KR100869133B1 - System and Method for Operating Variable Accountor Card Authentication Means and Program Recording Medium - Google Patents

Abstract

The present invention relates to a method and system for operating a variable account (or card) authentication means and a program recording medium therefor, wherein the system for operating a variable account (or card) authentication means according to the present invention is a customer-owned account (or card) authentication. Authentication means (password, etc.) registration means for differently setting and registering the means (password, etc.) for each customer location in response to the selection or input of the customer, and location information of the customer when the customer requests the use of the account (or card). Information confirming means for confirming the information; and in association with the storage medium (or storage medium operating means), information on the authentication means (password, etc.) set and registered corresponding to the confirmed location information of the customer, and the customer has the account ( Or card) information comparison means for comparing the matching of the authentication means (password, etc.) information provided at the time of request for use, and the comparison result, If the information of the authentication means (password, etc.) set and registered corresponding to the information information and the information of the authentication means (password, etc.) provided when the customer requests the use of the account (or card) match, the account (or card) of the customer Account (or card) use approval processing means for approving the use and providing a predetermined error message to the customer if the comparison result does not match.

Variable Account, Authentication Method

Description

System and Method for Operating Variable Account (or Card) Authentication Means and Program Recording Medium}

1 is a diagram illustrating an information registration system configuration for registering variable authentication means information corresponding to a predetermined financial transaction means according to an embodiment of the present invention.

2 is a diagram illustrating a process of registering a plurality of authentication means information corresponding to the customer financial transaction means information in a face-to-face manner according to an embodiment of the present invention.

3A and 3B illustrate a configuration of customer ledger information in which a plurality of authentication means information (eg, passwords) corresponding to customer financial transaction means information is stored according to an embodiment of the present invention.

4 is a diagram illustrating a configuration of an information registration system for registering variable authentication means information corresponding to a predetermined financial transaction means according to another embodiment of the present invention.

5 is a diagram illustrating a process of registering a plurality of authentication means information corresponding to customer financial transaction means information in a non-face-to-face manner in accordance with an embodiment of the present invention.

6A and 6B illustrate a configuration of customer ledger information in which a plurality of authentication means information (eg, passwords) corresponding to customer financial transaction means information is stored according to an embodiment of the present invention.

FIG. 7 is a diagram illustrating a system configuration for confirming authentication means of a customer who requests a predetermined financial transaction through a non-face-to-face channel (CD / ATM) according to one method of the present invention.

8 is a diagram illustrating a process of using a financial terminal including a CD / ATM according to the authentication means information previously set by the customer according to an embodiment of the present invention.

9 is a diagram illustrating a system configuration for confirming authentication means of a customer who requests a predetermined financial transaction through a non-face-to-face channel (internet banking) according to another method of the present invention.

10 is a diagram illustrating a process of performing an authentication procedure for an access customer when using Internet banking according to another embodiment of the present invention.

<Description of main parts of drawing>

100: information registration server 105: interface unit

110: interface providing unit 115: information receiving unit

120: information storage unit 130: storage medium

140: information registration terminal 145: teller terminal

The present invention provides an authentication means (password, etc.) registration means for differently setting and registering an account (or card) authentication means (password, etc.) owned by a customer according to the time of use of the account (or card) in response to the selection or input of the customer. When the customer requests the use of the account (or card), the information checking means for confirming the time of use of the account (or card), and in connection with the storage medium (or storage medium operating means), the confirmed account (or card) Information comparing means for comparing the information of the authentication means (password, etc.) set and registered corresponding to the use time zone information with the authentication means (password, etc.) information provided when the customer requests the use of the account (or card); and As a result of the comparison, the authentication means (password, etc.) information set and registered corresponding to the confirmed time zone information of the account (or card) is used and the customer needs to use the account (or card). If the authentication means (password, etc.) provided at the time of matching match, the customer approves the use of the account (or card). If the result of the comparison does not match, the account (or card) provides a predetermined error message to the customer. It relates to a variable account (or card) authentication means operating system including a use approval processing means.

With the development of the Internet and the growth of the e-commerce industry, the users who previously remembered the pass code had many passwords to manage and remember.

In particular, as the number of accounts or credit cards possessed increases, there is a problem in that the risk of exposing a password is large to set the same password, and there are many passwords to be managed and stored in order to set different passwords.

An object of the present invention for solving the above problems, by the customer's own account (or card) authentication means (password, etc.) corresponding to the customer's selection or input by the customer location or by the account (or card) time zone or account ( Or card) differently set and registered for each use channel, and when the customer requests the use of the account (or card), checks the location or use time or the use channel of the customer, and the storage medium (or storage medium operating means). In association with matching of the authentication means (password, etc.) information set and registered according to the identified location or time of use of the customer and the authentication means (password, etc.) provided by the customer when the account (or card) is used. Compare the information, and as a result of the comparison, information about the authentication means (password, etc.) set and registered according to the confirmed location or time of use of the customer and the customer If the authentication means (password, etc.) information provided when the account (or card) request is used, the customer approves the use of the account (or card). If the result of the comparison does not match, the customer receives a predetermined error message. The present invention provides a method and system for operating a variable account (or card) authentication means.

In the variable account (or card) authentication means operating system according to the present invention, an authentication means for differently setting and registering a customer-owned account (or card) authentication means (password, etc.) for each customer location in response to the selection or input of the customer ( Password), registration means, information confirmation means for confirming the location information of the customer when the customer requests to use the account (or card), and the storage medium (or storage medium operation means) in connection with the confirmed Information comparing means for comparing the authentication means (password, etc.) information set and registered corresponding to the location information of the customer and the authentication means (password, etc.) information provided when the customer requests the use of the account (or card); As a result of the comparison, authentication means (password, etc.) information set and registered corresponding to the confirmed location information of the customer and when the customer requests the use of the account (or card) If the authentication means (password, etc.) information matches, the customer approves the use of the account (or card), and if the result of the comparison does not match, approves the use of the account (or card) to provide a predetermined error message to the customer. Characterized in that it comprises a processing means.

In addition, the variable account (or card) authentication means operating system according to the present invention, the account (or card) authentication means (password, etc.) owned by the customer is different according to the time of use of the account (or card) corresponding to the selection or input of the customer Authentication means (password, etc.) registration means for setting up and registering information, information checking means for checking a time period for using the account (or card) when the customer requests to use the account (or card), and the storage medium (or storage medium) Operating means), authentication means (password, etc.) set and registered corresponding to the confirmed time zone information of the account (or card) and the authentication means provided by the customer when the user requests the use of the account (or card) ( Information comparing means for comparing whether information is matched or not, and authentication means (e.g., authentication means set or registered corresponding to the confirmed time zone information of the account (or card)); Password and the like) information and the authentication means (password, etc.) information provided when the customer requests the use of the account (or card), the user approves the use of the account (or card), and the comparison result, Otherwise, the account (or card) use approval processing means for providing a predetermined error message to the customer.

In addition, the variable account (or card) authentication means operating system according to the present invention, the account (or card) using channel (face-to-face) in response to the customer's selection or input of account (or card) authentication means (password, etc.) owned by the customer Authentication means (password, etc.) registration means for setting and registering differently for each channel, internet banking channel, automation device channel, mobile banking channel, TV banking channel, etc., and when the customer requests to use the account (or card), the account (Or card) information confirming means for confirming use channel information, and authentication means set and registered corresponding to the identified account (or card) use channel information in association with the storage medium (or storage medium operating means) ( Information comparing means for comparing information such as a password and information of authentication means (password, etc.) provided when the customer requests the use of the account (or card), and the comparison result. If the authentication means (password, etc.) information set and registered in correspondence with the authenticated account (or card) use channel information and the authentication means (password, etc.) information provided by the customer when the account (or card) is requested, the And an account (or card) use approval processing means for approving the use of the account (or card) by the customer and providing a predetermined error message to the customer if the comparison result does not match.

On the other hand, the present invention includes a recording medium characterized by recording a program for executing the above-described variable account (or card) authentication means operating system configuration means function.

On the other hand, the method of operating a variable account (or card) authentication means according to the present invention, a predetermined authentication means (password, etc.) registration means of the customer (account or card) authentication means (password, etc.) to the selection or input of the customer Correspondingly setting and registering by customer location or by account (or card) using time zone or by account (or card) using channel; and when the customer requests to use the account (or card) in a predetermined information checking means, Identifying the location or time of use of the customer or a channel of use; and setting the corresponding location or time of use of the customer in association with the storage medium (or storage medium operating means) in a predetermined information comparing means; Whether or not the registered authentication means (password, etc.) information matches the authentication means (password, etc.) information provided when the customer requests to use the account (or card). And the authentication result (password, etc.) information set and registered corresponding to the confirmed location of the customer or the time of use, and the account (or card) in the predetermined account (or card) use approval processing means. Card) If the authentication means (password, etc.) information provided at the time of use request match, the customer approves the use of the account (or card), and if the result of the comparison does not match, a predetermined error message is provided to the customer. Characterized in that comprises a step.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below.

In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating an information registration system configuration for registering variable authentication means information corresponding to a predetermined financial transaction means according to an embodiment of the present invention.

More specifically, Figure 1 corresponds to a specific financial transaction means (e.g., an account or a card) used by a customer, by location (or region) and / or by time of use and / or using the financial transaction means. Receive (or input) at least two different authentication means information (e.g., passwords, etc.) different for each use channel from the customer, and by the location (or region) of the selected (or input) use of the financial transaction means and / or The present invention relates to a system configuration for storing and registering at least two or more authentication means information different for each time of use and / or use channel in association with the financial transaction means information in a predetermined storage medium 130. Those skilled in the art may refer to and / or modify this drawing to determine the particular financial transaction means and at least two or more authentication means corresponding thereto. It can be inferred various implementation methods for the system configuration for storing and registering in a predetermined storage medium 130 by the cooperative processing, but the present invention includes all the implementation methods inferred, shown in Figure 1 It is not limited to the method alone.

Hereinafter, according to the location (or region) and / or use time and / or use channel selected by the financial transaction means customer using the predetermined information registration interface on the information registration system shown in FIG. Corresponds to at least one or more means and / or functional configurations required for storing and registering the at least two different authentication means information (eg, passwords, etc.) in association with the financial transaction means information in a predetermined storage medium 130. The component to be referred to as "information registration server 100" for convenience.

Referring to FIG. 1 according to an embodiment of the present invention, a plurality of authentication means that are different for each location (or region) and / or time of use and / or use channel selected by a customer using a financial transaction means An information registration system for storing and registering information (eg, a password, etc.) in association with the financial transaction means information in a predetermined storage medium 130 is provided at at least one branch of a financial institution (or a headquarter or a branch). And an information registration terminal 140 including a counter terminal 145, wherein the information registration terminal 140 is an information registration server 100 provided on the information registration system through a predetermined financial network. ) And the communication channel are connected.

According to an embodiment of the present invention, the customer using the financial transaction means uses the financial transaction means to register a plurality of different authentication means (eg, a password, etc.) corresponding to the financial transaction means according to the present invention. A plurality of different authentications corresponding to the financial transaction means by visiting the issuing financial institution branch (or headquarter or branch) and through a window (or through a clerk) provided at the financial institution branch (or headquarter or branch) Different password information according to a predetermined application (e.g., the location (or region) of the financial transaction means, time of use, channel of use (e.g., face-to-face, non-face-to-face channel, etc.) for registration of means (e.g. password) information. A document with a form for filling in at least one information item for registration of the When submitting to a member, the teller enters (or selects) the information written in the application through a designated teller terminal 145, and the teller terminal 145 uses the input (or selects) the information. It transmits to the information registration server 100 provided on the information registration system through a network.

Here, the teller terminal 145 preferably comprises a manager terminal used by a teller staff provided at the branch (or headquarters or a branch) of the financial institution, and the information registration server 100 connected to the teller terminal 145. ) Preferably comprises a ledger server provided on the predetermined financial system, the financial network connecting the teller terminal 145 and the information registration server 100 is registered with the teller terminal 145. It is preferable to include a current network for connecting the communication channel between the server (100).

In the information registration system as described above, the window terminal 145 used by the teller and the financial network connecting the window terminal 145 and the information registration server 100 are at least two or more corresponding to the financial transaction means. It performs a function of an information registration interface for registering authentication means (e.g., password) information.

The storage medium 130 provided on the information registration system according to the present invention stores a plurality of authentication means (eg, passwords) information corresponding to the financial transaction means of the customer provided from the information registration terminal 140. It is characterized by.

According to the method of the present invention, the information of a plurality of different authentication means (eg, password, etc.) corresponding to the financial transaction means of the customer is registered differently for each location (or region) where the financial transaction means is used. It features.

Here, the location (or area) is the administrative area (for example, city, metropolitan city, province, city, county, ward, town, town, dong, li), the location (or area) of the branch (or branch) of the financial institution. ), At least one or more locations (or regions) of ATMs (or CDs).

For example, the customer using the financial transaction means registers the password for the financial transaction means differently for each administrative area in Seoul (“1234”), Gyeonggi (“4567”), Gangwon (“8901”), etc. If the password for each administrative area is registered differently as described above through the information registration system shown in FIG. 1, the corresponding financial transaction means may be used in the corresponding region.

