KR101083210B1 - System and Method for Managing Public Certificate of Attestation with Unlawfulness Usage Prevention Application and Recording Medium - Google Patents

Abstract

The present invention relates to an authorized certificate operation method and system for providing an illegal use prevention function and a recording medium therefor. The method for providing a financial transaction service through an authorized certificate issued to a customer includes a request for issuing a new authorized certificate or issuing a certificate. In order to request the use condition registration to prevent illegal use of the authorized certificate, when the use condition information is received, the certificate information and the use condition information for the newly issued official certificate or the previously issued public certificate are connected to each other. Storing in a storage medium, and when the customer requests to use a financial transaction service through an authorized certificate, confirms whether to set a use condition for the authorized certificate in association with the storage medium, and sets the use condition to the customer. Checking whether it is suitable to use financial transaction service through an accredited certificate And, if the official certificate is confirmed to be suitable for the use of financial transaction services, the step of processing to provide a financial transaction service through the authorized certificate, and the use conditions, for the terminal using the authorized certificate This is a condition of use that is verified based on the terminal's unique information or local information using a public certificate.

certification

Description

System and Method for Managing Public Certificate of Attestation with Unlawfulness Usage Prevention Application and Recording Medium}

1 is a diagram illustrating a face-to-face biometric information registration system for identification using biometric information according to an embodiment of the present invention.

2A and 2B illustrate a process of registering biometric information registration application information in a face-to-face manner according to an exemplary embodiment of the present invention.

3A and 3B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

4A and 4B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

5 is a diagram illustrating a non-face-to-face biometric information registration system for identification using biometric information according to another exemplary embodiment of the present invention.

6A and 6B are views illustrating a process of registering biometric information registration application information in a non-face-to-face manner to identify an identity using biometric information according to one embodiment of the present invention.

7 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate having an illegal use prevention function according to an embodiment of the present invention.

8 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate having an illegal use prevention function according to an embodiment of the present invention.

9 is a diagram illustrating a functional configuration of a certificate issuing terminal 715 for issuing and processing a public certificate having an illegal use prevention function according to an embodiment of the present invention.

10A and 10B illustrate a process of issuing and processing a public certificate having an illegal use prevention function according to one embodiment of the present invention.

11A and 11B are views illustrating a process of issuing and processing a public certificate having an illegal use prevention function according to another exemplary embodiment of the present invention.

12 is a diagram illustrating a financial transaction system for providing a financial transaction service according to an embodiment of the present invention.

FIG. 13 is a diagram illustrating a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to one embodiment of the present invention.

14A and 14B illustrate a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to another exemplary embodiment of the present invention.

<Description of main parts of drawing>

700: certificate authority server 705: certificate server

710: financial institution server 1200: interface unit

1205: interface providing unit 1210: information receiving unit

1215: information transmission unit 1220: information confirmation unit

1225: certificate processing unit 1230: validation unit

1235: financial transaction processing unit 1240: financial system

1245: financial transaction terminal

The present invention pre-registers the use conditions for using the official certificate to the customer using the financial transaction service through the public certificate, and by using the financial transaction service through the public certificate only if the pre-registered use conditions are met. To prevent hacking damage.

With the development of information and communication technology, financial transactions, which were only performed on the offline, have been made through a network called the Internet, thereby providing convenience to many customers.

However, Internet banking provided through a network called the Internet is always exposed to the problem of hacking due to the fact that the network is available and accessible to anyone, and thus various problems occur.

In order to solve this situation, by providing a public certificate as an authentication means and providing an Internet banking service through a public certificate, a security vulnerability is solved. However, when a public certificate is illegally issued, it is fundamentally hacked. The situation cannot be free.

An object of the present invention for solving the above problems is to pre-register the terms of use for using the certificate to the customer using the financial transaction service through the certificate, and only if the pre-registered use conditions are met through the certificate To provide a method and system for enabling the use of financial transaction services and a recording medium therefor.

The method for providing a financial transaction service through an authorized certificate issued to a customer according to the present invention includes a condition for requesting a new certificate issued or a request for use condition registration for preventing illegal use of a previously issued certificate. If received, the step of connecting the certificate information and the terms of use information for the newly issued certificate or the previously issued certificate to the customer to the storage medium, and the customer requests the use of financial transaction services through the certificate And confirming whether or not to set a use condition for the authorized certificate in association with the storage medium, and checking whether the set use condition is suitable for the customer to use the financial transaction service through the authorized certificate. Is confirmed to be suitable for the use of financial transactions services, Characterized in that it comprises the step of processing to provide a financial transaction service through the use conditions, the use is confirmed on the basis of the terminal specific information for the terminal using a public certificate or local information using a public certificate It is characterized by the condition.

In the method of operating an authorized certificate providing an illegal use prevention function according to the present invention, if the authorized certificate is found to be in a state not suitable for use conditions, the process of obtaining a use certificate for the authorized certificate and providing a financial transaction service is provided. Characterized in that comprises a.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording the program for executing the authorized certificate operation method for providing the above-described illegal use prevention function.

On the other hand, the system for providing a financial transaction service through a public certificate issued to a customer according to the present invention, the use condition for requesting a new official certificate issuance request or registration of the use condition for preventing illegal use of the previously issued public certificate, When the information is received, a storage medium for storing the certificate information and conditions of use for the newly issued public certificate or the previously issued public certificate to the customer, and the customer requests to use the financial transaction service through the public certificate. And a means for confirming whether or not to set a use condition for the authorized certificate in association with the storage medium, and for confirming whether the set use condition is suitable for the customer to use the financial transaction service through an authorized certificate, and the authorized certificate. Is confirmed to be suitable for the use of financial transactions services, It characterized in that it comprises a means for processing to provide a financial transaction service through, the use conditions, the use is confirmed on the basis of the terminal specific information for the terminal using a public certificate or local information using a public certificate It is characterized by the condition.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a face-to-face biometric information registration system for identity verification using biometric information according to an embodiment of the present invention.

In more detail, in Figure 1, a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information. Acquires predetermined image contents corresponding to the biometric information registration application, and obtains from the biometric information registration application information and the biometric information registration application corresponding to the biometric information registration application to the biometric information registration system through a predetermined biometric information registration interface. When the provided image content is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information and biometric information included in the biometric information registration request information are linked. System configuration for processing and storing in a predetermined storage medium (145) Specifically, the present invention relates to an implementation method in which the electronic document repository is provided on an external system associated with the biometric information registration system through a predetermined communication means.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 1 to infer various implementation methods for the configuration of a biometric information registration system for identification using biometric information. The present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 1 to infer an implementation method provided in a DBMS in which the electronic document repository is located in the biometric information registration system. It will be appreciated that the present invention includes all implementation methods inferred above and is not limited to the implementation method illustrated in FIG.

In addition, according to the implementation method shown in FIG. 1, the biometric information registration electronic document corresponding to the biometric information registration application is described as being generated on the server side on the biometric information registration system, but the present invention is limited thereto. The biometric information registration electronic document may be generated at a terminal that has obtained image content corresponding to the biometric information registration application through a predetermined image acquisition device (for example, generating an electronic document provided at the server side). Function is provided on the terminal side to generate the biometric information registration electronic document), by which the present invention is not limited.

In addition, according to the implementation method illustrated in FIG. 1, the biometric information included in the biometric information registration application includes only selection information for selecting the type of biometric information (eg, fingerprint, iris, etc.), and the biometric information registration application. At the time, it is possible to receive biometric information about the user, whereby the present invention is not limited.

Hereinafter, the biometric information registration application and the biometric information registration application corresponding to the biometric information registration application created by the customer through a predetermined biometric information registration interface on the biometric information registration system shown in FIG. Receiving a registration application and storing the biometric information newly stored biometric information newly stored and stored in the storage medium 145 of the predetermined biometric information at least one means and / or components corresponding to the functional configuration "information registration server 100 for convenience "

Referring to FIG. 1 according to an embodiment of the present invention, a biometric information registration system for identifying an identity using the biometric information includes an information registration terminal including an employee terminal provided at at least one branch of a certification authority (or a branch). Characterized in that it comprises a 180, the information registration terminal 180 is connected to the communication channel and the information registration server 100 provided on the biometric information registration system through a predetermined communication network.

According to an exemplary embodiment of the present invention, the customer visits the certification authority branch (business office) for identification using the biometric information, and visits a window staff (or counter staff) through a window provided at the certification authority office (business office). Through a biometric information registration application (for example, a document provided with a form for filling in at least one information item for identifying the identity using the biometric information) Preferably, the customer seals the seal of the customer's seal for the legal basis for the biometric information registration application.

Then, when the customer submits the completed biometric information registration application to the teller staff, the teller staff scans the biometric information registration application through a predetermined image acquisition device to obtain a predetermined image content, and a predetermined employee terminal Input (or select) biometric information registration application information including at least one of image content obtained in response to the biometric information registration application, customer information written in the biometric information registration application, and biometric information, and correspondingly The employee terminal preferably transmits the image content and the biometric information registration application information to the information registration server 100 provided on the biometric information registration system through the communication network.

Here, the employee terminal preferably comprises a terminal used by the employee of the branch (or branch) of the certification authority, the information registration server 100 connected to the employee terminal is provided on the predetermined certification authority system It is desirable to include a server.

In the biometric information registration system as described above, an image acquisition device for obtaining image content corresponding to the biometric information registration application prepared by the customer, the employee terminal used by the employee and the employee terminal and the information registration server 100 The communication network connecting to perform a function of the biometric information registration interface for registering the biometric information registration application information for the customer to identify the identity using the biometric information.

The storage medium 145 provided on the biometric information registration system according to the present invention performs a predetermined process by linking the customer information and the biometric information included in the biometric information registration information provided from the information registration terminal 180. The storage medium 145 is characterized in that the storage.

The customer information includes personal information (eg, name, resident registration number, address, phone number, mobile phone number, e-mail address, etc.) of the customer who filled out the biometric information registration application, and member information of the customer (eg, the customer And at least one member ID information, etc. included in the customer D / B provided on the certification authority system associated with the biometric information registration system in response to the customer. desirable.

The biometric information may be provided by a customer who filled out the biometric information registration application (or scanned by scanning a body part of the customer (eg, fingerprint, iris, face, etc.)) and / or features on the image data (eg, among fingerprints). Characteristic of the pattern that is differentiated from the general pattern) It is preferable to include at least one data.

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system, and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

The information registration server 100 provided on the biometric information registration system according to the present invention is a generic term for the components of the biometric information registration system side connected to the information registration terminal 180 through a predetermined communication network. It may be implemented by including a server (or device), and / or implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), by which the present invention is not limited.

According to an embodiment of the present invention, the information registration server 100 is provided with an interface unit 105 (or interface means) for managing connection between the information registration terminal 180 and a predetermined communication channel through the communication network. Characterized in that made.

When the information registration terminal 180 is an employee terminal connected to a predetermined communication network according to an embodiment of the present invention, the interface unit 105 communicates with the employee terminal based on a protocol stack defined in the communication network. It is preferable to provide a communication interface for transmitting and receiving at least one or more information (or data) by connecting a channel and using a communication protocol defined in the biometric information registration program provided in the employee terminal.

Referring to FIG. 1, when the predetermined information registration terminal 180 connects a predetermined communication channel with the information registration server 100 through the interface unit 105, the information registration server 100 is connected to the living body. Acquiring image contents corresponding to the biometric information registration application prepared by the customer through a predetermined image acquisition device provided in the information registration terminal 180 to confirm the identity using the information, and the biometric information corresponding to the biometric information registration application Generate (or extract) at least one user interface for inputting (or selecting) information registration request information to be transmitted to the information registration server 100, and generating (or extracting) in connection with the interface unit 105. In the interface providing unit 110 (or interface providing means) for providing a user interface to the information registration terminal 180, the information registration terminal 180 When the biometric information registration application information corresponding to the biometric information registration application is input (or selected) through a user interface, the biometric information transmitted from the information registration terminal 180 in association with the interface unit 105 is transmitted. The information receiving unit 115 (or information receiving means) for receiving registration application information and the biometric information registration application prepared by the customer through the predetermined image acquisition device based on the user interface in the information registration terminal 180 Acquire and transmit the image content, characterized in that it comprises an image receiving unit 120 (or image receiving means) for receiving the image content corresponding to the biometric information registration application in connection with the interface unit 105. .

The interface providing unit 110 connects a predetermined communication channel with the information registration server 100 through the interface registration unit 105, and then the information registration server 100 to the information registration server 100. When requesting a user interface for identification using biometric information, an image content corresponding to the biometric information registration application prepared by the customer is obtained through a predetermined image acquisition device provided in the information registration terminal 180, and the biometric information is obtained. Generate at least one user interface for inputting (or selecting) biometric information registration application information corresponding to the information registration application to be transmitted to the information registration server 100 through the communication network, and / or a predetermined database (not shown) Omit the extracted user interface in conjunction with the interface unit 105. To the information characterized in that it provides to the registered terminal 180. The

According to another embodiment of the present invention, the information registration terminal 180 acquires the image content corresponding to the biometric information registration application written by the customer through a predetermined image acquisition device, and the biometric information corresponding to the biometric information registration application. If a predetermined information registration program having at least one user interface for inputting (or selecting) registration application information and transmitting the information to the information registration server 100 through the communication network is provided, obtaining a predetermined image as described above. Obtain an image content corresponding to the biometric information registration application prepared by the customer through the device, and input (or select) biometric information registration application information corresponding to the biometric information registration application to be transmitted to the information registration server 100. Generate (or extract) a user interface to the information registration terminal 180. Interface providing unit 110 may be omitted mubang to, and which the present invention is not limited.

Thereafter, the information registration terminal 180 inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface, and registers the input (or selected) biometric information. The application information is transmitted to the information registration server 100 through the communication network. In response thereto, the information receiving unit 115 is connected to the interface unit 105 to transmit the biometric information transmitted from the information registration terminal 180. Characterized in that the registration application information is received.

In addition, the information registration terminal 180 obtains the image content corresponding to the biometric information registration application written by the customer through a predetermined image acquisition device based on the user interface, and the obtained image content through the communication network The image receiving unit 120 receives the image content corresponding to the biometric information registration application in association with the interface unit 105.

According to another exemplary embodiment of the present invention, the information registration terminal 180 acquires image content corresponding to the biometric information registration application prepared by the customer through a predetermined image acquisition device and is provided to the information registration terminal 180. In the case of pre-stored in a predetermined (or associated) storage device, the information registration terminal 180 to the biometric information registration application created by the customer of the at least one or more image content previously stored in the storage device through the user interface A corresponding image content is selected and transmitted to the information registration server 100 through the communication network. In response, the image receiving unit 120 is connected to the interface unit 105 to correspond to the biometric information registration application. It is desirable to receive content.

According to another embodiment of the present invention, the biometric information registration application corresponding to the biometric information registration application and the image content corresponding to the biometric information registration application created by the customer through the user interface at the information registration terminal 180. In the case of transmitting the beam together, the information receiving unit 115 may receive the image content corresponding to the biometric information registration application and the biometric information registration application information together with the interface unit 105 (for example, the image receiving unit). 120 is integrated into the information receiving unit 115, and the present invention is not limited thereto.

Referring to FIG. 1, when the biometric information registration request information transmitted from the information registration terminal 180 is received through the information receiving unit 115, the information registration server 100 receives the biometric information registration request information. It is characterized in that it comprises a validity verification unit 125 (or validity confirming means) for confirming whether the validity for identity verification using the biometric information.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

Referring to FIG. 1, the information registration server 100 receives the image content transmitted from the information registration terminal 180 through the image receiving unit 120, and receives the biometric information through the validity checking unit 125. When the validity of the information registration application information is authenticated, the electronic document generating unit 130 (or electronic document generating means) for generating a predetermined biometric information registration electronic document including the received image content, and the generated biometric information And an electronic document transmission unit 135 (or an electronic document transmission means) for transmitting a registration electronic document to an electronic document repository associated with the biometric information registration system.

The electronic document generating unit 130 may generate a biometric information registration electronic document including the image content received from the information registration terminal 180 through the image receiving unit 120.

According to an exemplary embodiment of the present invention, the electronic document generation unit 130 stores the biometric information intact as an image file including the image content received from the information registration terminal 180 through the image receiving unit 120. It is preferable to process the biometric information registration electronic document for identity verification.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. It is preferable to generate a biometric information registration electronic document for identification using the biometric information to an image file corresponding to the image content including at least one or more of the customer information and biometric information in a watermarking manner.

According to another embodiment of the present invention, the electronic document generating unit 130 is a predetermined document file (eg, including the image content received from the information registration terminal 180 through the image receiving unit 120) Generating a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one of HWP / DOC, or a web document file including MHT) It is preferable to generate a biometric information registration electronic document for identity verification.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. Generating an image content including at least one or more of the stored customer information and biometric information by a watermarking method, and including a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content, Or EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, etc., or a web document file including the MHT)) to register the biometric information for identification using the biometric information It is desirable to create an electronic document.

According to another exemplary embodiment of the present invention, the electronic document generating unit 130 receives the image contents and the information receiving unit 115 received from the information registration terminal 180 through the image receiving unit 120. A predetermined document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, etc.) including at least one document file including the received biometric information registration request information, or By generating a web document file including the MHT), it is preferable to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. Generate image content including at least one or more of the stored customer information and biometric information in a watermarking manner, and include a predetermined document file (eg, PDF) including the generated image content and the biometric information registration information. (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT). It is preferable to generate a biometric information registration electronic document for identification.

Those skilled in the art to which the present invention pertains, the electronic document generating unit 130, the technical features of generating a biometric information registration electronic document of the image file format and / or a predetermined document file format, and Since the technical features of the file format for the image file and / or the document file corresponding to the information registration electronic document will be familiar, detailed description thereof will be omitted for convenience.

The electronic document transmission unit 135 transmits and stores the biometric information registration electronic document generated by the electronic document generation unit 130 to a predetermined electronic document repository associated with the biometric information registration system. .

As shown in FIG. 1, the electronic document repository is connected to the information registration server 100 on the biometric information registration system through a predetermined communication means and the electronic document server 150 and the electronic document D / B 170 When provided externally, the electronic document transmission unit 135 is the electronic document server 150 via the communication means for the biometric information registration electronic document generated by the electronic document generation unit 130 It characterized in that the transmission to.

Here, when the electronic document server 150 and the electronic document D / B 170 is provided outside the biometric information registration system, the electronic document server 150 and the electronic document D / B 170 is It is advisable to manage them in accredited bodies.

According to another embodiment of the present invention, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the electronic document transmission unit 135 is generated by the electronic document generation unit 130. It is possible to store the biometric information registration electronic document in the electronic document D / B (170) corresponding to the electronic document storage on the DBMS provided in the biometric information registration system, by which the present invention is not limited.

According to an embodiment of the present invention, the electronic document transmission unit 135 may include electronic document-related information (eg, biometric information corresponding to the image content) for generating predetermined electronic document management information in the electronic document server 150. The electronic document further including the customer information that created the registration application, and / or the certification authority information for transmitting the biometric information registration electronic document, and / or the electronic document file format information, and / or the biometric information registration application information, and the like. It is possible to transmit to the storage, whereby the present invention is not limited.

Referring to FIG. 1, the information registration server 100 has a validity for identifying an identity using the biometric information through the validity confirming unit 125 through the biometric information registration application information received through the information receiving unit 115. If the authentication, the information storage unit 140 (or information storage means) is stored in a predetermined storage medium 145 by linking the customer information and the biometric information included in the biometric information registration application information of the validity is verified; Characterized in that made.

When the validity of the biometric information registration application information is confirmed by the validity confirming unit 125, the information storage unit 140 stores the data by linking and processing the customer information and biometric information included in the biometric information registration application information. The storage medium 145, the storage medium 145 is provided in the information registration server 100, or when provided on the network associated with the information registration server 100, the information storage The unit 140 preferably processes the customer information and the biometric information included in the received biometric registration request information in association with the storage medium 145, and stores the stored information on the certification authority system. When provided in the provided DBMS, the information storage unit 140 is preferably stored in the DBMS provided on the certification authority system, the customer information, biometric information included in the received biometric information registration application information It is right.

