KR100587135B1 - Method for securely inputting a private information through a wire/wireless telephone - Google Patents

Abstract

The present invention relates to a personal information security input method using a general wired / wireless telephone network, so that personal information required for business processing in a computer system can be directly input to a computer terminal using a remote customer telephone. .

To this end, the present invention provides a first step of connecting and activating a customer information security transfer module between an external telephone line, a telephone for a counselor, and a computer terminal requiring input of customer information; A second step of receiving a key signal transmitted from the customer information security communication module when the cursor waits in the customer transaction screen input field of the computer terminal and displaying the encrypted character in the customer transaction screen input field; A third step of checking whether or not a normal or error input is performed by inquiring and authenticating the customer information when the input of the customer information is completed in the second step; By providing a personal information security input method comprising a fourth step of deleting the corresponding customer information confirmed the inquiry and authentication, by dramatically improving the oral delivery system of personal information frequently performed on wired / wireless telephones By allowing leaks to be blocked at the source, it is possible to considerably improve business transactions during the call and maximize the trust and convenience of both the customer and the responder.

General wired / wireless network, customer information, security input

Description

Method for securely inputting a private information through a wire / wireless telephone}

1 is a schematic diagram of a business processing system having a personal information delivery system using conventional shoes;

2 is a flowchart of a task processing operation having a personal information delivery system using conventional shoes.

3 is a schematic configuration diagram of a business processing system implemented to implement a customer information security input method using a general wired / wireless network according to the present invention.

4 is a detailed view showing an internal configuration example of the customer information security transmission module of FIG.

5 is an overall process flow chart of a customer information security input method using a general wired / wireless network according to the present invention.

<Description of the code | symbol about the principal part of drawing>

10: computer terminal 20: a clerk for counselors

30: customer telephone 40: external telephone line

41: internal telephone line 50: communication line

100: customer information security transmission module 101: matching unit

102: low pass filter / amplifier 103: tone decoder

104: microprocessor 105: communication interface unit

106: display unit

The present invention relates to a method for secure input of personal information using a general wired / wireless telephone line. In particular, financial information, telemarketing, or the like, where computerization, such as inquiry, authentication, etc. of customer information necessary for money transfer, payment, and withdrawal or withdrawal, is computerized, In the business process system in the member management field, important information of customers who need key input can be directly inputted by customers using external wired / wireless telephones connected through general wired / wireless telephone lines. Agents or tellers, who are important to the business processing system, allow important information of the customer to be delivered to the computer terminal and then delete the information automatically after removing the counselor or teller (responder). To prevent the theft of personal information leaked to or caused by It relates to personal information secure input method.

In general, computer terminals used in financial systems are configured to read information input using a key input device connected to the communication system. The possibility of leakage of customer information could not be excluded by receiving or inputting customer information in writing or orally.

Therefore, in recent financial sectors, in order to prevent the leakage of personal information, in addition to a key input device directly connected to the computer terminal, a separate pin pad is provided to allow the customer to directly input important personal information such as the password of the financial account. By preventing the input information from appearing, customer information is prevented from being stolen by system personnel.

On the other hand, if the customer needs to input customer information while the customer is away from the computer terminal of the financial system, a system official using the computer terminal uses a wired / wireless phone to form a call line with a remote customer. Orally, key customer information (resident registration number or customer ID and password) is received and entered.

1 and 2 is a schematic diagram and operation flow diagram of a system having a personal information delivery system orally when a customer information input is required in a conventional computerized business processing system, receiving personal information from a remote customer through a wired network. An example is shown configured to handle a task. As shown in FIG. 1 and FIG. 2, in the system used in the conventional financial sector, when a customer information input is required, a window clerk (or a clerk) who is using the computer terminal 10 and a remote customer The telephone line 40 forms a call line with the clerk (agent) phone 20 and the customer phone 30, respectively, and the personal information received verbally from the customer in such a call state is connected to the computer terminal keyboard It is configured to input directly using pin pad.