In addition, in the case of differently registering the passwords for the financial transaction means for each of the more detailed administrative districts, the financing for Mapo-gu (“1234”), Jongno-gu (“4567”), Gangnam-gu (“8901”), etc. It is possible to register different passwords for trading means.

In this case, when using the financial institution issuing financial institution branch or ATM (or CD) in Mapo-gu, the customer must enter a password (“1234”) corresponding to the mapo-gu to use the financial transaction means.

According to another exemplary embodiment of the present invention, at least two pieces of authentication means (eg, a password, etc.) corresponding to the financial transaction means of the customer are registered differently for each time zone in which the financial transaction means is used.

For example, the customer registers a password corresponding to the financial transaction means as "1234" from 06 to 12 o'clock, "4567" from 12 to 18:00, and "8901" to 18:00 to 24 o'clock. If registered as the customer, when using the financial transaction means, the user must enter the password for the time zone, the financial transaction means can be used.

According to another exemplary embodiment of the present invention, at least two pieces of authentication means (eg, a password, etc.) corresponding to the financial transaction means of the customer are differently selected (or input) for each channel used by the financial transaction means. It is characterized by.

Here, the channel in which the financial transaction means is used includes a face-to-face channel including a banking service and a non-face-to-face channel including internet banking, mobile banking, ATM (or CD), TV banking, and phone banking. Characterized in that made.

For example, the customer may register a password used in a face-to-face channel and a password used in a non-face-to-face channel differently. In the case of the non-face-to-face channel, Internet banking, mobile banking, ATM (or CD), TV banking, You can register different passwords for phone banking.

According to one embodiment of the invention, the storage medium 130 is preferably provided in a DBMS on a financial system provided on the information registration system (or associated with the information registration system), wherein the storage medium 130 may be a ledger D / B provided in the DBMS on the financial system, and / or a predetermined database associated with the ledger D / B, by which the present invention is not limited.

The information registration server 100 provided on the information registration system according to the present invention is a generic term for the information registration system side components connected to the information registration terminal 140 through a predetermined financial network, and includes at least one server. (Or a device), and / or may be implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), by which the present invention is not limited.

According to an embodiment of the present invention, when the information registration terminal 140 is a window terminal 145 connected to a predetermined financial network, the information registration server 100 is the window terminal 145 through a predetermined financial network. It may be a ledger server provided on the financial system connected to the), and / or a server (or device) provided to the external world on the financial system, and / or a program provided on the external system on the financial system, Thereby, this invention is not limited.

According to the embodiment of the present invention, the information registration server 100 is characterized in that it comprises an interface unit 105 for connecting and managing a predetermined communication channel with the information registration terminal 140 through the financial network. do.

According to an embodiment of the present invention, when the information registration terminal 140 is a window terminal 145 connected to a predetermined financial network, the interface unit 105 is based on the protocol stack defined in the financial network. It connects a window terminal 145 and a predetermined communication channel and provides a communication interface for transmitting and receiving at least one information (or data) using a communication protocol defined in a financial transaction related program included in the window terminal 145. It is desirable to.

Referring to FIG. 1, the information registration server 100 interworks with the interface unit 105 when a predetermined information registration terminal 140 accesses the information registration server 100 through the interface unit 105. The information registration terminal 140 inputs a plurality of authentication means information corresponding to the financial transaction means information of the customer and the financial transaction means and different from each region (or location) and / or time zone and / or access channel. (Or select) the interface providing unit 110 for generating (or extracting) a predetermined user interface to be transmitted to the information registration terminal 140 and the information registration terminal in cooperation with the interface unit 105. Financial transaction means information of the customer input (or selected) and transmitted through the user interface at 140 and corresponding to the financial transaction means and by region (or location) and / or time An information receiving unit 115 for receiving a plurality of different authentication means information for each star and / or access channel, and corresponding to the customer's financial transaction means information and the financial transaction means and for each region (or location) and / or Alternatively, the information storage unit 120 may be configured to interoperate a plurality of different authentication means information for each time zone and / or for each access channel, and store the information in a predetermined storage medium 130.

The interface providing unit 110 corresponds to a functional configuration provided in the information registration terminal 140 when a predetermined information registration terminal 140 is connected to the information registration server 100 through the interface unit 105. And input (or select) a plurality of different authentication means information corresponding to the financial transaction means information of the customer and the financial transaction means and by region (or location) and / or by time zone and / or access channel. Generate a predetermined user interface that can be transmitted to the information registration server 100 through, and / or extracted from a predetermined database (not shown), and generates (or extracted) in conjunction with the interface unit 105 Characterized in that it provides the user interface to the information registration terminal 140 through the financial network.

Subsequently, the information registration terminal 140 corresponds to the financial transaction means information of the customer and the financial transaction means based on the user interface and is different for each region (or location) and / or for each time zone and / or access channel. Input (or select) a plurality of authentication means information, corresponding to the financial means means and the financial means of the customer entered (or selected), and by region (or location) and / or time zone and / or access A plurality of different authentication means information for each channel is transmitted to the information registration server 100 through the financial network.

According to an embodiment of the present invention, when the information registration terminal 140 is a window terminal 145 connected to a predetermined financial network, the interface providing unit 110 is a financial transaction provided in the window terminal 145. It is preferable to generate (or extract) a predetermined user interface that can be provided by a related program, and provide the generated (or extracted) user interface to the window terminal 145 through the interface unit 105.

The information receiving unit 115 corresponds to the financial transaction means information and the financial transaction means of the customer through the user interface in the information registration terminal 140 and by region (or location) and / or time zone and / or access When a plurality of different authentication means information is input (or selected) for each channel and transmitted through the financial network, the interface unit 105 is linked to correspond to the financial transaction means information of the customer and the financial transaction means. Or a plurality of different authentication means information for each time zone and / or for each time zone and / or for access channel, and correspond to the received financial means information and the financial means of the customer and for each region. Or a plurality of authentication means information different for each location) and / or for each time zone and / or for an access channel to the information storage unit 120. .

The information storage unit 120 corresponds to the financial transaction means information and the financial transaction means of the customer through the information receiving unit 115 and each other by region (or location) and / or time zone and / or access channel When a plurality of different authentication means information is received, the received customer financial transaction means information and the plurality of different authentication means information are processed in association and stored in the storage medium 130.

According to the method of the present invention, when the storage medium 130 is provided in the information registration server 100 or on the network associated with the information registration server 100, the information storage unit 120 The storage medium 130 corresponds to the financial transaction means information of the customer and the financial transaction means and associates and processes a plurality of authentication means information different from each region (or location) and / or time zone and / or access channel. Preferably, when the storage medium 130 is provided in a DBMS provided on a financial system, the information storage unit 120 corresponds to the financial transaction means information and the financial transaction means of the customer, A plurality of different authentication means information (or by location) and / or by time zone and / or access channel are provided on the financial system by providing the information system through an external system on the financial system. It is desirable to store in a DBMS.

2 is a diagram illustrating a process of registering a plurality of authentication means information corresponding to customer financial transaction means information in a face-to-face manner according to an embodiment of the present invention.

In more detail, in FIG. 2, the information registration server 100 on the information registration system shown in FIG. 1 is provided in the financial system associated with the window terminal 145 through a predetermined financial network or is connected to the financial system. In this case, the teller terminal 145 accesses the information registration server 100 to correspond to the financial transaction means information of the customer and the financial transaction means according to the present invention, and by region (or location) and / or time. After connecting a communication channel for registering a plurality of different authentication means information for each unit and / or each access channel, the financial transaction means information and the financial transaction means of the customer to the information registration server 100 through the communication channel In response to the transmission of a plurality of different authentication means information by region (or location) and / or time zone and / or access channel, the information registration server 100 Corresponding to the financial transaction means information of the customer and the financial transaction means and a plurality of different authentication means information for each region (or location) and / or time zone and / or access channel for a predetermined storage medium ( 130, which is an embodiment of the present invention, those of ordinary skill in the art to which the present invention pertains, refer to and / or modify the drawing 2 and the information registration server 100 in the window terminal 145 Inferring various implementation methods for storing and registering information on the financial transaction means of the customer and the plurality of authentication means information corresponding to the financial transaction means and for each region (or location) and / or time zone and / or access channel. As will be appreciated, the present invention includes all implementation methods inferred above and is not limited to the implementation method illustrated in FIG.

Referring to FIG. 2, the customer terminal finance according to the present invention is connected to the information registration server 100 through a predetermined financial network by using the window terminal 145 shown in FIG. 1 as an information registration terminal 140. Connect a predetermined communication channel for registering a plurality of authentication means information corresponding to the transaction means information and the financial transaction means and for each region (or location) and / or time zone and / or access channel, and the customer; When requesting the registration of a plurality of authentication means information corresponding to the financial transaction means of the financial transaction means and different by region (or location) and / or time zone and / or access channel (200), the information registration server ( 100 is a plurality of authentication means information corresponding to the financial transaction means information of the customer and the financial transaction means and different for each region (or location) and / or time zone and / or access channel. Generates (or extracts) a predetermined information registration interface for registering 205 and transmits and outputs the generated (or extracted) information registration interface to the information registration terminal 140 through the communication channel (210). ).

According to an embodiment of the present invention, the information registration interface may include information on the financial transaction means of the customer and the region (or location) and / or corresponding to the financial transaction means to be used in the process of using the financial transaction means. It is preferable to include a user interface for inputting (or selecting) a plurality of different authentication means information (eg, a password, etc.) for each time zone and / or each access channel.

Subsequently, the information registration terminal 140 corresponds to the financial transaction means information of the customer and the financial transaction means through the information registration interface, and differs by region (or location) and / or by time zone and / or by access channel. The authentication means information is input (or selected) (215).

If the information registration terminal 140 corresponds to the financial transaction means information of the customer and the financial transaction means through the information registration interface and is different for each region (or location) and / or time zone and / or access channel. When a plurality of authentication means information is input (or selected) (220), the information registration terminal 140 corresponds to the financial transaction means information and the financial transaction means of the customer entered (or selected) through the financial network And transmits a plurality of authentication means information different from each region (or location) and / or time zone and / or access channel to the information registration server 100 (225).

Thereafter, the information registration server 100 corresponds to the financial transaction means information of the customer and the financial transaction means through the financial network and is different from each other by region (or location) and / or by time zone and / or by access channel. Receiving and reading 230 authentication means information, corresponding to the received financial transaction means information of the customer and the financial transaction means, and different by region (or location) and / or by time zone and / or by access channel. Cooperative processing of a plurality of authentication means information stored in the storage medium 130 (235), corresponding to the financial transaction means and a plurality of different by region (or location) and / or time zone and / or access channel The authentication means information registration history is transmitted to the information registration terminal 140 (240).

3A and 3B illustrate a structure of customer ledger information in which a plurality of authentication means information (eg, passwords) corresponding to customer financial transaction means information is stored according to an embodiment of the present invention.

In more detail, FIGS. 3A and 3B illustrate a region of use of the financial transaction means of the customer when the customer uses a predetermined financial transaction means (for example, an account or a card) through the information registration system shown in FIG. Or a plurality of authentication means information (eg, a password, etc.) used differently according to location) and / or time zone and / or access channel, and the provided plurality of authentication means information is received from the customer. A method of implementing the information stored in (and / or associated with) the ledger, and / or stored in a predetermined database associated with the customer ledger, specifically, FIG. 3A illustrates the customer financial transaction. And a plurality of authentication means information corresponding to the means is stored in association with the account ledger of the customer ledger, Surface 3b is for the exemplary method are a plurality of authentication method information corresponding to the customer financial transaction means to be stored in a predetermined database associated with the customer ledger.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 3a and 3b to display a plurality of authentication means information corresponding to the customer financial transaction means. It will be possible to infer various implementation methods stored in the present invention, but the present invention includes all of the inferred implementation methods, and is not limited to the implementation methods shown in FIGS. 3A and 3B.

Referring to Figure 3a, the customer ledger is CIF (Customer Information File) number, country code, contact person ID, sales office number, customer classification, customer name, customer address, region classification code, telephone number, business number, trade name, classification code , Expiration date, status headquarters information, settlement date, cash available date, surname, name, social security number, company address, company phone number, mailing address, account number, president, business type, legal representative, initial transaction date, TRW, DB, usage, Parent company number. Country name, transmission, sex resident, occupation, mailing address, company name, guardian name, guardian telephone number, legal representative business number, construction process classification, tax classification, area code, group code and postal code, etc. Although those skilled in the art to which the present invention pertains will clearly understand the contents and features of the information contained in the customer ledger, the detailed description thereof will be omitted for convenience.