Referring to FIG. 1, an electronic document that receives a predetermined biometric information registration electronic document from the information registration server 100 provided on the biometric information registration system and stores and manages the predetermined biometric information D / B 170 in a predetermined electronic document D / B 170. The server 150 includes an electronic document receiving unit 155 (or electronic document receiving means) for receiving a predetermined biometric information registration electronic document from the information registration server 100 through predetermined communication means, and the received biometric information. An information generating unit 160 (or information generating means) for generating predetermined electronic document management information for storing and managing a registered electronic document in the electronic document D / B 170; and the electronic document management information and the And an electronic document storage unit 165 (or electronic document storage means) for linking and processing the biometric information registration electronic document to a predetermined electronic document D / B 170.

The electronic document receiving unit 155 may receive the biometric information registration electronic document in the form of an image file and / or a document file from the information registration server 100 through the communication means.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is the image content received by the information registration server 100 from the information registration terminal 180. It is preferable that the image file including the same as it is made.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is the biometric information registration request to the image content received by the information registration server 100 from the information registration terminal 180. It is preferable to include an image file corresponding to the image content including at least one or more information of the customer information, biometric information included in the information in a watermarking (Watermarking) method.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is an image received by the information registration server 100 from the information registration terminal 180. A predetermined document file including contents (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means may include the biometric information registration request information on the image content received by the information registration server 100 from the information registration terminal 180. A predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange)) containing image content including at least one of customer information and biometric information included in a watermarking method. File, or a word processor file including at least one HWP / DOC, or the like, or a web document file including an MHT).

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is received by the information registration server 100 from the information registration terminal 180. A word processor file including at least one of a predetermined document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file, an HWP / DOC, etc.) including the image content and the biometric information registration request information. , Or a web document file including MHT).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means may include the biometric information registration request information on the image content received by the information registration server 100 from the information registration terminal 180. Image content including at least one or more of the customer information and biometric information included in the watermarking method and a predetermined document file (eg, a Portable Document Format (PDF) file) including the biometric information registration information; Or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT).

The information generating unit 160 is a predetermined electronic document unique number (or unique information) to be assigned to the biometric information registration electronic document received through the electronic document receiving unit 155, and through the electronic document receiving unit 155 And generating electronic document management information including electronic document storage date and time information including a date and time at which the biometric information registration electronic document is received (or a date and time at which the biometric information registration electronic document is stored).

According to the exemplary embodiment of the present invention, the information generating unit 160 registers the biometric information with reference to the information registration server 100 transmitting the biometric information registration electronic document received through the electronic document receiving unit 155. It is preferable to confirm the certification authority that sent the electronic document, and generate the electronic document management information further including the verified certification authority information.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 100 through the electronic document receiving unit 155, the information generating unit 160 receives the received information. Electronic document-related information (e.g., customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or electronic document file format information, and / or It is preferable to generate the electronic document management information further comprising the biometric information registration application information).

The electronic document storage unit 165 associates the biometric information registration electronic document received through the electronic document receiving unit 155 with the electronic document management information generated by the information generating unit 160 to process a predetermined electronic document D. / B (170) characterized in that the storage.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 is the information registration server 100 by the information registration terminal 180. It is preferable that the image file including the image content received from the) as it is included.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may include the image content received by the information registration server 100 from the information registration terminal 180. It is preferable to include an image file corresponding to the image content including at least one or more information of the customer information, the biometric information included in the biometric information registration application information in a watermarking (Watermarking) method.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may include the information registration server 100. A predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, etc.) including at least one document file including image content received from 180, or Web document file including MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may be stored in the image content received by the information registration server 100 from the information registration terminal 180. A predetermined document file (eg, a Portable Document Format (PDF) file) including image content including at least one or more of customer information and biometric information included in the biometric information registration request information by a watermarking method, or An EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT).

According to another embodiment of the present invention, the biometric information registration electronic document that the electronic document storage unit 165 stores in the electronic document D / B (170) is the information registration server 100 is the information registration terminal At least one predetermined document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, an HWP / DOC, etc.) including the image content received from the 180 and the biometric information registration request information. Or a web document file including the MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may be stored in the image content received by the information registration server 100 from the information registration terminal 180. Image content including at least one or more of customer information and biometric information included in the biometric information registration request information by a watermarking method and a predetermined document file including the biometric information registration request information (eg, PDF ( A Portable Document Format (EDI) file, an EDI (Electronic Data Interchange) file, or a word processor file including at least one or more HWP / DOC, or a web document file including an MHT.

According to the exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 170 by the electronic document storage unit 165 in association with the biological information registration electronic document is stored in the biological information registration electronic. Preferably, a predetermined electronic document unique number (or unique information) assigned to the document and the electronic document storage date and time information are included.

According to an exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 170 by the electronic document storage unit 165 in association with the biometric information registration electronic document is stored in the biometric information registration. It is preferable that the authentication information is sent to the information registration server 100 that sent the electronic document further comprises the certification authority information that sent the electronic document registration electronic document.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 100, the electronic document storage unit 165 processes the electronic document registration electronic document in association with the biometric information registration electronic document. The electronic document management information stored in the electronic document D / B 170 may include the received electronic document related information (for example, customer information in which a biometric information registration application corresponding to the image content is prepared, and / or the biometric information registration electronics). Certificate authority information for transmitting the document, and / or the electronic document file format information, and / or the biometric information registration application information).

2A and 2B illustrate a process of registering biometric information registration application information in a face-to-face manner according to an exemplary embodiment of the present invention.

In more detail, Figures 2a and 2b, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information for identification using biometric information, Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. The method relates to an embodiment of the present invention. Specifically, after obtaining a predetermined image content corresponding to the biometric information registration application from the employee terminal through a predetermined image acquisition device and transmitting it to the information registration server 100, the biometric information An implementation method of inputting (or selecting) biometric information registration application information corresponding to a registration application form and transmitting the same to the information registration server 100 is illustrated.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 2a and 2b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIGS. 2A and 2B.

For example, in the implementation method shown in FIGS. 2A and 2B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. It does not have to be provided from the information registration server 100, whereby the present invention is not limited.

Hereinafter, in FIG. 2A and FIG. 2B, the employee terminal shown in FIG. 2 is referred to as "terminal" for convenience, and the information registration server 100 shown in FIG. The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 2A and 2B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal shown in the drawings s. When the server is connected to the server through a predetermined communication network and a predetermined communication channel is connected, the user interface request for identification using the biometric information corresponding to the biometric information registration application is requested (200). The terminal generates (or extracts) a user interface for acquiring and transmitting the predetermined image content corresponding to the biometric information registration application written by the customer through the predetermined image obtaining apparatus to the server (205), and the communication network. The generated (or extracted) user interface is transmitted to the terminal through the output (210).

Thereafter, the terminal acquires image content corresponding to the biometric information registration application through a predetermined image acquisition device based on the user interface (215).

If image content corresponding to the biometric information registration application is obtained through the image acquisition device (220), the terminal transmits the obtained image content to the server through the communication network (225).

Thereafter, the server inputs (or selects) biometric information registration request information including at least one of customer information and biometric information corresponding to the biometric information registration application matching the image content and transmits the user interface to the server. It generates (or extracts) 230 and transmits the generated (or extracted) user interface to the terminal through the communication network and outputs it (235).

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (240).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (245), the terminal inputs (or selects) the terminal to the server through the communication network. The biometric information registration application information is transmitted (250).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (255).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (260), the server generates predetermined information registration error information and transmits it to the terminal (265), and information corresponding to the biometric information registration request information. Do not perform the registration process.

On the other hand, if the validity of the biometric information registration request information is authenticated (260), the server generates a predetermined biometric information registration electronic document including the image content (270).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, PDF (Portable Document Format) including the image content received from the information registration terminal 180 through the image receiving unit 120. ), Or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT). It is preferable to generate a biometric information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generate image content including at least one of the information in a watermarking (2atermarking) method, and a predetermined document file (for example, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including the generated image content ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate biometric information for identification using the biometric information. It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (275).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (280), the server processes the customer information and the biometric information included in the biometric information registration request information in a predetermined storage medium 145 (285), predetermined information registration history information (e.g., the history of storing the biological information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145); ) Is generated (or extracted) and transmitted to the terminal (290).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system, and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

3A and 3B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

In more detail, Figures 3a and 3b, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. The method is an information method. Specifically, the staff terminal inputs (or selects) the biometric information registration application information corresponding to the biometric information registration application and transmits it to the information registration server 100, and then a predetermined image acquisition device. It illustrates a method of obtaining a predetermined image content corresponding to the biometric information registration application through the information registration server 100 to transmit.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 3a and 3b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIGS. 3A and 3B.

For example, in the implementation method shown in FIGS. 3A and 3B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

In the following Figures 3a and 3b, the employee terminal shown in the drawings is referred to as "terminal" for convenience, and the information registration server 100 shown in the drawing is referred to as "server" for convenience, and said employee terminal The customer information and biometric information transmitted to the information registration server 100 is referred to as "biological information registration application information" for convenience.

Referring to FIGS. 3A and 3B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal shown in the drawings s. When the server is connected to the server through a predetermined communication network and a predetermined communication channel is connected, the user interface request for identification using the biometric information corresponding to the biometric information registration application is requested (300). Generates (or extracts) a user interface for inputting (or selecting) biometric information registration application information including at least one of customer information and biometric information corresponding to the biometric information registration application created by the customer and transmitting the biometric information registration application information to the server; 305, by transmitting the generated (or extracted) user interface to the terminal through the communication network The output (310).

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (315).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (320), the terminal inputs (or selects) the server to the server through the communication network. The biometric information registration application information is transmitted (325).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (330).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (335), the server generates predetermined information registration error information and transmits it to the terminal (340), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration application information is authenticated (335), the server acquires the predetermined image content corresponding to the biometric information registration application created by the customer through a predetermined image acquisition device in the terminal to the server A user interface for transmitting to the terminal is generated (or extracted) (345), and the generated (or extracted) user interface is transmitted to the terminal through the communication network (350).

Thereafter, the terminal acquires image content corresponding to the biometric information registration application through a predetermined image acquisition device based on the user interface (355).

If image content corresponding to the biometric information registration application is obtained through the image acquisition device (360), the terminal transmits the obtained image content to the server through the communication network (365).

The server receiving the biometric information registration request information and the image content from the terminal generates a predetermined biometric information registration electronic document including the image content (370).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT). It is preferable to generate a biometric information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one of the information in a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including the generated image content. ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identification verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate biometric information for identification using the biometric information. It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (375).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (380), the server processes the customer information and biometric information included in the biometric information registration request information in a predetermined storage medium 145 (385), predetermined information registration history information (e.g., the history of storing the biometric information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145); ) Is generated (or extracted) and transmitted to the terminal (390).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

4A and 4B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

In more detail, FIGS. 4A and 4B show that a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information. Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. Is an implementation method, specifically, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and obtains biometric information registration application information corresponding to the biometric information registration application. It shows an implementation method of inputting (or selecting) and transmitting to the information registration server 100.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 4a and 4b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIGS. 4A and 4B.

For example, in the implementation method shown in FIGS. 4A and 4B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

In the following Figures 4a and 4b, the employee terminal shown in the drawing s is referred to as "terminal" for convenience, and the information registration server 100 shown in the drawing s is referred to as "server" for convenience, and in the employee terminal The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 4A and 4B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal illustrated in the drawings s. The server requests a user interface for identification using the biometric information corresponding to the biometric information registration application (400) while accessing the server through a predetermined communication network and connecting a predetermined communication channel (400). Inputs (or selects) biometric information registration application information corresponding to the biometric information registration application written by the customer in the terminal, and acquires predetermined image content corresponding to the biometric information registration application through a predetermined image obtaining device; Create (or extract) a user interface for transmission to the server (405) and communicate over the network In operation 410, the generated (or extracted) user interface is transmitted to the terminal.

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (415).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (420), the terminal uses a predetermined image acquisition apparatus based on the user interface. In operation 425, image content corresponding to the biometric information registration application is obtained.

If the image content corresponding to the biometric information registration application is obtained through the image acquisition device (430), the terminal transmits the biometric information registration application information and the image content to the server through the communication network (435).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (440).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (445), the server generates predetermined information registration error information and transmits it to the terminal (450), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration request information is authenticated (445), the server generates a predetermined biometric information registration electronic document including the image content (455).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT), thereby generating a living body for identification using the biometric information. It is desirable to generate an information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one of the information in a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including the generated image content. ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate biometric information for identification using the biometric information. It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (460).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (465), the server processes the customer information and biometric information included in the biometric information registration application information in a predetermined storage medium 145 Storage 470, predetermined information registration history information (e.g., a history of storing the biometric information registration electronic document in the electronic document storage, and / or storing the biometric information registration application information in the storage medium 145) The details) are generated (or extracted) and transmitted to the terminal (475).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

5 is a diagram illustrating a non-face-to-face biometric information registration system for identity verification using biometric information according to another exemplary embodiment of the present invention.

In more detail, FIG. 5 illustrates biometric information registration application information including at least one of customer information and biometric information for a predetermined customer to identify an identity using the biometric information to a biometric information registration system through a predetermined biometric information registration interface. If so, the biometric information registration system generates a predetermined biometric information registration electronic document including the provided biometric information registration application information and stores it in a predetermined electronic document storage, and the customer information included in the biometric information registration application information. The present invention relates to a system configuration for cooperatively processing biometric information and storing it in a predetermined storage medium 540. Specifically, the electronic document repository is provided on an external system associated with the biometric information registration system through a predetermined communication means. It is about the implementation method.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 5 to infer various implementation methods for the configuration of a biometric information registration system for identification using biometric information. The present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 5 to infer an implementation method provided in a DBMS in which the electronic document repository is located in the biometric information registration system. As will be appreciated, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In addition, according to the implementation method shown in FIG. 5, the biometric information registration electronic document is illustrated as being generated on the server side on the biometric information registration system, but the present invention is not limited thereto. The information registration electronic document may be generated on the terminal side that inputs (or selects) the biometric information registration application information and transmits the biometric information registration function (for example, the electronic document generation function provided on the server side is provided on the terminal side to register the biometric information). Generate an electronic document), by which the present invention is not limited.

In addition, according to the implementation method illustrated in FIG. 5, the biometric information included in the biometric information registration application includes only selection information for selecting a type of biometric information (eg, fingerprint, iris, etc.), and the biometric information registration application. At the time, it is possible to receive biometric information about the user, whereby the present invention is not limited.

Hereinafter, the biometric information registration application information is received from the customer through a predetermined biometric information registration interface on the biometric information registration system shown in FIG. 5 to generate a predetermined biometric information registration electronic document and store it in a predetermined electronic document repository. In addition, at least one means for storing the biometric information registration application information in a predetermined storage medium 540 and / or a component corresponding to a functional configuration is referred to as "information registration server 500" for convenience.

Referring to FIG. 5 according to an embodiment of the present invention, a biometric information registration system for identifying an identity using the biometric information includes at least a client terminal including at least one wired terminal and / or a wireless terminal used by a customer. And at least one information registration terminal 570, wherein the information registration terminal 570 communicates with the information registration server 500 provided on the biometric information registration system through a predetermined network means. The channel is connected.

According to an embodiment of the present invention, the customer accesses the information registration server 500 through at least one client terminal of a wired terminal connected to a predetermined wired communication network and / or a wireless terminal connected to a predetermined wireless communication network, When the biometric information registration application information for identifying the identity using the biometric information is input (or selected) through at least one user interface provided by the information registration server 500, the client terminal transmits the biometric information registration application information through a predetermined network means. It is preferable to transmit to the information registration server 500 provided on the biometric information registration system.

Here, the wired terminal connected to the wired communication network is a generic term for all terminal devices connected to a transmission control protocol / Internet protocol (TCP / IP) based communication network and includes a desktop computer and / or a laptop connected to the TCP / IP based communication network. (Notebook) or at least one home appliance terminal (for example, a refrigerator, a set-top-box, etc.) connected to the TCP / IP-based communication network, or a kiosk (KIOSK) connected to the TCP / IP-based communication network It is preferable to make it.

In addition, a wireless terminal connected to the wireless communication network is any terminal device connected to a mobile communication network based on Code Division Multiple Access (CDMA) (and / or High-Speed Downlink Packet Access (HSDPA)), and / or IEEE 802.16x based. A generic term for all terminal devices connected to the portable Internet and / or all terminal devices connected to an IEEE 802.11x based wireless LAN, and is connected to the CDMA based (and / or HSDPA based) mobile communication network (Personal Communication System; PCS). ) And / or Global System for Mobile communications (GSM) terminals and / or Personal Digital Cellular (PDC) and / or Personal Handyphone System (PHS) terminals and / or Personal Digital Assistants (PDAs) And / or a mobile Internet terminal connected to a smart phone and / or telematics, or the IEEE 802.16x based mobile internet, or the IEEE 802.11x based It is preferable to include at least one or more WLAN terminal connected to the WLAN.

In addition, the network means for connecting the client terminal and the information registration server 500 is a CDMA-based (and / or HSDPA-based) mobile communication network and / or IEEE 802.16x-based based on the type of wireless communication network connected to the client terminal It is preferable that any one of the portable Internet and / or IEEE 802.11x-based wireless LAN, and / or includes all kinds of wireless communication networks proposed in the future including a predetermined wireless interval.

In addition, the client terminal outputs at least one or more user interfaces provided by the information registration server 500, and inputs and / or selects at least one or more information through the user interface to the information registration server 500. It is preferable that a function configuration (for example, a browser program and a communication function or a predetermined communication program and communication function to communicate with the information registration server 500, etc.) for transmission is provided.

Those skilled in the art to which the present invention pertains can easily infer the characteristics of the client terminal corresponding to at least one or more wired terminals and / or wireless terminals, and thus the detailed description thereof is omitted for convenience. .

In the biometric information registration system as described above, a client terminal including at least one wired terminal and / or a wireless terminal used by the customer, and at least one wired communication network connecting the client terminal and the information registration server 500. And / or the wireless communication network performs a function of a biometric information registration interface for registering the biometric information registration application information for the customer to confirm the identity using the biometric information.

According to another exemplary embodiment of the present invention, the information registration terminal 570 further includes a terminal (and / or server) (not shown) provided in at least one or more institutions affiliated with the certification authority, in addition to the client terminal. In this regard, the present invention is not limited thereto.

The storage medium 540 provided on the biometric information registration system according to the present invention performs a predetermined process by linking the customer information and biometric information included in the biometric information registration information provided from the information registration terminal 570. The storage medium 540 is characterized in that the storage.

The customer information includes personal information of the customer (eg, customer's name, social security number, address, phone number, mobile phone number, e-mail address, etc.), and member information of the customer (eg, the customer is registered as a customer of the certification authority). It is preferable to include at least one or more), such as member ID information provided in the customer D / B provided on the certification authority system associated with the biometric information registration system corresponding to the customer.

The biometric information may be provided by a customer who filled out the biometric information registration application (or scanned by scanning a body part of the customer (eg, fingerprint, iris, face, etc.)) and / or features on the image data (eg, among fingerprints). Characteristic of the pattern that is differentiated from the general pattern) It is preferable to include at least one data.

According to an embodiment of the present invention, the storage medium 540 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 540 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

The information registration server 500 provided on the biometric information registration system according to the present invention is a generic term for components of the biometric information registration system side connected to the information registration terminal 570 through a predetermined network means. It may be implemented by including the above server (or device), and / or may be implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), whereby the present invention is not limited.

According to an embodiment of the present invention, the information registration server 500 includes an interface unit 505 (or interface means) for connecting and managing a predetermined communication channel with the information registration terminal 570 through the network means. Characterized in that made.

According to an exemplary embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface unit 505 is At least one or more information (or a predetermined communication channel) is connected to the client terminal based on a protocol stack defined in the wired communication network and / or a wireless communication network, and using a communication protocol defined in a communication program included in the client terminal. It is desirable to provide a communication interface for transmitting and receiving data.

