KR101335047B1 - Apparatus and method for recovering service transaction of terminal application using smart card - Google Patents

Abstract

Service transaction recovery apparatus of the terminal application through the smart card interworking according to an embodiment of the present invention, the smart card for recording and maintaining the operation history and status information for the service transaction of the terminal application; And a terminal application transaction recovery module for recovering an error of the service transaction by using an operation history and state information recorded in the smart card when the terminal application is abnormally terminated due to an error of the service transaction.

Smart card, terminal application, service transaction, service transaction recovery, service continuous transaction, operation history / status information, security level

Description

Apparatus and method for recovering service transaction of terminal application through smart card interworking {APPARATUS AND METHOD FOR RECOVERING SERVICE TRANSACTION OF TERMINAL APPLICATION USING SMART CARD}

Embodiments of the present invention relate to an apparatus and method for recovering a service transaction of a terminal application using a smart card.

When a mobile terminal performs a service transaction, for example, a banking service transaction, a terminal application associated with the banking service transaction often terminates abnormally due to a sudden error. Due to this abnormal termination, the user has to repeat the very cumbersome task of restarting the service transaction and restarting from the initial state.

On the other hand, when performing a service transaction, for example, a banking service transaction in the mobile terminal, the terminal application associated with the banking service transaction may be intentionally terminated normally by the user. Even at this normal end, the user must restart the service transaction and restart from the initial state as in the abnormal end.

Recently, a smart card of a subscriber identification module (SIM) type has been installed in a portable terminal. Therefore, there is a method of recovering the service transaction by storing the history of the service transaction in the nonvolatile memory of the portable terminal, but there is a risk that the synchronization between the data issuance state of the smart card and the transaction history of the terminal application may not be matched. .

In addition, when the memory for replacing the portable terminal or storing the transaction history is initialized, as described above, the user has to re-run the terminal application and attempt to retransmit from the initial state.

The present invention has been made to improve the above-described prior art, and an object of the present invention is to allow the service transaction to be recovered when the service transaction of the terminal application is terminated during execution.

The object of the present invention is not limited to the above-mentioned objects, and other objects not mentioned will be clearly understood by those skilled in the art from the following description.

In order to achieve the above object and solve the problems of the prior art, the service transaction recovery apparatus of the terminal application through the smart card interworking according to an embodiment of the present invention, recording the operation history and status information for the service transaction of the terminal application To maintain the smart card; And a terminal application transaction recovery module for recovering an error of the service transaction by using an operation history and state information recorded in the smart card when the terminal application is abnormally terminated due to an error of the service transaction.

According to another embodiment of the present invention, an apparatus for restoring a service transaction of a terminal application through smart card interworking may include: a smart card for recording and maintaining an operation history and state information on a service transaction of the terminal application; And when the terminal application is normally terminated during the service transaction, using the operation history and state information recorded on the smart card, continuously driving the service transaction from the service transaction progressing stage when the terminal application terminates. It includes a terminal application continuous drive module.

According to an embodiment of the present invention, a service transaction recovery method of a terminal application through smart card interworking may include: recording and maintaining an operation history and state information on a service transaction of the terminal application on a smart card; And recovering the error of the service transaction by using the operation history and state information recorded in the smart card when the terminal application is abnormally terminated due to the error of the service transaction.

According to another aspect of the present invention, there is provided a service transaction recovery method for a terminal application through smart card interworking, comprising: recording and maintaining an operation history and state information on a service transaction of a terminal application on a smart card; And when the terminal application is normally terminated during the service transaction, using the operation history and state information recorded on the smart card, continuously driving the service transaction from the service transaction progressing stage when the terminal application terminates. It includes a step.

The details of other embodiments are included in the detailed description and the accompanying drawings.

Advantages and features of the present invention and methods for achieving them will be apparent with reference to the embodiments described below in detail with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in various different forms, only these embodiments are intended to make the disclosure of the present invention complete, and common knowledge in the art to which the present invention pertains. It is provided to fully inform the person having the scope of the invention, which is defined only by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

According to embodiments of the present invention, by recording the operation history / status information of the service transaction of the terminal application on the smart card, when the service transaction of the terminal application is abnormally terminated during execution, the service transaction through interworking with the smart card Can be recovered.