In addition, referring to Figure 3a, the customer ledger account number, CIF number, point number, currency, opening date, status, product type, interest rate, password, balance, RBI balance 1, RBI balance 2, bank balance, bankbook Number, current interest, time extension, time extension amount, ARS setting, final deposit date, final withdrawal date, final deposit amount, final withdrawal amount, unpaid account transactions, interest rate accounting, flat consolidation, final payment interest, final payment transaction number, It is relationally processed with a predetermined ledger (or ledger) that includes at least one or more individual interest rate reference and the date of final interest calculation, etc., and the ledger (or ledger) includes account number, withdrawal (months), period Number of days), periodic reception information including at least one term extension, expiration date and target amount, and / or trust including at least one account number, deposit amount, par value, pension date and number of shares corresponding to the account ledger. New information, and / or account number, transaction number, date, point number, commodity type, transaction type, cash amount, RBI, batch number, batch transaction, date of commencement, bank account line, Briefly, transactional information including at least one or more including CIF is processed in relational relations, etc. If one of ordinary skill in the art to which the present invention belongs, the ledger to be processed in relation to the customer ledger is the reception ledger ( It will be clearly understood that other types of ledgers (eg, loan ledgers, collateral ledgers, securities ledgers, remittance ledgers, funds ledgers, customer ledgers, etc.) may also be included in addition to the general ledger). Since at least one or more additional information processed in conjunction with the ledger of the obvious will be familiar with, the detailed description thereof will be omitted for convenience.

In addition, referring to FIG. 3a, the customer ledger includes financial information including at least one CIF number, year, B / S amount, P / L amount, manufacturing cost amount, financial ratio, and / or CIF number, period, loan amount. Analysis of profitability, including at least one or more of the balance, fund contribution rate, credit code, credit balance, credit interest, and / or CIF number, year, cash inflows, cash revenue, cash flows, cash flows, cash flows Additional information, such as cash flow information, including at least one or more amounts is processed. If the person having ordinary knowledge in the technical field to which the present invention belongs, the additional information processed in connection with the customer ledger is the financial information, profitability analysis. In addition to the information and cash flow information, other types of additional information (e.g., contact information for the financial transaction customer, branch information, country code information, area code information, group) Information, postal code information, limit information by CIF (Customer Information File), financial institution transaction status information, major shareholder information, follow-up management information, temporary checking base information, etc.). Detailed description thereof will be omitted for convenience.

In FIG. 3A according to a preferred embodiment of the present invention, when the customer uses a predetermined financial transaction means (eg, an account or a card, etc.), the customer's financial transaction means use region (or location) and / or Alternatively, the plurality of authentication means information used differently according to time zones and / or access channels may be stored in association with the account ledger (receiver ledger).

Referring to FIG. 3B, when the customer uses a predetermined financial transaction means (eg, an account or a card), the customer may use the financial transaction means by region (or location) and / or by time zone and / or access channel. The plurality of authentication means information used differently according to the information is processed in association with the CIF number corresponding to the customer ledger and stored in a predetermined database, whereby the plurality of authentication means information corresponding to the customer financial transaction means stored in the database is And the customer ledger and / or account ledger stored in the ledger D / B in a relational process.

4 is a diagram showing an information registration system configuration for registering variable authentication means information corresponding to a predetermined financial transaction means according to another embodiment of the present invention.

More specifically, Figure 4 corresponds to a specific financial transaction means (e.g., an account or a card) used by a customer, by location (or region) and / or by time of use and / or by the financial transaction means. Receive (or input) a plurality of different authentication means information (e.g., a password, etc.) for each use channel from the customer, and use and / or use by the location (or region) of the selected (or input) financial transaction means. The present invention relates to a system configuration for storing and registering a plurality of different authentication means information for each time slot and / or use channel in association with the financial transaction means information in a predetermined storage medium 130. If one of ordinary skill in the art with reference to the Figure 4 and / or modified to link the specific financial means and a plurality of authentication means information corresponding thereto by Various implementation methods for the system configuration for storing and registering in a predetermined storage medium 130 may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation method shown in FIG. No.

Hereinafter, according to location (or region) and / or use time and / or use channel selected by the financial transaction means customer through a predetermined information registration interface on the information registration system shown in FIG. Corresponding to at least one or more means and / or functional configuration required for storing and registering a plurality of different authentication means information (eg, password, etc.) in association with the financial transaction means information in a predetermined storage medium 130. The component is referred to as "information registration server 300" for convenience.

Referring to FIG. 4 according to an embodiment of the present invention, a plurality of authentication means different for each location (or region) selected by a customer using a financial transaction means and / or for each time of use and / or channel used The information registration system for storing and registering information (eg, a password, etc.) in association with the financial transaction means information in a predetermined storage medium 130 may include at least one wired terminal and / or a wireless terminal used by the customer. Characterized in that it comprises an information registration terminal 140, the information registration terminal 140 is connected to the communication channel and the information registration server 300 provided on the information registration system through a predetermined network means do.

According to an exemplary embodiment of the present invention, the customer using the financial transaction means registers a plurality of different authentication means (eg, a password, etc.) corresponding to the financial transaction means in a predetermined wired network according to the present invention. The information registration server 300 is connected to the information registration server 300 through an information registration terminal 140 including at least one of a wired terminal connected thereto and / or a wireless terminal connected to a predetermined wireless communication network. When a plurality of different authentication means (for example, password, etc.) information corresponding to the customer financial transaction means according to the present invention is input (or selected) through at least one user interface, the information registration terminal 140 receives a predetermined information. It is preferable to transmit to the information registration server 300 provided on the information registration system through a network means.

Here, the wired terminal connected to the wired network is a generic term for all terminal devices connected to a TCP / IP based communication network, and a desktop computer and / or a laptop connected to the TCP / IP based communication network. (Notebook) or a home appliance terminal (eg, Set-Top-Box) connected to the TCP / IP based communication network, or a kiosk (KIOSK) connected to the TCP / IP based communication network, etc. It is preferable.

The wireless terminal connected to the wireless network may include all terminal devices connected to a CDMA based mobile communication network, and / or all terminal devices connected to an IEEE 802.16x based mobile Internet, and / or Motorola's DataTAC scheme. And / or a generic term for all terminal devices connected to Erricson's Mobitex-type wireless data communication network, comprising: a Personal Communication System (PCS) and / or a Global System for Mobile communications (GSM) terminal connected to the CDMA-based mobile communication network; And / or Personal Digital Cellular (PDC) and / or Personal Handyphone System (PHS) terminals and / or Personal Digital Assistants (PDAs) and / or Smart Phones and / or Telematics Telematics), or a portable Internet terminal connected to the IEEE 802.16x based portable Internet, or the DataTAC / Mobitex based wireless It is preferable to include at least one or more wireless data communication terminal connected to the data communication network.

In addition, the information registration server 300 is connected to the information registration terminal 140 according to the characteristics of the information registration terminal 140 and the network means Internet banking server and / or wireless banking server and / or telebanking server and / Or a TV banking server, and / or a separate web server for registering the information.

In addition, the network means for connecting the information registration terminal 140 and the information registration server 300 is a CDMA-based mobile communication network and / or IEEE 802.16x according to the type of wireless network connected to the information registration terminal 140 It is preferable that any one of the portable Internet based and / or DataTAC / Mobitex based wireless data communication network is included, and / or includes all types of wireless communication networks proposed in the future including a predetermined wireless interval.

In addition, the information registration terminal 140 outputs at least one or more user interfaces provided by the information registration server 300, and inputs and / or selects at least one or more information through the user interface to provide the information registration server ( 300 is preferably provided with a functional configuration (for example, a browser program and a communication function, or a predetermined communication program and communication function for communicating with the information registration server 300).

Those skilled in the art to which the present invention pertains will be able to easily infer the characteristics of the customer terminal corresponding to at least one or more wired terminal and / or wireless terminal, detailed description thereof will be omitted for convenience. .

In the above information registration system, at least one wired network connecting the information registration terminal 140 and the information registration server 300 including at least one wired terminal and / or wireless terminal used by the customer and / Alternatively, the wireless network performs a function of an information registration interface for the customer to register a plurality of different authentication means (eg, password, etc.) information corresponding to the customer financial transaction means according to the present invention.

According to another exemplary embodiment of the present invention, the information registration terminal 140 may include an automatic teller machine (ATM) and a cash dispenser (CD) connected to a predetermined financial network (for example, a financial common network). A predetermined call connected to a wired telephone network such as a financial automation device (not shown), and / or a public switched telephone network (PSTN) or a voice over IP (VoIP) network. It further comprises a terminal (not shown), and / or further comprises a predetermined call terminal (not shown) connected to a wireless telephone network such as a mobile communication network, a wireless VoIP network, and / or affiliated with the financial institution It may further include a terminal (and / or server) (not shown) provided in at least one or more institutions, the present invention is not limited thereto.

In the information registration system as described above, when the information registration terminal 140 is the financial automatic device (not shown), the financial automatic device (not shown), the financial automatic device (not shown), and the information registration server. The financial network connecting 300 performs a function of an information registration interface for the customer to register a plurality of different authentication means (eg, password, etc.) information corresponding to the customer financial transaction means according to the present invention, and / Or, if the information registration terminal 140 is the call terminal (not shown), a wired telephone network connecting the call terminal (not shown) and the call terminal (not shown) and the information registration server 300 and / Alternatively, the wireless telephone network is an information registration interlink for the customer to register a plurality of different authentication means (eg, password, etc.) information corresponding to the customer financial transaction means according to the present invention. And / or the terminal (and / or server) when the information registration terminal 140 is a terminal (and / or server) (not shown) provided in an institution affiliated with the financial institution. (Not shown) and the network connecting the terminal (and / or server) (not shown) and the information registration server 300 are a plurality of different authentications for the customer corresponding to the customer financial transaction means according to the present invention. It performs the function of the information registration interface for registering the means (e.g. password) information.

The storage medium 130 provided on the information registration system according to the present invention has a plurality of different authentication means (for example, password) information corresponding to the customer financial transaction means provided from the information registration terminal 140. Characterized in that it is stored.

According to the method of the present invention, the information of a plurality of different authentication means (eg, password, etc.) corresponding to the financial transaction means of the customer is registered differently for each location (or region) where the financial transaction means is used. It features.

Here, the location (or area) is the administrative area (for example, city, metropolitan city, province, city, county, ward, town, town, dong, li), the location (or area) of the branch (or branch) of the financial institution. ), At least one or more locations (or regions) of ATMs (or CDs).

For example, the customer using the financial transaction means registers the password for the financial transaction means differently for each administrative area in Seoul (“1234”), Gyeonggi (“4567”), Gangwon (“8901”), etc. If the password for each administrative area is registered differently as described above through the information registration system shown in FIG. 1, the corresponding financial transaction means may be used in the corresponding region.

In addition, in the case of differently registering the passwords for the financial transaction means for each of the more detailed administrative districts, the financing for Mapo-gu (“1234”), Jongno-gu (“4567”), Gangnam-gu (“8901”), etc. It is possible to register different passwords for trading means.

In this case, when using the financial transaction means issuing financial institution branch or ATM (or CD) in Mapo-gu, the customer must enter a password (“1234”) corresponding to the mapo-gu to use the financial transaction means.

According to another exemplary embodiment of the present invention, at least two pieces of authentication means (eg, a password, etc.) corresponding to the financial transaction means of the customer are registered differently for each time zone in which the financial transaction means is used.

For example, the customer registers a password corresponding to the financial transaction means as "1234" from 06 to 12 o'clock, "4567" from 12 to 18:00, and "8901" to 18:00 to 24 o'clock. If registered as the customer, when using the financial transaction means, the user must enter the password for the time zone, the financial transaction means can be used.

According to another exemplary embodiment of the present invention, at least two pieces of authentication means (eg, a password, etc.) corresponding to the financial transaction means of the customer are differently selected (or input) for each channel used by the financial transaction means. It is characterized by.

Here, the channel in which the financial transaction means is used includes a face-to-face channel including a banking service and a non-face-to-face channel including internet banking, mobile banking, ATM (or CD), TV banking, and phone banking. Characterized in that made.

For example, the customer may register a password used in a face-to-face channel and a password used in a non-face-to-face channel differently. In the case of the non-face-to-face channel, Internet banking, mobile banking, ATM (or CD), TV banking, You can register different passwords for phone banking.

According to one embodiment of the invention, the storage medium 130 is preferably provided in a DBMS on a financial system provided on the information registration system (or associated with the information registration system), wherein the storage medium 130 may be a ledger D / B provided in the DBMS on the financial system, and / or a predetermined database associated with the ledger D / B, by which the present invention is not limited.

According to another embodiment of the invention, the storage medium 130 is at least one non-face-to-face banking system (eg, Internet banking system, and / or telebanking system) provided on (or associated with) the registration system, And / or a DBMS on a wireless banking system, and / or a TV banking system, etc.), by which the present invention is not limited.

The information registration server 300 provided on the information registration system according to the present invention is a generic term for the information registration system side components connected to the information registration terminal 140 through a predetermined network means, and includes at least one server. (Or a device), and / or may be implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), by which the present invention is not limited.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 includes a wireless terminal connectable with a wireless banking server on a predetermined wireless banking system, the information registration server 300 is on the wireless banking system. A predetermined wireless banking server, and / or a program provided in the wireless banking server, and / or a predetermined server (or device) accessible to the external system of the financial system through the wireless banking system, or A program provided in a server (or device), and / or a server (or device) provided in the external world on the financial system accessible through the wireless banking server (and / or the server (or device)), and / Or may be a program provided in the external world on the financial system, whereby the present invention is not limited.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 is a call terminal (not shown) connectable to a telebanking server on a predetermined telebanking system, the information registration server 300 is the telebanking. A predetermined telebanking server (e.g., an Automatic Response Service (ARS) server) provided on the system, and / or a program provided on the telebanking server, and / or the banking system of the financial system through the telebanking system. The financial system accessible to an alien server through a predetermined server (or device), a program included in the server (or device), and / or accessible through the telebanking server (and / or the server (or device)). It may be a server (or device) provided in the external system of the above, and / or a program provided in the external system of the financial system, by which the present invention is not limited. The.