For example, if the client terminal is equipped with a browser program corresponding to the Hyper-Text Transfer Protocol (HTTP) protocol, the interface unit 505 connects a communication channel with the client terminal based on the TCP / IP protocol, It provides a communication interface for transmitting and receiving web pages (eg, Hyper-Text Markup Language (HTML) compatible web pages) and / or information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program (eg, an information registration program) provided by the information registration server 500, the interface unit 505 communicates with the client terminal based on the TCP / IP protocol. It connects a channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface unit 505 uses a protocol stack defined in the wireless communication network. It is preferable to connect a predetermined communication channel with the client terminal based on the above, and to provide a communication interface for transmitting and receiving at least one information (or data) using a communication protocol defined in a communication program provided in the client terminal. .

For example, when a browser program corresponding to a WAP (Wireless Application Protocol) and / or a Mobile Explorer (ME) protocol is provided in the client terminal, the interface unit 505 communicates with the client terminal based on the CDMA protocol. And a communication interface for transmitting and receiving web pages (e.g., WML (Wireless Markup Language) compatible web pages, or HTML compatible web pages) and / or information using the WAP / ME protocol defined in the browser program. .

Alternatively, when the client terminal is provided with a communication program (eg, IC chip-based information registration program) provided by the information registration server 500, the interface unit 505 is based on the CDMA protocol. And a communication channel and provide a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

Referring to FIG. 5, when the predetermined information registration terminal 570 connects a predetermined communication channel with the information registration server 500 through the interface unit 505, the information registration server 500 may be configured as the living body. Generate (or at least one) user interface for inputting (or selecting) predetermined biometric information registration request information from the information registration terminal 570 to transmit the information to the information registration server 500 for identity verification using information. And an interface providing unit 510 (or interface providing means) for providing the generated (or extracted) user interface to the information registration terminal 570 in association with the interface unit 505, and the information registration. When the terminal 570 inputs (or selects) and transmits the biometric information registration request information through the user interface, the information registration terminal 5 is linked with the interface unit 505. And an information receiving unit 515 (or information receiving means) for receiving the biometric information registration request information transmitted from 70.

The interface providing unit 510 connects a predetermined communication channel with the information registration server 500 through the interface registration unit 505, and then the information registration server 500 sends the information registration server 500 to the information registration server 500. When requesting a user interface for identity verification using biometric information, the information registration terminal 570 inputs (or selects) predetermined biometric information registration request information and transmits the biometric information to the information registration server 500 through the network means. Generate at least one user interface, and / or extract from a predetermined database (not shown), and link the generated (or extracted) user interface with the interface unit 505 via the network means. It is characterized in that provided to the registration terminal 570.

According to an embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wired terminal connected to a predetermined wired communication network, the interface providing unit 510 may include a browser program provided in the client terminal and And / or generate (or extract) a predetermined user interface that can be provided by a communication program, and provide the generated (or extracted) user interface to the client terminal through the interface unit 505.

According to another embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface providing unit 510 is a browser program provided in the client terminal. And / or generate (or extract) a predetermined user interface that can be provided to a communication program, and provide the generated (or extracted) user interface to the client terminal through the interface unit 505.

At least one user for inputting (or selecting) predetermined biometric information registration request information to the information registration terminal 570 according to another embodiment of the present invention and transmitting the biometric information registration request information to the information registration server 500 through the network means. When a predetermined information registration program having an interface is provided, a user interface is generated (or extracted) for inputting (or selecting) predetermined biometric information registration application information to the information registration server 500 as described above. The interface providing unit 510 provided to the information registration terminal 570 may be omitted, and thus the present invention is not limited thereto.

Thereafter, the information registration terminal 570 inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface, and registers the input (or selected) biometric information. The application information is transmitted to the information registration server 500 through the network means. In response thereto, the information receiving unit 515 is connected to the interface unit 505 to transmit the biometric information transmitted from the information registration terminal 570. Characterized in that it receives the information registration application information.

According to the embodiment of the present invention, the information registration terminal 570 is the biometric information registration request information including at least one of the customer information, biometric information to the biometric information registration request information from the information registration server 500 At least one or more of a predetermined password and / or security card information for confirming the validity and / or OTP code generated through a predetermined one time password (OTP) generator, the information registration server through the network means ( 500).

According to an embodiment of the present invention, the information registration terminal 570 may include at least one encryption method (eg, a symmetric key based encryption method) and biometric information registration request information including at least one of the customer information and biometric information. Or a public key based encryption method, and / or an electronic envelope based encryption method, and / or a key exchange based encryption method, etc.) and / or attach a predetermined electronic signature to the biometric information registration information. It is preferable to transmit to the information registration server 500 through, for this purpose, the information registration terminal 570 is provided with at least one encryption key corresponding to the encryption scheme, and / or at least one encryption key Have a predetermined public certificate included therein, and / or the public certificate is provided on a predetermined IC chip (or IC card) Wu, it is preferred that the IC chip-card reader for identifying the certificate provided in (or IC card) is provided.

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the biometric information registration application information, and technical features of attaching a predetermined electronic signature to the biometric information registration application information. Since it will be familiar with, detailed description thereof will be omitted for convenience.

Referring to FIG. 5, when the biometric information registration request information transmitted from the information registration terminal 570 is received through the information receiving unit 515, the information registration server 500 receives the biometric information registration request information. It is characterized in that it comprises a validating unit 520 (or validating means) for confirming whether or not to satisfy the validity for identity verification using the biometric information.

According to an embodiment of the present invention, the biometric information registration information is at least one encryption method (eg, symmetric key based encryption method and / or public key based encryption method, and / or electronic envelope based encryption method, and / or When encrypted with a key exchange based encryption method, the validity confirming unit 520 may include the at least one decryption method (eg, a symmetric key based decryption method) corresponding to the encryption method. / Or public key based decryption scheme, and / or electronic envelope based decryption scheme, and / or key exchange based decryption scheme, etc.), it is preferable to authenticate the validity of the received biometric information registration application information.

Alternatively, when a predetermined electronic signature is attached to the biometric information registration application information, the validity verification unit 520 checks the electronic signature attached to the biometric information registration application information, thereby receiving the biometric information registration application information. It is desirable to authenticate validity.

Those skilled in the art to which the present invention pertains include technical features of various decryption methods for decrypting the encrypted biometric information registration application information, and technology for confirming an electronic signature attached to the biometric information registration application information. Since you will be familiar with the features, a detailed description thereof will be omitted.

According to an embodiment of the present invention, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined password for confirming the validity of the biometric information registration request information, the validity confirming unit 520 may compare and authenticate the password included in the biometric information registration request information with a password provided corresponding to the customer on the DBMS, thereby authenticating the validity of the received biometric information registration request information. Do.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes predetermined security card information for confirming the validity of the biometric information registration request information, the validity confirming unit 520 Compares and authenticates the received security card information included in the biometric information registration application information and the security card information provided corresponding to the customer on the DBMS, thereby authenticating the validity of the received biometric information registration application information. desirable.

Alternatively, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined OTP code for confirming the validity of the biometric information registration request information, the validity confirming unit 520 may include: By comparing and authenticating the received OTP code included in the biometric information registration application information and the OTP code generated based on predetermined OTP generation information provided corresponding to the customer on the DBMS, the received biometric information registration application information It is desirable to authenticate the validity of the.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity checker 520 is a customer D on the certification authority system of the customer information (customer personal information, member information, etc.) of the information included in the biometric information registration application information associated with the biometric information registration system. It is preferable to include checking whether it matches with the customer information stored in / B.

Referring to FIG. 5, when the validity of the biometric information registration request information is authenticated through the validity checker 520, the information registration server 500 includes a predetermined biometric information including the received biometric information registration request information. An electronic document generating unit 525 (or an electronic document generating means) for generating an information registration electronic document, and an electronic document transmission unit for transmitting the generated biometric information registration electronic document to an electronic document repository associated with the biometric information registration system. 530 (or electronic document transmission means) is characterized in that it comprises.

The electronic document generating unit 525 generates a biometric information registration electronic document including the biometric information registration application information received from the information registration terminal 570 through the information receiving unit 515.

According to an exemplary embodiment of the present invention, the electronic document generator 525 may include document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiver 515. A document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, or the like) including at least one document file including the document content, and an MHT. Web document files, etc.) is preferably processed as a biometric information registration electronic document for identification using the biometric information.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. After including at least one of the customer information and the biometric information included in the biometric information registration application information in a watermarking (Watermarking) method, a document file containing the document content containing the watermarking (for example, PDF (Portable Document) Format information, an EDI (Electronic Data Interchange) file, a word processor file including at least one of HWP / DOC, or a web document file including an MHT). It is desirable to process the registration electronic document.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. It is preferable to process an image file including captured image content (eg, image content generated by capturing the document content on a memory) into a biometric information registration electronic document for identification using the biometric information.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) After the inclusion, the image file including the image content including the watermarking is preferably processed into a biometric information registration electronic document for identification using the biometric information.

According to another exemplary embodiment of the present invention, the electronic document generation unit 525 may include at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515. A predetermined document file (e.g., a Portable Document Format (PDF) file) including an image content (e.g., image content generated by capturing the document content on a memory) and generating the captured document content. Biometric information for electronic identification using the biometric information by generating an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT) It is preferable to process the document.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) At least one document file (for example, a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, or an HWP / DOC file) including an image content including the watermarking; Identity word using the biometric information by generating a word processor file or a web document file including MHT). It is preferable to process the biometric information registration electronic document for confirmation.

According to another exemplary embodiment of the present invention, the electronic document generating unit 525 may include at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515. A predetermined document file (e.g., PDF) including content, image content (e.g., image content generated by capturing the document content on a memory), and the biometric information registration request information. (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT). It is preferable to process the biometric information registration electronic document for identification.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) Generating an image content including an image content, and including a watermarking image content and a biometric information registration information (eg, a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, or Creating a word processor file including at least one HWP / DOC, or a web document file including MHT) It is preferable that the biometric information registering process in the electronic document for identification yonghan the biometric information.

Those skilled in the art to which the present invention pertains, the electronic document generating unit 525 is a technical feature of generating a biometric information registration electronic document of the image file format and / or a predetermined document file format, and Since the technical features of the file format for the image file and / or the document file corresponding to the information registration electronic document will be familiar, detailed description thereof will be omitted for convenience.

The electronic document transmitting unit 530 transmits and stores the biometric information registration electronic document generated by the electronic document generating unit 525 to a predetermined electronic document repository associated with the biometric information registration system. .

As shown in FIG. 5, the electronic document repository is connected to the information registration server 500 on the biometric information registration system through a predetermined communication means and the electronic document D / B 565. When provided to the outside, the electronic document transmission unit 530 is the electronic document server 545 via the communication means for the biometric information registration electronic document generated by the electronic document generation unit 525 It characterized in that the transmission to.

Herein, when the electronic document server 545 and the electronic document D / B 565 are provided outside the biometric information registration system, the electronic document server 545 and the electronic document D / B 565 are provided. It is advisable to maintain the authority in a recognized institution.

According to another embodiment of the present invention, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the electronic document transmission unit 530 is generated by the electronic document generation unit 525. It is possible to store the biometric information registration electronic document in the electronic document D / B 565 corresponding to the electronic document storage on the DBMS provided in the biometric information registration system, by which the present invention is not limited.

According to an embodiment of the present invention, the electronic document transmission unit 530 inputs electronic document related information (eg, the biometric information registration request information) for generating predetermined electronic document management information in the electronic document server 545. (Optional) customer information transmitted, and / or certification authority information for transmitting the biometric information registration electronic document, and / or electronic document file format information, and / or the biometric information registration application information, and the like. It is possible to transmit to an electronic document storage, by which the present invention is not limited.

Referring to FIG. 5, the information registration server 500 validates that the biometric information registration request information received through the information receiving unit 515 is used for identifying the identity using the biometric information through the validity checking unit 520. When the authentication is successful, the information storage unit 535 (or information storage means) for storing the predetermined information stored in the predetermined storage medium 540 by linking the customer information and the biometric information included in the biometric information registration request information is validated It is characterized by comprising.

When the validity of the biometric information registration request information is confirmed by the validity confirming unit 520, the information storage unit 535 stores the biometric information by linking and processing the customer information and biometric information included in the biometric information registration request information. And storing the information in the storage medium 540. When the storage medium 540 is provided in the information registration server 500 or on the network associated with the information registration server 500. The unit 535 preferably processes the customer information and the biometric information included in the received biometric information registration request information and stores them in the storage medium 540, wherein the storage medium 540 is located on the certification authority system. When provided in the provided DBMS, the information storage unit 535 provides the customer information, biometric information included in the received biometric information registration application information to the information system through the external system on the certification authority system Be stored in a DBMS provided on a certificate authority system is preferred.

Referring to FIG. 5, an electronic document which receives a predetermined biometric information registration electronic document from the information registration server 500 provided on the biometric information registration system and stores and manages the same in a predetermined electronic document D / B 565. The server 545 may include an electronic document receiving unit 550 (or an electronic document receiving unit) for receiving a predetermined biometric information registration electronic document from the information registration server 500 through a predetermined communication unit, and the received biometric information. An information generating unit 555 (or information generating means) for generating predetermined electronic document management information for storing and managing a registered electronic document in the electronic document D / B 565; And an electronic document storage unit 560 (or electronic document storage means) for linking and processing the biometric information registration electronic document to a predetermined electronic document D / B 565.

The electronic document receiving unit 550 may receive the biometric information registration electronic document in the form of an image file and / or a document file from the information registration server 500 through the communication means.

According to one embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is the biometric information received by the information registration server 500 from the information registration terminal 570. Document files (eg, Portable Document Format (PDF) files, EDI (Electronic Data Interchange) files, HWP / DOC, etc.) containing document contents including at least one of customer information and biometric information included in the registration application information. And at least one word processor file or at least one web document file including the MHT.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. The document including the watermarking after including at least one of the customer information and the biometric information included in the biometric information registration application information in the document content including at least one information, biometric information in a watermarking method (Watermarking) Document files containing content (eg, Portable Document Format (PDF) files, Electronic Data Interchange (EDI) files, Word processor files including at least one or more such as HWP / DOC, Web document files including MHT, etc.) It is preferable to comprise).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Preferably, the image file includes an image file including image content (eg, image content generated by capturing the document content on a memory) that captures document content including at least one of information and biometric information.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information After including at least one or more information of the information in a watermarking (Watermarking) method, it is preferable to include an image file including the image content including the watermarking.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is a biometric information received by the information registration server 500 from the information registration terminal 570. A predetermined document including image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the information registration application information. A file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including an MHT). It is preferable.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information Generating image content including at least one or more information of the information by a watermarking method, and a document file (for example, a PDF (Portable Document Format) file or EDI (Electronic) file including the image content including the watermarking). Data Interchange) file, a word processor file including at least one of HWP / DOC, etc., or a web text including MHT. It is preferred which comprises a file, and so on).

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is received by the information registration server 500 from the information registration terminal 570. Image content (eg, image content generated by capturing the document content on a memory) and the biometric information registered by capturing document information including at least one of customer information and biometric information included in the biometric information registration request information. A predetermined document file including application information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one of HWP / DOC, etc.), or a web including an MHT. Document files).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information Create image content including at least one or more information of the information by a watermarking method, and a document file (for example, PDF (Portable Document Format) including the image content and the biometric information registration information including the watermarking; Word processor including at least one file, an electronic data interchange (EDI) file, or an HWP / DOC file. File, or a web document file including MHT).

The information generating unit 555 is a predetermined electronic document unique number (or unique information) to be assigned to the biometric information registration electronic document received through the electronic document receiving unit 550, and through the electronic document receiving unit 550 And generating electronic document management information including electronic document storage date and time information including a date and time at which the biometric information registration electronic document is received (or a date and time at which the biometric information registration electronic document is stored).

According to the exemplary embodiment of the present invention, the information generating unit 555 registers the biometric information with reference to the information registration server 500 that transmits the biometric information registration electronic document received through the electronic document receiving unit 550. It is preferable to confirm the certification authority that sent the electronic document, and generate the electronic document management information further including the verified certification authority information.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 500 through the electronic document receiving unit 550, the information generating unit 555 receives the received information. Electronic document related information (e.g., customer information transmitted by inputting (selecting) the biometric information registration application information and / or certification authority information transmitting the biometric information electronic document, and / or electronic document file format information, and / Or the biological information registration application information, etc.) is preferably generated.

The electronic document storage unit 560 associates the biometric information registration electronic document received through the electronic document receiving unit 550 with the electronic document management information generated by the information generating unit 555 to process a predetermined electronic document D. / B (565) is characterized in that.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500 by the information registration terminal 570. A document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file) containing document information including at least one of customer information and biometric information included in the biometric information registration request information received from Or a word processor file including at least one or more HWP / DOC, or a web document file including an MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. After the watermarking method includes at least one or more of the customer information and the biometric information included in the biometric information registration application information in the document content including at least one of customer information and biometric information included in the application information, A document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one HWP / DOC, etc.) containing document content including watermarking, or an MHT. Web document files, etc.) to be included.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. And an image file including image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the application information. It is preferable to make.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The biometric information registration application information into image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the application information. Preferably, the watermarking method includes at least one of customer information and biometric information included in the watermarking method, and then includes an image file including the image content including the watermarking.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500. Image content (eg, image content generated by capturing the document content on a memory) by capturing document content including at least one of customer information and biometric information included in the biometric information registration request information received from 570. A predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more such as HWP / DOC, or a web document file including an MHT) Etc.) is preferable.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The biometric information registration application information into image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the application information. Create image content including at least one or more of the customer information and biometric information included in the watermarking method, and a document file (eg, PDF (Portable Document Format) including the image content including the watermarking). ), Or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more such as HWP / DOC, or a web text including an MHT. It is preferable to include a standing file).

According to another embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500 is the information registration terminal Image content that captures document content including at least one of customer information and biometric information included in the biometric information registration request information received from 570 (eg, image content generated by capturing the document content on a memory). And a predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, or a HWP / DOC) including at least one document file including the biometric information registration request information. Or a web document file including the MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the biometric information received by the information registration server 500 from the information registration terminal 570. The biometric information registration request information on the image content (eg, the image content generated by capturing the document content on the memory) which captures document content including at least one of customer information and biometric information included in the registration application information. A document file including image information including at least one or more of customer information and biometric information included in a watermarking method, the image file including the watermarking and the biometric information registration application information ( For example, a word processor including at least one of a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, or an HWP / DOC. It is preferred which comprises a web page file, and so on) containing the file, or MHT.

According to an embodiment of the present invention, the electronic document management information stored in the electronic document D / B 565 by the electronic document storage unit 560 in association with the biometric information registration electronic document is stored in the biometric information registration electronic. Preferably, a predetermined electronic document unique number (or unique information) assigned to the document and the electronic document storage date and time information are included.

According to the exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 565 by the electronic document storage unit 560 in association with the biometric information registration electronic document is stored in the biometric information registration. The information registration server 500 which transmitted the electronic document may preferably further include certification authority information which has transmitted the biometric information registration electronic document.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 500, the electronic document storage unit 560 processes the connection with the biometric information registration electronic document and performs the The electronic document management information stored in the electronic document D / B 565 may include the received electronic document related information (for example, customer information transmitted by inputting (selecting) the biometric information registration request information) and / or the biometric information. Certificate authority information for transmitting the registration electronic document, and / or electronic document file format information, and / or the biometric information registration application information).

6A and 6B illustrate a process of registering biometric information registration application information in a non-face-to-face manner to identify an identity using biometric information according to an exemplary embodiment of the present invention.

In more detail, FIGS. 6A and 6B illustrate that when a predetermined customer provides biometric information registration request information including at least one of customer information and biometric information through the client terminal to identify an identity using the biometric information, In the information registration system, a predetermined biometric information registration electronic document including the provided biometric information registration application information is generated and stored in a predetermined electronic document repository, and the customer information and biometric information included in the biometric information registration application information are linked. The present invention relates to an implementation method of processing and storing the data in a predetermined storage medium 540. Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 6a and 6b in the client terminal. It is possible to infer various implementation methods for registering the biometric information registration application information to the information registration server 500. As will be appreciated, the present invention includes all implementation methods inferred from the foregoing, and is not limited to the implementation methods shown in FIGS. 6A and 6B.

