secure financial transactions and prevents the leakage of personal credit information by preventing external intrusion through the primary encryption operation of the card reader and the secondary encryption / decryption operation and the hacking prevention tool of the user computer. You can prevent it.

Subsequently, the bank server encrypts / decrypts the information necessary for the financial transaction received through the user computer to perform authentication verification whether the user is a legitimate user (S316). Complete the transaction normally (S318).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes are possible in the art without departing from the technical spirit of the present invention. It will be clear to those of ordinary knowledge.

As described above, the cyber personal financial transaction support system according to the present invention, by connecting the card recognizer for recognizing the financial card to the user's computer, by installing a transaction-only program on the user's computer, security vulnerability of the certificate system Prevent and support fast and safe financial transactions. In addition, there is no need to renew the certificate for a certain period of time, and it is possible to easily and safely use financial services such as balance inquiry, bank transfer, and cash service immediately without accessing Internet financial transaction homepages of various financial institutions.

In addition, user authentication is more reliable by using a real card and a user's own card reader, and a variety of payment methods are used when a commercial company uses various cards other than cash and credit cards in connection with the cyber personal financial transaction support system of the present invention. You can pay the price.

Claims (1)

A key input unit which receives a key input of information necessary for a financial transaction from a user; A connection-only program for supporting cyber personal financial transactions and a connection unit for transmitting data by wired connection with a user computer on which a driver of a card reader is installed; A card reader unit for reading the user's financial card; A control unit for controlling the respective devices, and configured to read the card information by recognizing the financial card exclusively for a user so as to more reliably perform user authentication. The control unit, When the information inputted through the key input unit and the information read through the card reader unit are transmitted to the user computer through the connection unit, encryption such as a product number and installation date is performed as a 'key' such that hacking or duplication is impossible. Characterized in that, The connecting portion, A cyber personal financial transaction support system comprising at least one of a USB jack, a UART, an earphone jack, and a 24-pin jack to connect to a user computer by wire.

Images