According to embodiments of the present invention, by restoring a service transaction through interworking with a smart card, when the service transaction of the terminal application is terminated in the middle of execution, the hassle of re-transaction from the initial state by restarting the terminal application. I can eliminate it.

According to embodiments of the present invention, by recording the operation history / status information of the service transaction of the terminal application on the smart card, if the service transaction of the terminal application is normally terminated during execution, from the transaction step at the time when the service transaction is terminated You can resume the transaction.

In an embodiment of the present invention, a service transaction refers to a service transaction provided by a mobile phone or the like, and requires a transaction related to a financial service requiring security, such as a bank service, a credit card service, an insurance service, a securities service, and the like. General service transactions that are not available.

In addition, in the embodiment of the present invention, the terminal application refers to a program supporting the service transaction, security related programs such as banking program, credit card program, insurance program, securities program, and other security related Programs that do not exist, and the like.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating a service transaction recovery apparatus (hereinafter, referred to as a service transaction recovery apparatus) of a terminal application through smart card interworking according to an embodiment of the present invention. The service transaction recovery apparatus may be implemented in a portable terminal.

The service transaction recovery apparatus includes a smart card 110, a terminal application transmission module 120, a terminal application transaction recovery module 130, a terminal application continuous transaction module 140, a transaction information update module 150, and a terminal application control. Module 160 may be included.

The smart card 110 may record and maintain an operation history / status information of a service transaction of the terminal application, a security level of the service transaction, and the like. In this case, the smart card 110 may record the operation history / status information and the security level in a database. In an embodiment of the present invention, the smart card 110 may be implemented as a smart card of a subscriber identification module (SIM) type.

Here, the operation history / status information may include a service code, a service name, a total transaction step, a transaction step, a transaction state, and transaction information. The service code means a code (eg, 01) for a terminal application supporting the service transaction, the service name means a name (eg, banking) for the terminal application, and the total transaction step is the service transaction. For the total progress stage, i.e., the total number of transactions (e.g. 5), the transaction stage is the stage in which the service transaction is in progress (e.g. 2), and the transaction status is the completion or not (e.g. 0 (completed) for the transaction stage. )), The transaction information may mean actual data (eg, Hong Gil-dong) regarding the service transaction.

When the terminal application is abnormally terminated due to an error of the service transaction, the terminal application transmission module 120 reads the operation history / status information and the security level from the smart card 110, and the terminal. The application transaction recovery module 130 may be transmitted.

Meanwhile, when the terminal application is normally terminated during the service transaction, the terminal application transmission module 120 reads the operation history / status information, the security level, and the like from the smart card 110 to continuously execute the terminal application. It may be transmitted to the transaction module 140.

To this end, the service transaction recovery apparatus may further include a determination module that determines whether the terminal application terminates abnormally according to an error of the service transaction or intentionally terminates normally by the user during the service transaction. Can be. When it is determined that the terminal application is abnormally / normally terminated during the service transaction, the determination module may generate the operation history / status information, the security level, and the like and transmit the generated information to the smart card 110. .

The terminal application transaction recovery module 130 may receive the operation history / status information and the security level from the terminal application transmission module 120 to recover an error of the service transaction.

In detail, the terminal application transaction recovery module 130 may perform authentication on the service transaction based on the security level. When the authentication is successfully completed, the terminal application transaction recovery module 130 may recover the step (s) where the service transaction is stopped using the operation history / status information.

Accordingly, the service transaction recovery apparatus may perform the service transaction from the step of stopping or after the service transaction without initializing the terminal application to perform the service transaction from the initial stage.

The terminal application continuous transaction module 140 may receive the operation history / status information and the security level from the terminal application transmission module 120 to continuously drive the service transaction.

