KR20140125299A - Method for providing direct debit service through electronic signature authentication based by mobile messaging - Google Patents

Abstract

Disclosed is a method for providing an automatic transfer service through mobile messaging-based electronic signature authentication. According to the present invention, anyone can conveniently use a certificate with an easy mind by fundamentally preventing the theft of the certificate which is illegally copied by hacking through the authentication of an electronic signature, wherein the authentication of the electronic signature is processed by joining the electronic signature and occupation authentication based on mobile messaging using the certificate and a smartphone. Also, the present invention can prevent a legal conflict by enabling a client to conveniently receive and authenticate the electronic signature through a mobile messenger even in an offline transaction which is performed in a counter, such as a bank, an insurance company, a securities company.

Description

TECHNICAL FIELD [0001] The present invention relates to a method for providing a direct debit service through electronic signature authentication based on mobile messaging,

The present invention relates to a method for providing a debit service based on a mobile messaging based on mobile messaging, and more particularly, to a method for dealing with an electronic signature by combining an electronic signature and an occupancy authentication based on mobile messaging, And more particularly, to a method for providing a debit service through digital signature authentication based on mobile messaging.

Certified certificates possessed by more than 90% of the economically active population in Korea are the most powerful security measures available. There are four main features: authentication, non-repudiation, integrity, and confidentiality. Financial and Security Policy Authorities are required to use official certificates for online transactions such as Internet banking, G4C complaints, procurement bids, and electronic tax invoices. As of June 2011, 25.2 million certificates were issued.

However, recently, there has been an increasing trend of hacking offenses of such certificates. This is a problem caused by the duplication of the authorized certificate rather than a defect of the authorized certificate itself, and the hacking example of copying the authorized certificate by penetrating the malicious code program into the user's PC has been mainly used. In recent years, phishing, such as text messages or e-mails, has been used to enter personal financial information by inducing a user to enter a false homepage address, or to connect to a fake homepage, There is a new technique called pharming which is taking over the polarity. According to media reports on February 11, 2013, 461 certificates issued by major banks such as Shinhan, Woori, Han, Citibank including Kookmin Bank were leaked by the farming method. Accordingly, the Financial Services Commission, Financial Supervisory Service, and the National Police Agency issued a joint state alert on March 3, 2013. From November last year to February of this year, the damage caused by farming was about 2 billion won (323 cases), and the damage amount was about 638 thousand won on average. Because of this problem, there is concern about the second and third accident by only one leak. Therefore, there is a problem of the use of public certificate that is essential for internet banking.

On the other hand, direct debit service has recently been attracting attention to modern people who are seeking convenience and efficiency. This type of automatic transfer service is a system in which the withdrawing institution provides the beneficiary with intangible and intangible services (goods, services, etc.) and, instead of notifying them of the use fee, It is a service to withdraw a certain amount from the deposit account of the payer according to the request of the withdrawing institution and transfer it automatically to the deposit account of the withdrawing institution without a transfer request.

However, in the case of the automatic transfer service, a payer who has paid money to the bank will visit the bank window to present his / her ID card and designate and apply for the automatic transfer withdrawal institution. However, in reality, the payer should apply for direct debit transfer It is very inefficient to pay the payer and also it is a way to deal with inconveniences. Therefore, it is common that the withdrawal institution accepts the automatic transfer application form from the payer and processes the registration of the automatic transfer customer ledger of the bank.

However, in the EFT Act, the employer requires the consent of the payer to collect the payment in the form of automatic transfer. When the payer requests the direct debit transfer, the consent of the consignee may be verified. However, If the application for the automatic transfer is made, the confirmation of the consent of the payer is unclear, and the controversy of the completeness of the transaction arises. In addition, there is a problem that the financial accidents that abuse the system are not continuously available because the system does not allow the financial institution to confirm the consent of the payer himself.

As a result, as of January 2013, the number of smartphone subscribers in Korea is 33,298,440, so that anyone can easily and easily authenticate electronic signatures using smart phones that have almost all of the economically active population. It is necessary to implement a system that can handle the transfer application safely and conveniently.

SUMMARY OF THE INVENTION The present invention has been made in order to solve the problems of the prior art as described above, and it is an object of the present invention to provide a mobile communication system and a mobile communication method, The authentication of the signature of the transcription is processed so that the possibility of illegal copying of the illegally copied public certificate by the hacking can be fundamentally blocked. In addition, the withdrawing institution that has received the request for automatic payment of the payment person on / off line by using the automatic withdrawal method registers the direct debit card to the bank and processes the electronic signature for the automatic transfer application directly by the payment person, And to provide a method of providing a debit service through digital signature authentication based on mobile messaging that can be provided safely and conveniently.

According to another aspect of the present invention, there is provided a method for providing a direct debit service through electronic signature authentication based on mobile messaging, the method comprising: establishing a mobile messaging based electronic signature authentication server cooperating with a direct debit relay server, (A) when a direct debit registration request is received from a withdrawal institution terminal and a mobile messaging ID including a mobile messaging ID of a payment person is received from a withdrawal institution terminal, Transmitting a payment agent electronic signature authentication request including the mobile payment ID and the mobile messaging ID of the payment agent to the mobile messaging based electronic signature authentication server to confirm the agreement of the payment agent with respect to the debit registration request; (b) the mobile messaging-based digital signature authentication server provides a debit management code matching the debit authorization information according to the payment person's digital signature authentication request, and transmits the debit management code to the mobile terminal corresponding to the mobile messaging ID Sending a digital signature request messaging with the code tagged and including a debit authorization check; (c) The mobile messaging-based digital signature authentication server confirms the deed of payment receipt by the payment person who has received the digital signature request messaging through the mobile terminal, and clicks the confirmation button, When a signature advance request is generated, a mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched with the direct debit management code is provided to request execution of the electronic signature, and a certificate of a personal identification number (PIN) Receiving an electronic signature result as an input and performing an electronic signature procedure; (d) The mobile messaging-based electronic signature authentication server verifies whether the electronic signature is authenticated by verifying the electronic signature result value of the payment person, authenticates the electronic signature of the payment person according to the determination result, Providing to a direct debit relay server; And (e) the automatic debit relay server transmits a debit sheet registration request including the debit application information and the electronic signature authentication result of the payment person to the financial institution server, receives the debit card registration result, The method comprising the steps of:

Preferably, the mobile messaging ID is established by installing a mobile messenger application on a mobile terminal through a mobile messenger server, receiving unique identification information such as an e-mail address and an ID set by a user through a membership registration procedure, to be.

Preferably, the payer's mobile terminal is provided with a certificate application for exclusive use of a mobile web page, and the authorized certificate application exclusive for the mobile web page includes an electronic mission procedure using a public certificate in cooperation with a mobile web page, And transmits the result of the digital signature according to the result.

Preferably, in the step (b), the mobile messaging-based digital signature authentication server transmits the digital signature request messaging to the mobile terminal corresponding to the mobile messaging ID via the mobile messenger server via the mobile messenger server.

Preferably, in the step (c), the mobile messaging-based digital signature authentication server determines whether the payer who has received the digital signature request messaging through the mobile messenger application checks an automatic transfer agreement confirmation point, When the digital signature management request corresponding to the debit management code is generated in response to activation of the mobile web page dedicated certificate application, A mobile web page supporting the execution of the electronic signature is provided to request the execution of the electronic signature and the digital signature procedure is performed by inputting the personal identification number (PIN) And receives the transmitted digital signature result value.

Alternatively, in the step (b), the mobile messaging-based digital signature authentication server transmits the digital signature request messaging to the mobile terminal corresponding to the mobile messaging ID through the mobile web page dedicated public certificate application Push notifications.

In this case, in the step (c), the mobile messaging-based digital signature authentication server confirms the fact that the payment person who has received the digital signature request messaging through the mobile web page exclusive authorized certificate application checks the automatic transfer consent confirmation, Button to activate the certificate application for exclusive use of the mobile web page, and a mobile device that supports the automatic transfer application information matched to the automatic transfer management code and the execution of the electronic signature A web page is provided to request execution of the digital signature, and an electronic signature process is performed by inputting a personal identification number (PIN) to receive a digital signature result value.

Preferably, in the step (d), the mobile messaging-based digital signature authentication server decrypts the digital signature result value of the payment person and verifies the validity of the public key certificate used in the digital signature to determine whether the digital signature is authentic.

Alternatively, the authorized certificate application dedicated to the mobile web page may further include a function of extracting and transmitting the unique identification code of the mobile terminal. In this case, the unique identification code of the mobile terminal may be a unique identification code of the mobile terminal, As shown in FIG.

In this case, in the step (d), the mobile messaging-based digital signature authentication server decrypts the digital signature result value of the payment person to verify the validity of the public key certificate used in the digital signature, Transmits the unique identification code to the server of the authorized certification authority, requests personal information of the user corresponding to the unique identification code of the authorized certificate, transmits the unique identification code of the mobile terminal of the payment person to the communication company server, Code, and confirm whether or not the electronic signature is authenticated by confirming whether or not the personal information of the user returned from the authorized certification authority server and the communication company server respectively is matched.

In this case, in the step (d), the personal information of the user each returned from the authorized certification authority server and the communication company server is transmitted as encrypted data encrypted with the same encryption method, and decryption of the encrypted data It is determined whether or not they are symmetric.

In addition, in the step (d), the personal information of the mobile messaging ID of the payment person is further confirmed, and the personal information of the mobile messaging ID is added to the personal information of the user returned from the authorized certification authority server and the communication company server It is possible to determine whether or not the digital signature is authenticated by confirming whether or not the personal information of the three parties including the user is included.

As another example, in the step (d), the three-party personal information including the personal information of the mobile messaging ID has cipher data encrypted with the same three-way encryption method, and the decryption is not performed on the cipher data It is possible to determine whether or not the three characters are matched.

According to the present invention, the authentication of an enterprise signature is processed by combining an electronic signature and an occupancy authentication based on mobile messaging using a public certificate and a smart phone, so that the possibility of illegal copying of an authorized certificate illegally copied by hacking can be blocked Anyone can use a certificate that is safe and convenient. In addition, the electronic signature authentication technology, which has been conventionally made only online, can easily receive and authenticate the electronic signature of the customer through the mobile messenger in the off-line important transactions performed at the spot such as bank, insurance, and securities. Legal disputes can be prevented in advance. In addition, it is possible to secure legal evidence by exchanging electronic signatures between promises made by mobile messengers and simple contracts. In addition, it is possible to effectively respond to mobile messenger phishing since the user can impersonate the acquaintance through the mobile messenger and can request and confirm the electronic signature to the phishing suspicious person who requests the remittance or personal information. In addition, the withdrawal agent who has received the request for automatic payment of the payment person on / off line using the automatic withdrawal application process registers the direct debit card to the bank and handles the electronic signature for the automatic transfer application directly, Safe and convenient.

BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate preferred embodiments of the invention and, together with the description, And shall not be interpreted.
FIG. 1 is a diagram illustrating a system configuration in which a method of providing a direct debit service through digital signature authentication based on mobile messaging according to the present invention is implemented.
2 is a diagram illustrating a schematic functional flow of a system for providing a debit service through digital signature authentication based on mobile messaging according to the present invention.
3 is a diagram illustrating a configuration of a mobile messaging-based digital signature authentication server according to the present invention.
4 is a flowchart illustrating a process performed by a mobile messaging-based digital signature authentication server according to the present invention.
FIG. 5 is a flowchart illustrating a procedure of a method of providing a direct debit service through digital signature authentication based on mobile messaging according to the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Prior to this, terms and words used in the present specification and claims should not be construed as limited to ordinary or dictionary terms, and the inventor should appropriately interpret the concepts of the terms appropriately It should be interpreted in accordance with the meaning and concept consistent with the technical idea of the present invention based on the principle that it can be defined. Therefore, the embodiments described in this specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention and do not represent all the technical ideas of the present invention. Therefore, It is to be understood that equivalents and modifications are possible.

<1. System configuration>

1.1 System Overview

FIG. 1 is a diagram illustrating a system configuration in which a method of providing a direct debit service through digital signature authentication based on mobile messaging according to the present invention is implemented.

1, a system in which the present invention is implemented includes a mobile messaging based digital sign authentication server 100, a withdrawal terminal 210, a payee mobile terminal 220, a debit relay server 300, A network server 400, a financial institution server 500, an authorized certification authority server 600, a communication company server 700, and a wired / wireless network 1 interconnecting them on a network. Here, the wired / wireless network 1 typically includes all communication networks capable of data communication using various protocols such as a wired / wireless public network such as the Internet, a private network, and a mobile communication network.

First, the withdrawal terminal 210 is a terminal device connectable to the wired / wireless network 1 so as to provide an intangible service to the payee, and to take charge of business processing at a withdrawal institution to charge the fee, , Notebooks, tablet PCs, PDAs, smart phones, and the like. The withdrawal institution terminal 210 performs the reception processing and management of the automatic transfer application accepted from the payment person and connects to the automatic transfer relay server 300 through the wired / wireless network 1, And request for withdrawal transfer request.

The subscriber's mobile terminal 220 is a terminal device connected to a wireless communication network such as a mobile communication network in a wired / wireless network 1 and is provided with a mobile communication service. The subscriber's mobile terminal 220 is equipped with a USIM card including mobile communication service subscriber information, A mobile web page can be used as a smart phone capable of installing a mobile messenger application that provides a mobile messenger service from the mobile communication terminal 300. In addition, a procedure of performing an electronic signature using a public key certificate in cooperation with the mobile web page, A dedicated certificate application for a mobile web page dedicated to support the transmission of the digital signature result value can be installed. In this case, the authorized certificate application dedicated to the mobile web page may further include a function of extracting and transmitting a unique identification code of the mobile terminal. In this case, the unique identification code of the mobile terminal may be information extracted from the USIM card. Meanwhile, the mobile messenger service includes a service for real-time chatting by transmitting an instant message such as a note, a text message, a file, and the like in real time through a wireless communication network and a related service use.

In the present invention, the payer subscriber mobile terminal 220 receives the digital signature request messaging including the point of checking the automatic debit approval from the mobile messaging based digital signature authentication server 100, .

The mobile messaging-based digital signature authentication server 100 is a server that supports an automatic debit service provided through an electronic signature authentication using mobile messaging of a mobile terminal in cooperation with a debit server 300. That is, the mobile messaging-based digital signature authentication server 100 receives the payment person's digital signature authentication request including the debit application information and the mobile messaging ID of the payment person from the direct debit relay server 300 linked through the wired / wireless network 1 Upon receipt of the electronic signature result, the payment participant confirms the point of confirmation of the automatic transfer consent, requests the electronic signature to agree with the result, receives the electronic signature result value, processes the received electronic signature result value, To the automatic deallocation relay server (300).

In the present invention, the mobile messaging-based digital signature authentication server 100 receives an electronic signature and performs an authentication process using a mobile messaging function of a mobile terminal. To this end, the payer mobile terminal 220 is provided with a mobile messenger application And a certificate application for exclusive use of mobile web pages for supporting the procedure of performing an electronic signature using an official certificate in conjunction with a mobile web page and transmitting an electronic signature result value according to the electronic signature will be installed.

The mobile messaging-based digital signature authentication server 100 receives the payment person's digital signature authentication request including the debit application information and the mobile messaging ID of the payment person from the debit relay server 300, The method comprising: providing a debit management code corresponding to the debit application information, tagging the debit management mobile terminal (220) corresponding to the mobile messaging ID with the debit management code, Lt; / RTI &gt; Then, when the payer who receives the digital signature request messaging through the payer's mobile terminal 220 confirms the point of confirmation of the automatic transfer consent and clicks the confirm button, a digital signature advance request corresponding to the deportation management code is generated , A mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched with the direct debit management code are requested to request the execution of the electronic signature and the digital signature procedure is performed by inputting the personal identification number (PIN) And receives the transmitted digital signature result value. Then, the mobile messaging-based digital signature authentication server 100 verifies the electronic signature result value of the payment person to determine whether the electronic signature is authenticated, authenticates the electronic signature of the payment person, and sends the result to the direct debit relay server 300 to provide.

Meanwhile, the mobile messaging-based digital signature authentication server 100 transmits the digital signature request messaging to the payer's mobile terminal 220 through the mobile messenger server 300, Or send the electronic signature request messaging to the mobile terminal corresponding to the mobile messaging ID through push notification through the mobile web page dedicated public certificate application of the mobile terminal .