According to another embodiment of the present invention, when the information registration terminal 140 is a wired terminal (or two-way digital TV) that can be connected to a TV banking server on a predetermined TV banking system, the information registration server 300 is A predetermined server (or a TV banking server provided on the TV banking system, and / or a program provided in the TV banking server, and / or a predetermined server (or accessible to the external system of the financial system through the TV banking system) Device), a program provided in the server (or device), and / or a server (or in a foreign system on the financial system accessible through the TV banking server (and / or the server (or device)). Device) and / or a program included in the external system on the financial system, and the present invention is not limited thereto.

According to the embodiment of the present invention, the information registration server 300 is characterized in that it comprises an interface unit 305 for connecting and managing a predetermined communication channel with the information registration terminal 140 through the network means. do.

According to an embodiment of the present invention, when the information registration terminal 140 includes a wired terminal and / or a wireless terminal connected to a predetermined wired network and / or a wireless network, the interface unit 305 is the wired network. And / or connect a predetermined communication channel with the customer terminal based on a protocol stack defined in a wireless network, and transmit and receive at least one or more information (or data) using a communication protocol defined in a communication program included in the customer terminal. It would be desirable to provide a communication interface for the present invention.

For example, when the browser program corresponding to the Hyper-Text Transfer Protocol (HTTP) protocol is provided in the information registration terminal 140, the interface unit 305 is based on the TCP / IP protocol. And a communication channel, and provide a communication interface for transmitting and receiving a web page (eg, a Hyper-Text Markup Language (HTML) compatible web page) and / or information using the HTPP protocol defined in the browser program.

Alternatively, when the information registration terminal 140 is provided with a communication program (eg, an internet banking program) provided by the information registration server 300, the interface unit 305 is based on the TCP / IP protocol. It connects the communication channel with the information registration terminal 140, and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 is a financial automation device connected to a predetermined financial network, the interface unit 305 is based on the protocol stack defined in the financial network. It is desirable to provide a communication interface for connecting at least one communication channel with an automation device and for transmitting and receiving at least one information (or data) using a communication protocol defined in a financial transaction related program included in the automated teller machine.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 includes a wireless terminal connected to a predetermined wireless network, the interface unit 305 is based on a protocol stack defined in the wireless network. A communication interface for connecting at least one communication channel with the information registration terminal 140 and transmitting and receiving at least one information (or data) using a communication protocol defined in a communication program included in the information registration terminal 140. It is desirable to provide.

For example, when a browser program corresponding to a WAP (Wireless Application Protocol) and / or a ME (Mobile Explorer) protocol is provided in the information registration terminal 140, the interface unit 305 may perform the information based on the CDMA protocol. Connects a communication channel with the registration terminal 140, and uses a WAP / ME protocol defined in the browser program, for example, a web page (e.g., a WML (Wireless Markup Language) compatible web page or an HTML compatible web page) and / or information Provides a communication interface for transmission and reception.

Alternatively, when the information registration terminal 140 is provided with a communication program (eg, IC chip based banking program) provided by the information registration server 300, the interface unit 305 is based on the CDMA protocol. It connects a communication channel with the information registration terminal 140 and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface unit 305 is connected to the wired telephone network and / or It is preferable to connect a communication terminal (not shown) with a predetermined call path based on a voice call protocol defined in a wireless telephone network, and to provide a communication interface for transmitting and receiving the voice call-based information (or data).

For example, the interface unit 305 provides a communication interface for transmitting and receiving information based on Dual Tone MultiFrequency (DTMF) based on the call terminal and the communication path, and / or provides a communication interface for transmitting and receiving information based on voice recognition. to provide.

According to another embodiment of the present invention, when the information registration terminal 140 is a wired terminal (or two-way digital TV) connected to the TV banking system, the interface unit 305 is a protocol defined in the TV banking system. Based on a stack, at least one or more pieces of information are connected using a communication protocol defined in a communication program provided in the wired terminal (or interactive digital TV) and a predetermined communication channel. Or data) communication interface for transmitting and receiving.

Referring to FIG. 4, the information registration server 300 is connected with the interface unit 305 when a predetermined information registration terminal 140 accesses the information registration server 300 through the interface unit 305. The information registration terminal 140 interlocks a plurality of authentication means information corresponding to the financial transaction means information of the customer and the financial transaction means and differs by region (or location) and / or by time zone and / or by access channel. An interface providing unit 310 for generating (or extracting) a predetermined user interface for input (or selecting) and transmitting the same to the information registration terminal 140 and registering the information in association with the interface unit 305. The financial transaction means information of the customer inputted (or selected) through the user interface and transmitted by the terminal 140 and the region (or location) and / or time corresponding to the financial transaction means. An information receiving unit 315 for receiving a plurality of different authentication means information for each star and / or access channel, and corresponding to the customer's financial transaction means information and the financial transaction means, and by region (or location) and / or Or it characterized in that it comprises an information storage unit 320 for storing in a predetermined storage medium 130 by mutually processing a plurality of different authentication means information for each time zone and / or access channel.

The interface providing unit 310 corresponds to a functional configuration provided in the information registration terminal 140 when a predetermined information registration terminal 140 is connected to the information registration server 300 through the interface unit 305. The network means by inputting (or selecting) a plurality of authentication means information corresponding to the financial transaction means information of the customer and the financial transaction means and different from each region (or location) and / or time zone and / or access channel. Generate a predetermined user interface that can be transmitted to the information registration server 300 through, and / or extracted from a predetermined database (not shown), and generates (or extracted) in conjunction with the interface unit 305 Characterized in that it provides the user interface to the information registration terminal 140 through the network means.

Subsequently, the information registration terminal 140 corresponds to the financial transaction means information of the customer and the financial transaction means based on the user interface and is different for each region (or location) and / or for each time zone and / or access channel. The plurality of authentication means information is transmitted to the information registration server 300 through the network means.

According to an embodiment of the present invention, when the information registration terminal 140 includes a wired terminal and / or a wireless terminal connected to a predetermined wired network and / or a wireless network, the interface providing unit 310 may provide the information. Generate (or extract) a predetermined user interface that can be provided to a browser program and / or a communication program included in the registration terminal 140, and the information about the generated (or extracted) user interface through the interface unit 305. It is preferable to provide to the registration terminal 140.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 is a financial automation device connected to a predetermined financial network, the interface providing unit 310 may be a financial transaction related program provided in the financial automation device. It is preferable to generate (or extract) a predetermined user interface that can be provided, and provide the generated (or extracted) user interface to the ATM using the interface unit 305.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 includes a wireless terminal connected to a predetermined wireless network, the interface providing unit 310 is provided in the information registration terminal 140. Generating (or extracting) a predetermined user interface that can be provided to a browser program and / or a communication program, and providing the generated (or extracted) user interface to the information registration terminal 140 through the interface unit 305. It is preferable.

According to another embodiment of the present invention, when the information registration terminal 140 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface providing unit 310 is the call terminal (shown). Generate (or extract) a predetermined user interface that can be provided as an omission, and generate the user interface (eg, ARS-based user interface) through the interface unit 305 to the call terminal (not shown). Is preferably provided.

According to another exemplary embodiment of the present invention, when the information registration terminal 140 is a wired terminal (or two-way digital TV) connected to a TV banking system, the interface providing unit 310 is the wired terminal (or two-way digital). It is preferable to generate (or extract) a predetermined user interface that can be provided to a TV) and to provide the generated (or extracted) user interface to the wired terminal (or an interactive digital TV) through the interface unit 305. .

The information receiving unit 315 corresponds to the financial transaction means information and the financial transaction means of the customer through the user interface in the information registration terminal 140 and by region (or location) and / or time zone and / or access When a plurality of different authentication means information is input (or selected) for each channel and transmitted through the financial network, the interface unit 305 may be linked to correspond to the financial transaction means information of the customer and the financial transaction means. Or a plurality of different authentication means information for each time zone and / or for each time zone and / or for access channel, and correspond to the received financial means information and the financial means of the customer and for each region. Or a plurality of authentication means information different for each location) and / or for each time zone and / or for an access channel to the information storage unit 320. .

The information storage unit 320 corresponds to the financial transaction means information and the financial transaction means of the customer through the information receiving unit 315 and each other by region (or location) and / or time zone and / or access channel When a plurality of different authentication means information is received, the received customer financial transaction means information and the plurality of different authentication means information are processed in association and stored in the storage medium 130.

According to an embodiment of the present invention, when the storage medium 130 is provided in the information registration server 300 or on the network associated with the information registration server 300, the information storage unit 320 The storage medium 130 corresponds to the financial transaction means information of the customer and the financial transaction means and associates and processes a plurality of authentication means information different from each region (or location) and / or time zone and / or access channel. Preferably, when the storage medium 130 is provided in a DBMS provided on a financial system, the information storage unit 320 corresponds to the financial transaction means information and the financial transaction means of the customer, (Or location) and / or time zone and / or access channel by providing a plurality of different authentication means information to the information system through the external system on the financial system provided on the financial system It is desirable to store in a DBMS.

5 is a diagram illustrating a process of registering a plurality of authentication means information corresponding to customer financial transaction means information in a non-face-to-face manner in accordance with an embodiment of the present invention.

In more detail, FIG. 5 illustrates a case where the information registration server 300 on the information registration system shown in FIG. 4 has a web server function to which the information registration terminal 140 can be connected through a predetermined network means. When the information registration terminal 140 accesses the information registration server 300 and the customer uses a predetermined financial transaction means (for example, an account or a card) according to the present invention, the region of the customer using the financial transaction means ( Or a location) and / or a time channel and / or a connection channel, and connects a communication channel for registration of a plurality of authentication means information used differently, and then, to the information registration server 300 through the communication channel. A plurality of authentication means information corresponding to the financial transaction means information of the customer and the financial transaction means and different for each region (or location) and / or time zone and / or access channel; When transmitting, a plurality of information corresponding to the financial transaction means and the financial transaction means of the customer received by the information registration server 300 and different for each region (or location) and / or time zone and / or access channel An embodiment of the present invention relates to an embodiment of a method of linking authentication means information and storing the information in a predetermined storage medium 130. Those skilled in the art to which the present invention pertains may refer to and / or modify the information of FIG. Various implementation methods for storing and registering the customer financial transaction means information and the plurality of authentication means information from the registration terminal 140 to the information registration server 300 may be inferred. It includes a method, and is not limited to the embodiment shown in FIG.

Referring to FIG. 5, when the information registration terminal 140 shown in FIG. 4 is a predetermined network means (eg, the information registration terminal 140 is a wired terminal, a TCP / IP based wired communication network, the information registration terminal) When 140 is a wireless terminal, the customer accesses the information registration server 300 through a CDMA based mobile communication network, and / or an IEEE 802.16x based portable Internet, and the like. For example, when using an account or a card) for registering a plurality of authentication means information used differently according to the region (or location) and / or time zone and / or access channel of the financial transaction means of the customer. A plurality of persons connected to a predetermined communication channel, corresponding to the financial transaction means information of the customer and the financial transaction means, and different from each other by region (or location) and / or by time zone and / or access channel; When requesting means information registration (500), the information registration server 300 generates a web page corresponding to a predetermined information registration interface for registering a plurality of authentication means information corresponding to the customer financial transaction means information (or Extraction) (505), and transmits and outputs a web page corresponding to the generated (or extracted) information registration interface to the information registration terminal 140 through the communication channel (510).

According to an embodiment of the present invention, the information registration interface corresponds to the customer financial transaction means information in the information registration terminal 140 by region (or location) and / or by time zone and / or access channel using the financial transaction means. It is preferable to include a user interface for inputting (or selecting) a plurality of authentication means information.

In addition, the web page transmission and / or output process is preferably performed at least once in accordance with the information registration procedure, whereby the present invention is not limited.

Subsequently, the information registration terminal 140 transmits a plurality of authentication means information corresponding to the customer financial transaction means information by region (or location) and / or by time zone and / or access channel through the information registration interface. Enter (or select) 515.

If the information registration terminal 140 through the information registration interface a plurality of authentication means corresponding to the customer financial transaction means information by the region (or location) and / or time zone and / or access channel using the financial transaction means; When the information is input (or selected) (520), the information registration terminal 140 to the customer financial transaction means information input (or selected) through the communication channel by the financial transaction means use region (or location) and In operation 525, the plurality of authentication means information corresponding to each time zone and / or each access channel is transmitted to the information registration server 300.

Thereafter, the information registration server 300 is a plurality of authentication means information corresponding to the customer financial transaction means information by the region (or location) and / or time zone and / or access channel to the customer financial transaction means information through the communication channel Receive and read (530), the plurality of authentication means information and the financial transaction means information corresponding to the customer financial transaction means information by the region (or location) and / or time zone and / or access channel using the financial transaction means information A plurality of authentications stored in the storage medium 130 in association with each other (535) and corresponding to the customer financial transaction means information according to the region (or location) and / or time zone and / or access channel used by the financial transaction means. A web page including the means information registration details is generated (or extracted) and transmitted to the information registration terminal 140 (540).