However, in this case, the customer's social security number and password are marked with an asterisk on the monitor to prevent the leakage of customer information, but the customer information is not exposed to other people. They are completely exposed to the counter staff and are therefore in a state where they can later be stolen by system personnel.

In addition, in this case, although the contents of the call between the system official and the customer are recorded and stored as necessary, such a method of recording the contents of the call cannot prevent the customer information from being stolen or leaked by the system personnel. Still, fundamental measures are required to prevent the leakage of customer information.

Therefore, the present invention has been made to solve the above-mentioned conventional problems, the present invention is to process the transfer of funds, payment or deposit / withdrawal or other important tasks in the computerized computer system of the financial sector, telemarketing or membership management, etc. Personal information that needs to be inputted can be registered directly on the computer terminal by using the keypad of the customer's telephone on the telecommunication line. Significantly improved the oral delivery system of information to prevent leakage of personal information at the source, thereby solving the second and third personal information leakage problems, and improving the business of transactions during the call, and both customers and respondents Personalization using general wired / wireless network to maximize trust and convenience Its purpose is to provide security input methods.

In order to achieve the above object, the present invention connects a customer information security transmission module between an external telephone line, a telephone for a clerk (agent) and a computer terminal requiring input of customer information, and the customer information security transmission module is connected to the accountant ( A first step of activating the customer information security transmission module by setting a key signal input from a customer telephone having a counselor) telephone line and a call line to be transmitted from the external telephone line to the computer terminal through a communication interface; When the cursor is waiting in the customer transaction screen input field of the computer terminal, receiving a key signal transmitted from the customer information security transmission module and receiving the key information as the customer information, and displaying the encrypted character in the customer transaction screen input field instead of the encrypted characters. Steps; When the input of the customer information to the computer terminal is completed in the second step, the customer information security input using a general wired / wireless network including a third step of checking whether or not the normal or error input is performed by performing inquiry and authentication of the corresponding customer information. Provide a method.

In addition, when the normal input of the corresponding customer information is confirmed in the third step, the present invention processes the related work of the corresponding customer whose inquiry and authentication is confirmed, and simultaneously displays the corresponding customer information input in the customer transaction screen input field of the computer terminal. Another embodiment may be configured by further including a fourth step of deleting.

These objects, features and advantages of the present invention will be more readily understood by reference to the accompanying drawings and the following detailed description.

Hereinafter, the configuration and operation of the present invention will be described in detail with reference to the accompanying drawings.

Figure 3 is an exemplary view of a pre-industrial processing system implemented so that the customer information security input method using a general wired network according to the present invention, Figure 4 shows an internal configuration example of the customer information security delivery module of FIG. Detailed view.

As shown in FIG. 3, the customer information security input method according to the present invention includes a call line between the telephone line 20 and the customer telephone 30 through the external telephone line 40 and the internal telephone line 41. And a customer information security input module 100 for transmitting / receiving data to / from the accountant (agent) computer terminal 10 through a communication line 50, wherein the computer terminal 10 and the customer information security input are provided. This is realized by the interaction between the modules 100.

The customer information security delivery module 100 is activated and at the same time is equipped with a control program for detecting a key signal coming through an external telephone line to output through a communication interface connected to the computer terminal 10, and the customer information security delivery module 100 is provided with a plurality of telephone connection terminals to form a call line between the customer phone 30 and the accountant (agent) phone 20 through the external telephone line 40 and the internal telephone line 41, respectively. It is composed. The customer information security communication module 100 is connected to the computer terminal 10 using the communication line 50.

As shown in FIG. 4, the customer information security input module 100 of FIG. 3 communicates with the matching unit 101, the low pass filter / amplifying unit 102, the tone decoding unit 103, and the microprocessor 104. It may be configured to include an interface unit 105, and optionally may further comprise a display unit 106.

The matching unit 101 matches the input / output impedance between the telephone lines between the external telephone line 40 and the internal telephone line 41 so as to take only a signal without affecting the call quality in a normal telephone line. Call line loss or noise between the telephone 30 and the telephone line 20 for the accountant (agent) is prevented.