For example, in the method shown in FIGS. 6A and 6B, the client terminal inputs (or selects) the biometric information registration request information through a predetermined web page provided by the information registration server 500. Although illustrated as being provided, when a predetermined information registration program is provided in the client terminal, the user interface may not be provided from the information registration server 500, and the present invention is not limited thereto.

In the following FIGS. 6A and 6B, the client terminal shown in FIG. 6 is referred to as "terminal" for convenience, and the information registration server 500 shown in FIG. 6 is referred to as "server" for convenience, and in the client terminal The customer information and biometric information transmitted to the information registration server 500 are referred to as "biometric information registration application information" for convenience.

6A and 6B, when the client terminal illustrated in FIG. 6 is a predetermined network means (eg, when the client terminal is a wired terminal, a TCP / IP based wired communication network, and the client terminal is a wireless terminal, CDMA-based (and / or HSDPA-based) mobile communication network and / or IEEE 802.16x-based portable Internet, and / or IEEE 802.11x-based wireless LAN, etc.) to connect to the server to connect a predetermined communication channel, When a web page including a user interface for identifying an identity using information is requested (600), the server inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information. Generate (or extract) a web page including a user interface for transmission to the server (605), and generate the And transmits the output to the web page containing the extracted) user interface to the mobile station 610. The

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page from the server to the terminal is preferably performed at least once according to the biometric information registration information registration procedure, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one or more customer information and biometric information through a user interface included in the web page (615).

If the terminal inputs (or selects) biometric information registration request information including the customer information and biometric information through the user interface (620), the terminal inputs (or selects) the customer through the communication channel. Information and biometric information are transmitted to the server (625).

According to an embodiment of the present invention, the terminal includes a predetermined password for confirming the validity of the biometric information registration request information in the server to the biometric information registration request information including at least one of the customer information and biometric information; Alternatively, at least one or more OTP codes generated through security card information and / or a predetermined one time password (OTP) generator may be transmitted to the server through the network means.

According to an embodiment of the present invention, the terminal may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key based encryption method) for registering biometric information registration information including at least one of the customer information and biometric information. Method, and / or an electronic envelope-based encryption method, and / or a key exchange-based encryption method), and / or attach a predetermined electronic signature to the biometric registration application information to the server through the network means. Preferably, the terminal has at least one encryption key corresponding to the encryption scheme, and / or has a predetermined certificate including at least one encryption key, and / or the certification. When the certificate is provided on a predetermined IC chip (or IC card), the certificate provided on the IC chip (or IC card) It is preferable that a card reader for verifying a certificate is provided.

According to an embodiment of the present invention, the terminal may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key based encryption method) for registering biometric information registration information including at least one of the customer information and biometric information. Scheme, and / or an electronic envelope-based encryption scheme, and / or a key exchange-based encryption scheme, and the like, and transmits the encrypted data to the server through the network means. The IC is provided with one or more encryption keys, and / or with a predetermined certificate containing at least one or more encryption keys, and / or when the certificate is provided with a predetermined IC chip (or IC card). It is preferable that a card reader is provided for confirming the public certificate provided in the chip (or IC card).

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the biometric information registration application information, and technical features of attaching a predetermined electronic signature to the biometric information registration application information. Since it will be familiar with, detailed description thereof will be omitted for convenience.

Thereafter, the server receives and reads the customer information and the biometric information through the communication channel to check the validity of the biometric information registration application information (630).

According to an embodiment of the present invention, the biometric information registration information is at least one encryption method (eg, symmetric key based encryption method and / or public key based encryption method, and / or electronic envelope based encryption method, and / or When encrypted with a key exchange-based encryption scheme, the server may include the at least one decryption scheme (eg, a symmetric key based decryption scheme and / or a public key based scheme) corresponding to the encryption scheme. Decryption method, and / or electronic envelope-based decryption method, and / or key exchange-based decryption method, etc.), it is preferable to authenticate the validity of the received biometric information.

Alternatively, when a predetermined electronic signature is attached to the biometric information registration request information, the server verifies the validity of the received biometric information registration request information by checking the electronic signature attached to the biometric information registration request information. It is preferable.

Those skilled in the art to which the present invention pertains include technical features of various decryption methods for decrypting the encrypted biometric information registration application information, and technology for confirming an electronic signature attached to the biometric information registration application information. Since you will be familiar with the features, a detailed description thereof will be omitted.

According to an embodiment of the present invention, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined password for confirming the validity of the biometric information registration request information, the server may be configured as described above. It is preferable to authenticate the validity of the received biometric information registration application information by comparing and authenticating the password included in the biometric information registration application information and the password provided corresponding to the customer on the DBMS.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes predetermined security card information for confirming the validity of the biometric information registration request information, the server registers the biometric information. It is preferable to authenticate the validity of the received biometric information registration application information by comparing and authenticating the received security card information included in the application information with the security card information provided corresponding to the customer on the DBMS.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes a predetermined OTP code for confirming the validity of the biometric information registration request information, the server requests the biometric information registration request. The validity of the received biometric information registration request information is verified by comparing and authenticating the received OTP code included in the information and the OTP code generated based on predetermined OTP generation information provided corresponding to the customer on the DBMS. It is desirable to.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity checker 520 is a customer D on the certification authority system of the customer information (customer personal information, member information, etc.) of the information included in the biometric information registration application information associated with the biometric information registration system. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration application information is not authenticated (635), the server generates a web page including predetermined information registration error information and transmits it to the terminal (640), and the biometric information registration application information. Do not perform the corresponding information registration procedure.

On the contrary, if the validity of the biometric information registration request information is authenticated (635), the server generates at least one predetermined document content including biometric information and at least one customer information including the biometric information registration request information (645). In operation 650, a predetermined biometric information registration electronic document including the document content is generated.

According to an exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and includes a document file (eg, the document content). , A Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including an MHT). It is preferable to process the biometric information registration electronic document for confirmation.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and the customer information and biometric information included in the biometric information registration request information in the document content. After including at least one of the information in a watermarking (Watermarking) method, a document file containing a document content including the watermarking (for example, a PDF (Portable Document Format) file, or an EDI (Electronic Data Interchange) file, Or a word processor file including at least one or more HWP / DOC, or a web document file including MHT), as a biometric information registration electronic document for identification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). It is preferable to process the image file including the image content generated by capturing on the memory as a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). Image content generated by capturing the image on the memory) by including at least one of customer information and biometric information included in the biometric information registration application information in a watermarking manner, and then including the image content including the watermarking. It is preferable to process the image file including the biometric information registration electronic document for identity verification using the biometric information.

According to another exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the document content. A predetermined document file (e.g., a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file, HWP / DOC, etc.) containing image content (e.g., image content generated by capturing the document content on a memory). By generating a word processor file including at least one or a web document file including the MHT, etc.), it is preferable to process the biometric information registration electronic document for identification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). To the image content generated by capturing the image content on the memory), the image content including at least one or more of the customer information and the biometric information included in the biometric information registration application information by watermarking (Watermarking) method, A document file including an image content included (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more such as HWP / DOC, or a web including an MHT). Document file, etc.), to create a biometric information registration electronic document for identification using the biometric information. It is preferable to process.

According to another exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the document content. A predetermined document file (e.g., a Portable Document Format (PDF) file or EDI (Electronic Data) including an image content (e.g., image content generated by capturing the document content on a memory) and the biometric information registration information. Interchange) file, or a word processor file including at least one of HWP / DOC, or a web document file including MHT), to process the biometric information registration electronic document for identification using the biometric information. It is preferable.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). To the image content generated by capturing the image content on the memory), the image content including at least one or more of the customer information and the biometric information included in the biometric information registration application information by watermarking (Watermarking) method, Word processor file including at least one document file (eg, Portable Document Format (PDF) file, EDI (Electronic Data Interchange) file, HWP / DOC, etc.) containing the included image content and the biometric information registration application information , Or a web document file including an MHT) to confirm identity using the biometric information. It is preferable to process the biometric information registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (655).

As shown in FIG. 6, the electronic document repository includes a predetermined electronic document server 545 and an electronic document D / B 565 associated with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 545 through the communication means to store in the electronic document D / B (565).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. The electronic document D / B 565 can be stored, and the present invention is not limited thereto.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information as shown in FIG. It is preferable to include storing in the electronic document D / B (565).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

The electronic document management information may include predetermined electronic document related information (eg, customer information transmitted by inputting (selecting) the biometric information registration request information and / or certification authority information transmitting the biometric information electronic document); And / or the electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document storage (660), the server processes the customer information, biometric information included in the biometric information registration application information and stored in a predetermined storage medium 540 665, predetermined information registration history information (e.g., details of storing the biometric information registration electronic document in the electronic document storage, and / or details of storing the biometric information registration application information in the storage medium 540). ) Is generated (or extracted) and transmitted to the terminal (670).

According to an embodiment of the present invention, the storage medium 540 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 540 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

7 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate having an illegal use prevention function according to an embodiment of the present invention.

In more detail, FIG. 7 illustrates that when a predetermined customer issues and processes an authorized certificate having an illegal use prevention function, authentication request information including customer information and biometric information is received from an unattended certificate issuing terminal 715, The present invention relates to a system for processing identity verification based on the biometric information included in the received authentication request information. Those skilled in the art to which the present invention pertains may refer to and / or modify the present invention. Various implementation methods may be inferred for the configuration of a certificate issuance system for issuing and processing an authorized certificate having an illegal use prevention function, but the present invention includes all the implementation methods inferred above, and the implementation method illustrated in FIG. It is not limited to only.

For example, those of ordinary skill in the art to which the present invention belongs, financial information (for example, card information or account information, etc.) replacing the biometric information provided by the customer by referring to and / or modifying the drawing 7 If received, it will be possible to infer an implementation method for a method for issuing and processing a public certificate through identification verification using the received financial information, thereby not limiting the present invention.

Hereinafter, when the customer information and the biometric information for the certificate issuance request are input through the certificate issuing request interface 715 output through a predetermined certificate issuing terminal 715 on the certificate issuing system shown in FIG. When the authentication request information is generated based on the information and the biometric information, and the generated authentication request information is transmitted through the certificate issuing terminal 715, after the identity verification process is performed based on the authentication request information, the authentication result is verified. Components corresponding to at least one or more means and / or functional configurations provided to the issuing terminal 715 are referred to as "certification authority server 700" for convenience.

Referring to FIG. 7 according to an embodiment of the present invention, a certificate issuing system for issuing and processing an authorized certificate with the illegal use prevention function may include a certificate provided in at least one certification authority branch (or branch) or a public place. Issuing terminal 715, characterized in that made, the certificate issuing terminal 715 is a communication channel is connected to the certification authority server 700 provided on the certificate issuing system through a predetermined communication network.

The storage medium 740 provided on the certificate issuing system according to the present invention includes customer information, biometric information, and the certificate issuing terminal 715 registered through the biometric information registration system illustrated in FIG. 1 or 5. Based on the received authentication request information, the authentication history information that has been authenticated is stored in a predetermined storage medium 740 by cooperative processing.

The customer information includes personal information of the customer (for example, the name, resident registration number, address, telephone number, mobile phone number, e-mail address, etc.) of the customer who registered the biometric information through the biometric information registration system shown in FIG. 1 or 5. ) And a member provided in the customer D / B provided on the certification authority system associated with the certificate issuing system in response to the customer by the member information of the customer (for example, when the customer subscribes as a customer of the certification authority). ID information and the like).

The biometric information may include image data provided by a customer who registers the biometric information through the biometric information registration system illustrated in FIG. 1 or FIG. 5 (or a scan of a body part of the customer (eg, a fingerprint, an iris, a face, etc.) and And / or at least one feature data on the image data (e.g., a feature on a pattern that is differentiated from a general pattern of fingerprints).

When the authentication request information for the customer who registered the biometric information is received through the biometric information registration system shown in FIG. 1 or 5, the authentication history information is the details of the authentication process according to the authentication request received (that is, the date of the authentication request, As a result of the authentication process, the authentication request terminal unique information, etc.) is preferably included.

The certification authority server 700 provided on the certificate issuing system according to the present invention is a generic term for the certificate issuing system side component connected to the certificate issuing terminal 715 through a predetermined communication network, and includes at least one server ( Or an apparatus) and / or at least one or more programs recorded on a recording medium provided in a predetermined server (or apparatus), and the present invention is not limited thereto.

Referring to FIG. 7, the certification authority server 700 generates authentication request information based on the customer information and the biometric information input from the certificate issuing terminal 715, and when the generated authentication request information is transmitted, On the basis of the information receiving unit 720 (or information receiving means) for receiving the authentication request information transmitted from the certificate issuing terminal 715 and the authentication request information received through the information receiving unit 720, And an information providing unit 730 (or information providing means) for providing the identification issuer 715 to the certificate issuing terminal 715. Characterized in that made.

When the certificate issuing terminal 715 generates and transmits the authentication request information for the identity verification request for the process of issuing an authorized certificate, based on the customer information and the biometric information input (or selected) through the output user interface, The information receiving unit 720 is characterized in that for receiving the authentication request information transmitted from the certificate issuing terminal 715.

When the authentication request information transmitted from the certificate issuing terminal 715 is received through the information receiving unit 720, the information checking unit 725 is based on the authentication request information transmitted from the certificate issuing terminal 715. Perform identity verification on the customer.

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium 740, It is preferable to process identity verification for the authentication request information by checking whether the stored customer information and the customer information included in the authentication request information match.

According to another exemplary embodiment of the present invention, when the identification of the customer is performed by the certificate issuing terminal 715, the storage medium 740 may be configured to obtain biometric information that matches the biometric information included in the received authentication request information. It is preferable to process through the certificate issuing terminal 715 to verify the identity, and to transmit the stored customer information to the certificate issuing terminal 715 by connecting the confirmed biometric information to the certificate issuing terminal 715. .

When a result corresponding to the received authentication request information is confirmed through the information checking unit 725, the information providing unit 730 transmits a result corresponding to the authentication request information to the certificate issuing terminal 715. It is characterized by.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal 715, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Referring to FIG. 7, the certification authority server 700 stores the authentication details of receiving the authentication request information in the storage medium 740 in response to the authentication request information transmitted from the certificate issuing terminal 715. An information storage section 735 (or information storage means) is provided.

The information storage unit 735 stores in the storage medium 740 the authentication details according to the authentication request information received in response to the authentication request information transmitted from the certificate issuing terminal 715.

According to the embodiment of the present invention, the authentication details include date information on which authentication request information is received from the certificate issuing terminal 715, a part (or all) of customer information included in the received authentication request information, and At least one authentication result confirmed in response to the authentication request information is preferably included.

According to an embodiment of the present invention, the storage medium 740 may include a first storage medium 740 for storing customer information and biometric information registered by the customer through the biometric information registration system illustrated in FIG. 1 or 5. The first storage medium 740 and the second storage medium 740 may be connected / configured in a relational manner. Do.

8 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate having an illegal use prevention function according to an embodiment of the present invention.

In more detail, FIG. 8 illustrates that a predetermined customer issues a certificate through a certification authority server 700 illustrated in FIG. 7 in order to process and issue an authorized certificate having an illegal use prevention function. Receive a public key generated by the certificate issuing terminal 715 (or generated from a wired or wireless storage medium connected to the certificate issuing terminal 715) from 715, and generates the public certificate information based on the received public key As a system configuration for processing to be stored in the wired and wireless storage medium through the certificate issuing terminal 715, those of ordinary skill in the art to which the present invention pertains, refer to and / or modified this figure 8 illegal use Various implementation methods for the certificate issuance system configuration for issuing and processing the public certificate with the prevention function can be inferred, but the present invention infers the above It includes all implementation methods, and is not limited to the implementation method shown in FIG.

Hereinafter, when the customer information and the biometric information for the request for issuing a certificate is input through the certificate issuing request interface 715 output through a predetermined certificate issuing terminal 715 on the certificate issuing system shown in FIG. After identity verification based on the information and biometric information, a component corresponding to at least one or more means and / or functional configurations for processing the issuance of a public certificate is referred to as a "certificate server 705" for convenience.

Referring to FIG. 8 according to an embodiment of the present invention, the certificate issuance system for issuing an authorized certificate provided with the illegal use prevention function, issuing a certificate provided in at least one certificate authority branch (or branch) or a public place, etc. And a terminal 715. The certificate issuing terminal 715 is connected to a certificate server 705 provided on the certificate issuing system through a predetermined communication network.

The certificate D / B 850 provided on the certificate issuing system according to the present invention issuing and processing the official certificate to the customer in accordance with the request for issuing a public certificate, the customer information and public certificate information according to the public certificate issuing process, and It is characterized by storing the validity period information and the condition of use information for the accredited certificate by linking.

When the customer information requests for issuance of a certificate through the certificate issuing system and processes a certificate issuance corresponding thereto, and provides an authorized certificate to the customer, personal information of the target customer who issued and processed the authorized certificate (for example, Name, resident registration number, address, telephone number, mobile phone number, e-mail address, etc.).

The public certificate information is used as version information for distinguishing the public certificate type for the public certificate provided to the customer, and as reference information for the suspension of revocation and revocation list of the public certificate provided to the public certificate provided to the customer. Signing algorithm information having serial number information, signature algorithm value used when creating a public certificate, issuer information for the organization that issued the public certificate, validity period information for the period guaranteeing the status of the public certificate, Issuer public key identifier information for identifying the owner information that owns the certificate, the public key information held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner. Key usage information, including the purpose for which the public key of It is preferable to include at least one or more information.

The validity period information is preferably made including a period / date and time that is available in the state that the authorized certificate issued to the customer is valid.

According to an embodiment of the present invention, the validity period information may include a specific period (eg, an expiration period available after the accredited certificate is issued) or specific date and time information, and the public certificate generated within the validity period It is desirable that only requests for use be processed effectively.

According to another exemplary embodiment of the present invention, the validity period information may include information about a specific number of times (or a specific number of days) (for example, the number of times (or the number of days) actually available after the accredited certificate is issued). If the number of times (or days) is exceeded, the issued certificate is preferably treated as invalid.

According to another exemplary embodiment of the present invention, it is preferable that the validity period information is a combination of a specific number and a specific period.

In other words, if the service is set to be available only within a certain number of times during a certain period, the remaining number of times will be destroyed if the specified time period is exceeded. It is preferred to be treated as not.

The use condition information is set to be used only in a terminal or a use area in which an authorized certificate issued to the customer is used, and terminal unique information (for example, IP address information or MAC address information) or use area set by the customer. It is preferable to include at least one information.

The certificate server 705 provided on the certificate issuing system according to the present invention is a generic term of the certificate issuing system side component connected to the certificate issuing terminal 715 through a predetermined communication network, and includes at least one server (or Device) and / or at least one program recorded on a recording medium provided in a predetermined server (or device), and the present invention is not limited thereto.

According to an embodiment of the present invention, the certificate server 705 includes an interface unit 800 (or interface means) for connecting and managing a predetermined communication channel with the certificate issuing terminal 715 through the communication network. Characterized in that made.

According to an embodiment of the present invention, the certificate issuing terminal 715 is connected to a predetermined communication channel based on a protocol stack defined in the communication network, and the certificate issuance related program provided in the certificate issuing terminal 715 is provided. It is desirable to provide a communication interface for transmitting and receiving at least one or more information (or data) using a defined communication protocol.