Specifically, the terminal application continuous transaction module 140 may perform authentication for the service transaction based on the security level. When the authentication is successfully completed, the terminal application continuous transaction module 140 is to continue the service transaction from the service transaction progress step at the time when the terminal application is terminated, using the operation history / status information. Can be.

The transaction information update module 150 may update the operation history / status information in consideration of the progress of the service transaction. That is, the transaction information update module 150 records the operation history / status information for the service transaction on the smart card 110 at the time when each step of the service transaction is completed, thereby allowing the operation history / status information. You can perform the update.

For example, it is assumed that a service transaction is composed of a total of five stages, two stages are currently completed, and the operation history / status information up to one stage is recorded in the smart card 110. In this case, the transaction information update module 150 records the operation history / status information up to one step by newly recording the operation history / status information up to two steps that are currently completed in the smart card 110 for the service transaction. It can be updated as the operation history / status information up to the step.

The terminal application control module 160 is the service transaction recovery device, that is, smart card 110, terminal application transmission module 120, terminal application transaction recovery module 130, terminal application continuous transaction module 140, transaction information update The overall operation of the module 150 may be controlled.

2 is a diagram illustrating an example of an operation history / status information and a security level recorded in a smart card according to an embodiment of the present invention. For reference, in the embodiment of FIG. 2, it is assumed that a banking service is under service transaction in a mobile terminal.

As shown in FIG. 2, the smart card includes a service code (name) field 210, a total transaction step field 220, a transaction step field 230, a transaction status field 240, a security level field 250, and the like. Transaction information field 260.

Here, the service code (name) field 210, the total transaction step field 220, the transaction step field 230, the transaction status field 240, and the transaction information field 260 includes an operation history for the banking service transaction. Status information can be recorded.

That is, the service code (01) corresponding to the banking service and the service name (Banking) are recorded in the service code (name) field 210, and the total transaction step 5 of the banking service in the total transaction step field 220. Can be recorded. In addition, in the transaction step field 230, the current progress step 2 of the banking service is recorded, and in the transaction status field 240, information (0: completion) regarding whether the current progress step 2 is completed or not is recorded. In the transaction information field 260, a name of a user who uses the banking service, that is, Hong Gil-dong, may be recorded.

When the banking service is terminated during a transaction, the service transaction recovery apparatus according to an embodiment of the present invention uses operation history / status information such as a service code (name), a total transaction step, a transaction step, a transaction status, and transaction information. It is possible to recover from errors on the banking service.

That is, the service transaction recovery apparatus checks through the transaction stage field 230 that the current transaction stage, that is, the terminated transaction stage, for the banking service is two stages, and indicates that the total transaction has not been completed. 220). In this case, the service transaction recovery apparatus may check that the current transaction phase 2 is completed through the transaction status field 240. Accordingly, the service transaction recovery apparatus may proceed with the banking service transaction of the third stage after recovering the banking service transaction up to the second stage.

Meanwhile, the security level for the banking service may be recorded in the security level field 250. In this case, the security level may be set to a predetermined value according to the importance of the banking service.

For example, the security level may be set to a value such as S01, S02, S03. When the security level is S01, the service transaction recovery apparatus may recover the service transaction through PIN (Personal Identification Number) authentication. That is, the service transaction recovery apparatus may receive a PIN from a user through a mobile terminal, and restore the service transaction when the input PIN matches a PIN recorded in a hidden state on a smart card. .

If the security level is S02, the service transaction recovery apparatus may recover the service transaction through server authentication. That is, the service transaction recovery apparatus may perform an authentication on a cryptographic value generated by a transaction recovery key recorded in a hidden state on a smart card through interworking with a server where the service transaction is performed. If the authentication for the service transaction is successfully completed, the service transaction recovery apparatus may recover the service transaction.

When the security level is S03, the service transaction recovery apparatus may recover the service transaction through combined security authentication. That is, the service transaction recovery apparatus may recover the service transaction through security authentication combining the above-described PIN authentication and server authentication. 3 and 4 show an example of the combined security authentication.

