KR101109000B1 - Security module, System and Method for securing electronic banking using the same - Google Patents

Abstract

The present invention relates to a security module, an electronic financial transaction security system and method using the same, and more particularly, an authentication process is performed using an encryption function device having an IC chip attached to a bank, such as the Internet and a phone. An electronic financial transaction security system and method for providing security.
According to the present invention, since the financial transaction is authenticated using the user information stored in the existing encryption function device, it is possible to implement enhanced financial transaction security without using a certificate, an OPT card, and a security card.

Description

Security module, system and method for securing electronic banking using the same

The present invention relates to a security module, an electronic financial transaction security system and method using the same, and more particularly, an authentication process is performed using an encryption function device having an IC chip attached to a bank, such as the Internet and a phone. An electronic financial transaction security system and method for providing security.

Electronic banking transactions using the Internet, phone banking, etc. are widely used. In this case, when data is transmitted and received, the data is illegally tampered with, causing a lot of damage. For example, if the user transfers the account using a computer, the data entered should not be changed during the transmission and reception process, but the data entered by the user is replaced with a different amount from another account number by illegal activities such as hacking. A case is mentioned. Illegal alteration of such data leads to serious financial accidents.

In order to prevent such illegal data changes, cryptography is used to digitally sign data transmitted through certificates, but the data is illegal between the moment the user inputs the digital signature and confirms the data match. Hacking may occur.

Therefore, there is a need for a prevention method for preventing an illegal change of data between the input and signature of the data.

In other words, the vulnerability to transmission data can be divided into data tampering, password leakage, and certificate-related information leakage. One of the methods used to change illegal data is to hack the keyboard. In other words, this method uses keyboard hacking to extract passwords, account numbers, and amounts entered by the user and replace them in the middle, or replace the data entered by the user in memory and digitally sign it.

The existing method to prevent keyboard hacking is to automatically download and execute security software when connected to each financial company. However, these traditional methods do not provide complete security for keyboard monitoring methods unless the keyboard is equipped with a separate cryptographic processor and does not communicate with the computer's main processor.

Techniques for detecting and defending malicious programs are constantly being developed as to how to replace data in memory.However, countermeasures are being developed based on known techniques. Electronic banking transactions using banking are not secure.

Due to these problems, institutional techniques such as setting credit ratings and electronic financial transaction limits of individuals in electronic financial transactions by class and making financial transactions within those limits have recently emerged.

However, this is not a fundamental solution as a passive way of restricting the financial accident caused by data tampering with existing technical measures, so that the scope of the accident occurs only within a predetermined amount.

Of course, many methods for solving this problem have been proposed. Dual USB trading or HSM trading.

 First of all, in the USB transaction method, all information to be used for electronic financial transactions, such as passwords, certificates, bankbook numbers, amounts, IDs, etc. are kept encrypted in the USB memory, which is somewhat safe from hacking.

However, when the USB is connected to a computer or the like, a hacking tool may exist under the same processor, the same operating system (OS) control, and under the same processor and the same operating system control. Thus, the hacking tool can also access all the information for the programs used for electronic financial transactions. In particular, certificates and passwords can be hacked at will, which poses a very serious risk of coordinating users' electronic financial transactions at any time.

In the case of HSM (Hardware Security Module) transaction method, since the encryption function is under the control of another processor and another operating system, there is an advantage that a direct hacking tool is impossible. However, it is possible to hack before user information and financial transaction information are sent to the HSM. That is, the HSM only processes information passed from a terminal such as a computer or a mobile phone, but does not check whether the transmitted information is contaminated.

The present invention has been proposed to solve the problems posed by the prior art, security that enhances security in financial transactions using the existing encryption function device without using a certificate, one time password (OPT) card and security card It is an object of the present invention to provide a module and a method and system for enhancing the security of financial transactions using the same.

In addition, the present invention provides a security module for strengthening security during financial transactions, which do not need to install a hacking detection tool that had to operate in a terminal such as a computer, a mobile phone, etc. during an internet financial transaction, and a method for strengthening security of financial transactions using the same; Another purpose is to provide a system.

In addition, another object of the present invention is to provide a security module for strengthening security in financial transactions while using an existing communication protocol, and a method and system for strengthening security of financial transactions using the same.