In addition, the mobile messaging-based digital signature authentication server 100 receives a digital signature result value from the payer's mobile terminal 220, and the payer who receives the digital signature request messaging through the mobile messenger application The mobile web page dedicated authorization certificate application is activated together with the transfer of the automatic payment management code by clicking the confirmation button, and when the mobile web page dedicated authorization certificate application is activated, When the electronic signature process request corresponding to the code is generated, a mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched with the automatic debit management code is provided to request execution of the electronic signature, Personal Identification Number) The payer who receives the electronic signature request message through the mobile web page exclusive authorization certificate application confirms the automatic payment agreement confirmation point and clicks the confirmation button, A page dedicated authorized certificate application is activated and a mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched to the direct debit management code according to the activation of the authorized certificate application dedicated to the mobile web page is provided, And an electronic signature process is performed by inputting a personal identification number (PIN) to receive a digital signature result value.

Also, the mobile messaging-based digital signature authentication server 100 may determine whether the electronic signature is authenticated only by verifying the electronic signature result value of the payment person. However, for more secure digital signature authentication, A function of extracting and transmitting a unique identification code (e.g., USIM card extraction information) of the mobile terminal is further added, and the digital signature resultant value and the unique identification code of the mobile terminal can be received together. In this case, the mobile messaging-based digital signature authentication server 100 decrypts the electronic signature result value of the payment person to verify the validity of the public key certificate used in the digital signature, and only authenticates the unique identification code of the public key certificate Requests the user's personal information corresponding to the unique identification code of the authorized certificate, transmits the unique identification code of the payment terminal's mobile terminal 220 to the communication company server 700, Requests personal information of the user corresponding to the unique identification code of the terminal and confirms whether or not the personal information of the user returned from the authorized certification authority server 600 and the communication company server 700 are identical to judge whether the digital signature is authenticated can do.

The automatic transfer relay server 300 receives the automatic transfer application information from the withdrawal institution terminal 210 connected through the wired and wireless network 1 in cooperation with the mobile messaging based digital signature authentication server 100 and the financial institution server 500, And the payer's mobile messaging ID are requested, the mobile messaging-based digital signature authentication server 100 requests the payer's digital signature authentication to confirm the payer's consent for the corresponding de-registration request, If the result of the signature verification is answered, the automatic payment fund registration request including the automatic transfer request information and the electronic signature verification result of the payment person is transmitted to the financial institution server 500, and the result of the automatic transfer fund registration is received, 210). Here, the direct debit application information includes a data file such as a direct debit agreement file received from a payment person or a recorded voice file of a deed of automatic transfer, personal information such as a name of the payee, a withdrawal account number, a mobile communication terminal number, Lt; / RTI &gt;

The mobile messenger server 400 is a server for providing a mobile messenger service to users. The mobile messenger server 400 provides a mobile messenger application to a mobile terminal in order to provide a mobile messenger service. In addition, the mobile messenger server 400 allows a user to go through a membership registration procedure for using the mobile messenger service, and gives a mobile messaging ID to the registered user. The mobile messaging ID may be unique identification information such as an e-mail address and an ID set by the user, or a telephone number of the mobile terminal.

The financial institution server 500 is a server operated by a bank or credit card company in a concept including a plurality of financial institutions. The financial institution server 200 is a server device that provides various financial transaction services to users connected through the wired / wireless network 1. [ The financial institution server 500 is connected to the automatic debit relay server 300 via the wired / wireless network 1 and receives automatic de-assignment application information and an electronic signature authentication result of the payment observer from the de- Requests to register the transfer fund, processes the registration of the corresponding transfer fund and provides the result.

The authorized certification authority server 600 is a server operated by an authorized certificate management organization that issues and manages a public key certificate. The authorized certification authority server 600 transmits user personal information of the unique identification code to the mobile messaging based digital signature authentication server 100 through the unique identification code of the public key certificate received from the mobile messaging based digital signature authentication server 100, .

The communication company server 700 is a server included in a separate communication carrier system having different network networks and communication systems. The communication company server 700 provides the user's personal information of the corresponding unique identification code to the mobile messaging based digital signature authentication server 100 through the unique identification code of the mobile terminal received from the mobile messaging based digital signature authentication server 100 do.

1.2 System main function flow

2 is a diagram illustrating a schematic functional flow of a system for providing a debit service through digital signature authentication based on mobile messaging according to the present invention.

(1) The withdrawal institution terminal 210 accepts the automatic transfer application from the payment person so that the withdrawal agent can provide the intangible service to the payment person, the charge of the use fee can be made through the automatic transfer service, and the mobile messaging ID of the payment person Receive.

(2) The direct debit relay server 300 receives the debit registration request including the debit application information and the mobile messaging ID of the payee from the withdrawal terminal 210.

(3) The mobile messaging-based digital signature authentication server 100 transmits the payment information including the payment information of the payment person who includes the payment information of the payment person and the mobile messaging ID of the payment person And receives a signature authentication request.

(4) The mobile messaging-based digital signature authentication server 100 provides a debit management code matching the debit authorization information according to the payment person's digital signature authentication request, and transmits the debit authorization code to the mobile messaging ID 400 via the mobile messenger server 400 Transmits the electronic signature request messaging including the debit management mobile terminal 220 tagged with the debit management code, and the automatic signature request messaging through the mobile messenger application. At this time, the transmission of the electronic signature request messaging may be transmitted as a push notification through the mobile web page exclusive authorized certificate application of the mobile terminal corresponding to the mobile messaging ID.