6A and 6B illustrate a configuration of customer ledger information in which a plurality of authentication means information (eg, passwords) corresponding to customer financial transaction means information is stored according to an embodiment of the present invention.

In more detail, FIGS. 6A and 6B illustrate the region of use of the financial transaction means of the customer when the customer uses a predetermined financial transaction means (for example, an account or a card) through the information registration system shown in FIG. Or a plurality of authentication means information (eg, a password, etc.) used differently according to location) and / or time zone and / or access channel, and the provided plurality of authentication means information is received from the customer. A method of implementing the information contained in (and / or linked to) the ledger, and / or stored in a predetermined database associated with the customer ledger, specifically, FIG. 6A illustrates the customer financial transaction. And a plurality of authentication means information corresponding to the means is stored in association with the account ledger of the customer ledger, Surface 6b is about to an embodiment a plurality of authentication method information corresponding to the customer financial transaction means to be stored in a predetermined database associated with the customer ledger.

Those skilled in the art to which the present invention pertains can refer to and / or modify the drawings 6a and 6b to provide a plurality of authentication means information corresponding to the customer financial transaction means. It will be possible to infer various implementation methods stored in the present invention, but the present invention includes all of the inferred implementation methods, and is not limited to the implementation methods shown in FIGS. 6A and 6B.

Referring to Figure 6a, the customer ledger is CIF (Customer Information File) number, country code, contact person ID, sales office number, customer classification, customer name, customer address, region classification code, telephone number, business number, trade name, classification code , Expiration date, status headquarters information, settlement date, cash available date, surname, name, social security number, company address, company phone number, mailing address, account number, president, business type, legal representative, initial transaction date, TRW, DB, usage, Parent company number. Including at least one country name, transmission, sex resident, occupation, mailing address, company name, guardian name, guardian telephone number, legal representative business number, construction process classification, tax classification, area code, group code and postal code. Although those skilled in the art to which the present invention pertains will clearly understand the contents and features of the information contained in the customer ledger, the detailed description thereof will be omitted for convenience.

In addition, referring to Figure 6a, the customer ledger account number, CIF number, point number, currency, opening date, status, product type, interest rate, password, balance, RBI balance 1, RBI balance 2, bank balance, bankbook Number, current interest, time extension, time extension amount, ARS setting, final deposit date, final withdrawal date, final deposit amount, final withdrawal amount, unpaid account transactions, interest rate accounting, flat consolidation, final payment interest, final payment transaction number, It is relationally processed with a predetermined ledger (or ledger) that includes at least one or more individual interest rate reference and the date of final interest calculation, etc., and the ledger (or ledger) includes account number, withdrawal (months), period ( Number of days), periodic reception information including at least one term extension, expiration date and target amount, and / or trust including at least one account number, deposit amount, par value, pension date and number of shares corresponding to the account ledger. New information, and / or account number, transaction number, date, point number, commodity type, transaction type, cash amount, RBI, batch number, batch transaction, date of commencement, bank account line, Briefly, transactional information including at least one or more including CIF is processed in relational relations, etc. If one of ordinary skill in the art to which the present invention belongs, the ledger to be processed in relation to the customer ledger is the reception ledger ( It will be clearly understood that other types of ledgers (eg, loan ledgers, collateral ledgers, securities ledgers, remittance ledgers, funds ledgers, customer ledgers, etc.) may also be included in addition to the general ledger). Since at least one or more additional information processed in conjunction with the ledger of the obvious will be familiar with, the detailed description thereof will be omitted for convenience.

In addition, referring to FIG. 6A, the customer ledger includes financial information including at least one CIF number, year, B / S amount, P / L amount, manufacturing cost amount, and financial ratio, and / or CIF number, period, loan amount. Analysis of profitability, including at least one or more of balance, fund contribution rate, credit code, credit balance, credit interest, and / or CIF number, year, cash inflows, cash sales costs, cash flow, cash flows, cash flows Additional information, such as cash flow information, including at least one or more amounts is processed. If the person having ordinary knowledge in the technical field to which the present invention belongs, the additional information processed in connection with the customer ledger is the financial information, profitability analysis. In addition to the information and cash flow information, other types of additional information (e.g., contact information for the financial transaction customer, branch information, country code information, area code information, group) Information, postal code information, limit information by CIF (Customer Information File), financial institution transaction status information, major shareholder information, follow-up management information, temporary checking base information, etc.). Detailed description thereof will be omitted for convenience.

In FIG. 6A according to a preferred embodiment of the present invention, when the customer uses a predetermined financial transaction means (for example, an account or a card), the customer's financial transaction means use region (or location) and / Alternatively, the plurality of authentication means information used differently according to time zones and / or access channels may be stored in association with the account ledger (receiver ledger).

Referring to FIG. 6B, when the customer uses a predetermined financial transaction means (eg, an account or a card), the customer may use the financial transaction means by region (or location) and / or by time zone and / or access channel. The plurality of authentication means information used differently according to the information is processed in association with the CIF number corresponding to the customer ledger and stored in a predetermined database, whereby the plurality of authentication means information corresponding to the customer financial transaction means stored in the database is And the customer ledger and / or account ledger stored in the ledger D / B in a relational process.

7 is a diagram illustrating a system configuration for confirming authentication means of a customer who requests a predetermined financial transaction through a non-face-to-face channel (CD / ATM) according to one method of the present invention.

In more detail, FIG. 7 illustrates a financial transaction of a customer when a customer uses a predetermined financial transaction means (eg, an account or a card) through the information registration system shown in FIG. 1 or 3. By means of registration of a plurality of authentication means information used differently according to the region (or location) and / or time zone and / or access channel, and then using a financial terminal-based non-face-to-face such as CD / ATM operated by the financial institution. When the customer accesses a predetermined financial transaction (eg, deposit withdrawal, card use, etc.) through the financial terminal on the financial transaction system of the method, authentication means information input by the customer through the financial terminal is displayed. For the authentication means operating system to confirm that the conditions of the pre-registered authentication means to meet, and to perform the financial transaction to the customer As a municipal method, the authentication means operating system is the authentication means information (for example, password, etc.) that is input from the financial terminal connected to the financial system through the financial network and the customer connected to the financial terminal is registered by the customer Characterized in that it comprises an authentication means operating server 700 to confirm that the.

A financial system for providing a financial terminal-based non-face-to-face financial transaction may include opening at least one financial account to at least one financial transaction customer and providing at least one financial transaction service based on the financial account. A computer system provided in an institution, which processes accounting operations such as credits or receptions or trusts or foreign exchange occurring in at least one branch (or counter), processing of headquarters operations, branch office information support, and customer information management. At least one non-face-to-face financial transaction means (e.g., Internet banking) provided in the information system, the interconnection between the financial system and at least one other financial system (and / or payment system), and / or at least one external communication network. , Wireless Banking, IC Chip Based Wireless Banking, Home Banking, Telebanking, TV King, etc.), and / or an external system providing various financial transaction interfaces through at least one common network (eg, CD common network, financial common network), and / or The financial system includes an interface module corresponding to a middleware platform that provides interfacing between components in the financial system, and predetermined information (eg, ledger information) required for each function in a component in the financial system. , And / or at least one database for storing and managing management information, and / or customer relationship management (CRM) information acquired by the financial institution in processing a financial transaction to the financial transaction customer. It characterized by comprising a.

In addition, the financial system is provided in at least one or more branches (and / or branches) and / or public places through a predetermined financial network (eg, CD common network) to provide the financial terminal-based non-face-to-face financial transactions. And a communication terminal connected to a financial terminal including the CD / ATM, and performing at least one ledger-based financial transaction procedure for the financial terminal.

The financial terminal includes a CD / ATM provided at a branch (and / or branch) of a financial institution corresponding to the financial system, and / or provided in a public place, wherein the financial system and a predetermined financial system are provided. It is characterized in that the communication is connected via a network (for example, CD common network).

In the financial transaction process through the financial terminal, at least one financial transaction customer has predetermined financial instrument information in a card reader of a financial terminal such as a CD / ATM provided at the branch (and / or branch) and / or public place. An integrated circuit with a bankbook with stored MS (Magnetic Stripe), and / or an MS card (e.g., a cash card, debit card, etc.) with predetermined financial instrument information, and / or predetermined financial instrument information. When a card (eg, a cash card, a debit card, an electronic bank account) is inserted, and at least one financial transaction information is input (or selected) through a financial transaction interface screen provided by the financial terminal, the financial terminal receives the financial information. A predetermined message including means information and financial transaction information is generated and transmitted to the financial system through the financial network.

Thereafter, the financial terminal completes the financial transaction requested by the financial transaction customer by outputting the financial transaction result (eg, screen output and / or print output).

Those skilled in the art will be familiar with the detailed procedures for at least one financial transaction process using the financial terminal for each financial institution, so the detailed description thereof will be omitted for convenience. .

According to an embodiment of the present invention, the financial system processes a financial transaction corresponding to the transmitted financial transaction information through a financial means corresponding to the financial means information transmitted from the financial terminal, and returns the result to the financial network. In the process of transmitting to the financial terminal through, the authentication means operating server 700 checks the authentication means information input by the customer connected to the financial terminal, the customer registered the information shown in Figure 1 or 3 It is characterized by checking whether the system conforms to the pre-registered authentication means information.

Referring to FIG. 7, the authentication means operating server 700 is interlocked with the financial system through the external system, and for this purpose, the authentication means operating server 700 is interlocked with a predetermined interface means. It is preferred to include a component for.

Referring to FIG. 7, when the financial terminal is connected to the financial system for a predetermined financial transaction, the authentication means operating server 700 may provide the financial terminal access customer information (eg, from the financial terminal or the financial system). Information receiving unit 705 for receiving financial transaction means information, authentication information, etc.), and an information authentication unit for authenticating validity of the authentication information input corresponding to the financial transaction means information with reference to the received customer information ( And 710).

The information receiving unit 705 is a predetermined message (or data) input by the customer and transmitted from the financial terminal to the financial system while the financial terminal accesses the financial system for a predetermined financial transaction. And read the financial transaction means information (eg, card (or account) number, password, etc.) of the financial transaction customer, and the received financial transaction means information is transmitted to the information verification unit.

The information checking unit, when the financial transaction means information of the customer using the financial terminal is received (or confirmed) through the information receiving unit 705, in conjunction with the storage medium 130, the received (or confirmed) card (Or account) characterized in that the validation of the password corresponding to the number.

According to the exemplary embodiment of the present invention, the illustrated storage medium 130 includes a plurality of authentication means (eg, passwords) information corresponding to the financial transaction means of the customer registered through the information registration system of FIG. 1 or 3. Is stored, and according to an embodiment of the present invention, information on a plurality of different authentication means (for example, a password, etc.) corresponding to the financial transaction means of the customer is located in the location (or region) where the financial transaction means is used. It is characterized by being registered differently for each).

Here, the location (or area) is, the administrative area (for example, city, metropolitan city, province, city, county, ward, town, town, dong, li), the location (or branch) of the branch (or branch) of the financial institution. Station), the location (or region) of the ATM (or CD), and the like.

For example, the customer using the financial transaction means registers the password for the financial transaction means differently for each administrative area in Seoul (“1234”), Gyeonggi (“4567”), Gangwon (“8901”), etc. If the password for each administrative area is registered differently as described above through the information registration system shown in FIG. 1, the corresponding financial transaction means may be used in the corresponding region.

In addition, in the case of differently registering the passwords for the financial transaction means for each of the more detailed administrative districts, the financing for Mapo-gu (“1234”), Jongno-gu (“4567”), Gangnam-gu (“8901”), etc. It is possible to register different passwords for trading means.

In this case, when using the financial transaction means issuing financial institution branch or ATM (or CD) in Mapo-gu, the customer must enter a password (“1234”) corresponding to the mapo-gu to use the financial transaction means.

As described above, if different authentication means information is registered in the storage medium 130 for each location (or region) where the financial transaction means is used, the information authentication unit 710 may allow the customer to perform a predetermined financial transaction. Identifying the location (or region) of the financial terminal, such as the CD / ATM requesting, and inputting the password and the customer stored in the storage medium 130 corresponding to the identified location (or region) of the financial terminal By comparing the transmitted password, the password authentication operation for the predetermined financial transaction requested by the customer is performed.

To this end, the storage medium 130 or the ledger DB is stored in association with the unique number and location (or region) information of the financial terminal (CD / ATM) operated by or associated with the financial institution. desirable.

According to another exemplary embodiment of the present invention, the illustrated storage medium 130 includes a plurality of different authentication means (eg, passwords) corresponding to the financial transaction means of the customer registered through the information registration system of FIG. 1 or 3. Information) may be registered differently for each time zone in which the financial transaction means is used.

For example, the customer registers a password corresponding to the financial transaction means as "1234" from 06 to 12 o'clock, "4567" from 12 to 18:00, and "8901" to 18:00 to 24 o'clock. If it is registered as, the information authentication unit 710, the time that the financial transaction of the customer is requested from the financial terminal, such as the CD / ATM that the customer requests a predetermined financial transaction, and the identified financial transaction In response to the request time, the password stored in the storage medium 130 is compared with the password input and transmitted by the customer to perform a password authentication operation for a predetermined financial transaction requested by the customer.