In addition, the part for encryption has another object to provide a method and system for strengthening security at a low cost by allowing the use of existing functions.

The present invention provides a security module, an electronic financial transaction security system and method using the same, in order to achieve the object raised above. That is, the security module, the terminal interface unit for interfacing with the terminal for transmitting the financial transaction information; A display unit which displays the financial transaction information transmitted from the terminal interface unit; Approval selection means for selecting whether to approve the displayed financial transaction information; If the financial transaction information is approved, the financial transaction information is transmitted to an encryption function device having encryption information and optionally user information, or the financial transaction information transmitted by the encryption function device is encrypted; and A card interface unit for interfacing with the encryption function device to receive user information; And a controller for interfacing with at least one of the terminal interface unit and the card interface unit to transmit the encrypted financial transaction information and the user information to the terminal through the terminal interface unit.

In another embodiment of the present disclosure, the card interface unit of the security module may further include a contact unit for communicating with a contact encryption function device of the encryption function device.

As another embodiment of the present invention, the security module may further include a communication unit for wireless communication with the contactless encryption function device of the encryption function device.

In still another embodiment of the present invention, an electronic financial transaction security system using the security module comprises: a financial server for providing a financial transaction; A terminal accessing the financial server through a communication network; A security module according to any one of claims 1 to 3 connected to the terminal; And an encryption function device in communication with the security module in contact or non-contact to encrypt financial transaction information and user information.

As another embodiment of the present invention, an electronic financial transaction security method includes the steps of: transmitting, by a terminal, input information for a financial transaction to a security module; Displaying, by the security module, the financial transaction information transmitted from the terminal through a display unit; Determining whether approval has been made by the approval selection means for selecting whether to approve the displayed financial transaction information; Sending, by the removable security module, the approved financial transaction information to an encryption function device; Encrypting, by the encryption function device, the approved financial transaction information and user information stored therein; And transmitting, by the encryption function device, encrypted financial transaction information and user information to the security module.

As another embodiment of the present invention, an electronic financial transaction security method includes the steps of: transmitting, by the security module, the encrypted financial transaction information and user information to the terminal; And transmitting, by the terminal, the encrypted financial transaction information and user information to a financial server through a communication network.

The determining of the approval may include: if the determination result is approval of the financial transaction information, transmitting the financial transaction information to an encryption function device; As a result of the determination, if there is no approval for the financial transaction information, the terminal may end the financial transaction.

In this case, the encryption function device may be a contact encryption function device or a contactless encryption function device.

In addition, the terminal may be any one of a computer terminal, a notebook computer, a personal data assistant (PDA), a portable media player (PMP), a POS terminal, and a mobile phone.

The approval selecting means may be any one of a key input unit provided with an approval button, a contact encryption function device having a predetermined contact time with the contact unit, and a contactless encryption function device at a predetermined distance interval from the communication unit. have.

According to the present invention, it is possible to implement enhanced financial transaction security without using a certificate, an OPT card and a security card since the financial transaction is authenticated using the user information stored in the chip of the existing encryption function device.

In addition, another effect of the present invention is that it is possible to enhance security during financial transactions with only the hardware of the encryption function device and the security module without installing the hacking detection tool software, which had to be operated in a terminal such as a computer, a mobile phone, etc. during the internet financial transaction. There is a point.

In addition, another effect of the present invention is that it is possible to apply a slight modification to the existing communication protocol, so that the replacement cost is low.

1 is a block diagram of an electronic financial transaction security system with enhanced security using an encryption function device according to an embodiment of the present invention.
2 is a circuit block diagram of the security module 110 of FIG.
3A is a flowchart illustrating a party user authentication process for making a financial transaction using an electronic financial transaction security system according to an embodiment of the present invention.
3B is a flowchart illustrating a process of authenticating a financial transaction using an electronic financial transaction security system according to an embodiment of the present invention.
4 is a conceptual diagram illustrating a difficulty in hacking a financial transaction by various paths when using the electronic financial transaction security system according to an embodiment of the present invention.