(5) The mobile messaging-based digital signature authentication server 100 confirms the fact that the payment person who has received the digital signature request messaging through the payer's mobile terminal 220 confirms the deed of automatic payment, and clicks the confirmation button, A mobile web page supporting the execution of the electronic signature is provided to request the execution of the electronic signature, and when the electronic signature is requested, Identification Number), and receives the transmitted digital signature result. At this time, when the subscriber's mobile terminal 220 receives the digital signature request messaging through the mobile messenger application, the payment person checks the point of checking the automatic payment agreement and clicks the confirmation button, When the electronic signature request corresponding to the debit management code is generated in accordance with the activation of the authorized certificate application for the mobile web page, A mobile web page supporting the transfer application information and the digital signature is provided to carry out the digital signature. Alternatively, if the subscriber's mobile terminal 220 receives the electronic signature request messaging through the authorized web page-only authorized certificate application, the subscriber confirms the point of checking the automatic transfer consent and clicks the confirm button. A mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched to the automatic transfer management code is provided according to the operation of the web page exclusive authorized certificate application, As shown in FIG.

The mobile messaging based digital signature authentication server 100 receives only the digital signature result value of the payment person and decrypts the digital signature result value of the received payment person to verify the validity of the public key certificate used in the digital signature, It can be judged. However, the present invention is not limited thereto, and a function of extracting and transmitting a unique identification code (for example, USIM card extraction information) of a mobile terminal to a mobile terminal, And the digital signature resultant value and the unique identification code of the mobile terminal can be received together.

(6) The mobile messaging-based digital signature authentication server 100 receives the digital signature result value of the payment person and the unique identification code of the mobile terminal, decrypts the digital signature result value of the payment person, and determines the validity of the public certificate used in the digital signature And transmits the unique identification code of the authorized certificate to the authorized certification authority server 600 only when it is verified and verified, and requests and receives the user's personal information corresponding to the unique identification code of the authorized certificate.

(7) The mobile messaging-based digital signature authentication server 100 transmits the unique identification code of the payer's mobile terminal 220 to the communication company server 700, requests personal information of the user corresponding to the unique identification code of the mobile terminal .

(8) The mobile messaging-based digital signature authentication server 100 determines whether or not the digital signature is authenticated by confirming whether the personal information of the user returned from each of the public authentication certificate authority server 600 and the communication company server 700 is identical, And provides the electronic signature authentication result of the payment person to the automatic debit relay server 300. [

(9) The direct debit relay server 300 transmits a debit card registration request including the direct debit application information and the payee's electronic signature authentication result to the financial institution server 500.

(10) The financial institution server 500 performs the registration of the ledger for registering the automatic transfer fund, upon receipt of the automatic transfer fund registration request including the automatic transfer application information and the result of the electronic signature verification of the payment person, Transfers the transfer origin registration, and provides the result to the automatic transfer relay server 300.

1.3 Server Architecture

3 is a diagram illustrating a configuration of a mobile messaging-based digital signature authentication server according to the present invention.

3, a mobile messaging-based digital signature authentication server 100 according to the present invention includes an electronic signature request receiving module 110, an electronic signature request messaging transmission module 120, an electronic signature processing module 130, A signature verification module 140, an authorized certificate information confirmation module 150, a communication company information confirmation module 160, and an electronic signature authentication processing module 170. In addition, it may further include a ROM, a RAM, a CPU, an operating system, a software program, and the like necessary for driving and operating the server apparatus.

The digital signature request receiving module 110 receives the payment agent digital signature authentication request including the debit application information and the payment messenger's mobile messaging ID in cooperation with the debit server 300.

The electronic signature request messaging transmission module 120 provides a debit management code matching the debit authorization information according to the payment person's digital signature authentication request and transmits the automatic debit management code to the payer's mobile terminal 220 corresponding to the mobile messaging ID The transfer management code is tagged, and the digital signature request messaging is transmitted including the automatic transfer confirmation confirmation point.

The electronic signature processing module 130 confirms the fact that the payer who receives the electronic signature request messaging through the payer's mobile terminal 220 confirms the automatic transfer consent confirmation point and clicks the confirmation button, When a request for a digital signature is generated, a mobile web page supporting the automatic transfer application information matched to the direct debit management code and an electronic signature is provided to request execution of an electronic signature, and a personal identification number (PIN) And receives the transmitted digital signature resultant value and the unique identification code of the corresponding mobile terminal.

The digital signature verification module 140 decrypts the digital signature result value and verifies the validity and the digital signature of the authorized certificate used in the digital signature.

When the result of the digital signature is verified, the authorized certificate information checking module 150 transmits the unique identification code of the authorized certificate in cooperation with the authorized certification authority server 600 and transmits the unique identification code of the user corresponding to the unique identification code of the authorized certificate Request and receive personal information.

The communication company information confirmation module 160 transmits a unique identification code of the mobile terminal in cooperation with the communication company server 700 and requests and receives personal information of the user corresponding to the unique identification code of the mobile terminal.

The digital signature authentication processing module 170 checks whether the personal information of the user returned from the authorized certification authority server 600 and the communication company server 700 are matched with each other and authenticates the electronic signature of the payment person , And provides the digital signature authentication result to the automatic debit server (300).

<2. Method composition>

The method for providing the automatic debit service through the digital signature authentication based on the mobile messaging according to the present invention can be preferably realized through the above-described system.

4 is a flowchart illustrating a process performed by a mobile messaging-based digital signature authentication server according to the present invention.