The low pass filter / amplifier 102 includes a filter circuit for removing noise and an amplifying circuit for level amplification, and the filter circuit receives a desired signal from the matching unit 101 to generate ambient noise and the like. Noise is first removed to accurately classify the desired signal, and the amplification circuit amplifies the level to an appropriate level so as to determine which signal the filtered signal is and transfers it to the next stage.

The tone decoder 103 is composed of a decoding circuit for detecting a DTMF (DUAL TONE MULTI FREQUENCY) type signal, DTMF of a predetermined frequency band after noise removal and level amplification from the low-pass filter / amplifier 102 Signal, in particular, the present invention detects 697Hz, 770Hz, 852Hz, 941Hz low band frequency signal and 1209Hz, 1336Hz, 1477Hz, 1633Hz high band frequency signal, which are mainly used for key signal of general telephone, It will find out if it is coming and pass it to the next microprocessor. In the configuration of the decoding circuit, in order to accurately distinguish whether or not the key data is normally input, in the present invention, a reference value for the minimum key input time may be set, and key data having a key input time less than the reference value is detected. Can be set to ignore the key data. For example, when the minimum key input time is set to 40 [mS], it is ignored if the key input time of the detected signal is not pressed for 40 [mS] or more. In addition, in the present invention, the DTMF signal may be recognized as a normal key signal for deviations up to +/- 1.5%, and may be set to be regarded as an abnormal key signal and passed to a microprocessor if a deviation of +/- 3.5% or more occurs. have.

The microprocessor 104 collects the key data analyzed by the tone decoder 103 and uses a communication protocol according to a connection type of a host station computer (in the present invention, the computer terminal 10 being used by a correspondent or counselor). And selectively to the communication interface 105. Here, the microprocessor may configure the software to selectively take the RS232, USB, and PS2 (KEYBOARD-WEDGE) methods according to the connection type of the upper station, and of course, separate communication at the request of the upper station. It can also be configured to take a protocol.

The communication interface 105 directly transmits the signal from the microprocessor to the communication port of the computer terminal 10 through the interface device of the communication protocol. Here, the communication interface device may include one or more or all of the communication protocols supporting the PS2 port, the RS-232 port, and the USB port, whereby the customer can directly input the resident registration number A key signal such as a password is processed in the microprocessor 104 and transmitted directly to the computer terminal (PC) of the accountant (or counselor) through the communication interface unit 105 so as not to be verbally processed by the accountant (or counselor). It can be delivered to the computer terminal without the knowledge of the clerk.

The display unit 106 is a display device for displaying the operation state of the microprocessor or the reception of key data, etc. The display unit 106 displays a number of digits of key data processed by the microprocessor to the outside. And a second display unit for indicating whether the key data is normally received, and a third display unit for displaying the operating state, that is, the internal operation state of the customer information security communication module, which is the main equipment of the present invention, to the outside. . In particular, the first to third display units are installed in a position where the appearance of the customer information security delivery module can be easily identified in order to facilitate monitoring by the attendant or counselor in a call. As a result, the display unit can monitor the number of digits and the normal reception state of the key signal processed by the microprocessor 104 to improve the efficiency of the work and to improve the efficiency of the work, and also the customer currently in use Information security module This function informs the staff or counselor whether the equipment is operating normally or abnormally.

5 is a general process flow chart of a customer information security input method using a general wired / wireless telephone line according to the present invention. The operation flow of the customer information security input method according to the present invention can be largely divided into four steps.

The first step is a process for the installation and initialization of the equipment, as shown in Figure 3, the external telephone line 40, the accountant (agent) phone 20 and the accountant (agent) computer terminal requiring input of customer information Connect the customer information security transmission module 100 between the 10, and detects the key signal input from the customer telephone 30 and the telephone line formed with the telephone line for the accountant (agent) from the external telephone line to communicate It is a step of activating the customer information security delivery module 100 is set to be delivered to the computer terminal 10 through an interface. When the activation is made, the customer information security input module 100 detects a key signal that is pressed from the keypad of the customer phone 30 forming a call line with the accountant (agent) phone 20 and the computer. It can be transmitted to the terminal.