Hereinafter, an encryption function device using security module, an electronic financial transaction security system and method using the same according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of an electronic financial transaction security system with enhanced security using an encryption function device according to the present invention. The electronic financial transaction security system includes a computer terminal 100, a security module 110 connected to the computer terminal 100 to execute security during financial transactions, and encrypted user information and finance connected to the security module 110. An encryption function device 120 that provides transaction information, and the financial server 140 that receives the encrypted user information and financial transaction information through the computer terminal 100 to execute a financial transaction. These components are described as follows.

Computer terminal 100 is a client computer and means used by a user to carry out financial transactions. For example, a user may make a payment by wire transfer or purchase a product by using a wired or wireless Internet. For this purpose, a computer terminal 100 is required.

Although FIG. 1 illustrates a computer terminal 100 for easy understanding of the present invention, the present invention is not limited thereto and may be used as a terminal that can be connected to a wired or wireless Internet. For example, these terminals include notebook computers, PDAs, mobile phones, POS terminals, and the like.

The security module 110 is connected to a USB terminal (not shown) of the computer terminal 100 and functions to implement security of a financial transaction executed in the computer terminal 100. A diagram showing a circuit block diagram of this security module 110 is shown in FIG. This will be described later.

Although the connection between the security module 110 and a terminal such as a computer is illustrated by a USB method, the present invention is not limited thereto and may be applied to any interface device that can be connected to a terminal such as a computer by wire or wirelessly. Examples include an SD slot, an RS-232 port, an infrared communication interface, and a WI-FI connection.

The encryption function device 120 serves to execute an encryption function and an additional decryption function, for example, smart cards and IC cards used in financial transactions, which are usually account numbers, account passwords, and transfer passwords. User information such as is stored in the IC chip. Of course, the encryption function device 120 in Figure 1 shows that the encryption module 121 for encrypting the financial transaction information and the user information is installed on one side.

In an embodiment of the present invention, a smart card, an IC card, or the like having a separate encryption module 121 is illustrated as an example for convenience of understanding, but FIG. 1 is an example, and the encryption function device 120 itself is an encryption module. It may be configured to perform an encryption function without the 121.

The encryption function device 120 may use a contactless card capable of data communication without contacting the security module 110 without contacting the device itself with the security module 110.

The financial server 140 is usually an HTTP server that processes requests and responses from the computer terminal 100 using the HyperText Transfer Protocol (HTTP) on a wired line. Alternatively, the server may be a server using a dedicated protocol for client communication. Of course, the communication network 130 is configured with the computer terminal 100. The communication network 130 may be wired or wireless, and the financial server 140 provides a web page on the wired or wireless Internet through the communication network 130. The financial server 140 is provided with a financial information database 141 in order to process the corresponding information for the web page and the request by the computer terminal 100.

The financial information database 141 shown in FIG. 1 is stored in a storage medium such as a hard disk drive or a tape. In addition, in FIG. 1, only the financial server 140 and the financial information database 141 are configured, but a separate server or a backup server managing only the database may be provided.

The financial information database 141 includes data such as user information and financial transaction information. In addition, an access web page for providing to a user who wants to access using the computer terminal 100, a web page file for executing a financial transaction, and the like are stored.

Here, the web page file includes all web page documents provided by the financial server 140 as well as the web page document that is first encountered when the user connects to the server.

The web page document here is not necessarily an html file, but may be composed of other languages such as Java, personal home page tools (php), active server pages (XML), and XML.

Then, an example of a table stored in the financial information database 141 may be described as follows.

Hong Gil Dong Account Number 1 Account Number 2 ... Account Number 9 password 1111 1112 ... 1119 Bank transfer password sss1 sss11 ... sss19 Transfer limit 1 million won 5 million won ... 9 million won ... ... ... ...

In Table 1 above, the account holder is "Hong Gil-dong" and owns several bank accounts, and each bank account includes a password, account transfer password, transfer limit, and transaction status. Of course, this is for easy understanding of the present invention, it is also possible to configure the table differently.

2 is a circuit block diagram of the security module 110 of FIG. Referring to FIG. 2, the security module 110 may interface with a control unit 200 that performs control and a computer terminal 100 of FIG. 1 under the control of the control unit 200 to transmit financial transaction information and user information. The terminal interface 210, the card interface 220 that interfaces with the encryption function device 120 to execute the security of the financial transaction information, the display unit 240 for displaying the financial transaction information, the displayed financial A key input unit 230 or the like for determining whether to approve the transaction information is configured. These components are described as follows.