As shown in FIG. 3, when securely authenticating the service transaction, the service transaction recovery apparatus may display a PIN input window 310 and an account password input window 320 on the screen 300 of the mobile terminal. . The user may input the PIN and the account password into the PIN input window 310 and the account password input window 320, respectively. Accordingly, the service transaction recovery apparatus may perform authentication on the service transaction by using the input PIN and the account password.

As shown in FIG. 4, when securely authenticating the service transaction, the service transaction recovery apparatus may display a PIN input window 410 and a security card number input window 420 on the screen 400 of the mobile terminal. have. A user may input a PIN and a security card number into the PIN input window 410 and the security card number input window 420, respectively. The service transaction recovery apparatus may perform authentication on the service transaction by using the input PIN and the security card number.

5 is a flowchart illustrating a service transaction recovery method of a terminal application through smart card interworking according to an embodiment of the present invention. The service transaction recovery method may be implemented by the service transaction recovery apparatus of FIG. 1.

Referring to FIG. 5, in operation S510, the terminal application may be driven in a mobile terminal in which the service transaction recovery apparatus is installed. As the terminal application is driven, the portable terminal may execute a service transaction corresponding to the terminal application.

At this time, the service transaction recovery apparatus in step (S520) the operation history / status information on the service transaction of the terminal application, for example, service code, service name, total transaction step, transaction step, transaction status, transaction information, etc. It can be recorded and maintained in. The service transaction recovery apparatus may also record and maintain a security level for the service transaction on a smart card.

The service transaction recovery apparatus may record and record the operation history / status information and the security level. Here, the smart card may be installed in the portable terminal, and may be implemented as a smart card of a subscriber identification module (SIM) type.

Next, in operation S530, the service transaction recovery apparatus may determine whether the terminal application is terminated. That is, the service transaction recovery apparatus may determine whether the terminal application is abnormally terminated according to an error of the service transaction, or determine whether the terminal application is intentionally terminated normally by the user during the service transaction.

As a result of the determination, when the terminal application terminates in the middle of execution (YES direction in S530), the service transaction recovery apparatus reads the operation history / status information and the security level from the smart card in step S540. (read)

Next, in operation S550, the service transaction recovery apparatus may perform authentication on the service transaction based on a security level read from the smart card.

Next, in step S560, when the authentication is successfully completed, the service transaction recovery apparatus recovers the step (s) at which the service transaction is stopped using the operation history / status information, or the terminal application terminates. From the service transaction progress stage at the point of time, the service transaction can proceed in succession.

Accordingly, the service transaction recovery apparatus may perform the service transaction from the step of stopping or after the service transaction without initializing the terminal application to perform the service transaction from the initial stage.

Meanwhile, the service transaction recovery apparatus may update the operation history / status information in consideration of the progress of the service transaction. That is, the service transaction recovery apparatus may perform an update on the operation history / status information by recording the operation history / status information on the service transaction on the smart card when each step of the service transaction is completed. Can be.

For example, it is assumed that a service transaction has a total of five stages, two stages are currently completed, and operation history / status information up to stage 1 is recorded in the smart card. In this case, the service transaction recovery apparatus records the operation history / status information up to two stages of the service transaction up to two stages by newly recording the operation history / status information up to two stages currently completed for the service transaction. It can be updated as history / status information.

On the other hand, if the terminal application is not terminated in the middle of execution ("No" direction of S530), the service transaction recovery device immediately terminates the operation without recovering the service transaction.

Embodiments of the present invention include computer readable media including program instructions for performing various computer implemented operations. The computer-readable medium may include program instructions, local data files, local data structures, etc., alone or in combination. The media may be those specially designed and constructed for the present invention or may be those known to those skilled in the computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floppy disks, and ROMs, And hardware devices specifically configured to store and execute the same program instructions. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined by the scope of the appended claims and equivalents thereof.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above-described embodiments, which can be variously modified and modified by those skilled in the art to which the present invention pertains. Modifications are possible. Accordingly, the spirit of the present invention should be understood only in accordance with the following claims, and all equivalents or equivalent variations thereof are included in the scope of the present invention.

1 is a block diagram illustrating a service transaction recovery apparatus of a terminal application through smart card interworking according to an embodiment of the present invention.