Referring to FIG. S, the certificate server 705 prevents illegal use when a predetermined certificate issuing terminal 715 connects a predetermined communication channel with the certificate server 705 through the interface unit 800. The certificate server 705 inputs (or selects) the customer information, the biometric information, the expiration date information, and the use condition information for a predetermined certificate issue request from the certificate issuing terminal 715 in order to process an authorized certificate with a function. Interface providing unit for generating (or extracting) at least one user interface for transmitting to the certificate issuing terminal 715 and generating (or extracting) the user interface generated in connection with the interface unit 800. 805 (or interface providing means) and the certificate issuing terminal 715 to the user interface and the customer information, biometric information and validity period information; When the condition information is input (or selected) and transmitted, receiving the customer information, the biometric information, the expiration date information and the use condition information transmitted from the certificate issuing terminal 715 in connection with the interface unit 800. An information receiving unit 810 (or information receiving means), and an information generating unit 815 (or information generating means) for generating authentication request information based on the received customer information, biometric information, expiration date information, and usage condition information. And an authentication confirmation unit 820 (or authentication confirmation means) for transmitting the generated authentication request information to a certification authority server 700 to confirm authentication for the biometric information. When the server 705 does not receive the biometric information and / or when the identification is not directly possible based on the biometric information, the information generating unit 815 and the authentication confirming unit 820 are omitted. May be

The interface providing unit 805 connects a predetermined communication channel with the certificate server 705 through the interface unit 800 through the interface issuing unit 800, and then illegally uses the certificate server 705 as the certificate server 705. When requesting a user interface for an authorized certificate issuing process with a prevention function, the certificate issuing terminal 715 inputs (or selects) predetermined customer information, biometric information, validity period information, and use condition information to establish the communication network. Generate at least one user interface to be transmitted to the certificate server 705, and / or extract it from a predetermined database (not shown), and link the generated (or extracted) user interface with the interface unit. The certificate issuing terminal 715 is provided through the communication network.

According to an embodiment of the present invention, a predetermined user interface that can be provided to a certificate issuance related program included in the certificate issuing terminal 715 is generated (or extracted), and the generated (or is extracted) through the interface unit 800. It is preferable to provide the extracted user interface to the certificate issuing terminal 715.

Here, at least one or more inputting (or selecting) predetermined customer information, biometric information, expiration date information, and usage condition information on the certificate issuing terminal 715 to transmit the certificate server 705 to the certificate server 705 through the communication network. When a predetermined program for issuing a certificate having a user interface is provided, the predetermined client information, biometric information, expiration date information, and use condition information are input (or selected) as described above to be transmitted to the certificate server 705. The interface providing unit 805 for generating (or extracting) a user interface and providing the certificate issuing terminal 715 may be omitted, and the present invention is not limited thereto.

Thereafter, the certificate issuing terminal 715 inputs (or selects) the customer information, the biometric information, the expiration date information, and the use condition information through the user interface. Valid period information and usage condition information are transmitted to the certificate server 705 through the communication network. In response, the information receiving unit 810 is transmitted from the certificate issuing terminal 715 in association with the interface unit 800. Receiving the customer information, the biometric information, the expiration date information, and the use condition information.

According to an embodiment of the present invention, the certificate issuing terminal 715 uses the customer information, biometric information, and validity period information in the certificate server 705 in the customer information, biometric information, validity period information, and usage condition information. At least one or more predetermined password and / or security card information for confirming the validity of the condition information and / or an OTP code generated through a predetermined one time password (OTP) generator; Sending to certificate server 705 is preferred.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 715 may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key) for the customer information, biometric information, validity information, and usage condition information. Based encryption method, and / or electronic envelope based encryption method, and / or key exchange based encryption method, etc.) and / or a predetermined electronic signature is applied to the customer information, biometric information, expiration date information, and usage condition information. In addition, it is preferable to transmit to the certificate server 705 through the network means, for this purpose, the certificate issuing terminal 715 has at least one encryption key corresponding to the encryption scheme, and / or at least one A predetermined certificate including the above encryption key is provided, and / or the certificate is a predetermined IC chip (or IC). If provided in the de), preferably it provided with a card to verify the certificate provided in the IC chip (or IC card) reader.

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the customer information, the biometric information, the expiration date information, and the use condition information, and the customer information, the biometric information, and the expiration date. It will be familiar with the technical features of attaching a predetermined electronic signature to the information and the conditions of use information, so a detailed description thereof will be omitted for convenience.

When the customer information, the biometric information, the expiration date information and the use condition information are input (or selected) through the output user interface, the information generator 815 validates the input (or selected) customer information and biometric information. The authentication request information is generated based on the period information and the use condition information.

When authentication request information is generated through the information generating unit 815, the authentication confirming unit 820 transmits the generated authentication request information to the certification authority server 700 to transmit biometric information included in the authentication request information. Check and check whether the checked biometric information matches the biometric information registered by the user in the certification authority server 700 by comparing and checking whether the biometric information is registered by the user from the certification authority server 700. Characterized in that the check.

According to the implementation method of the present invention, the authentication whether the authentication request information is confirmed, the generated authentication request information is transmitted to the certification authority server 700, and the certification authority server 700 is included in the authentication request information. The biometric information and the biometric information stored in a database held by the certification authority server 700 (or accessible) and compare the biometric information, and the biometric information is included in the customer information and the authentication request information registered on the database. Checking whether the customer information is matched, by receiving and reading the authentication result information (that is, including only the authentication result for the authentication request information) transmitted by the certification authority server 700, the authentication request information It is advisable to check the authenticity for.

According to another embodiment of the present invention, the authentication whether the authentication information included in the authentication request information, and transmits the generated authentication request information to the certification authority server 700, the certification authority server 700 is the authentication request information Compare / confirm biometric information included in the biometric information stored in a database held by the certification authority server 700 (or accessible), and verify authentication information including customer information registered with the biometric information. By checking whether the customer information included in the received authentication result information and the customer information included in the authentication request information match, it is preferable to check whether the authentication request information is authenticated.

Referring to FIG. S, when the authentication of the customer is confirmed, the certificate server 705 requests and receives public key information from the certificate issuing terminal 715 to generate and provide the public certificate information to the customer. An information receiving unit 810 (or information receiving means), an information generating unit 815 (or information generating means) for generating public certificate information based on the received public key information, and the generated public certificate information It is characterized in that it comprises a certificate issuing unit 825 (or certificate issuing means) for transmitting to the certificate issuing terminal 715 to be processed to be stored in the wired or wireless certificate D / B (850) for the customer.

After the identity verification process based on the biometric information of the customer through the authentication verification unit 820 (or after the identity verification process based on the biometric information about the customer in the certificate issuing terminal 715), the certificate issuing terminal 715 When the public key information and the customer information is transmitted, the information receiving unit 810 is characterized in that for receiving the customer information and public key information transmitted from the certificate issuing terminal 715.

When the customer information and the public key information transmitted from the certificate issuing terminal 715 are received through the information receiving unit 810, the information generating unit 815 is an authorized certificate based on the received customer information and the public key information. Characterized by generating the information, characterized in that the processing to set the validity period information and the use condition information, when generating the authorized certificate information.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is made by also being preferred.

When the public certificate information is generated through the information generator 815, the certificate issuing unit 825 requests the wired / wireless wired / wireless certificate D / B requested by the customer through the certificate issuing terminal 715. It is characterized in that the processing to be stored in (850).

Referring to FIG. 8, the certificate server 705 issues and processes the public certificate through the certificate issuing unit 825 after issuing the public certificate or before providing the public certificate information to the customer. Characterized in that it comprises a payment processing unit 830 (or payment processing means) for processing so that payment for the activation process of the authorized certificate is made.

According to the implementation method of the present invention, the payment processing for the activation process of the authorized certificate to the customer, after generating the certificate information to be provided to the customer, the wired / wireless wired / wireless certificate D requested by the customer through the certificate issuing terminal 715 Before providing to / B 850, it is preferable to request a payment using a predetermined payment method by calculating a payment amount.

Herein, the payment amount is a payment amount corresponding to a basic validity period when no validity period is set when the authorized certificate is issued, and / or a predetermined period corresponding to the validity period when the customer sets a validity period. The amount of payment calculated based on the base rate for the unit period (or the amount of payment applied with a certain discount rate according to the validity period), and / or the amount of payment calculated based on the number of times (or the discount rate applied according to a certain number of times or more) It is preferable that the payment amount calculated through).

If payment for the payment amount is not made when the public certificate is issued, the public certificate provided to the customer is set as an invalid public certificate, and when the payment is made, the public certificate is set as a valid public certificate. desirable.

Referring to FIG. 8, the certificate server 705 links the certificate information provided to the certificate issuing terminal 715 with the customer information, the valid period information, and the use condition information for the target customer who issued the certificate. And an information storage unit 845 (or information storage means) for processing and storing in the certificate D / B 850.

According to the method of the present invention, the certificate D / B 850 is a database accessible from the certificate server 705, the customer information for one or more customers, and the public certificate information corresponding to the certificate provided to the customer And expiration date information and usage condition information are preferably stored.

In addition, the certificate D / B 850 is preferably a database that can not be modified / generated by accessing from an external server other than the certificate server 705.

Referring to FIG. 8, the certificate server 705 checks the use condition registered by the customer when the customer uses an authorized certificate when using the financial transaction service, and does not meet the use condition when the customer sets the use condition. In order to use the financial transaction service in the state, check the communication means information, such as the mobile phone number registered in advance by the customer, and obtained the authentication through the communication means corresponding to the confirmed communication means information in a state that does not meet the conditions of use Characterized in that it comprises a certification verification unit 820 (or certification verification means) for processing to enable the temporary use of the public certificate.

According to the implementation method of the present invention, the authentication for the temporary use process for the authorized certificate in a situation that does not meet the conditions of use, sending a SMS (Short Message Service) text message to the mobile number pre-registered by the customer, It is preferable that the customer who checks the text message requests and authenticates a separate certificate so that the temporary certificate can be used temporarily in a condition that does not meet the conditions of use.

Here, the method for authenticating the customer by requesting separate authentication includes transmitting a callback URL in the text message, and accessing the customer through the callback URL and entering a predetermined password to meet the use condition. It is desirable that a non-accredited certificate be processed so that it can be used temporarily only for a certain number of times (or for a certain period of time, or a certain number of times and periods).

In this case, it is possible to send a multimedia message using the MMS (Multimedia Message Service) instead of the text message using the SMS, it is preferable that the customer provides the details to use the authorized certificate.

In addition, it is desirable to classify / store the financial transaction history used through the accredited certificate in a state in which the conditions of use are not met so that the customer can immediately check (or later check).

Referring to FIG. 8, the certificate server 705, when the customer who has issued the certificate requests to use the public certificate as a transaction authentication means in the course of using the financial transaction service, the public certificate information from the terminal requesting the use of the public certificate. And an information receiving unit 810 (or information receiving means) for receiving certificate authentication request information including at least one of password information, terminal unique information, and usage area information, and the authorized certificate based on the received certificate authentication request information. And an information checking unit 835 (or information checking means) for confirming the authentication of the authentication information, and an information providing unit 840 (or information providing means) for providing a result of authentication verification for the public certificate. do.

The information receiving unit 810 requests that the customer who has issued the certificate use the official certificate as a transaction authentication means in the course of using the financial transaction service, and uses the certificate information and the password information in the terminal used to use the financial transaction service. When the certificate authentication request information including at least one terminal unique information and the usage area information is transmitted, the certificate authentication request information is received, and the received certificate authentication request information is sent to the information verification unit 835. Is provided.

The information checking unit 835 confirms whether or not authentication is possible for the authentication request based on the authorized certificate provided by the customer in response to the received certificate authentication request information, and the certificate authentication corresponding to the confirmed authentication availability. It is characterized by generating the result information.

According to the exemplary embodiment of the present invention, the authentication result of the received certificate authentication request information is checked, wherein the public certificate information among the information included in the received certificate authentication request information is stored in the certificate D / B 850. It is desirable to check whether or not it matches the public certificate information.

In addition, it is preferable to further check whether the password information included in the received certificate authentication request information is a password for the authorized certificate.

If the validity period for the accredited certificate is set or the validity period for the accredited certificate paid by the customer is set even if the validity period is not set, the accredited certificate corresponds to the validity period set above. It is desirable to check whether or not.

In addition, when the conditions of use for the public certificate is set, it is preferable to check whether the public certificate meets the conditions of use for the public certificate or not.

When the validity of the public certificate is confirmed according to the above process, it is preferable to generate the authentication result information including the verification result of confirming the certification of the public certificate.

If the authentication result information for the authorized certificate is generated, the information providing unit 840 provides the confirmed authentication result information to a user terminal (not shown) or a financial institution server 710 requesting authentication. It is preferable to store the authentication result information on a database that manages the authentication details.

9 is a diagram illustrating a functional configuration of a certificate issuing terminal 715 for issuing and processing a public certificate having an illegal use prevention function according to an embodiment of the present invention.

In more detail, FIG. 9 illustrates an unmanned certificate issuing terminal 715 provided in a predetermined financial institution (eg, a commercial bank branch, a card company branch) and / or a public place, and includes an illegal use prevention function according to the present invention. As shown in the preferred functional configuration for processing the issue of a public certificate, those of ordinary skill in the art to which the present invention pertains, the present invention is provided with the prevention of illegal use according to the present invention by referring to and / or modifying the figure 9 Various implementation methods may be inferred for the certificate issuing terminal 715 for processing the issued public certificate, but the present invention includes all the implementation methods inferred and is not limited by the implementation method shown in FIG. No.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 9 and infer an implementation method of applying to a financial institution-specific certificate issued by a financial institution in addition to the authorized certificate. There will be, and the invention is not limited thereby.

Referring to FIG. 9, the certificate issuing terminal 715 may use a wireless terminal such as a USB memory and / or a mobile phone and / or a wired / wireless storage medium such as an SD / MMC memory card and / or a CF memory card and / or an XD memory card. Process screen of each step for issuing a certificate issued by the memory control unit 900 to recognize and issue the certificate information using the biometric information and the prevention of illegal use provided through the certificate issuing terminal 715 A screen output unit 910 for outputting a key, a key input unit 920 for receiving predetermined information according to each step, and a request for issuance of an authorized certificate equipped with an illegal use prevention function according to the present invention. A biometric unit 915 for recognizing biometric information, a communication unit 970 for communicating with a certificate authority server and / or a financial institution server and / or a certificate server through a predetermined communication network, and the certificate issuance A memory unit 965 configured to store at least one certificate issuance processing information for the public certificate issuance processing with the illegal use prevention function, and a predetermined certificate issuance information after the certificate issuance processing; A control unit 925 for controlling a power supply unit 980 for supplying power to the certificate issuing terminal 715, at least one terminal function unit 975, and each function component provided in the certificate issuing terminal 715. It is made to include.

In addition, the certificate issuing terminal 715 recognizes the MS card and / or IC card and / or bankbook that stores the customer's financial information (for example, the card information and / or account information possessed by the customer) and predetermined information It comprises a card reader unit 905 to obtain a.

The control unit 925 controls the overall operation of the certificate issuing terminal 715 in the functional configuration, manages the flow of information or data between each component, and issuing an authorized certificate with an illegal use prevention function according to the present invention To control at least one or more components provided in the certificate issuing terminal 715, at least one processor and execution memory including a CPU (Central Processing Unit) / MPU (Micro Processing Unit) in hardware (E.g., a register) and a bus for inputting and outputting predetermined data and at least one or more electronic circuits (or integrated circuits) therefor, and performing software-specific functions. Loading from the predetermined recording medium provided in the certificate issuing terminal 715 to the execution memory and the Including a predetermined program routine (Routine) and / or the program data to be processed computed by the processor is characterized in that formed. In particular, the control unit 925 includes a predetermined operating system and / or a terminal control program routine for managing the certificate issuing terminal 715 after the certificate issuing terminal 715 is booted by software. .

Hereinafter, FIG. 9 illustrates at least one program component provided in the certificate issuing terminal 715 in the controller 925 for convenience in order to issue an authorized certificate with an illegal use prevention function according to the present invention.

The memory controller 900 issues and issues the wired / wireless storage medium and the certificate to store / read the authorized certificate information in the wired / wireless storage medium after the issued certificate information with the illegal use prevention function according to the present invention is processed. It is characterized in that the interface between the terminal 715, and control according to the standard for reading and / or recording one or more information or data according to the type of wired or wireless storage medium (e.g., SPI protocol in the case of a memory card) It is desirable to.

The card reader unit 905 is characterized in that it provides an interface between the card and the certificate issuing terminal 715 to read at least one or more information or data provided in the card for issuing a public certificate, ISO / IEC MS reader interface to interface the MS (Magnetic Stripe) card based on the 7810 standard with the certificate issuing terminal 715, and / or contact based on the ISO / IEC 7816 standard for the processing of issuance of a public certificate with the prevention of illegal use Contact IC reader unit for interfacing the integrated IC card with the certificate issuing terminal 715 and / or contactless IC reader unit for interfacing the contactless IC card based on the ISO / IEC 14443 standard with the certificate issuing terminal 715 And a contact IC reader unit and / or a contactless IC reader unit corresponding to an IC card reader provided in the certificate issuing terminal 715. It is preferred.

The MS reader unit is a card reader unit 905 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information or data (eg, magnetization). When the MS card on which the stored binary information or binary data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information or data is recorded), The predetermined information or data is interfaced to the certificate issuing terminal 715 from at least one or more tracks included in the MS of the MS card by using a predetermined electrical signal loaded.

The contact IC reader unit is a card reader unit 905 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It supplies the power to the IC chip of the IC card through the contact point, and the predetermined information or data from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized in that the interface to the certificate issuing terminal 715.

The contactless IC reader part is a card reader part 905 based on ISO / IEC 14443. The contactless IC reader part may be at least in electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, the predetermined information or data from the IC chip through the half-duplex transaction using the APDU certificate It is characterized in that the interface to the issuing terminal 715.

The screen output unit 910 is predefined so that the certificate issuing terminal 715 is output by the control unit 925 to a predetermined screen output means including a liquid crystal display (LCD) and / or a cathode ray tube (CRT). Or at least one information or data that is defined in real time or is defined in real time, and the key data input through the key input unit 920 to predefined information or data to be output on the screen by the certificate issuing terminal 715. , Biometric information input through the biometric recognition unit 915, information stored or generated by a component included in the certificate issuing terminal 715, information transmitted / received through the communication unit 970, a certificate issuing terminal 715 It includes the data corresponding to the predetermined operation result to perform).

According to the exemplary embodiment of the present invention, the screen output unit 910 outputs a processing screen and / or an interface screen according to each authorized certificate issuing step equipped with an illegal use prevention function according to the present invention to a predetermined screen output device. It is preferable.

The key input unit 920 includes at least one key button including at least one numeric key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or an operation mode of the certificate issuing terminal 715 controlled by the controller 925. When predetermined information (or signal) is inputted from the key button of, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 925. The controller 925 acquires predetermined key data corresponding to the key event in the current input mode and / or operation mode of the certificate issuing terminal 715, and / or is matched with the key event. It is characterized in that to obtain a command for executing a predetermined function, the key input unit 920 and the key input device having at least one or more key buttons are provided in the certificate issuing terminal 715 in cooperation with each other Functions as a key input means.

According to an embodiment of the present invention, a key input device interoperating with the key input unit 920 may include a keypad device having at least one numeric key and a function key, and / or at least one numeric key and a letter key (eg, A keyboard device having English character keys and / or Korean character keys) and a function key, and / or at least one numeric key and a function key in conjunction with the screen output means, and / or at least one numeric key And at least one touch screen device having character keys and function keys.

According to an embodiment of the present invention, the key input unit 920 preferably receives at least one or more pieces of information from a predetermined key input device according to each of the steps for issuing an authorized certificate with the illegal use prevention function according to the present invention.

The biometric recognition unit 915 detects information input from a biometric information recognition device having a function of reading at least one or more biometric information, and specifies the certificate issuing terminal 715 controlled by the control unit 925. When predetermined biometric information is input from the biometric information reader provided in the biometric information recognizing apparatus in the input mode and / or the operation mode, the input biometric information is provided to the controller 925. 925 is characterized in that to obtain the biometric information in the current input mode and / or operation mode of the certificate issuing terminal 715.

According to an embodiment of the present invention, a biometric information recognition device that interoperates with the biometric recognition unit 915 may include a keypad device having at least one or more function keys, and / or at least one fingerprint recognition device, and / or at least one. At least one biometric device equipped with a biometric information reader function such as the iris recognition device and / or the face recognition device is preferable.