The controller 200 is composed of a microprocessor and transmits and receives signals and data to control other components. Of course, the controller 200 may be configured with an internal memory (not shown) for storing a predetermined program and data, and in another embodiment, an external memory (not shown) may be configured. The external memory may be a flash memory, electrically erasable programmable read only memory (EEPROM), magnetoresistive random access memory (MRAM), ferroelectric RAM (FeRAM), phase change RAM (PRAM), SRAM, DRAM, or the like.

The terminal interface 210 performs a function of connecting with the computer terminal 100. Of course, the connection to the USB terminal (not shown) of the computer terminal 100 will be exemplified. On the contrary, when connected to a mobile communication device such as a mobile phone, a PDA, or the like instead of the computer terminal 100, an additional connection connector for connecting with the security module 110 may be required. Since this is a well known technique, further description will be omitted for easy understanding of the present invention.

The card interface unit 220 performs a function of interfacing with the encryption function device (120 of FIG. 1), for which the communication unit 221 and the contact unit 225 are configured. The communication unit 221 is usually configured for the case where the encryption function device 120 is contactless using RF communication.

That is, the communication unit 221 is configured such that the encryption module 121 of the encryption function device 120 can perform RF communication. Of course, in this case, an antenna (not shown) for communication is configured in the encryption function device 120, and an antenna 222 is also configured in the security module 110. In this case, the encryption module 121 may be an IC chip or an RF chip.

In contrast, the contact portion 225 is configured on the security module 110 side so that the encryption function device 120 can be contacted via a contact (terminal) provided on the card side when the encryption function device 120 is in contact. That is, in the case of the contact type, the encryption function device 120 may be brought into contact with the contact portion 225 of the security module 110 to exchange data between the encryption function device 120 and the security module 110.

The display unit 240 serves to display financial transaction information. In other words, if the user or someone else attempts a financial transaction, by displaying it, the user confirms that the financial transaction is correct. The display unit 240 may be configured of a small LCD, an OLED panel, and the like.

The key input unit 230 has a button form configured on one side of the surface of the security module 230. In FIG. 1, only one button is shown, but it is also possible to configure several. For example, a cancel button, an approval button, or the like may be set apart. Of course, it is also possible to execute a function of canceling and approving by the number of pressing by configuring only one button. This is merely a design difference in how the program of the security module 110 is written, and those skilled in the art will understand that the same purpose is achieved.

In addition, according to another embodiment of the present invention, when the encryption function device 120 is a contact type without leaving the key input unit 230 separately, a case in which the contact unit 225 is in contact with the contact unit 225 for a predetermined time may be approved for the financial transaction. Can be. Of course, if you have not been in contact for a certain period of time, you will be canceled for financial transactions.

Further, in another embodiment of the present invention, when the cryptographic function device 120 is contactless, if the cryptographic function device 120 is within a certain distance of the security module 110, the financial transaction is approved and not within a certain distance. If not, it is cancelled. Of course, this constant distance refers to the communication possible distance between the communication unit 221 and the encryption function device 120.

1 and 2, a process of authenticating whether the user is a legitimate user in a financial transaction according to an embodiment of the present invention will be described. A diagram showing this is shown in FIG. 3A, which is a flow chart illustrating a party user authentication process for financial transactions using the electronic money transaction security system according to the present invention.

Referring to FIG. 3A, when a terminal 100 such as a computer, a PDA, a notebook, a mobile phone, or the like requests a connection through the communication network 130 (S300), the financial server 140 requests security information (S302). In other words, the financial server 140 first checks whether the user requesting access to the user is a legitimate user.

When the terminal 100 receives the security information request from the financial server 140, the terminal 100 may further request an additional input required for authentication (S303). That is, it may be an input for confirming a legitimate user. For example, if the user is a legitimate user on the terminal, the user may select a "yes" button or a "no" button. However, this step can be omitted as an additional step.

The terminal 100 requests the security module 110 to transmit security information to the financial server 140 (S304). Of course, even at this time, the security module 110 may require an additional input required for authentication (S305). In the case of the security module 110, since a button is configured as one, additional inputs may be performed using the number of pressing of the button. This step is also an additional step and can be omitted.