Referring to FIG. 4, in step S110, the digital signature request receiving module 110 processes the digital signature authentication through the mobile messaging based digital signature authentication server 100, ), And receives the subscriber's digital signature authentication request including the direct debit application information and the payer's mobile messaging ID. Here, the digital signature request receiving module 110 is not limited to receiving the electronic signature authentication request of the payment person for confirming consent of the payment person for the debit registration request through interlocking with the automatic debit relay server 300, An authentication request of an electronic signature may be received from an external business server or a user terminal requesting digital signature. In this case, the digital signature requestor is a person in charge of the job at the call center or the field counter of the bank, insurance, securities, etc., or a user who requests the customer's digital signature when the digital signature of the customer is required for processing, A user who wants to create a digital signature of his / her own when he / she needs to submit his / her digital signature to the web site, or a user who wants to receive an electronic signature from a partner in a promise with a partner or a simple contract in a situation of chatting via mobile messenger Lt; / RTI &gt;

In step S120, the digital signature request messaging transmission module 120 provides a debit management code matching the debit authorization information according to the payment person's digital signature authentication request, 220, and transmits the electronic signature request messaging including the automatic transfer agreement confirmation point. At this time, the transmission of the digital signature request messaging is performed by transmitting the digital signature request messaging through the mobile messenger application to the mobile terminal corresponding to the mobile messaging ID via the mobile messenger server 300, The mobile terminal can transmit the digital signature request messaging to the terminal through the mobile web page exclusive authorized certificate application as a push notification. In order to do so, the payer subscriber mobile terminal 220 is provided with a mobile messenger application provided from the mobile messenger server 400, and performs a digital signing procedure using a public certificate in cooperation with a mobile web page, A dedicated certificate application for mobile web pages that supports the transmission of digital signature result values can be installed. If the mobile web page private certificate application is not installed, the mobile messaging based digital signature authentication server 100 provides the mobile web page dedicated public certificate application to the payee mobile terminal 220 . Meanwhile, the authorized certificate application dedicated to the mobile web page may further include a function of extracting and transmitting a unique identification code of the mobile terminal. In this case, the unique identification code of the mobile terminal may be information extracted from the USIM card.

In step S130, the electronic signature processing module 130 confirms the fact that the payer who has received the digital signature request messaging through the payer's mobile terminal 220 confirms the automatic transfer consent, and clicks the confirm button. When a digital signature process request corresponding to the managed code is generated, a mobile web page supporting the execution of the digital signature and the automatic transfer application information matched with the direct debit management code is provided to request execution of the electronic signature, (Personal Identification Number), and receives the transmitted digital signature result value and the unique identification code of the corresponding mobile terminal. At this time, when the subscriber's mobile terminal 220 receives the digital signature request messaging through the mobile messenger application, the payment person checks the point of checking the automatic payment agreement and clicks the confirmation button, When the electronic signature request corresponding to the debit management code is generated in accordance with the activation of the authorized certificate application for the mobile web page, A mobile web page supporting the transfer application information and the digital signature is provided to carry out the digital signature. Alternatively, if the subscriber's mobile terminal 220 receives the electronic signature request messaging through the authorized web page-only authorized certificate application, the subscriber confirms the point of checking the automatic transfer consent and clicks the confirm button. A mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched to the automatic transfer management code is provided according to the operation of the web page exclusive authorized certificate application, As shown in FIG.

Meanwhile, the function of extracting and transmitting the unique identification code of the mobile terminal is further added to the certificate application for exclusive use of the mobile web page installed in the payee's mobile terminal 220, and the unique identification code of the mobile terminal . Herein, the unique identification code of the mobile terminal 220 may be information extracted from the USIM card installed in the mobile terminal 220. However, the present invention is not limited thereto, and any information may be used as long as the personal information of the mobile terminal 220 can be inquired from the server 700 of the communication company.

In step S140, the digital signature verification module 140 decrypts the digital signature result value to verify the validity and the digital signature of the authorized certificate used in the digital signature. At this time, if the result of the digital signature is not suitable, the process proceeds to step S200 to complete the process of prohibiting digital signature authentication, and only when the digital signature result value is verified to be appropriate, S150). On the other hand, the verification procedure for digital signature authentication may be completed only at step S140. In this case, the process can be immediately followed by step S190 to perform the digital signature authentication process.

In step S150, the authorized certificate information verification module 150 transmits the unique identification code of the authorized certificate only when the digital signature result value is verified in cooperation with the authorized certification authority server 600, Request the user's personal information corresponding to the code. At this time, the authorized certification authority server 600 inquires the personal information of the user corresponding to the unique identification code of the received authorized certificate, and provides the user's personal information of the corresponding unique identification code to the authorized certificate information checking module 150 .

In step S160, the communication company information confirmation module 160 transmits the unique identification code of the mobile terminal in cooperation with the communication company server 700, and requests the personal information of the user corresponding to the unique identification code of the mobile terminal. At this time, the communication company server 700 inquires the unique identification code of the received mobile terminal and provides the personal information of the corresponding unique identification code to the communication company information confirmation module 160.

In step S170, the digital signature authentication processing module 170 receives individual user information from the authorized certification authority server 600 and the communication company server 700, respectively. At this time, the personal information of the user provided from the authorized certification authority server 600 and the communication company server 700 may be general data. However, in order to enhance security, the authorized certification authority server 600 and the communication company server 700 And can be transmitted as encrypted data encrypted with the same encryption method. In this case, it is preferable that only the symmetric state is confirmed in the state in which the decryption of the encrypted data is not performed, and the mutual coincidence is confirmed.

In step S180, the digital signature authentication processing module 170 confirms whether or not the personal information of the user returned from the authorized certification authority server 600 and the communication company server 700 are matched with each other, . At this time, if the personal information of the user received by the two organizations does not coincide with each other, the process is shifted to the step S200 to complete the process of prohibiting the digital signature authentication, and if the personal information of the users coincide with each other The process proceeds to step S190.

Finally, in step S190, the digital signature authentication processing module 170 authenticates the electronic signature of the payment person. When the electronic signature is authenticated, the electronic signature relay server 300 provides the electronic signature authentication result.