The communication unit 970 provides communication means for performing a transaction function (for example, a transaction function interoperating with one or more servers connected to the certificate issuing terminal 715 through a communication network) provided in the certificate issuing terminal 715. And a network communication unit and / or a predetermined cable communication port (eg, RS-232c) that provides transactional communication with a server on the communication network through a communication network (eg, a party network or a CD / ATM network) in hardware. Cable communication unit and / or Infrared Ray communication, RF (Radio Frequency) communication, Bluetooth (BlueTooth), Wireless LAN (Wireless LAN) to provide transactional communication with external communication devices via USB (Universal Serial Bus). Local area communication unit for providing transactional communication with the local area communication device through at least one or more short-range wireless communication, including Wi-Fi, Ultra Wide Band system (UWB) It is made, including, comprises a communication protocol and a communication application for providing a communication transaction in software.

According to an embodiment of the present invention, the communication unit 970 connects a communication channel for issuing an authorized certificate having an illegal use prevention function with one or more servers on the communication network through a network. It is desirable to.

The memory unit 965 is a storage medium that stores at least one or more information or data required for the control unit 925 to perform a predetermined control function. The memory unit 965 hardware-electrically erasable and programmable read only memory (EEPROM), FM (Flash Memory), HDD (Hard Disk Drive), and at least one storage means including a solid state drive (SSD), and the like, the software control unit 925 required to perform a predetermined control function A predetermined program routine and program data (e.g., data input or output for the program routine to perform a predetermined function).

According to an embodiment of the present invention, the memory unit 965 stores at least one certificate issue processing information used by the certificate issuing terminal 715 to process a financial transaction with an illegal use prevention function according to the present invention. Preferably, and / or after the certificate issuance processing provided with the illegal use prevention function, it is preferable to store certificate issuance history information corresponding to the issue of the certificate.

The terminal function unit 975 is a component provided in the certificate issuing terminal 715 for a predetermined purpose or role and / or components provided in the certificate issuing terminal 715 in addition to the components shown in FIG. As an element, it includes various additional function configurations according to the intention of those skilled in the art, such as a security application module (SAM), a scanner device capable of checking customer information such as a resident registration card / driver's license / passport that a user inputs.

Those skilled in the art to which the present invention pertains can easily understand each terminal function unit 975 provided according to the characteristics of the certificate issuing terminal 715, and thus a detailed description thereof will be omitted.

Referring to FIG. 9, a mode checking unit 930 for checking whether an operation mode of the certificate issuing terminal 715 is an authorized certificate issuing mode equipped with an illegal use prevention function, and an authorized with an illegal use prevention function In the interface output unit 935 for processing to output at least one user interface corresponding to the certificate issuance mode through the screen output unit 910, and in the operation mode input (or selected) through the output at least one user interface Correspondingly, the information generation unit 940 for generating authentication request information based on the biometric information input by the user requesting the issuance of the public certificate, and the customer information for the user, and the generated authentication request information. Characterized in that the authentication confirmation unit 945 is transmitted to the server to confirm the authentication for the biometric information.

The certificate issuing terminal 715 has a plurality of operation modes, such as an authorized certificate issuing mode for processing issuance of a public certificate with an illegal use prevention function according to the present invention, and a public certificate issuing mode for processing issuance of a public certificate using financial information. The mode checking unit 930 may include an operation mode of the certificate issuing terminal 715 using an authorized certificate issuing mode or financial information for processing issuance of an authorized certificate equipped with an illegal use prevention function according to the present invention. It is characterized by checking whether the mode of issuing a public certificate.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 715 selects an authorized certificate issued with an illegal use prevention function according to the present invention from among a plurality of operation modes on a basic screen, thereby preventing the illegal use function. It is preferable to switch to the public certificate issuing mode for processing the issued public certificate.

According to another exemplary embodiment of the present invention, the certificate issuing terminal 715 is authorized with an illegal use prevention function according to the present invention among a plurality of operation modes after a predetermined IC card is inserted into the IC card reader. By selecting the certificate issuance, it is preferable to switch to the public certificate issuing mode for processing the public certificate issuance provided with the illegal use prevention function.

When the mode check unit 930 is set to an authorized certificate issuing mode equipped with an illegal use prevention function, the interface output unit 935 inputs (or selects) customer information and biometric information for processing the issued certificate. At least one user interface for the) characterized in that comprises a.

According to an embodiment of the present invention, customer information for processing the issued certificate and at least one user interface for inputting (or selecting) biometric information may include customer information such as a customer name, social security number, address, and telephone number. And at least one region for inputting (or selecting) and at least one button (or icon) for processing the biometric information of the user through the biometric recognition unit 915.

When the customer information and the biometric information are input (or selected) through the output user interface, the information generator 940 generates the authentication request information based on the input (or the selected) customer information and the biometric information. It features.

Here, the generated 'authentication request information' is referred to as 'certificate issue request information' when directly transmitted to the certificate server.

When the authentication request information is generated through the information generating unit 940, the authentication confirming unit 945 transmits the generated authentication request information to a certification authority server to confirm biometric information included in the authentication request information. The biometric information registered by the user may be checked by comparing the checked biometric information with the biometric information registered by the user in the certification authority server, and the biometric information registered by the user may be checked by the certification authority server.

According to the implementation method of the present invention, the authentication whether the authentication request information is confirmed, transmitting the generated authentication request information to an authentication authority server, and the authentication authority server includes the biometric information included in the authentication request information and the authentication. Compare / verify the biometric information stored in the database held by the institution server (or accessible), check whether the customer information registered in the database with the confirmed biometric information matches the customer information included in the authentication request information, It is preferable to confirm whether or not the authentication request information is authenticated by receiving and reading the authentication result information (that is, including only the authentication result for the authentication request information) transmitted by the certification authority server.

According to another exemplary embodiment of the present invention, the authentication whether the authentication information is included in the authentication request information includes transmitting the generated authentication request information to an authentication authority server, and the authentication authority server is configured to perform biometric information included in the authentication request information. Compare / confirm biometric information stored on a database held by the certification authority server (or accessible), and receive authentication result information including customer information that registers the biometric information. By checking whether the included customer information and the customer information included in the authentication request information match, it is preferable to check whether the authentication request information is authenticated.

9, the certificate issuing terminal 715, based on a result of confirming the authentication of the authentication request information, if the authentication of the authentication request information is confirmed, the authorized certificate provided with the illegal use prevention function An authentication key generation unit 950 for generating an authentication key for issuing processing, and transmits the generated authentication key to a certificate server to request issuance of a public certificate, and is generated based on the transmitted authentication key from the certificate server. Certificate processing unit (960) (955) for receiving the public certificate information, the public certificate information received from the certificate server and the generated authentication key information for processing to be stored in the wired or wireless storage medium through the memory control unit 900 It is characterized by comprising a storage unit.

Based on a result of confirming the authentication of the authentication request information, when the authentication of the authentication request information is confirmed, the authentication key generator 950 may generate a public key and a private key.

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

When a public key and a private key are generated through the authentication key generation unit 950, the certificate processing unit 960 and 955 transmits the generated public key to a certificate server, and transmits the transmitted public key from the certificate server. Characterized in that it receives the certificate information generated based on the certificate.

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

The information storage unit is characterized in that when the certificate information is received from the certificate server, the received certificate information is characterized in that the processing to be stored in the wired and wireless storage medium based on a protocol corresponding to the type of wired and wireless storage medium.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawing 9 and / or any wired / wireless storage medium capable of storing authorized certificate information in addition to the USB storage medium or the mobile phone storage medium (eg, smart). Card storage media, etc.), whereby the present invention is not limited thereto.

10A and 10B illustrate a process of issuing and processing a public certificate having an illegal use prevention function according to an embodiment of the present invention.

In more detail, FIGS. 10A and 10B illustrate a process of validating customer information, biometric information, and validity period from a certificate issuing terminal for processing of issuance of a certificate through identification verification using biometric information based on FIGS. 7, 8, and 9. When the information is input (or selected), the authentication authority server and the certificate issuing terminal process identity verification based on the customer information and the biometric information among one or more of the input (or selected) information, and the public key is issued by the certificate issuing terminal. And a process of generating a private key and requesting for issuance of a public certificate through a certificate server, and processing the received public certificate information to be stored in a wired / wireless storage medium, having a general knowledge in the technical field to which the present invention pertains. If you grow up, refer to and / or modify the Figures 10a and 10b to issue an authorized certificate equipped with an illegal use prevention function Li would be able to infer a variety of exemplary methods for the process of the present invention includes all embodiments in which the inference method, shall not be limited to the exemplary method shown in the figure 10a and figure 10b.

For example, those skilled in the art to which the present invention pertains may modify the order of the process of issuing and processing a public certificate having an illegal use prevention function by referring to and / or modifying the drawings 10a and 10b, And / or some omitted implementation methods may be inferred, thereby limiting the invention.

Referring to FIGS. 10A and 10B, the certificate issuing terminal illustrated in FIG. 9 inputs (or selects) customer information, biometric information, and validity period information for a request for issuance of an authorized certificate through identity verification using biometric information. Request the user interface output (1000), generate (or extract) a user interface corresponding to the output request, and process the output (1005), and output the customer information, the biometric information, and the expiration date information through the output user interface. Enter (or select) 1010.

If the customer information, the biometric information, and the valid period information are input (or selected) through the output user interface (1015), the certificate issuing terminal receives the input (or selected) customer information, biometric information, and validity period. Generate (or extract) authentication request information based on the information (1020), and transmit the generated (or extracted) authentication request information to the certification authority server shown in FIG. 7 through a communication network to request authentication (1025). In response, the certification authority server checks the authentication result based on the received authentication request information (1030).

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium, and may be stored in connection with the confirmed biometric information. It is preferable to process identity verification for the authentication request information by checking whether the customer information and the customer information included in the authentication request information match.

According to another embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, the biometric information matching the biometric information included in the received authentication request information is confirmed through the storage medium, and the confirmed It is preferable to process the identification information for the authentication request information is performed in the certificate issuing terminal by transmitting the stored customer information in connection with the biometric information to the certificate issuing terminal.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Thereafter, the certification authority server transmits the verified authentication result to the certificate issuing terminal (1040), and correspondingly, the certificate issuing terminal checks the received authentication result (1045).

If the authentication result received from the certification authority server is confirmed as an authentication failure (1050), the certificate issuing terminal generates (or extracts) error information on the authentication failure based on the received authentication result and processes it to be output. (1055).

On the other hand, if the authentication result received from the certification authority server is confirmed as successful authentication (1050), the certificate issuing terminal generates a public key and a private key (1060), and transmits the generated public key to the certificate server to authenticate Request the certificate information (1065).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (1070), and transmits the generated public certificate information to the certificate issuing terminal (1075), and correspondingly the certificate issuing terminal is The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected with a certificate issuing terminal (1080).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is preferable to comprise.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains, all wired and wireless storage media capable of storing the authorized certificate information, in addition to the USB storage medium or mobile phone storage medium by referring to and / or modified with reference to the drawings 10a and 10b ( For example, it is possible to include a smart card storage medium, etc.), whereby the present invention is not limited.

11A and 11B illustrate a process of issuing and processing a public certificate provided with an illegal use prevention function according to another exemplary embodiment of the present invention.

In more detail, FIGS. 11A and 11B illustrate the customer information, the biometric information, and the expiration date from the certificate issuing terminal for processing of issuance of a certificate through identification verification using biometric information based on FIGS. 7, 8, and 9. When the information is input (or selected), the customer information and biometric information among the one or more input (or selected) information is transmitted to the certificate server, the certificate server processes the identity verification with the certificate authority server, the certificate issuing terminal It is a process for generating a public key and a private key from the request to receive a certificate issued through a certificate server, and receiving the received certificate information stored in a wired or wireless storage medium, which is common in the art. If you have knowledge, you can refer to and / or modify the drawings 11a and 11b to be certified to provide illegal use prevention. Various implementation methods for the process of issuing a document may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation methods shown in FIGS. 11A and 11B.

For example, those of ordinary skill in the art to which the present invention pertains may modify the order of the process of issuing and processing a public certificate having an illegal use prevention function by referring to and / or modifying the drawings 11a and 11b, And / or some omitted implementation methods may be inferred, thereby limiting the invention.

11A and 11B, the certificate issuing terminal illustrated in FIG. 9 inputs (or selects) customer information, biometric information, and expiration date information for a request for issuance of a certificate through identification verification using biometric information. Request a user interface output (1100), generate (or extract) a user interface corresponding to the output request and process the output (1105), and output the customer information, the biometric information, and the expiration date information through the output user interface. Enter (or select) 1110.

If the customer information, the biometric information, and the expiration date information are input (or selected) through the output user interface (1115), the certificate issuing terminal receives the input (or selected) customer information, biometric information, and expiration date information. Generate (or extract) the certificate issuing request information based on (1120), and transmit the generated (or extracted) certificate issuing request information to the certification authority server shown in FIG. In response thereto, the certificate server receives certificate issuing request information transmitted from the certificate issuing terminal, requests identification verification through a certification authority server based on the received certificate issuing information (1130), In response, the certification authority server verifies the customer's identity in response to the received identification request (1135).

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium, and may be stored in connection with the confirmed biometric information. It is preferable to process identity verification for the authentication request information by checking whether the customer information and the customer information included in the authentication request information match.

According to another embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, the biometric information matching the biometric information included in the received authentication request information is confirmed through the storage medium, and the confirmed It is preferable to process the identification information for the authentication request information is performed in the certificate issuing terminal by transmitting the stored customer information in connection with the biometric information to the certificate issuing terminal.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Thereafter, the certification authority server transmits the verified authentication result to the certificate server (1140), and correspondingly, the certificate server confirms the received authentication result (1145).

If the authentication result received from the certification authority server is confirmed as an authentication failure (1150), the certificate server generates (or extracts) error information on the authentication failure based on the received identity verification result through a communication network. The process of transmitting the certificate issuing terminal to be output (1155).

On the other hand, if the authentication result received from the certification authority server is confirmed as successful authentication (1150), the certificate server requests a public key for issuing a public certificate to the certificate issuing terminal (1160), and correspondingly the certificate issuing terminal After generating the public key and the private key according to the public key request, and transmits the generated public key to the certificate server (1165).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (1170), and transmits the generated public certificate information to a certificate issuing terminal (1175). The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected to a certificate issuing terminal (1180).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate, pop is the verification information of the user's private key ownership, and if the user's key is the digital signature key, it includes a signature value for the certificate request information. regInfo is information used when additional registration information is required for an authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage information, including the purpose, and certificate policy information. It is preferable to comprise.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains, all wired and wireless storage media capable of storing authorized certificate information, in addition to the USB storage medium or mobile phone storage medium by referring to and / or modified with reference to the drawings 11a and 11b ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

12 illustrates a financial transaction system for providing a financial transaction service according to an embodiment of the present invention.

More specifically, FIG. 12 illustrates financial transaction request information including at least one customer account information, transaction amount information, and transaction authentication information for a predetermined customer to provide the financial transaction service to a financial transaction system through a predetermined financial transaction interface. If provided, the system for providing a financial transaction for providing the financial transaction service using the customer account information, transaction amount information and transaction authentication information included in the provided financial transaction request information in the financial transaction system However, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 12 to infer various implementation methods for constructing a financial transaction system for providing a financial transaction service. Includes all the implementation methods inferred, and the seal shown in FIG. It shall be limited to methods.

Hereinafter, at least one means for providing a financial transaction for providing the financial transaction service using financial transaction request information provided from the customer through a predetermined financial transaction interface on the financial transaction system shown in FIG. 12 and / or A component corresponding to the functional configuration is referred to as a "financial institution server 710" for convenience, and the financial institution server 710 in the present FIG. 12 providing the non-face-to-face financial transaction service is an internet banking server or a wireless banking server. It is preferable to include all kinds of non-face-to-face banking server, including at least one home banking server.

Referring to FIG. 12 according to an embodiment of the present invention, the financial transaction system for providing a financial transaction service includes at least one client terminal including at least one wired terminal and / or a wireless terminal used by a customer. The financial transaction terminal 1245, a communication network corresponding to a wired communication network and / or a wireless communication network to which the financial transaction terminal 1245 is connected, and the financial transaction service connected to the financial transaction terminal 1245 through the communication network. It comprises a financial institution server 710 for processing a financial transaction for provision and the financial system 1240 opened the customer account.

The financial system 1240 for processing at least one financial transaction service through the customer account in connection with the financial institution server 710 may include at least one window terminal provided at a branch (and / or a branch) of the financial institution. And a predetermined financial network (for example, a party network), and provides a face-to-face financial transaction service for at least one financial transaction customer through the counter terminal.

Further, the financial system 1240 may include at least one financial terminal including a cash dispenser / automatic teller machine (CD / ATM) provided at a branch (and / or branch) of the financial institution, and / or the financial institution. At least one financial terminal provided in at least one affiliated financial institution (and / or another financial institution branch) and / or at least one financial terminal provided in a public place and a predetermined financial network (eg, CD Network), and provides a non-face-to-face financial transaction service to at least one financial transaction customer through the financial terminal.

In addition, the financial system 1240 is characterized in that associated with a predetermined Internet banking server, a network connected to a TCP / IP-based backbone network through the Internet banking server (eg, wired Internet, and / or IEEE 802.11x-based At least one client terminal (e.g., a personal computer equipped with the wired Internet access and browsing function) connected to a wireless LAN, and / or an HSDPA based wireless communication network, and / or an IEEE 802.16x based portable Internet. And / or provide a non-face-to-face financial transaction service to at least one or more financial transaction customers through a laptop, the wireless LAN / portable internet connection and browsing function, and / or the like.

In addition, the financial system 1240 is characterized in that associated with a predetermined wireless banking server, a predetermined wireless network (for example, code division multiple access (CDMA) based mobile communication network, and / or through the wireless banking server) PCS equipped with at least one wireless terminal (e.g., access and browsing function connected to the mobile communication network) connected to an HSDPA-based wireless communication network, and / or an IEEE 802.16x-based portable Internet, and / or a DataTAC / Mobitex-based wireless data communication network. At least one financing through a Personal Communication System and / or Global System for Mobile (GSM) terminal and / or a Personal Digital Assistant (PDA) and / or a Smart Phone and / or Telematics). Provide non-face-to-face financial transaction services to trading customers.

In addition, the financial system 1240 is characterized in that it is associated with a predetermined IC chip-based wireless banking server, a predetermined wireless network (for example, code division multiple access (CDMA) based on the IC chip-based wireless banking server) Equipped with at least one wireless terminal (e.g., a financial IC chip) connected to a mobile communication network, and / or an HSDPA-based wireless communication network, and / or an IEEE 802.16x-based portable Internet, and / or a DataTAC / Mobitex-based wireless data communication network. The wireless terminal provides an IC chip-based non-face-to-face financial transaction service to at least one financial transaction customer.

In addition, the financial system 1240 is characterized in that associated with a predetermined telebanking server, and is connected to a predetermined wired voice call network (eg, Public Switched Telephone Network (PSTN)) through the telebanking server. At least one wired communication terminal (e.g., a telephone) and / or at least one wireless communication terminal (e.g., a PCS and / or a mobile communication network based on a code division multiple access (CDMA)). Or a non-face-to-face financial transaction service to at least one or more financial transaction customers through a GSM terminal and / or a smart phone.

In addition, the financial system 1240 is characterized in that associated with a predetermined home banking server, at least one or more home appliances connected to a predetermined home network through the home banking server (eg, digital TV connected to the home network and / Or a non-face-to-face financial transaction service to at least one financial transaction customer through a refrigerator or the like.

In addition, the financial system 1240 is characterized in that associated with a predetermined TV banking server, at least one digital TV (for example, two-way digital TV, connected to a predetermined return channel (Return Channel) through the TV banking server) The non-face-to-face financial transaction service is provided to at least one financial transaction customer through a satellite DMB terminal or a terrestrial DMB terminal.