Steps 2 through 4 are processes executed in the computer terminal 10. In the second step, a cursor is waited on the customer transaction screen input field in the state in which the customer transaction screen of the computer terminal 10 is displayed (S201). In step S202, a security input mode is set in order to receive a key signal transmitted from the customer information security transmission module 100 (S203), and then, as a check whether the key signal is received (S204), it is inputted as customer information. In operation S205, the customer transaction screen input field is displayed in place of an encrypted character. At this time, when the customer receives a verbal request from a clerk (counselor) in which a call line is formed (S301), the customer directly inputs his main information using the keypad of his phone (S302). At this stage, the customer information entered directly by the customer is transferred to the computer terminal and can be used as customer information for inquiry or authentication.However, only the encrypted characters are displayed on the monitor of the accountant's computer terminal. Counselor) will not know the information entered directly by the customer.

In the third step, when the input of the customer information is completed in the second step (S206), inquiry and authentication of the corresponding customer information is carried out (S207) to confirm whether the input is normal or error (S208). After processing, the method includes the steps of displaying the inquiry and the authentication result on the computer terminal for the accountant (agent) (S209, S210). This allows the attendant (conciliator) to check whether the information entered directly by the customer through the phone is normal customer information, so that the attendant (representative) can request the customer to enter the information again using the message displayed on the monitor. Or allow them to finish their work.

In the fourth step, when the normal input of the corresponding customer information is confirmed in the third step, the related information of the customer whose inquiry and authentication has been confirmed is processed, and the corresponding customer information entered in the customer transaction screen input field is deleted ( S211). After this step is processed, since the customer information entered directly by the customer is no longer left in the computer terminal for the clerk, the client information can be prevented from being leaked by the clerk.

Referring to the processing operation and the resulting effects of the customer information security input method using a general wired network according to the present invention configured as described above are as follows.

First, a computer that connects the customer information security delivery module 100 of the present invention between the customer phone 30 and the accountant (counselor) phone 20 by using a telephone connection terminal and requires input of customer information. Connected to the terminal 10 of the system by the communication line 50 so that the customer phone 30 and the accountant (agent) phone 20 through the external telephone line 40 and the internal telephone line 41 to form a call line Configure the device. At this time, the matching unit 101, through the input / output impedance matching between the telephone line between the external telephone line 40 and the internal telephone line 41, the call between the customer phone 30 and the accountant (agent) phone 20 Prevent line loss or noise.

Since the computer terminal 10 requires the input of customer information, the clerk (the counselor) using the computer terminal displays the customer information input screen on the monitor and then uses the clerk (the counselor) telephone 20. Call the customer (or vice versa, at the request of the customer) to form a call line, and use the call line to directly enter the key customer information (resident registration number and password, etc.) by pressing only the numbers on the customer's phone (30). Guide to help.

When the customer inputs a key signal using his / her own phone according to the guidance of the clerk (agent), the low-pass filter / amplification unit 102 of the customer information security transmission module 100 according to the present invention uses an external telephone line ( Receives the desired signal from the incoming signal through 40) and firstly removes the surrounding noise (WHITE NOISE and other noise), and then level-amplifies to a suitable level to determine what the filtered signal is.

Next, the tone decoder 103 detects a DTMF signal of a predetermined frequency band by using a DTMF decoding circuit. That is, in the tone decoder 103 mounted in the customer information security transmission module 100 of the present invention, the low-band frequency signals of 697 Hz, 770 Hz, 852 Hz, 941 Hz, 1209 Hz, 1336 Hz, and 1477 Hz, which are mainly used for key signals of general telephones, are used. It detects a high band frequency signal of 1633 Hz, finds out how many key data is coming from the customer telephone, and passes it to the microprocessor 104 of the rear stage. In particular, the decoding circuit of the present invention ignores the key data when the key data having a key input time shorter than the reference value is detected using the reference value (40 ms) for the minimum key input time, thereby determining whether the key data is normally input. Can be correctly identified.