The security module 110 requests security information from the encryption function device 120 (S306). In this case, the encryption module 121 of the encryption function device 120 encrypts user information stored therein (S307), and transmits the encrypted user information to the security module 110 (S307).

The security module 110 transmits the encrypted user information to the terminal 100 (S310). The terminal 100 transmits the encrypted user information transmitted from the security module 110 to the financial server 140 (S314).

The financial server 140, which has received the encrypted user information, decrypts the information and compares it with the user information stored in the financial information database 141 to authenticate the party user (S316). If the result of the authentication is a political user, the terminal 100 notifies the terminal user (S318).

The flowchart shown in FIG. 3A is a process for authenticating a user accessing the financial server 140, and after performing a user authentication process, may perform an authentication process for a financial transaction. Of course, whenever a financial transaction occurs without the user authentication process illustrated in FIG. 3A, a process of authenticating the financial transaction according to an embodiment of the present invention may occur.

A diagram showing this is shown in FIG. 3B, that is, FIG. 3B is a flowchart showing a process of authenticating a financial transaction using the electronic financial transaction security system according to the present invention. Of course, it is assumed that the terminal 100 is connected to the financial server 140 in advance in the case of FIG. 3B for the convenience of understanding the exemplary embodiment of the present invention.

Referring to FIG. 3B, when a party user or an illegal user by another hacking enters an account number, an amount, an account holder, etc. to be transferred for a financial transaction (S320), the terminal 100 secures financial transaction information. It transmits to the module 110 (S322).

The security module 110 displays the financial transaction information on the display unit 240 (S324) (S324). That is, the financial transaction information is displayed on the display unit 240 of the security module 110, so that a user of a political party can determine whether the financial transaction information is valid.

If the displayed financial transaction information has strange information, for example, a different account holder or a strange transfer account number, the political party user can select the key input unit 230 configured in the security module 110 to cancel the approval ( S340). Since the information displayed on the security module 110 is not operated under the control of the terminal 100, the hacking program in the terminal 100 cannot display false information as if it is real information. .

If the approval for the financial transaction is canceled, the security module 110 notifies the terminal 100 of the disapproval (S340).

The key input unit 230 confirming the transaction approval may be replaced by whether the encryption function device 120 is connected or recognized. Because if there is no connection of the encryption function device 120 for a predetermined time after the security module 110 displays the transaction information transmitted from the terminal 100, the transaction may be automatically canceled and the encryption function device 120 is connected. If it is recognized or recognized, the transaction can be considered approved.

Upon receiving the disapproval notification, the terminal 100 terminates the financial transaction (S342) and notifies the financial server 140 of the termination of the connection (S346). Of course, this process can also be omitted. This is because, normally, the financial server 140 terminates the financial transaction when it does not receive a signal from the terminal 100 for a predetermined time.

On the contrary, if the financial transaction is approved, the security module 110 transmits the financial transaction information to the encryption function device 120 (S327). The encryption module 121 of the encryption function device 120 encrypts the financial transaction information and the user information (S329).

The encryption module 121 of the encryption function device 120 transmits the encrypted financial transaction information and the user information to the security module 110 (S330).

The security module 110 transmits the encrypted financial transaction information and the user information to the terminal 100 (S350).

The terminal 100 transmits the encrypted financial transaction information and the user information received from the security module 110 to the financial server 140 (S354). Of course, the financial server 140 compares the user information stored in the financial information database (141 of FIG. 1) through a process of decrypting the encrypted financial transaction information and the user information, and if the user is a legitimate user. The financial transaction is executed (S356).

When the transaction is completed, the financial server 140 notifies the terminal 100 of the completion of the financial transaction (S357). Of course, this process can be omitted.

4 is a conceptual diagram illustrating a difficulty in hacking a financial transaction by various paths when using the electronic financial transaction security system according to an embodiment of the present invention. The hacking path shown in FIG. 4 can be classified into two types.