Referring to FIG. 12, the financial system 1240 is provided to a financial institution to open at least one financial account to at least one financial transaction customer and provide at least one financial transaction service based on the financial account. A computer system comprising: an accounting system for processing a window service such as credit or receiving or trust or foreign exchange occurring in at least one branch (or window), an information system for processing a headquarters business, a branch office information support, and a customer information management; Interconnection between the financial system 1240 and at least one other financial system 1240 (and / or payment system), and / or at least one non-face-to-face financial transaction means (e.g., provided in at least one external communication network) Internet banking, wireless banking, IC chip-based wireless banking, tele banking, TV banking, etc.) System 1240, and / or an external system providing various financial transaction interfaces through at least one or more common networks (eg, CD common network, financial common network). 1240 is an interface module corresponding to a middleware platform that provides inter-component interfacing between the components of the financial system 1240, and predetermined functions required for performing respective functions in the components of the financial system 1240. And a DBMS (DataBase Management System) including at least one database for storing and managing information (eg, ledger information, and / or customer information, and / or management information, etc.).

In addition, the financial system 1240 is intended by those skilled in the art and / or types of financial institutions (eg, commercial banks, savings banks, trust banks) provided with the financial system 1240 and the purpose of the financial system 1240. And according to the features, it is possible to further include at least one or more components, such as foreign exchange module (not shown), investment finance module (not shown), international module (not shown), in the technical field to which the present invention belongs Those skilled in the art will be familiar with the detailed technical details of the financial system 1240, and thus the detailed description thereof will be omitted for convenience, and the present invention is not limited thereto.

According to the present invention, the DBMS provided in the financial system 1240, the financial institution opens at least one financial account to at least one financial transaction customer, at least one financial transaction service based on the financial account And at least one ledger D / B for storing at least one ledger for providing the at least one ledger D / B for processing at least one or more financial transactions to be provided to the financial transaction customer by the financial institution. One or more ledger information (e.g., customer ledger, receiving ledger, collateral ledger, etc.) and at least one ledger additional information corresponding to each ledger information (e.g., to further refine and / or supplement each ledger's attributes / functions) Characterized in that the relationship is stored in relation to the relationship, the ledger information is stored in the customer account It characterized in that it comprises a corresponding predetermined ledger.

Those skilled in the art to which the present invention pertains include at least one ledger information provided in the ledger D / B and each ledger according to the type of each financial institution and the purpose and characteristic of the financial system 1240. In addition to being familiar with at least one ledger additional information corresponding to the information, each ledger information is linked and stored in a relational relation, and / or predetermined ledger information and at least one ledger additional information are linked in a relational manner. Since it will be understood that the stored information, detailed description thereof will be omitted for convenience.

According to an embodiment of the present invention, the customer connects to the financial institution server 710 through at least one client terminal of a wired terminal connected to a predetermined wired communication network and / or a wireless terminal connected to a predetermined wireless communication network. And inputting (or selecting) financial transaction request information for providing the financial transaction service through at least one user interface provided by the financial institution server 710, the financial transaction system through a predetermined communication network in the client terminal. It is preferable to transmit to the financial institution server 710 provided on the.

Here, the wired terminal connected to the wired communication network is a generic term for all terminal devices connected to a transmission control protocol / Internet protocol (TCP / IP) based communication network and includes a desktop computer and / or a laptop connected to the TCP / IP based communication network. (Notebook) or a home appliance terminal (eg, Set-Top-Box) connected to the TCP / IP based communication network, or a kiosk (KIOSK) connected to the TCP / IP based communication network, etc. It is preferable.

In addition, the wireless terminal connected to the wireless communication network is all terminal devices connected to a code division multiple access (CDMA) based mobile communication network, and / or all terminal devices connected to a high-speed downlink packet access (HSDPA) based wireless communication network, and / Or all terminal devices connected to the IEEE 802.16x based mobile Internet, and / or all terminal devices connected to Motorola's DataTAC method and / or Erricson's Mobitex type wireless data communication network, and are personal communications connected to the CDMA based mobile communication network. Terminal (Personal Communication System; PCS) and / or Global System for Mobile communications (GSM) terminals and / or Personal Digital Cellular (PDC) and / or Personal Handyphone System (PHS) terminals and / or personal information terminals (Personal Digital Assistant; PDA) and / or Smart Phone and / or Telematics, or HSDPA based wireless It comprises a wireless communication terminal connected to a trust, or the IEEE 802.16x based portable Internet connected to a portable subscriber terminal, or at least one of the DataTAC / Mobitex based wireless data communication terminal connected to a wireless data communication network and the like.

In addition, the financial institution server 710 connected to the client terminal may be any one of an internet banking server and / or a wireless banking server and / or a telebanking server and / or a TV banking server according to a characteristic of the client terminal and a communication network. And / or a separate web server for registering the information.

In addition, the communication network connecting the client terminal and the financial institution server 710 may be a CDMA based mobile communication network and / or an HSDPA based wireless communication network and / or an IEEE 802.16x based portable device according to a type of wireless communication network to which the client terminal is connected. It is preferable that any one of the Internet and / or DataTAC / Mobitex-based wireless data communication network is included, and / or includes all types of wireless communication networks proposed in the future including a predetermined wireless interval.

In addition, the client terminal outputs at least one user interface provided by the financial institution server 710, and inputs and / or selects at least one or more information through the user interface to the financial institution server 710. It is preferable that a function configuration (for example, a browser program and a communication function or a predetermined communication program and communication function to communicate with the financial institution server 710, etc.) is provided.

Those skilled in the art to which the present invention pertains can easily infer the characteristics of the client terminal corresponding to at least one or more wired terminals and / or wireless terminals, and thus the detailed description thereof is omitted for convenience. .

In the financial transaction system as described above, a client terminal including at least one or more wired terminal and / or wireless terminal used by the customer, at least one wired communication network connecting the client terminal and the financial institution server 710 and And / or the wireless communication network performs a function of a financial transaction interface for the customer to register financial transaction request information for providing the financial transaction service.

According to another exemplary embodiment of the present invention, the financial transaction terminal 1245 may include an automatic teller machine (ATM) and a cash dispenser connected to a predetermined financial network (for example, a financial common network) in addition to the client terminal. A telephone automation network (Cash Dispenser; CD) further comprises, and / or a wired telephone network such as a predetermined public switched telephone network (PSTN), VoIP (Voice over IP) network Or further comprises a predetermined call terminal (not shown) connected to the mobile telephone network, and / or a predetermined call terminal (not shown) connected to a mobile telephone network, such as a wireless VoIP network, and / or Terminals (and / or servers) (not shown) provided in at least one or more institutions affiliated with the financial institution may be further included, whereby the present invention is not limited.

In the financial transaction system as described above, when the financial transaction terminal 1245 is the financial automatic device (not shown), the financial automatic device (not shown), the financial automatic device (not shown), and the financial institution server A financial network connecting 710 performs a function of a financial transaction interface for the customer to register financial transaction request information for providing the financial transaction service, and / or the financial transaction terminal 1245 is connected to the call terminal. (Not shown), a wired telephone network and / or a wireless telephone network connecting the call terminal (not shown) and the call terminal (not shown) and the financial institution server 710 may provide the financial transaction service to the customer. A financial transaction interface for registering financial transaction request information, and / or provided to an institution affiliated with the financial institution that is the financial transaction terminal 1245. In the case of words (and / or servers) (not shown), the terminal (and / or server) (not shown) and the terminal (and / or server) (not shown) connecting the financial institution server 710 The network performs a function of a financial transaction interface for registering the financial transaction request information for the customer to provide the financial transaction service.

The financial institution server 710 provided on the financial transaction system according to the present invention is a generic term for the financial transaction system side components connected to the financial transaction terminal 1245 through a predetermined communication network, and includes at least one server ( Or an apparatus) and / or at least one or more programs recorded on a recording medium provided in a predetermined server (or apparatus), and the present invention is not limited thereto.

According to an embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wired terminal and / or a wireless terminal connectable to an internet banking server on a predetermined internet banking system, the financial institution server 710 Is a predetermined Internet banking server provided on the Internet banking system, and / or a program provided on the Internet banking server, and / or accessible to the external system of the financial system 1240 through the Internet banking system. A server (or device), a program included in the server (or device), and / or on the financial system 1240 accessible through the Internet banking server (and / or the server (or device)). It may be a server (or device) provided in the external system, and / or a program provided in the external system on the financial system 1240, It does not limit the invention.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wireless terminal connectable to a wireless banking server on a predetermined wireless banking system, the financial institution server 710 is the wireless banking. A predetermined server provided on the system, and / or a program provided in the wireless banking server, and / or a predetermined server accessible to the external system of the financial system 1240 through the wireless banking system ( Or a device), a program included in the server (or device), and / or external to the financial system 1240 accessible through the wireless banking server (and / or the server (or device)). Server or device and / or a program provided in the external world on the financial system 1240, whereby the present invention is not limited thereto. do.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a call terminal (not shown) connectable to a telebanking server on a predetermined telebanking system, the financial institution server 710 may be configured for the telebanking. A predetermined telebanking server (eg, an Automatic Response Service (ARS) server) provided on the system, and / or a program provided in the telebanking server, and / or the financial system 1240 through the telebanking system. A server (or device) that is accessible to the outside world, a program included in the server (or device), and / or accessible through the telebanking server (and / or the server (or device)). It may be a server (or device) provided in the external world on the financial system 1240, and / or a program provided in the external world on the financial system 1240, whereby The invention is not limited.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a wired terminal (or two-way digital TV) that can be connected to a TV banking server on a predetermined TV banking system, the financial institution server 710 may be configured as described above. A predetermined TV banking server provided on the TV banking system, and / or a program provided on the TV banking server, and / or a predetermined access to the external system of the financial system 1240 through the TV banking system. A foreign system on the financial system 1240 that is a server (or device), a program included in the server (or device), and / or accessible through the TV banking server (and / or the server (or device)). It may be a server (or device) provided in, and / or a program provided in the external world on the financial system 1240, whereby the present invention is not limited.

The financial transaction request information transmitted from the financial transaction terminal 1245 to the financial institution server 710 for providing the financial transaction service includes at least one predetermined customer account information, transaction amount information, and transaction authentication information. Characterized in that made.

The customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account in the name of the customer, according to the intention of the person skilled in the art (for example, the name of the account holder, or the customer account) The corresponding customer information file (CIF) number, financial institution information (e.g. bank name or bank code), branch information (e.g. branch code), contact information (e.g. Name of a contact person, a contact person code, etc.).

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an OTP (One Tome Password) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1245 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1245, or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

According to an embodiment of the present invention, the financial institution server 710 includes an interface unit 1200 (or interface means) for connecting and managing a predetermined communication channel with the financial transaction terminal 1245 through the communication network. Characterized in that made.

According to an embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface unit 1200 At least one or more information (or a predetermined communication channel) is connected to the client terminal based on a protocol stack defined in the wired communication network and / or a wireless communication network, and using a communication protocol defined in a communication program included in the client terminal. It is desirable to provide a communication interface for transmitting and receiving data.

For example, when a browser program corresponding to a Hyper-Text Transfer Protocol (HTTP) protocol is provided in the client terminal, the interface unit 1200 connects a communication channel with the client terminal based on the TCP / IP protocol. It provides a communication interface for transmitting and receiving web pages (eg, Hyper-Text Markup Language (HTML) compatible web pages) and / or information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program (eg, an internet banking program) provided by the financial institution server 710, the interface unit 1200 communicates with the client terminal based on the TCP / IP protocol. It connects a channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a financial automation device connected to a predetermined financial network, the interface unit 1200 may perform the financial based on a protocol stack defined in the financial network. It is desirable to provide a communication interface for transmitting and receiving at least one information (or data) by connecting a predetermined communication channel with an automation device and using a communication protocol defined in a financial transaction related program included in the automated teller machine. .

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface unit 1200 may include a protocol stack defined in the wireless communication network. It is preferable to provide a communication interface for transmitting and receiving at least one information (or data) using a communication protocol defined in a communication program provided in the client terminal and connecting a predetermined communication channel with the client terminal. .

For example, when a browser program corresponding to a WAP (Wireless Application Protocol) and / or a Mobile Explorer (ME) protocol is provided in the client terminal, the interface unit 1200 communicates with the client terminal based on the CDMA protocol. And a communication interface for transmitting and receiving web pages (e.g., WML (Wireless Markup Language) compatible web pages, or HTML compatible web pages) and / or information using the WAP / ME protocol defined in the browser program. .

Or, if the client terminal is provided with a communication program (eg, IC chip-based banking program, etc.) provided by the financial institution server 710, the interface unit 1200 and the client terminal based on the CDMA protocol It connects a communication channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface unit 1200 may connect the wired telephone network and / or It is preferable to connect a communication terminal (not shown) with a predetermined call path based on a voice call protocol defined in a wireless telephone network, and to provide a communication interface for transmitting and receiving the voice call-based information (or data).

For example, the interface unit 1200 provides a communication interface for transmitting and receiving information based on Dual Tone MultiFrequency (DTMF) based on the call terminal and the communication path, and / or provides a communication interface for transmitting and receiving information based on voice recognition. to provide.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a wired terminal (or two-way digital TV) connected to a TV banking system, the interface unit 1200 may define a protocol defined in the TV banking system. Connect a predetermined communication channel with the wired terminal (or bidirectional digital TV) based on the stack, and use the communication protocol defined in the communication program included in the wired terminal (or bidirectional digital TV) at least one or more information (or It is desirable to provide a communication interface for transmitting and receiving data.

Referring to FIG. 12, the financial institution server 710 connects a communication channel with a financial transaction terminal 1245 to the financial institution server 710 through the interface unit 1200, and / or the communication. When a financial transaction for providing the financial transaction service is requested through a channel, the financial transaction terminal 1245 interoperates with the interface unit 1200 to input (or select) predetermined financial transaction request information to be transmitted. And an interface providing unit 1205 (or interface providing means) for generating (or extracting) a user interface and providing the same to the financial transaction terminal 1245. When a predetermined terminal-side banking program including a user interface is provided, the interface providing unit 1205 may be omitted.

The interface provider 1205 is provided in the financial transaction terminal 1245 after a predetermined financial transaction terminal 1245 connects a communication channel with the financial institution server 710 through the interface unit 1200. Corresponding to the functional configuration to generate (or select) the financial transaction request information to generate a predetermined user interface that can be transmitted to the financial institution server 710 via the communication network, and / or a predetermined database (not shown) And extract the generated (or extracted) user interface in cooperation with the interface unit 1200 to the financial transaction terminal 1245 through the communication network.

According to an embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface providing unit 1205 Generates (or extracts) a predetermined user interface that can be provided to a browser program and / or a communication program provided in the client terminal, and generates the generated (or extracted) user interface through the interface unit 1200. It is preferable to provide.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a financial automatic device connected to a predetermined financial network, the interface providing unit 1205 may be a financial transaction related program provided in the financial automatic device. It is preferable to generate (or extract) a predetermined user interface that can be provided, and provide the generated (or extracted) user interface to the ATM using the interface unit 1200.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface providing unit 1205 is provided in the client terminal. It is preferable to generate (or extract) a predetermined user interface that can be provided to a browser program and / or a communication program, and provide the generated (or extracted) user interface to the client terminal through the interface unit 1200.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface providing unit 1205 may include the call terminal (not shown). Generates (or extracts) a predetermined user interface that can be provided, and the user terminal (eg, ARS based user interface) generated (or extracted) through the interface unit 1200 to the call terminal (not shown). Is preferably provided.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a wired terminal (or two-way digital TV) connected to a TV banking system, the interface providing unit 1205 may include the wired terminal (or two-way digital). It is preferable to generate (or extract) a predetermined user interface that can be provided to a TV) and to provide the generated (or extracted) user interface to the wired terminal (or an interactive digital TV) through the interface unit 1200. .

According to another exemplary embodiment of the present invention, the financial transaction terminal 1245 includes at least one user interface for inputting (or selecting) the financial transaction request information to the financial institution server 710 through the communication network. When a predetermined terminal-side banking program is provided, the interface providing unit 1205 for providing the user interface to the financial transaction terminal 1245 may be omitted, and the present invention is not limited thereto.

According to an embodiment of the present invention, the user interface may input (or select) financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information to transmit to the financial institution server 710. It is preferable to include the interface function.

Here, when providing a user interface for inputting (or selecting) the financial transaction request information, when using an authentication certificate as a transaction authentication means for a financial transaction request input (or selecting) through the user interface, the official possessed by the customer It is preferable to check the validity period (e.g., the number of available times / day of availability / certificate expiration date, etc.) for the certificate, and to process the output to further include the confirmed validity period.

Referring to FIG. 12, the financial institution server 710 inputs financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information from the financial transaction terminal 1245 through the user interface. (Or the selection), the information receiving unit 1210 (or the receiving unit) receiving the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information in association with the interface unit 1200 (or Information receiving means), a validity checking unit 1230 (or validating means) for checking the validity of the customer account information, the transaction amount information, and the transaction authentication information included in the received financial transaction request information; In connection with the system 1240, the financial transaction for providing the financial transaction service is processed based on the financial transaction request information that has been validated. In connection with the financial transaction processing unit 1235 (or financial transaction processing unit) and the financial transaction processing unit 1235, the user generates predetermined financial transaction result information on the financial transaction for providing the financial transaction service, and the interface unit And an information transmission unit 1215 (or information transmission means) for transmitting the financial transaction result information to the financial transaction terminal 1245 in connection with 1200.

In addition, the financial institution server 710 is an information verification unit 1220 (or information verification means) for confirming whether or not the customer is using the official certificate as the transaction authentication information, and as a result of the verification the customer is the transaction authentication information If it is confirmed that the public certificate is used, the certificate processing unit 1225 (or certificate processing means) for checking whether the certification of the public certificate is characterized in that it is made.

The financial transaction terminal 1245 inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface, and through the communication network, the financial institution server. It characterized in that the transmission to (710).

The information receiving unit 1210 inputs (or selects) the financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information through the user interface at the financial transaction terminal 1245, and thereby the communication network. When transmitting through, it is characterized in that for receiving the financial transaction request information in conjunction with the interface unit 1200, and provides the received financial transaction request information to the validity verification unit 1230.

The customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account in the name of the customer, according to the intention of the skilled person corresponding to the customer information (for example, the name of the account holder, or the customer account) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name, or bank code), branch information (e.g., branch code), contact information (e.g., the person who opened and in charge of the customer account) Name, contact person code, etc.) may be further included.

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction value does not exceed the balance deposited in the customer account It is done.

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security The card further includes at least one or more security code information (eg, one or more security codes, or a combination of two or more security codes) included in the card, and / or is generated through an One Tome Password (OTP) generator provided to the customer. It is preferable to further comprise an OTP code.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1245 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1245, or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

The information confirming unit 1220 reads the transaction authentication information and first checks whether the transaction authentication request is made using a public certificate, and if it is confirmed as a transaction authentication request using a public certificate, the public certificate information included in the transaction authentication information. It provides to the certificate processing unit 1225.

The certificate processing unit 1225 is characterized in that through the certificate server 705 confirms the validity of the authorized certificate used as the transaction authentication information.

According to an embodiment of the present invention, the validity of the public certificate information is preferably sent to the certificate server 705 to verify the validity of the public certificate information request.

According to another embodiment of the present invention, confirming the validity of the public certificate information, the public certificate information matched with the confirmed public certificate information to check the certificate D / B, and verify in the certificate D / B It is preferable to request the verification of the validity of the certificate by confirming the stored password information and / or validity period and / or the use conditions in connection with the authorized certificate information.

In the case where the official certificate is used as the transaction authentication request, the validity of the official certificate is confirmed, or when the public certificate is not used as the transaction authentication request, the validity confirming unit 1230 is the financial transaction. The financial transaction request information received from the terminal 1245 is characterized by checking whether the validity for providing a financial transaction service.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for a financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1240. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity check of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1240 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is an account provided in the ledger D / B on the financial system 1240 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1240 in response to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (for example, an encryption key provided in the financial transaction terminal 1245, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and before encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

When the validity of the financial transaction request information is confirmed, the financial transaction processing unit 1235 is linked to the financial system 1240 provided with an account ledger corresponding to the customer account, the customer account information included in the financial transaction request information. And processing the financial transaction for providing the financial transaction service based on the transaction amount information and the transaction authentication information.