According to another exemplary embodiment of the present invention, the illustrated storage medium 130 may include a plurality of authentication means (eg, a password, etc.) corresponding to the financial transaction means of the customer registered through the information registration system of FIG. 1 or 3. ), The financial transaction means may be registered differently for each channel used.

Here, the channel in which the financial transaction means is used includes a face-to-face channel including a banking service and a non-face-to-face channel including internet banking, mobile banking, ATM (or CD), TV banking, and phone banking. For example, the customer may register a password used in a face-to-face channel and a password used in a non-face-to-face channel differently. In the case of the non-face-to-face channel, Internet banking, mobile banking, ATM (or CD), Different passwords can be registered for TV banking and phone banking.

8 is a diagram illustrating a process of using a financial terminal including a CD / ATM according to the authentication means information previously set by the customer according to an embodiment of the present invention.

In more detail, FIG. 8 illustrates an authentication means that the customer has previously registered through the information registration system of FIG. 1 or 3 in the financial terminal-based non-face-to-face financial transaction process using the authentication means operating system shown in FIG. Checks information (eg, a password, etc.), and determines a predetermined financial transaction (or financial transaction) through the financial terminal according to whether the authentication means information input by the customer through the financial terminal matches the previously registered authentication means information. A method of performing a detailed inquiry), and a person having ordinary knowledge in the technical field to which the present invention pertains refers to region 8 (or location) previously registered by the customer by referring to and / or modifying the drawing. And / or the financial terminal-based non-face-to-face financial transaction channel through a plurality of authentication means information different for each time slot and / or access channel. Although various methods may be inferred, the present invention includes all the implementation methods inferred from the above, and is not limited to the implementation method shown in FIG.

FIG. 8 shows that the financial system processes a financial transaction corresponding to the transmitted financial transaction information through a financial means corresponding to financial instrument information transmitted from the financial terminal, and sends the result to the financial terminal through the financial network. In the transmission process, the authentication means operation server 700 confirms the financial transaction means and the password of the financial transaction means that is input (or selected) transmitted from the customer performing the financial transaction through the financial terminal, the confirmation A financial transaction requested by the customer by verifying that the registered password matches the password registered in the storage medium 130 according to the financial transaction means by region (or location) and / or time zone and / or access channel. To do it.

Referring to FIG. 8, an MS having a predetermined financial means information stored in a card reader of a financial terminal including a CD / ATM provided at a branch (or branch) and / or a public place of a predetermined financial transaction customer ( A customer-owned bank with magnetic stripe) and / or a customer-owned MS card (e.g., a cash card, debit card, etc.) equipped with predetermined financial instrument information, and / or a customer-owned IC equipped with predetermined financial instrument information When an integrated circuit card (eg, a cash card, a debit card, an electronic bank account) is inserted (or read), the financial terminal outputs at least one financial transaction interface screen, and the non-face-to-face corresponding to the financial transaction interface screen. According to a financial transaction procedure, predetermined financial means information (e.g., an account provided in the financial system corresponding to a financial transaction customer) from the customer-owned bank account and / or the MS card and / or the IC card. Call) and at least one financial transaction information (e.g., deposit account number, account transfer amount, withdrawal account (customer account) in the case of bank transfer transaction) corresponding to the financial transaction requested (or selected) by the financial transaction customer. Password, etc.) is input (800).

Those of ordinary skill in the art to which the present invention pertains may include the customer-owned bank account and / or MS card and / or in accordance with a non-face-to-face financial transaction procedure corresponding to at least one financial transaction interface screen provided by the financial terminal. Since it will be familiar with the process of reading predetermined financial instrument information from the IC card and inputting and processing at least one financial transaction information corresponding to the financial transaction requested by the financial transaction customer. Is omitted for convenience.

In the process, the financial terminal transmits the password information for the financial transaction customer authentication to the financial system and the authentication means operating server 700 (805), the authentication means operating server 700 (this embodiment is the authentication When the means operating server 700 exists separately from the financial system), the customer may correspond to the customer's financial transaction means by region (or location) and through the information registration system shown in FIG. In operation 810, the terminal authenticates the password transmitted from the financial terminal in association with the storage medium 130 storing the plurality of authentication means information registered for each time zone and / or for each access channel.

According to an embodiment of the present invention, a plurality of different authentication means (for example, password) information corresponding to the financial transaction means of the customer may be registered differently for each location (or region) where the financial transaction means is used. Here, the location (or area) is, the administrative district (for example, city, metropolitan, state, county, county, ward, town, town, dong, li), the location (or branch) of the financial institution ( Or region), the location (or region) of the ATM (or CD), and the like.

For example, the customer using the financial transaction means registers the password for the financial transaction means differently for each administrative area in Seoul (“1234”), Gyeonggi (“4567”), Gangwon (“8901”), etc. If the password for each administrative area is registered differently as described above through the information registration system shown in FIG. 1, the corresponding financial transaction means may be used in the corresponding region.

In addition, in the case of differently registering the passwords for the financial transaction means for each of the more detailed administrative districts, the financing for Mapo-gu (“1234”), Jongno-gu (“4567”), Gangnam-gu (“8901”), etc. It is possible to register different passwords for trading means.

In this case, when using the financial transaction means issuing financial institution branch or ATM (or CD) in Mapo-gu, the customer must enter a password (“1234”) corresponding to the mapo-gu to use the financial transaction means.

As described above, if different authentication means information is registered in the storage medium 130 for each location (or region) in which the financial transaction means is used, the authentication means operation server 700, the customer is a predetermined financial transaction Identify the location (or region) of the financial terminal, such as the CD / ATM requesting a request, and input the password stored in the storage medium 130 and the customer corresponding to the identified location (or region) of the financial terminal. By comparing the passwords to be transmitted to perform a password authentication operation for a predetermined financial transaction requested by the customer.

To this end, the storage medium 130 or the ledger DB is stored in association with the unique number and location (or region) information of the financial terminal (CD / ATM) operated by or associated with the financial institution. desirable.

According to another exemplary embodiment of the present invention, the storage medium 130 may include a plurality of different authentication means (for example, a password, etc.) corresponding to the financial transaction means of the customer registered through the information registration system of FIG. 1 or 3. ) The information may be registered differently for each time zone in which the financial transaction means is used, wherein the customer registers a password corresponding to the financial transaction means as “1234” from 06:00 to 12:00, and 12:00 If the information is registered as "4567" until 18:00 and as "8901" between 18:00 and 24:00, the information authentication unit 710 is configured to finance such a CD / ATM in which the customer requests a predetermined financial transaction. Identifying the time when the financial transaction of the customer is requested from the terminal, and inputs and transmits the password stored in the storage medium 130 and the customer corresponding to the identified financial transaction request time The password is compared to perform password authentication for a predetermined financial transaction requested by the customer.

According to another exemplary embodiment of the present invention, the storage medium 130 may include a plurality of authentication means (eg, a password, etc.) corresponding to the financial transaction means of the customer registered through the information registration system of FIG. 1 or 3. ) The information may be registered differently for each channel for which the financial transaction means are used, wherein the channel for which the financial transaction means is used includes a face-to-face channel including a financial institution window service, Internet banking, mobile banking, and ATM. (Or CD), TV banking, phone banking, and the like, including a non-face-to-face channel, for example, the customer may register differently the password used in the face-to-face and the password used in the non-face-to-face channel In the case of the non-face-to-face channel, different passwords may be registered for Internet banking, mobile banking, ATM (or CD), TV banking, and phone banking.

On the other hand, if the password transmitted from the financial terminal does not match the password for each region (or location) and / or time zone and / or access channel previously registered in the storage medium 130, the authentication means operating server 700 ) Transmits the validation authentication failure details of the transmitted password to the financial system (820), the financial system transmits the password input error message to the financial terminal (825), the error through the financial terminal The details are output (830).

On the other hand, if the password transmitted from the financial terminal meets the password for each region (or location) and / or time zone and / or access channel previously registered in the storage medium 130 (815), operating the authentication means The server 700 transmits the successful authentication verification details for the password to the financial system (835).

Then, the financial system (for example, the ledger server provided in the financial system) is at least one corresponding to the financial transaction information through the ledger corresponding to the financial instrument information (for example, customer ledger and / or receiving ledger, etc.) A financial transaction is processed and a predetermined financial transaction result corresponding to the financial transaction processing is generated (840).

In addition, the financial system transmits the generated financial transaction processing history to the financial terminal (845), and the financial terminal screen outputs the transmitted financial transaction processing history (850).

9 is a diagram illustrating a system configuration for confirming authentication means of a customer who requests a predetermined financial transaction through a non-face-to-face channel (Internet banking) according to another method of the present invention.

In more detail, FIG. 9 shows a plurality of authentications different for each region (or location) and / or time zone and / or access channel corresponding to a customer financial transaction means through the information registration system shown in FIG. 1 or FIG. After the means information is registered, an Internet banking server based on a TCP / IP (Transmission Control Protocol / Internet Protocol) based network (eg, the Internet) among financial transaction systems operated by the financial institution client terminal ( 900 and the communication channel for internet banking is connected, and confirm that the authentication means inputted by the customer connected through the financial institution customer terminal conforms to the authentication means previously registered in the storage medium 130, If so, as an implementation method for the authentication means operating system to enable the connection and financial transactions of the customer, the information providing system is a web At least one financial institution client terminal having a browser and an Internet banking server for performing validity authentication on authentication means information input by the connected customer in the process of providing an Internet banking service from at least one of the client terminals. And 900).

According to an embodiment of the present invention, the Internet banking server 900 processes the financial business required to provide the Internet banking service through a predetermined interface means and validates the validity of the authentication means information input from the connected customer. In order to perform, the storage medium 130 having a plurality of different authentication means information stored in each region (or location) and / or time zone and / or access channel corresponding to the customer financial transaction means is provided, or the storage Medium 130 is associated with the operating means.

Those skilled in the art to which the present invention pertains can easily guess the omitted components for convenience because they do not include the core technical matters of the present invention in the authentication means operating system shown in FIG. However, the present invention is not limited to the omitted elements.

For example, FIG. 9 illustrates an Internet connection between the customer terminal and the Internet banking server 900 based on a predetermined browser program (eg, Microsoft Internet Explorer, and / or Netscape's Netscape Navigator, etc.) included in the customer terminal. Although a method of implementing an authentication means operating system for performing validity authentication on authentication means information (eg, a password) input by the customer in the process of initiating or processing a predetermined financial transaction using banking is illustrated, the present invention Those skilled in the art may refer to and / or modify an internet banking-based financial transaction channel connection method using the browser program shown in FIG. 9 based on a predetermined internet banking program mounted on the customer terminal. Between the customer terminal and the Internet banking server 900 In the process of initiating or processing a predetermined financial transaction using the Internet banking includes an authentication means operating system for performing a validity authentication for the authentication means information (eg, password, etc.) input by the customer, thereby limiting the present invention Not.

In addition, if a person having ordinary knowledge in the technical field to which the present invention belongs, the non-face-to-face channel-based finance according to the present invention, in addition to the authentication means system by referring to and / or modifying the configuration of the authentication means operating system shown in FIG. An authentication means system using another banking service such as telebanking and / or wireless banking and / or TV banking for a transaction may be inferred, but in FIG. 9, an authentication means operating system using the internet banking will be described. It should be noted that the technical configuration of the present invention is not limited to the case of the Internet banking shown in FIG.

The client terminal is provided with a desktop having at least one web browser for accessing the internet banking server 900 and receiving a browsing-based wired web service based on the wired communication function based on TCP / IP and the wired communication function ( Desktop) characterized in that it comprises a wired terminal including at least one computer and / or notebook (Notebook), the Internet banking server 900 through a predetermined network means including the Internet based on TCP / IP And a communication channel for internet banking is connected.

The financial system is a computerized system provided to a predetermined financial institution to open at least one financial account to at least one customer and to process a financial transaction based on the financial account. Or an accounting system for processing a window service such as a receiving or trust or a foreign exchange, an information system for processing a headquarters business, a store information support and a customer information management, and an external system including the financial system and homes, businesses, stores and card companies. External systems that connect to the computer network and provide various electronic financial services (e.g., internet banking, phone banking, Cash Dispenser), ATM (Automatic Teller Machine), other line, call center, financial settlement, etc. An interface module corresponding to the middleware platform that provides inter-component interfacing; DBMS including at least one database that stores and manages predetermined information (eg, ledger information, and / or customer information, and / or management information, etc.) required for each function in a component in an existing financial system. (DataBase Management System), and according to the intention of the person skilled in the art and / or the type of each financial institution (for example, commercial banks, savings banks, trust banks) and the purpose and characteristics of the financial system, foreign exchange module (city O), at least one or more components such as investment finance module (not shown), international module (not shown) may be further included, and those skilled in the art to which the present invention pertains may Since the technical details of the system will be clearly understood, the detailed description thereof will be omitted for convenience, and the present invention is not limited thereto. No.