In the first case 420, an illegal user may hack the security module 110 directly by using the hacking tool 400. However, in this case, since the processor (CPU) and the operating system (OS) on which the hacking tool 400 operates is different from the processor (CPU) and the operating system (OS) on the security module 110, hacking is impossible. . That is, the CPU and OS of the computer terminal 100 belong to the control range A, and the CPU and OS of the security module 110 belong to the control range B.

In the second case 421, the illegal user hacks the user transaction information 410 on the terminal 100 using the hacking tool 400 and provides the hacked information to the security module 110. have. However, in this case, the transaction information is displayed on the display unit 240 of FIG. 2. Therefore, the encryption is performed by the encryption function device 120 only after the legitimate user sees the approved transaction information and is not hacked.

On the contrary, in the case of normal financial transactions (430, 440), the user transaction information 410 is transmitted to the security module 110, and the transaction information is encrypted by the encryption module 121 of the encryption function device 120. Provided at 100. Thus secure transactions are made.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above-described embodiments, which can be variously modified and modified by those skilled in the art to which the present invention pertains. Modifications are possible. Accordingly, the spirit of the present invention should be understood only by the claims set forth below, and all equivalent or equivalent modifications thereof will belong to the scope of the present invention.

100: computer terminal 110: security module
120: encryption function device 121: encryption module
130: communication network 140: financial server
141: financial information database
200: control unit 210: terminal interface unit
220: card interface unit 221: communication unit
230: key input unit 240: display unit

Claims (8)

A terminal interface that interfaces with a terminal for transmitting financial transaction information;
A display unit which displays the financial transaction information transmitted from the terminal interface unit;
Approval selection means for selecting whether to approve the displayed financial transaction information;
If the financial transaction information is approved, the financial transaction information is transmitted to an encryption function device having encryption information and optionally user information, or the financial transaction information transmitted by the encryption function device is encrypted; and A card interface unit for interfacing with the encryption function device to receive user information; And
A control unit which interfaces with at least one of the terminal interface unit and the card interface unit to transmit the encrypted financial transaction information and the user information to the terminal through the terminal interface unit.
Security module comprising a. The method of claim 1,
The card interface unit further comprises a contact portion for communicating with a contact encryption function device of the encryption function device,
And a communication unit for wirelessly communicating with the contactless encryption function device of the encryption function device. The method of claim 2,
The terminal may be any one of a computer terminal, a notebook computer, a personal data assistant (PDA), a portable media player (PMP), a POS terminal, and a mobile phone.
And the approval selecting means is any one of a key input unit provided with an approval button, a contact encryption function device having a predetermined contact time with the contact unit, and a contactless encryption function device at a predetermined distance interval from the communication unit. A financial server for providing financial transactions;
A terminal accessing the financial server through a communication network;
A security module according to any one of claims 1 to 3 connected to the terminal; And
An encryption function device for encrypting financial transaction information and user information by contacting or contactlessly contacting the security module.
Electronic financial transaction security system comprising a. The terminal transmitting the input information for the financial transaction to the security module;
Displaying, by the security module, the financial transaction information transmitted from the terminal through a display unit;
Determining, by the security module, whether the financial transaction information displayed by the approval selecting means for selecting whether to approve is approved;
The security module transmitting approved financial transaction information to an encryption function device;
Encrypting, by the encryption function device, the approved financial transaction information and user information stored therein; And
Transmitting, by the encryption function device, encrypted financial transaction information and user information to the security module
Electronic financial transaction security method comprising a. The method of claim 5, wherein
Transmitting, by the security module, the encrypted financial transaction information and user information to the terminal; And
And transmitting, by the terminal, the encrypted financial transaction information and the user information to a financial server through a communication network. The method according to claim 5 or 6,
Determining whether the approval is,
If it is determined that the financial transaction information is approved, transmitting the financial transaction information to an encryption function device;
And if it is determined that the financial transaction information is not approved, the terminal ending the financial transaction. The method according to claim 5 or 6,
The encryption function device is a contact encryption function device or a contactless encryption function device, the terminal is any one of a computer terminal, a notebook computer, a personal data assistant (PDA), a portable media player (PMP), a POS terminal, and a mobile phone,
The approval selection means may be any one of a key input unit provided with an approval button, a contact encryption function device having a predetermined contact time with the contact portion, and a contactless encryption function device at a predetermined distance interval from the communication unit. .

Images