In the above-described embodiment, the digital signature authentication processing module 170 checks only the personal information of the authorized certification authority server 600 and the communication company server 700 in step S180. However, The personal information of the mobile messaging ID of the payer may be further checked and the personal information of the mobile messaging ID may be included in the personal information from the authorized certification authority server 600 and the carrier server 700 It is possible to confirm whether the personal information of the third party is matched and to authenticate the digital signature when the third party personal information matches. In this case, the three-party personal information including the personal information of the mobile messaging ID has cipher data encrypted with the same three-way encryption method, and in a state in which the decryption is not performed on the cipher data, It is desirable to confirm whether or not they match.

Through the above procedure, the mobile messaging-based digital signature authentication server 100 can block the possibility of illegally copied public certificate illegally by hacking, and at the same time, It is possible to provide an electronic signature authentication service with ease and convenience to anyone.

FIG. 5 is a flowchart illustrating a procedure of a method of providing a direct debit service through digital signature authentication based on mobile messaging according to the present invention.

Referring to FIG. 5, a method of providing a direct debit service through digital signature authentication based on mobile messaging according to the present invention will be described.

First, the withdrawal terminal 210 provides an intangible service to the payee in the withdrawal institution, accepts the automatic transfer application from the payee so that the charge for the payout can be made through the automatic transfer service, and the payee's mobile messaging ID (1).

The automatic debit relay server 300 receives the debit registration request including the debit application information and the mobile messaging ID of the payment person from the dispatch institution terminal 210 (2).

The mobile messaging-based digital signature authentication server 100 transmits the payment information including the payment information of the payment person's electronic signature And receives an authentication request (3).

The mobile messaging-based digital signature authentication server 100 provides a debit management code matching the debit authorization information according to the payment person's digital signature authentication request, and transmits the debit management code corresponding to the mobile messaging ID via the mobile messenger server 400 (4), the electronic dispatcher mobile terminal 220 tags the debit management code, and transmits the electronic signature request messaging including the automatic debit agreement confirmation to the mobile messenger application. At this time, the transmission of the electronic signature request messaging may be transmitted as a push notification through the mobile web page exclusive authorized certificate application of the mobile terminal corresponding to the mobile messaging ID.

The payer who has received the digital signature request messaging via the payment client mobile terminal 220 confirms the point of the automatic transfer consent confirmation and clicks the confirmation button to generate the digital signature advance request corresponding to the debit management code 5, 6).

The mobile messaging-based electronic signature authentication server 100 provides a mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched to the debit management code according to the electronic signature progress request, An electronic signature procedure is performed by inputting a personal identification number (PIN) and receives the transmitted digital signature result and the unique identification code of the corresponding mobile terminal (7, 8).

The mobile messaging-based digital signature authentication server 100 decrypts the digital signature result value to verify the validity of the public key certificate used in the digital signature and the digital signature (9). On the other hand, the verification procedure for the digital signature authentication may determine whether the digital signature is authenticated only by validation of the authorized certificate.

When the validity of the authorized certificate is determined to be invalid as a result of the validity of the authorized certificate, the mobile messaging based digital signature authentication server 100 processes the digital signature as unauthenticable 18 and transmits it to the withdrawal terminal 210 or the automatic transfer relay server 300) (19).

On the other hand, when the validity of the authorized certificate is verified, the mobile messaging-based digital signature authentication server 100 transmits the authorized certificate and the unique identification code of the mobile terminal to the authorized certification authority server 600 and the communication company server 700, (10). &Lt; / RTI &gt;

The mobile messaging-based electronic signature authentication server 100 receives individual user information from the authorized certification authority server 600 and the communication company server 700 (11).

The mobile messaging-based digital signature authentication server 100 determines whether the digital signature is authenticated by checking whether the personal information of the user returned from the authorized certification authority server 600 and the communication company server 700 respectively match with each other 12).

If the personal information of the user received from the two organizations does not coincide with each other as a result of judging whether or not the digital signature is authenticated, the mobile messaging-based digital signature authentication server 100 processes the digital signature authentication impossible 18, (Not shown) to the server 210 or the direct debit relay server 300 (19).

On the other hand, the mobile messaging-based digital signature authentication server 100 authenticates the electronic signature of the payment person when the personal information of the users coincide (13).

The mobile messaging-based electronic signature authentication server 100 provides the electronic signature authentication result of the payment person to the direct debit relay server 300 (14).

The automatic debit server 300 transmits a debit card registration request including the automatic debit application information and the electronic signature authentication result of the payment person to the financial institution server 500 (15).

When receiving the automatic transfer fund registration request including the automatic transfer application information and the electronic signature authentication result of the payment person, the financial institution server 500 performs a ledger registration examination for registering the automatic transfer fund, And registers the ledger registration, and provides the result to the direct debit relay server 300 (16).

The automatic transfer relay server 300 provides the automatic withdrawal registration result to the withdrawal institution terminal 210 (17).

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. It will be understood that various modifications and changes may be made without departing from the scope of the appended claims.