In addition, the Internet banking server 900 is interlocked with the financial system through the external system, and for this purpose, the external system includes a component for interworking with the Internet banking server 900 through a predetermined interface means. It is preferable to make.

The Internet banking server 900 is a database for storing web operation data including at least one web page source and / or digital content for providing a predetermined web service to at least one customer terminal, and / or the financial system And a DBMS including a database for storing Internet banking information required for providing a predetermined Internet banking service in connection with the DB server, or interworking with a data server provided with the DBMS according to an embodiment. Thereby, a predetermined internet banking service is provided to at least one of the customer terminals.

In particular, the Internet banking server 900, when a predetermined customer terminal access, characterized in that the validity authentication for the authentication means information (for example, password, etc.) input by the connected customer.

To this end, the information for the Internet banking may be authenticated by at least one or more customer terminals accessing and logging into the Internet banking server 900, and / or the customer may be configured to authenticate the customer corresponding to the customer terminal. 900 to authenticate the financial transaction customer during at least one financial transaction, and / or to authenticate the customer who subscribes to the financial product when the customer subscribes to at least one financial product through the internet banking server 900. It includes customer authentication information and banking element information for processing a financial transaction corresponding to the financial transaction request in conjunction with the financial system when the financial transaction request from the customer through the customer terminal, Accordingly, at least one or more information required for Internet banking may be further included. Standing and omitted for convenience.

Referring to FIG. 9, the Internet banking server 900 may establish a Hyper-Text Transfer Protocol (HTTP) based communication channel for providing a predetermined Internet banking service (or an Internet banking supplementary service) to at least one or more customer terminals. Based on the web interface unit 905 for connection and management and the connected customer information (or customer authentication information), the ledger information corresponding to the connected customer is linked to the financial system through the interface means (for example, customer transaction history). Information and / or customer wireless terminal information), the web processing unit 935 interworking with the web interface unit 905, the DBMS, and the information management unit to operate a web page to be provided to at least one or more of the customer terminals. A predetermined Internet banking service (and / or predetermined) to a page management unit 915 and at least one client terminal in conjunction with the web page operation unit 915 And a UI processing unit 910 for generating a user interface (UI) screen for providing a service) between the customer terminal and the Internet banking server 900 by the function configuration. Based on HTTP, communication channel and user interface are implemented to handle internet banking.

In addition, the Internet banking server 900, in conjunction with the UI processing unit 910 extracts a predetermined content for providing the Internet banking service from the DBMS provided in the Internet banking server 900, or the customer terminal It may be configured to further include a content management unit 920 for receiving a predetermined content to be stored in the DBMS from.

In addition, the Internet banking server 900 interoperates with the web page operation unit 915 through the UI processing unit 910 based on the customer authentication information of the Internet banking information to the at least one customer terminal to the customer authentication interface screen It may be configured to further include a customer authentication unit 925 to provide at least one or more customer authentication information based on the interface screen.

In addition, the Internet banking server 900 is connected to the web page operation unit 915 through the UI processing unit 910 based on the banking element information of the Internet banking information to the financial transaction-related interface screen to at least one customer terminal It may be configured to further include a banking processing unit 930 provided with at least one or more financial transaction-related information on the basis of the interface screen.

In addition, the Internet banking server 900 may be configured to further include a ledger processing unit 935 for performing a ledger processing procedure corresponding to the financial transaction requested by the customer in conjunction with the financial system through a predetermined interface means. The ledger processing unit 935 is preferably connected to the external system of the financial system through the interface means.

The customer authentication information stored in the DBMS includes at least one of ID / PW information and personal information (eg, name, resident registration number, address, contact information, etc.) of a customer accessing the Internet banking server 900 through the customer terminal. It is preferable to include the member information including the above, in this case, the customer authentication unit 925 interoperates with the UI processing unit 910 to request the ID / PW information of the customer to the customer terminal, the customer terminal The ID / PW information may be received from the user ID, and the ID / PW information included in the member information may be compared with the received ID / PW information to authenticate the customer connected to the Internet banking server 900.

In this case, the PW information may be registered in a plurality of different regions (or locations) and / or time zones and / or access channels according to an embodiment of the present invention, and the customer authentication unit 925 receives the received information. By comparing the PW information with the PW information stored in the storage medium 130 of the DBMS, and confirming that the customer conforms to the PW by region (or location) and / or time zone and / or access channel, which the customer has already registered. It is possible to perform the customer authentication according to the invention.

According to an embodiment of the present invention, the illustrated storage medium 130 may be included and operated in the DBMS, and the plurality of storage media 130 may correspond to the financial transaction means of the customer registered through the information registration system of FIG. 1 or 3. It is preferable that information of the authentication means (e.g., password) is stored.

In addition, according to an embodiment of the present invention, a plurality of different authentication means (eg, password, etc.) information corresponding to the financial transaction means of the customer is stored in the storage medium 130, or the customer authentication of the DBMS It may be included in the information, and may be registered differently for each time zone in which the financial transaction means are used.

For example, the customer registers a password corresponding to the financial transaction means as "1234" from 06 to 12 o'clock, "4567" from 12 to 18:00, and "8901" to 18:00 to 24 o'clock. If it is registered as, the information authentication unit, the time from the financial terminal, such as the CD / ATM that the customer requests a predetermined financial transaction to determine the time the financial transaction of the customer is requested, and corresponds to the identified financial transaction request time By comparing the password stored in the storage medium 130 and the password input and sent by the customer to perform a password authentication operation for a predetermined financial transaction requested by the customer.

According to another exemplary embodiment of the present invention, the illustrated storage medium 130 may include a plurality of authentication means (eg, a password, etc.) corresponding to the financial transaction means of the customer registered through the information registration system of FIG. 1 or 3. ), The financial transaction means may be registered differently for each channel used.

Here, the channel in which the financial transaction means is used includes a face-to-face channel including a banking service window and a non-face-to-face channel including internet banking, mobile banking, ATM (or CD), TV banking, and phone banking. For example, the customer may register a password used in a face-to-face channel and a password used in a non-face-to-face channel differently. In the case of the non-face-to-face channel, Internet banking, mobile banking, ATM (or CD), Different passwords can be registered for TV banking and phone banking.

Preferably, the ID / PW information may be provided to the Internet banking server 900 according to a conventional ID / PW transmission and reception procedure, but the ID / PW information is symmetrical in the customer terminal to provide a more advanced security function. It is preferable that the data is encrypted and received through at least one or more of a key (or secret key) encryption method, and / or a public key encryption method, and / or an electronic envelope encryption method, and / or a key exchange encryption method. The customer authentication unit 925 may further comprise a functional configuration for decrypting the ID / PW information.

In addition, the customer authentication information stored in the DBMS is the certification authority information (for example, KFTC) and certificate server information, and / or the certificate registration authority information (issuing a predetermined certificate issued to a customer connected through the customer terminal) For example, if the official certificate is registered through the party, the information of the party, the other information when the official certificate is registered through the other line, etc.), and / or the certificate information issued to the customer by the certification body is further included. Preferably, at this time, the customer authentication unit 925 by requesting the authentication certificate based customer authentication through the authentication certificate registered by the registrar to the authentication server of the certification authority, by receiving the customer authentication results from the authentication server , Can authenticate the customer.

In addition, the customer authentication unit 925 provides the communication session information and the certificate information connected to the customer terminal to the authentication server (not shown) of the certification authority, the authentication server based on the communication session information After performing a customer authentication procedure corresponding to the certificate information to the customer terminal, the result may be provided to the customer authentication unit 925.

In addition, the customer authentication information stored in the DBMS is made by including a copy of the authentication certificate of the customer accessing the Internet banking server 900 through the customer terminal, and / or issuing a predetermined authentication certificate to the customer It is preferable to include the directory connection information of the institution, wherein the customer authentication unit 925 is linked to the certificate server of the certification authority that issued a predetermined certificate to the customer certificate-based customer information to the customer terminal Requesting, receiving the certificate-based customer information from the customer terminal, and authenticating the certificate-based customer information through the copy of the certified certificate and / or the directory of the certification authority, thereby authenticating the customer.

Preferably, the certificate-based customer information may be a predetermined random number generated by the customer authentication unit 925, or a predetermined random number generated by the customer terminal, in which case the customer terminal is the official certificate through the certificate The random number is encrypted using at least one or more of a symmetric key (or secret key) encryption method, and / or a public key encryption method, and / or an electronic envelope encryption method, and / or a key exchange encryption method. 925) (e.g., if the random number is generated in the customer terminal, further includes a random number in plain text), and is extracted from the copy of the certificate of the customer and / or from the directory by the customer authentication unit 925. Decrypt the random numbers encrypted based on the certificate information of the customer and compare them with each other, and / or the random number in the plain text form (eg, the high By intercomparison encrypts the random number generated by the random number generated by the authentication unit (925), and / or the customer terminal), it is possible to authenticate the customer.

According to another embodiment of the present invention, the certificate-based customer information is stored information previously stored in the customer terminal (for example, the information stored in the storage device of the customer terminal in the Internet banking server 900, and / or the Information (or system information) previously stored in the customer terminal, and / or storage information (eg, IC card (and / or IC chip) read out from the IC card (and / or IC chip) interworking with the customer terminal. A serial number and / or information stored in the IC card (and / or IC chip) memory by the IC card (and / or IC chip) issuing authority), in which case the customer terminal may Encrypting the stored information through at least one of a symmetric key (or secret key) encryption method, a public key encryption method, and / or an electronic envelope encryption method, and / or a key exchange encryption method. Increment 925 (to provide, the customer authentication unit 925 by decrypting the encrypted stored information based on the copy of the customer's accredited certificate and / or the customer's accredited certificate information extracted from the directory to compare with each other , Can authenticate the customer.

According to another exemplary embodiment of the present invention, the certificate-based customer information is input information input through an input means provided in the customer terminal (for example, information input through a key input device provided in the customer terminal, and And / or information input through an input device (eg, a short-range communication device, etc.) other than a key input device provided in the customer terminal, in which case the customer terminal symmetrics the input information through the certificate. (Or secret key) encrypts and / or provides a public key encryption method, and / or an electronic envelope encryption method, and / or an encryption method using at least one or more of a key exchange encryption method to the customer authentication unit 925. And, based on the authentication information of the customer extracted from the copy of the customer's official certificate and / or the directory in the customer authentication unit 925 By intercomparison by decoding the input encrypted information, it is possible to authenticate the customer.

In addition, the customer authentication information stored in the DBMS is preferably made of OTP generation information for generating an OTP authentication code matching the OTP code generated through the OTP (One Time Password) authenticator provided to the customer, wherein the customer The authentication unit 925 interoperates with the UI processing unit 910 to request a predetermined OTP code to the customer terminal, receive the OTP code from the customer terminal, and based on the OTP generation information, a predetermined OTP authentication code. By generating, and by comparing the generated OTP code and the generated OTP authentication code, it is possible to authenticate the customer.

The OTP code is a symmetric key (or secret key) encryption method, and / or public key encryption method, and / or electronic envelope encryption method, and / or key exchange encryption method in the customer terminal to provide a more advanced security function It is preferable that the data is encrypted and received through at least one of the encryption schemes. For this purpose, the customer authentication unit 925 further includes a functional configuration for decrypting the OTP code.

When at least one financial transaction is requested from the client terminal, the banking processor 930 provides the financial transaction request information input interface screen corresponding to the requested financial transaction to the client terminal in cooperation with the UI processor 910. And, when predetermined financial transaction request information is input (or selected) and received from the customer terminal through the financial transaction request information input interface screen, the predetermined financial transaction request information corresponding to the financial transaction request information is referred to. Financial transaction information is generated (or extracted) and provided to the ledger processing unit 935.

For example, when the financial transaction requested from the client terminal is a bank transfer transaction, the banking processor 930 may interwork with the UI processor 910 to transmit information to the client terminal (eg, withdrawal account number or withdrawal). Provides a predetermined interface screen for inputting (or selecting) an account password, deposit bank information, deposit account number, transfer amount information, security code number, etc., and provides information (e.g., When a withdrawal account number, withdrawal account password, deposit bank information, deposit account number, transfer amount information, security code number, etc.) is input (or selected) and received, the transfer amount is transferred from the withdrawal account with reference to the banking element information. Generates the predetermined financial transaction information to withdraw money and deposits it into the deposit account and provides it to the ledger processing unit 935.

According to an embodiment of the present invention, the banking processing unit 930 receives the predetermined financial transaction request information from the customer terminal, in conjunction with the customer authentication unit 925 through the at least one customer authentication method through the financial method It is preferable to authenticate the customer who requested the transaction, thereby, confidentiality and authentication of the customer who requested the financial transaction through the customer terminal (or a customer who has entered (or selected) and transmitted the financial transaction request information). ), Integrity and Nonrepudiation are secured.

The ledger processing unit 935 may be linked with the financial system through a predetermined interface means. When the predetermined financial transaction information is generated (or extracted) by the banking processing unit 930, the financial transaction information may be used. Identify at least one or more ledger information to be extracted from the ledger on the financial system, extract the identified ledger information from the ledger on the financial system through the interface means, and / or correspond to the financial transaction information. And generate (or extract) ledger record information recorded in the ledger on the financial system, and record the generated (or extracted) ledger record information in the ledger on the financial system through the interface means.