According to the method of the present invention, the financial transaction processing unit 1235 is linked to the financial system 1240, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

When the financial transaction for providing the financial transaction service is processed by the financial transaction processor 1235, the information transmission unit 1215 is connected to the financial transaction processor 1235 for the financial transaction for the financial transaction service. Generate a financial transaction processing history including any one of a financial transaction approval history or a financial transaction error history, and connect the financial transaction result information including the financial transaction processing history to the interface unit 1200 through the communication network. It is characterized in that the transmission to the financial transaction terminal (1245).

Here, the financial transaction processing history is characterized in that it comprises the customer account information and the transaction amount information, characterized in that it further comprises an authorization code (or error code) for the financial transaction.

The financial transaction result information may include a protocol structure for transmitting the generated financial transaction processing details to the financial transaction terminal 1245 through the communication network. The financial transaction result information may include the financial transaction request. It is preferable that the information is encrypted similarly to the information or transmitted to the financial transaction terminal 1245 with the electronic signature of the financial institution attached.

13 is a diagram illustrating a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to an embodiment of the present invention.

In more detail, FIG. 13 illustrates a case where a financial institution server 710 on the financial transaction system illustrated in FIG. 12 includes a non-face-to-face banking server function to which a client terminal can be connected through a predetermined communication network. After connecting to the financial institution server 710 to connect the communication channel for the financial transaction, and includes the customer account information, transaction amount information and transaction authentication information to the financial institution server 710 via the communication channel When the financial transaction request information is transmitted, the financial institution server 710 uses the client account information, transaction amount information, and transaction authentication information included in the received financial transaction request information to provide the financial transaction service. As an embodiment for providing the present invention, those skilled in the art to which the present invention pertains, see FIG. And / or may be modified to infer various implementation methods for the process of processing a financial transaction for providing a financial transaction service in the non-face-to-face manner, but the present invention includes all the implementation methods inferred, FIG. 13 It is not limited to the implementation method shown by.

Hereinafter, in FIG. 13, the client terminal shown in FIG. 12 is referred to as "terminal" for convenience, and the financial institution server 710 shown in FIG. 12 is called "server" for convenience.

Referring to FIG. 13, a terminal shown in FIG. 12 is a predetermined communication network (for example, when the terminal is a wired terminal, a TCP / IP based wired communication network, when the terminal is a wireless terminal, a CDMA based mobile communication network, and / Or request a financial transaction for providing the financial transaction service by accessing the server through an HSDPA-based wireless communication network, and / or an IEEE 802.16x-based portable Internet, etc. (1300). Create (or extract) a web page including a user interface for inputting (or selecting) financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information for provision, through the communication channel. The transmission is output to the terminal (1305).

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page to the terminal is preferably performed at least once according to the procedure of providing the user interface and transmitting and receiving the financial transaction request information, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1310).

If the terminal receives (or selects) financial transaction request information including the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1315), the terminal receives the input through the communication channel ( Or) the selected customer account information, transaction amount information, and transaction authentication information to the server (1320), and the user account information, transaction amount information, and transaction authentication input (or selected) through the communication channel at the terminal. The transmitting of the information to the server may include electronically signing and / or encrypting the financial transaction request information input (or selected) through the user interface through a security module (not shown) provided in the terminal and transmitting the information to the server. It is preferable that it further comprises.

Here, the customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account of the customer name, customer information (for example, the name of the account holder, or the customer account according to the intention of the skilled person) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name or bank code), branch information (e.g. branch code), contact information (e.g., opening and in charge of the customer account) A contact person name, a contact person code, etc.).

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction value does not exceed the balance deposited in the customer account It is done.

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an One Tome Password (OTP) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1245 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1245, or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

Thereafter, the server receives the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the communication channel, and the transaction authentication means for the received financial transaction request information is authorized. Check whether the certificate (1321).

According to an embodiment of the present invention, the validity of the public certificate information is preferably sent to the certificate server 705 to verify the validity of the public certificate information request.

According to another exemplary embodiment of the present invention, the validity verification of the public certificate information may be performed by retrieving the certificate D / B from the certificate D / B that matches the verified certificate information. It is preferable to request the verification of the validity of the certificate by confirming the stored password information and / or validity period and / or the use conditions in connection with the authorized certificate information.

If the transaction authentication means for the received financial transaction request information is confirmed as an authorized certificate (1322), the server checks the validity of the authorized certificate through the certificate server (705) (1323).

If it is determined that the public certificate is not valid (1324), the server generates (or extracts) validation error information for the public certificate used as a transaction authentication means for the financial transaction through the communication channel. The process is transmitted to the terminal and output (1325).

On the other hand, if it is confirmed that the authorized certificate is valid (1324), the server checks the validity of the financial transaction request information (1326), and confirming the validity of the financial transaction request information, the financial transaction request information When the electronic signature and / or encrypted through a security module (not shown) provided in the terminal, preferably further comprising decrypting the financial transaction request information, and / or decrypting the financial transaction request information. Do.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for a financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1240. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided for the financial transaction request information It is desirable that the validity be authenticated.

In addition, the validity check of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1240 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is an account provided in the ledger D / B on the financial system 1240 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity of the financial transaction request information is determined by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included in (or linked to) the account ledger provided in the ledger D / B on the financial system 1240 in response to the customer account. It is preferable that the security code information is included, and if the security code information corresponding to the transaction authentication information is matched, the validity of the financial transaction request information is preferably authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (for example, an encryption key provided in the financial transaction terminal 1245, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and before encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

If the validity of the financial transaction request information is not authenticated (1330), the server generates a financial transaction processing history including predetermined financial transaction error information corresponding to the validity error information (1335), and the communication channel. The financial transaction result information including the financial transaction processing history is transmitted to the terminal (1355), and the terminal outputs the financial transaction result including the financial transaction processing history (1360).

On the other hand, if the validity of the financial transaction request information is authenticated (1330), the server is linked to the financial system 1240 equipped with an account ledger corresponding to the customer account and the customer account information included in the financial transaction request information; The financial transaction for providing the financial transaction service is processed based on the transaction amount information and the transaction authentication information (1340).

According to the method of the present invention, the financial transaction processing unit 1235 is linked to the financial system 1240, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

If a financial transaction corresponding to the financial transaction request information is processed (1345), the server generates a financial transaction processing history including any one of predetermined financial transaction approval information or financial transaction error information according to the financial transaction processing result. In operation 1350, the financial transaction result information including the financial transaction processing history is transmitted to the terminal through the communication channel (1355). In response, the terminal transmits the financial transaction result including the financial transaction processing history. The screen is output (1360).

14A and 14B illustrate a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to another exemplary embodiment of the present invention.

In more detail, FIGS. 14A and 14B illustrate a case in which the financial transaction system shown in FIG. 12 is realized through an Internet banking system among non-face-to-face channel-based banking systems. After accessing the Internet banking server and performing a predetermined customer authentication procedure through the Internet, etc., the client terminal transmits predetermined financial transaction request information for providing a financial transaction service to the Internet banking server. When the financial transaction request information including transaction amount information and transaction authentication information is transmitted, the financial institution server 710 uses customer account information, transaction amount information, and transaction authentication information included in the received financial transaction request information. To provide a financial transaction for providing the financial transaction service, Those skilled in the art may refer to and / or modify the drawings 14a and 14b to provide various methods for processing financial transactions for providing financial transaction services in a non-face-to-face manner other than the Internet banking. Although the implementation method may be inferred, the present invention includes all the implementation methods inferred above and is not limited to the implementation method shown in FIG.

That is, when the Internet banking server is connected to the Internet banking server through a predetermined browser program (eg, Microsoft Internet Explorer, and / or Netscape's Netscape Navigator, etc.) provided in the client terminal in FIGS. Although the implementation method for connecting the Internet banking-based financial transaction channel for registering the financial transaction request information between the client terminal and the Internet banking server based on the present invention, those skilled in the art to which the present invention pertains, Refer to and / or modify an internet banking-based financial transaction channel connection method using the browser program shown in FIGS. 14a and 14b and between the client terminal and the internet banking server based on a predetermined internet banking program mounted on the client terminal. Financial transactions Although it may be possible to infer an implementation method of connecting an internet banking-based financial transaction channel for registration of information, the present invention includes the provided internet banking-based financial transaction based on the internet banking program, whereby the present invention It is not limited.

Also, those skilled in the art may refer to and / or modify the Internet banking-based financial transaction channel connection method shown in FIGS. 14A and 14B, in addition to the Internet banking system, and a telebanking system. And / or a financial transaction channel corresponding to each non-face-to-face channel for financial transaction processing for providing the financial transaction service in all kinds of other non-face-to-face banking systems including at least one of a wireless banking system and / or a TV banking system. It would be possible to infer an implementation method of linking the present invention, but the present invention provides all kinds of non-face-to-face, including the telebanking system and / or the wireless banking system and / or the TV banking system and / or the non-face-to-face channel banking system proposed in the future. Channel-based financial transactions, and the technical configuration of the present invention is illustrated in FIGS. 14A and 14B. It is never limited to the case of internet banking.

In the following figures 14a and 14b, the client terminal is referred to as " terminal " for convenience, and the Internet banking server corresponding to the financial institution server 710 is referred to as " server " for convenience.

14A and 14B, when the terminal executes a predetermined browser program and accesses the server through the TCP / IP based network (1400a), the server communicates between the terminal and the server through the browser. (1405a), wherein the communication channel is a web page generated (or extracted) by a request of a browser program provided in the terminal and transmitted to the terminal, and the browser provided in the terminal. It means that a predetermined communication session is allocated so that a program can receive at least one or more information (or data) input (or selected) based on a predetermined user interface included in the web page.

According to another embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the server is based on the predetermined communication protocol defined in the internet banking program and at least one or more information ( Or a communication channel for transmitting / receiving data).

Thereafter, the server is equipped with a predetermined security module for internet banking on the terminal in a predetermined web page (eg, an internet banking main page) generated (or extracted) for providing to the terminal, and / or the By providing a predetermined script for checking whether to update the security module to the terminal, whether the terminal is equipped with a predetermined security module for Internet banking, and / or update the security module Check (1410a).

According to another exemplary embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the server requests the version information and / or the last update date information from the internet banking program, thereby providing the Internet banking program (and / or Or a security module associated with an internet banking program).

If a predetermined security module is to be mounted and / or updated in the terminal (1415a), the server transmits the latest version of the security module for internet banking to the terminal according to a remote program installation procedure defined in the browser program. And mount and / or update (1420a).

If the terminal does not need to install and / or update the latest version of the internet banking security module (1425a), or if the terminal does not need to install and / or update the internet banking security module (1415a), the server may By activating the security module for Internet banking mounted on the terminal, to connect the security channel for Internet banking (or switch the communication channel between the terminal and the server to a secure channel) between the terminal and the server (1430a), where the security for Internet banking A channel is attached to a predetermined digital signature and / or at least one encryption method (or data) of information (or data) required for security among information (or data) included in a web page to be provided from the server to the terminal. And / or provide an encryption by using an encryption algorithm, the terminal may verify the electronic signature and / or the encryption scheme (and / or encryption algorithm). Means a communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to the algorithm), and the information to be provided to the server for registering financial transaction request information in the terminal. (Or data) by attaching a predetermined digital signature and / or by encrypting and transmitting at least one or more encryption methods (and / or encryption algorithms), the server verifies the electronic signature and / or the encryption method (and A communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to an encryption algorithm).

According to another embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the Internet banking-based secure channel may provide information to the terminal from the server according to a communication protocol defined in the internet banking program ( Or a predetermined digital signature attached to the data) and / or provided by encrypting with at least one encryption method (and / or encryption algorithm), the terminal confirms the electronic signature and / or the encryption method (and / or Or a communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to an encryption algorithm), and also provided to the server for registering financial transaction request information in the terminal. Attach a predetermined digital signature to information (or data) to be Encrypting the data using an encryption method (and / or an encryption algorithm), and verifying the digital signature at the server and / or a predetermined decryption method (and / or decryption) corresponding to the encryption method (and / or encryption algorithm). Algorithm) means a communication channel to decode the information (or data).

According to the present invention, the security module is to perform an electronic signature attachment, and / or encryption, and / or protection function for the information (or data) using the authorized certificate of the customer mounted in the terminal It features.

When the secure channel for internet banking is connected, the server requests the terminal to perform an internet banking customer authentication procedure through the browser program (1435a).

According to an exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (eg, ID / PW, customer number, etc., registered by the customer during the internet banking application process) through the terminal. ) Is input (or generated) and transmitted to the server, wherein the server comprises authenticating a customer connected through the terminal as an internet banking customer based on the customer authentication data, wherein the customer authentication data It is preferable that the digital signature and / or encrypted is transmitted through the secure channel.

According to another exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (for example, an ID / PW or customer number registered by the customer during the internet banking application process) through the terminal. And the like) are input (or generated) and transmitted to the authentication server, the authentication server authenticates the customer connected through the terminal as the Internet banking customer based on the customer authentication data, and provides the result to the server. In this case, it is preferable that the customer authentication data includes public certificate-based authentication data, and the authentication server is a server for authenticating the public certificate-based authentication data.

Thereafter, the terminal inputs (or generates) predetermined customer authentication data according to the request, transmits the electronic signature and / or encryption to the server (and / or authentication server) through the security module, and performs internet banking customer authentication. Request (1440a), the server (and / or authentication server) authenticates the customer connected through the terminal as an Internet banking customer for non-face-to-face financial transactions based on the customer authentication data received from the terminal. (1445a).

If the Internet banking customer authentication fails (1450a), the server blocks the Internet banking secure channel for the terminal (1455a), thereby preventing the Internet banking-based financial transaction through the terminal.

On the other hand, if the Internet banking customer authentication succeeds (1450a), the server converts the Internet banking security channel into an internet banking-based financial transaction channel in connection with a security module provided in the terminal (1460a), where the Internet banking-based The financial transaction channel may transmit the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information from the terminal to the server to process the internet banking-based financial transaction from the server. It means a communication channel.

Subsequently, the terminal requests an internet banking-based financial transaction for providing the financial transaction service to the server through the financial transaction channel (1400b), and correspondingly, the server requests the client account information for providing the financial transaction service. Generate (or extract) a web page including a user interface for inputting (or selecting) financial transaction request information including at least one transaction amount information and transaction authentication information, and transmitting the same to the terminal through the financial transaction channel. (1405b).

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page to the terminal is preferably performed at least once according to the procedure of providing the user interface and transmitting and receiving the financial transaction request information, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1410b).

If the financial transaction request information including the customer account information, the transaction amount information, and the transaction authentication information is input (or selected) through the user interface (1415b), the terminal receives the input through the financial transaction channel. And transmits the selected customer account information, the transaction amount information, and the transaction authentication information to the server (1420b), and the customer account information and the transaction amount information inputted (or selected) through the financial transaction channel in the terminal. Transmitting the transaction authentication information to the server, by digitally signing and / or encrypting the financial transaction request information input (or selected) through the user interface through a security module (not shown) provided in the terminal to the server. It is preferable to further comprise transmitting.

Here, the customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account of the customer name, customer information (for example, the name of the account holder, or the customer account according to the intention of the skilled person) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name or bank code), branch information (e.g. branch code), contact information (e.g., opening and in charge of the customer account) A contact person name, a contact person code, etc.).

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is provided to the customer in the process of opening the customer account. It is preferable to further include at least one or more security code information provided in the provided security card, and / or further comprises an OTP code generated through the One Tome Password (OTP) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1245 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1245, or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

Thereafter, the server receives the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the communication channel, and the transaction authentication means for the received financial transaction request information is authorized. It is checked whether it is a certificate (1421b).

According to an embodiment of the present invention, the validity of the public certificate information is preferably sent to the certificate server 705 to verify the validity of the public certificate information request.

According to another exemplary embodiment of the present invention, the validity verification of the public certificate information may be performed by retrieving the certificate D / B from the certificate D / B that matches the verified certificate information. It is preferable to request the verification of the validity of the certificate by confirming the stored password information and / or validity period and / or the use conditions in connection with the authorized certificate information.

If the transaction authentication means for the received financial transaction request information is confirmed as an authorized certificate (1422b), the server checks the validity of the authorized certificate through the certificate server (705) (1423b).

If it is determined that the public certificate is not valid (1424b), the server generates (or extracts) validity error information for the public certificate used as a transaction authentication means for the financial transaction through the communication channel. The process is transmitted to the terminal and output (1425b).

On the other hand, if it is confirmed that the authorized certificate is valid (1424b), the server receives and reads the financial transaction request information including at least one of the customer account information, transaction amount information and transaction authentication information through the financial transaction channel. Confirming the validity of the financial transaction request information (1426b), and confirming the validity of the financial transaction request information, the electronic signature through a security module (not shown) provided with the financial transaction request information in the terminal; And / or decrypting the financial transaction request information and / or decrypting the financial transaction request information when encrypted.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for a financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1240. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity check of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1240 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is an account provided in the ledger D / B on the financial system 1240 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1240 in response to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (for example, an encryption key provided in the financial transaction terminal 1245, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and before encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

If the validity of the financial transaction request information is not authenticated (1430b), the server generates a financial transaction processing history including predetermined financial transaction error information corresponding to the validity error information (1435b), and the financial transaction. The financial transaction result information including the financial transaction processing history is transmitted to the terminal through a channel (1455b). In response, the terminal outputs the financial transaction result including the financial transaction processing history (1460b).

On the other hand, if the validity of the financial transaction request information is authenticated (1430b), the server is linked with the financial system 1240 having an account ledger corresponding to the customer account and the customer account information included in the financial transaction request information; The financial transaction for providing the financial transaction service is processed based on the transaction amount information and the transaction authentication information (1440b).

According to the method of the present invention, the financial transaction processing unit 1235 is linked to the financial system 1240, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

If a financial transaction corresponding to the financial transaction request information is processed (1445b), the server generates a financial transaction processing history including any one of predetermined financial transaction approval information or financial transaction error information according to the financial transaction processing result. (1450b), the financial transaction result information including the financial transaction processing history is transmitted to the terminal through the financial transaction channel (1455b), and the terminal corresponding to the financial transaction result including the financial transaction processing history; Screen is output (1460b).

The present invention pre-registers the use conditions for using the public certificate to the customer using the financial transaction service through the public certificate, so that the use of the financial transaction service through the public certificate only if the pre-registered use conditions are met. It has the advantage of providing an anti-hacking effect.

Claims (4)

In the method of operating a public certificate in which the conditions of use of the certificate server are set, When the use condition information including the number of times of use and use time of the authorized certificate is received from the terminal to prevent illegal use of the authorized certificate of the customer, connecting the stored certificate information of the customer and the use condition information to a storage medium; Checking the use condition of the authorized certificate in connection with the storage medium and confirming whether the authorized certificate is activated in response to the set use condition when the customer uses the authorized certificate service request; If the public certificate is activated in accordance with the set use conditions, the step of processing to enable the use of the public certificate; official certificate operating method providing a illegal use prevention function comprising a. The method of claim 1, If the accredited certificate is not in compliance with the conditions of use, if the accredited certificate is inactivated, in connection with the customer communication means to obtain a use certificate for the inactivated accredited certificate to process the available accredited certificate; Certified certificate management method that provides a feature to prevent illegal use. A computer-readable recording medium having recorded thereon a program for executing the method of claim 1. In a system for operating a public certificate provided in the certificate server set the conditions of use, Means for storing illegal use prevention of the authorized certificate of the customer in a storage medium by linking the use condition information including the number of times of use of the authorized certificate and the use time with the authorized certificate information of the customer; A means for confirming whether to set a use condition for the authorized certificate in association with the storage medium and requesting activation of the authorized certificate in response to the set use condition when the customer uses the authorized certificate service request; If the public certificate is activated according to the set conditions of use, the public certificate is processed to be available, and if it is inactivated, use the public certificate by acquiring the use certificate for the deactivated public certificate in connection with the customer communication means. Authorized certificate management system for providing an illegal use prevention function comprising means for processing to enable.

Images