100: Mobile Messaging-based Digital Signature Authentication Server
210: withdrawal terminal 220: payee mobile terminal
300: Automatic Debit Relay Server 400: Mobile Messenger Server
500: Financial institution server 600: Authorized certification authority server
700: carrier server

Claims (14)

A method for providing a debit service by establishing a mobile messaging based electronic signature authentication server in cooperation with a debit relay server and authenticating an electronic signature using mobile messaging of a mobile terminal,
(a) When a direct debit registration request containing the debit application information and the mobile messaging ID of the payment person is received from the withdrawal institution terminal, a mobile messaging based Transmitting a payment agent electronic signature authentication request including the debit application information and the payment messenger's mobile messaging ID to an electronic signature authentication server;
(b) the mobile messaging-based digital signature authentication server provides a debit management code matching the debit authorization information according to the payment person's digital signature authentication request, and transmits the debit management code to the mobile terminal corresponding to the mobile messaging ID Sending a digital signature request messaging with the code tagged and including a debit authorization check;
(c) The mobile messaging-based digital signature authentication server confirms the deed of payment receipt by the payment person who has received the digital signature request messaging through the mobile terminal, and clicks the confirmation button, When a signature advance request is generated, a mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched with the direct debit management code is provided to request execution of the electronic signature, and a certificate of a personal identification number (PIN) Receiving an electronic signature result as an input and performing an electronic signature procedure;
(d) The mobile messaging-based electronic signature authentication server verifies whether the electronic signature is authenticated by verifying the electronic signature result value of the payment person, authenticates the electronic signature of the payment person in accordance with the determination result, Providing to a direct debit relay server; And
(e) The direct debit relay server transmits a debit card registration request including the debit application information and the payment result of the electronic signature to the financial institution server, The method of claim 1, further comprising the steps of: The method according to claim 1,
The mobile messaging ID is obtained by installing a mobile messenger application on a mobile terminal through a mobile messenger server, and receiving unique identification information such as an e-mail address and an ID set by a user through a membership registration procedure or a phone number of the mobile terminal A method for providing automatic debit service through digital signature authentication based on mobile messaging. The method according to claim 1,
Wherein the mobile terminal of the payer is provided with a certificate application for exclusive use of a mobile web page, the certificate application for exclusive use of the mobile web page includes an electronic mission procedure using a public certificate in cooperation with a mobile web page, And the resultant value is transmitted to the mobile communication terminal. The method of claim 3,
In the step (b), the mobile messaging-based digital signature authentication server transmits the digital signature request messaging through a mobile messenger server to a mobile terminal corresponding to the mobile messaging ID via a mobile messenger server A method for providing automatic debit service through digital signature authentication based on mobile messaging. 5. The method of claim 4,
In the step (c), the mobile messaging-based digital signature authentication server confirms the fact that the payment person who has received the digital signature request messaging through the mobile messenger application checks the automatic transfer agreement confirmation, When the mobile web page exclusive authorization certificate application is activated together with the transfer management code, and when an electronic signature advance request corresponding to the automatic debit management code is generated upon activation of the mobile web page exclusive authorization certificate application, A mobile web page supporting the execution of the electronic signature is provided to request the execution of the electronic signature and the electronic signature process is performed by inputting the personal identification number (PIN) And the electronic signature result value is received A method of providing a debit service through digital signature authentication based on mobile messaging. The method of claim 3,
In the step (b), the mobile messaging-based digital signature authentication server sends the digital signature request messaging to the mobile terminal corresponding to the mobile messaging ID as a push notification through the mobile web page dedicated public certificate application of the mobile terminal Wherein the mobile communication service is a mobile messaging service. The method according to claim 6,
In the step (c), the mobile messaging-based digital signature authentication server checks whether the payer who has received the electronic signature request messaging through the mobile web page exclusive authorized certificate application checks the automatic transfer agreement confirmation point, The mobile web page dedicated authorization certificate application is activated and the mobile web page supporting the execution of the electronic signature and the automatic transfer application information matched with the automatic transfer management code according to the activation of the authorized certificate application dedicated to the mobile web page And an electronic signing procedure is performed by inputting a personal identification number (PIN), and the received electronic signature result value is received, and an automatic signature authentication based on mobile messaging is performed. How to provide a transfer service. The method according to claim 1,
In the step (d), the mobile messaging-based digital signature authentication server decrypts the digital signature result value of the payment person, verifies the validity of the public key certificate used in the digital signature, and determines whether the digital signature is authenticated A method for providing automatic debit service through digital signature authentication based on mobile messaging. The method of claim 3,
Wherein the authorized certificate application dedicated to the mobile web page further includes a function of extracting and transmitting a unique identification code of the mobile terminal. 10. The method of claim 9,
Wherein the unique identification code of the mobile terminal is information extracted from a USIM card of the mobile terminal. 10. The method of claim 9,
The step (d)
The mobile messaging based electronic signature authentication server decrypts the electronic signature result value of the payment person to verify the validity of the public key certificate used in the digital signature and transmits the unique identification code of the public key certificate to the public key certificate server Requests the user's personal information corresponding to the unique identification code of the authorized certificate,
Transmits a unique identification code of the mobile terminal of the payment payer to a communication company server, requests personal information of a user corresponding to a unique identification code of the mobile terminal,
And determining whether the digital signature is authenticated by checking whether the personal information of the user returned from the authorized certification authority server and the communication company server are matched with each other to determine whether the digital signature is authenticated. 12. The method of claim 11,
In the step (d), the personal information of the user each returned from the authorized certification authority server and the communication company server is transmitted as encrypted data encrypted with the same encryption method,
And determining whether or not the encrypted data is symmetric in a state where the decryption is not performed on the encrypted data. 12. The method of claim 11,
In step (d), the personal information of the mobile messaging ID of the payment person is further confirmed,
And verifying whether or not the three-party personal information including the personal information of the mobile messaging ID is identical to the personal information of the user returned from the authorized certification authority server and the communication company server, A method of providing a direct debit service through electronic signature authentication of an electronic signature. 14. The method of claim 13,
In the step (d), the three-party personal information including the personal information of the mobile messaging ID has cipher data encrypted with the same three-way encryption method,
Wherein the decryption unit decrypts the decrypted encrypted data, and decrypts the decrypted encrypted data only when the decrypted data is not decrypted.

Images