FIG. 10 is a diagram illustrating a process of authenticating an access customer when using Internet banking according to another embodiment of the present invention.

In more detail, in FIG. 10, in the authentication means operating system shown in FIG. 9, a predetermined customer terminal is provided with an Internet banking server provided in the information providing system through a TCP / IP based network (for example, the Internet). 900, a plurality of authentications different for each region (or location) and / or time zone and / or access channel registered by the customer through the information registration system shown in FIG. 1 or 3 according to the present invention. The method for the process of the authentication process of the access customer is performed according to the means information, if the person of ordinary skill in the art to which the present invention pertains, refer to and / or modified this figure 10 the customer terminal It can be inferred from the customer authentication means information operating method using the Internet banking-based financial transaction channel between the Internet banking server 900, but the present invention It includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

In addition, according to an embodiment of the present invention, the Figure 10 is the Internet banking server 900 through a predetermined browser program (for example, Internet Explorer of Microsoft Corporation, and / or Netscape Navigator of Netscape, etc.) provided in the customer terminal ), The Internet banking-based financial transaction channel for the financial transaction using the Internet banking between the customer terminal and the Internet banking server 900 based on the browser program to validate the validity of the authentication means information of the customer Although an implementation method of authenticating is illustrated, a person having ordinary knowledge in the technical field to which the present invention belongs may refer to and / or modify an internet banking-based financial transaction channel connection method using the browser program shown in FIG. Based on a predetermined internet banking program mounted on the terminal It is possible to infer a method of authenticating the validity of the authentication means information of the customer by connecting an internet banking-based financial transaction channel for financial transactions using internet banking between the client terminal and the internet banking server 900. The present invention includes the provided Internet banking-based financial transactions based on the Internet banking program, whereby the present invention is not limited.

Also, those skilled in the art may refer to and / or modify the Internet banking-based financial transaction channel connection method illustrated in FIG. 10, in addition to the internet banking system, a telebanking system and / or Other banking systems, such as wireless banking systems and / or TV banking systems, may infer an implementation method of connecting non-face-to-face channel based financial transaction channels for financial transactions using Internet banking, but the present invention provides the telebanking system and And / or all types of non-face-to-face channel based financial transactions, including wireless banking systems and / or TV banking systems and / or non-face-to-face channel banking systems proposed in the future, the technical configuration of the present invention being illustrated in FIG. It is by no means limited to Internet banking.

Referring to FIG. 10, when a predetermined client program is executed in a predetermined client terminal to access the Internet banking server 900 through the TCP / IP-based network (1000), the Internet banking server 900 is the browser. Connect the communication channel between the customer terminal and the Internet banking server 900 through (1005), wherein the communication channel is a predetermined web at the request of the browser program provided to the customer terminal in the Internet banking server 900 At least one or more information (or data) generated (or extracted) and transmitted to the customer terminal and input (or selected) based on a predetermined user interface included in the web page in a browser program included in the customer terminal. It means that a predetermined communication session is allocated to receive a).

According to another exemplary embodiment of the present invention, when a predetermined internet banking program is provided in the customer terminal, the internet banking server 900 may be connected to the internet banking program based on a predetermined communication protocol defined in the internet banking program. A communication channel for transmitting and receiving at least one or more information (or data) may be allocated.

Thereafter, the internet banking server 900 includes a predetermined security module for internet banking on the customer terminal in a predetermined web page (eg, an internet banking main page) generated (or extracted) for providing to the customer terminal. A predetermined security module for internet banking is installed in the customer terminal by adding a predetermined script to confirm whether or not to update the security module, and / or providing it to the customer terminal. Or, it is checked whether the security module is updated (1010).

According to another exemplary embodiment of the present invention, when a predetermined internet banking program is provided in the customer terminal, the internet banking server 900 requests version information and / or last update date information, etc., from the internet banking program. You can check whether you want to update your Internet banking program (and / or security modules associated with your Internet banking program).

If a predetermined security module is to be installed and / or updated in the customer terminal (1015), the Internet banking server 900 may be configured to update the latest version to the customer terminal according to a remote program installation procedure defined in the browser program. Transmit and mount and / or update the security module for Internet banking (1020).

If the customer terminal does not need to install and / or update the latest version of the Internet banking security module (1025), or if the customer terminal does not need to install and / or update the Internet banking security module (1015). The banking server 900 connects a security channel for internet banking between the client terminal and the internet banking server 900 (or the client terminal and the internet banking server 900) by activating a security module for internet banking mounted on the client terminal. (1030), wherein the security channel for internet banking is secured among information (or data) included in a web page to be provided to the customer terminal from the internet banking server 900. Attach a predetermined digital signature to this required information (or data) and / or provide encryption by at least one encryption method (and / or encryption algorithm). The client terminal confirms the digital signature and / or decrypts the information (or data) with a predetermined decryption method (and / or decryption algorithm) corresponding to the encryption method (and / or encryption algorithm). Means a communication channel, and attaches a predetermined digital signature to information (or data) to be provided to the Internet banking server 900 for financial transactions using the Internet banking in the customer terminal and / or at least one encryption scheme (And / or encrypted by an encryption algorithm), the Internet banking server 900 confirms the digital signature and / or a predetermined decryption method (and / or corresponding to the encryption method (and / or encryption algorithm)). Or a communication channel for decoding the information (or data) with a decoding algorithm).

According to another exemplary embodiment of the present invention, when a predetermined internet banking program is provided in the customer terminal, the Internet banking-based secure channel may be connected to the customer at the internet banking server 900 according to a communication protocol defined in the internet banking program. When the electronic signature is attached to the information (or data) to be provided to the terminal and / or encrypted and provided by at least one or more encryption methods (and / or encryption algorithms), the electronic signature is confirmed by the customer terminal. Or a communication channel for decrypting the information (or data) with a predetermined decryption method (and / or decryption algorithm) corresponding to the encryption method (and / or encryption algorithm), and furthermore, Internet banking is performed by the customer terminal. Information (or data) to be provided to the Internet banking server 900 for the financial transaction using A predetermined electronic signature and / or encrypted and transmitted with at least one encryption method (and / or encryption algorithm), the Internet banking server 900 confirms the digital signature and / or the encryption method. A communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to (and / or an encryption algorithm).

Here, the security module is characterized by performing an electronic signature attachment, and / or encryption, and / or decryption function for the information (or data) by using the customer's official certificate mounted on the customer terminal. .

When the secure channel for internet banking is connected, the internet banking server 900 requests the terminal to perform an internet banking customer authentication procedure through the browser program (1035).

According to an exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (for example, an ID / PW or customer number registered by the customer in the internet banking application process) through the customer terminal. And the like) are input (or generated) and transmitted to the internet banking server 900, the Internet banking server 900 authenticates a customer connected through the customer terminal based on the customer authentication data as an internet banking customer. In this case, the customer authentication data is preferably transmitted through the digital signature and / or encrypted through the secure channel.

According to another exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (for example, an ID / PW registered by the customer in an internet banking application process or a customer through the customer terminal). Number, etc.) and input (or generate) to the authentication server, the authentication server authenticates the customer connected through the customer terminal as the Internet banking customer based on the customer authentication data, and the result is the Internet banking. It is made to include providing to the server 900, wherein the customer authentication data is preferably including a certificate-based authentication data, the authentication server is a server for authenticating the certificate-based authentication data.

Thereafter, the customer terminal inputs (or generates) predetermined customer authentication data according to the request, and electronically signs and / or encrypts the data through the security module to the internet banking server 900 (and / or authentication server). Thereby requesting Internet banking customer authentication (1340), and the Internet banking server 900 (and / or authentication server) deactivates the customer accessing through the customer terminal based on the customer authentication data received from the customer terminal. Authenticate as an Internet banking customer for face-to-face channel-based financial transactions (1045).

In the process of performing the customer authentication procedure as described above, the Internet banking server 900 (and / or authentication server) is the region (or location) registered by the customer through the information registration system shown in Figure 1 or 3 ) And / or a plurality of authentication means information (for example, a password, etc.) different for each time zone and / or access channel, and the customer authentication means information received from the customer terminal, thereby validating the customer authentication means. It characterized in that to perform.

Here, if the authentication means information received from the customer terminal does not meet the authentication information corresponding to the region (or location) and / or time zone and / or access channel previously registered by the customer (eg, time zone) Incorrectly inputting authentication means information or incorrectly inputting authentication means information for each channel) (1050), and the Internet banking server 900 blocks the security channel for internet banking for the customer terminal (1055). Process to prevent internet banking-based financial transactions through customer terminals.

On the other hand, if the Internet banking customer authentication is successful (1050), the Internet banking server 900 connects the security channel for Internet banking for the customer terminal, and initiates the financial transaction business requested by the customer (1055). .

According to the present invention, by differentiating the authentication means (password, etc.) of the payment means possessed by the customer by location / time of use / use channel of the customer, to realize double security, and thereby to financial damage due to password exposure, etc. The advantage is that it can be reduced.

Claims (5)

Authentication means registration means for differently registering customer-owned account (or card) authentication means (authentication means including a password) for each location of use of the account (or card) of the customer; Information checking means for confirming location information of the customer when the customer requests to use the account (or card); Corresponds to the location information of the customer identified by the information verification means through the account (or card) authentication means (authentication means including a password) information for each location of use of the account (or card) of the customer previously registered through the authentication means registration means. Check the information of the registered authentication means (authentication means including password), and the authentication means (authentication means including password) information and the authentication means provided when the customer requests the use of the account (or card). (Authentication means including a password) information comparison means for comparing whether or not the information is matched; And As a result of the comparison, authentication information (authentication means including a password) registered in correspondence with the confirmed location information of the customer and authentication means (password) provided by the customer when using the account (or card) request Authentication means) If the information matches, the customer approves the use of the account (or card), and if the result of the comparison does not match, the account (or card) use approval processing means for providing a predetermined error message to the customer; Variable account (or card) authentication means operating system comprising a. Authentication means registration means for differently registering account (or card) authentication means (authentication means including a password) information owned by the customer for each time of use of the account (or card) of the customer; Information checking means for checking a time zone for using the account (or card) when the customer requests to use the account (or card); The account (or card) of the customer identified by the information checking means through the account (or card) authentication means (authentication means including a password) information for each time period of use of the account (or card) of the customer previously registered through the authentication means registration means. Check the information of the pre-registered authentication means (authentication means including a password) corresponding to the use time, and the information on the confirmed authentication means (authentication means including a password) and the customer requests the use of the account (or card) Information comparing means for comparing whether or not the authentication means (authentication means including a password) provided with the information is matched; And As a result of the comparison, the authentication means (authentication means including a password) information previously registered corresponding to the confirmed time zone information of the account (or card) and the authentication means provided when the customer requests the use of the account (or card) ( Authorization means including passwords) If the information is matched, the customer approves the use of the account (or card), and if the result of the comparison does not match, approves the use of the account (or card) to provide the customer with an error message And a processing means; variable account (or card) authentication means operating system comprising a. The account (or card) authentication means (authentication means including password) of the customer's own account (or card) information is used for each channel (interface channel, internet banking channel, automation device channel, mobile banking channel, TV banking channel) using the customer's account (or card). Authentication means registration means for registering otherwise; Information checking means for checking the account (or card) use channel information when the customer requests to use the account (or card); Account (or card) authentication means (password) for each channel (face-to-face, Internet banking channel, automated device channel, mobile banking channel, TV banking channel) using the account (or card) of the customer registered through the authentication means registration means The authentication means (confirmation means) including the authentication means (authentication means including a password) corresponding to the account (or card) use channel information of the customer identified by the information confirmation means through the information; Information comparing means for comparing information (authentication means including a password) with information matching the authentication means (authentication means including a password) provided by the customer when the user requests to use the account (or card); And As a result of the comparison, the authentication means (authentication means including a password) information registered corresponding to the confirmed account (or card) use channel information and the authentication means provided when the customer requests the use of the account (or card) ( Authorization means including passwords) If the information is matched, the customer approves the use of the account (or card). If the result of the comparison does not match, approves the use of the account (or card) to provide the customer with a predetermined error message. And a processing means; variable account (or card) authentication means operating system comprising a. A computer-readable recording medium having recorded thereon a program for executing the system constructing function of any one of claims 1 to 3. The server's own account (or card) authentication means (authentication means including passwords) may differ from the customer's account (or card) location used or by the account (or card) time zone or by the account (or card) usage channel. Registering; When the customer requests to use the account (or card) at the server, confirming the location, time of use, or use channel of the customer; Check the information of the authentication means (authentication means including a password) previously registered corresponding to the identified customer location or use time zone or the use channel in the server, and check the information on the verified authentication means (authentication means including a password); Comparing or not matching authentication information (authentication means including a password) provided by the customer when the account (or card) is used; And As a result of the comparison in the server, authentication information (authentication means including a password) registered in correspondence with the identified location or time of use of the customer or use channel and information provided by the customer when the user requests the use of the account (or card) If the authentication means (authentication means including a password) information is matched, the customer's use of the account (or card), and if the result of the comparison, if not matched, and providing a predetermined error message to the customer; Method of operating a variable account (or card) authentication means, characterized in that made.

Images