The key data analyzed by the tone decoder 103 is collected by the microprocessor 104 at a later stage thereof, and then selectively externally using the RS232, USB and PS2 (KEYBOARD-WEDGE) schemes of the communication interface 105. Directly transmitted to the computer terminal 10 can be recognized by the computer main body, and also on the monitor screen of the computer terminal 10 is displayed by special characters so that the accountants do not know. Therefore, it is possible to input customer information into the computer terminal in the form of excluding a clerk (counselor) who uses the computer terminal 10, so that important information such as a resident registration number or password is basically used for general counter staff. Alternatively, the counselor informs orally to prevent the leakage of personal information that occurs when a clerk or an agent directly enters the key. Secondly, by using the leaked personal information (eg password, account number, social security number), etc. It is possible to prevent cash withdrawals and the theft of credit cards.

In addition, the microprocessor 104 generates a display control signal related to its own operating state, whether or not the key data is normally received and its digits, and sends it to the display unit 106 at the same time. In the first display unit, the key is processed by the microprocessor. The number of digits of the data can be displayed in the second display unit, whether the key data is normally received, and in the third display unit, the internal operation state of the customer information security communication module 100 can be displayed to the outside. Therefore, it is possible to improve the efficiency of the work by allowing the attendant (counselor) on the call to conveniently monitor whether the current customer information security transmission module equipment is operating normally or abnormally.

According to the present invention, when a remotely located customer enters the customer information, it is possible to fundamentally block the middle intervention of the accountants (counselors) using the computer terminal to maintain security, thereby preventing security accidents using the customer information. Not only can it solve the secondary security gap that can occur through the entire recording of the call, but it also allows the remote customer to directly input the customer data into the field on the monitor screen. It can induce the simplification of the respondents' work and improve the oral delivery system of personal information which is frequently done on wired / wireless telephones, thereby maximizing the trust and convenience of both the customer and the respondent. .

Claims (5)

A customer information security delivery module is connected between an external telephone line and a personal computer (agent) phone and a computer terminal requiring input of customer information, and the customer information security delivery module is a customer phone having a telephone line for the accountant (agent) and a call line. A first step of activating the customer information security communication module by setting a key signal input from the external telephone line to be transmitted to the computer terminal through a communication interface; The computer terminal receives a key signal transmitted from the customer information security transfer module when a cursor is waiting in a customer transaction screen input field and receives the key signal as customer information, and displays the encrypted character in the customer transaction screen input field instead of an encrypted character. step; When the input of the customer information is completed in the second step, the computer terminal includes a third step of checking whether the corresponding customer information is normal or whether an error is input or not. Security input method. The method of claim 1, The computer terminal, when the normal input of the corresponding customer information is confirmed in the third step, processes the related work of the customer whose inquiry and authentication is confirmed, and simultaneously deletes the corresponding customer information input in the customer transaction screen input field. Customer information security input method using a general wired network, characterized in that it further comprises a step. The method of claim 1 or 2, wherein the customer information security delivery module, Matching unit for matching the input / output impedance between the telephone line between the external telephone line and the telephone line (agent) to prevent the loss or noise of the telephone line; A low pass filter / amplifier for receiving a desired signal from the matcher to first remove noise and level amplify to a level capable of signal discrimination; A tone decoder which detects a DTMF (DUAL TONE MULTI FREQUENCY) signal from the low pass filter / amplifier and analyzes a frequency and detects key data input from a customer telephone using the frequency analysis result; A microprocessor which collects the key data analyzed by the tone decoder and selectively exports the key data analyzed using a communication port-specific protocol according to an upper station connection type; And a communication interface unit for directly transmitting the signal from the microprocessor to the computer terminal through an interface of a corresponding communication protocol. The method of claim 3, wherein the customer information security delivery module, And a display unit for displaying an operation state of the microprocessor or whether key data is received, and configured to be monitored by an attendant (counselor) in a call. The method of claim 4, wherein the display unit, A first display unit for displaying the number of digits of the key data processed by the microprocessor; A second display unit which displays whether or not the key data processed by the microprocessor is normally received; And a third display unit for displaying an operation state of the microprocessor.

Images