2 is a diagram illustrating an example of an operation history / status information and a security level recorded in a smart card according to an embodiment of the present invention.

3 and 4 illustrate an example of combined security authentication for a service transaction according to an embodiment of the present invention.

5 is a flowchart illustrating a service transaction recovery method of a terminal application through smart card interworking according to an embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

110: smart card

120: terminal application transmission module

130: terminal application transaction recovery module

140: terminal application serial transaction module

150: transaction information update module

160: terminal application control module

Claims (17)

A smart card for recording and maintaining an operation history and state information on a service transaction of a terminal application, including a 'transaction step field'; And When the terminal application is abnormally terminated and restarted according to an error of the service transaction, Terminal application transaction recovery module for recovering up to the stage of the service transaction is completed using the data recorded in the 'transaction step field' Service transaction recovery apparatus of the terminal application through smart card interworking comprising a. The method of claim 1, The smart card further includes a 'security level field', The terminal application transaction recovery module, Perform authentication on the service transaction based on the security level recorded in the 'security level field', If the authentication is successfully completed, recovering up to the stage of the service transaction is completed Service transaction recovery device of the terminal application through the smart card interworking. The method of claim 1, Transaction information update module for updating the operation history and status information in consideration of the progress of the service transaction Service transaction recovery apparatus of the terminal application through the smart card interworking further comprising. delete The method of claim 1, Terminal application transmission module for reading the operation history and status information from the smart card, and transmits to the terminal application transaction recovery module Service transaction recovery apparatus of the terminal application through the smart card interworking further comprising. The method of claim 1, The operation history and state information, The service transaction recovery apparatus of the terminal application through the smart card interlock including at least one of a service code, a service name, a total transaction stage, a transaction stage, a transaction state, or transaction information. The method of claim 1, The smart card further includes a 'total transaction step field', The terminal application transaction recovery module, If the data recorded in the 'transaction step field' and the data recorded in the 'total transaction step field' do not match, recovering up to the stage of the completion of the service transaction Service transaction recovery device of the terminal application through the smart card interworking. The method of claim 7, wherein The smart card further includes a 'transaction status field', The terminal application transaction recovery module, When the data related to completion is recorded in the 'transaction status field', the process of proceeding to the subsequent step of the service transaction, after the step of the service transaction is completed Service transaction recovery device of the terminal application through the smart card interworking. In the service transaction recovery method implemented by the service transaction recovery apparatus, In the service transaction recovery apparatus, recording and maintaining an operation history and state information on a service transaction of a terminal application on a smart card including a 'transaction step field'; And When the terminal application is abnormally terminated and restarted according to an error of the service transaction, Restoring, by the service transaction recovery apparatus, a step of completing a service transaction using data recorded in the 'transaction step field'; Service transaction recovery method of the terminal application through smart card interworking comprising a. 10. The method of claim 9, In the service transaction recovery apparatus, further comprising a 'security level field' in the smart card, recording and maintaining a security level for the service transaction; In the service transaction recovery apparatus, performing authentication on the service transaction based on a security level recorded in the security level field; And In the service transaction recovery apparatus, recovering up to the step where the service transaction is completed when the authentication is successfully completed; Service transaction recovery method of the terminal application through the smart card interworking further comprising. 10. The method of claim 9, In the service transaction recovery apparatus, updating the operation history and state information in consideration of the progress of the service transaction; Service transaction recovery method of the terminal application through the smart card interworking further comprising. delete 10. The method of claim 9, At the service transaction recovery apparatus, reading the operation history and status information from the smart card; And Recovering an error of the service transaction by using the read operation history and state information in the service transaction recovery apparatus; Service transaction recovery method of the terminal application through the smart card interworking further comprising. 10. The method of claim 9, The operation history and state information, The service transaction recovery method of the terminal application through the smart card interworking including at least one of a service code, a service name, a total transaction step, a transaction step, a transaction status, or transaction information. 10. The method of claim 9, The smart card further includes a 'total transaction step field', Restoring up to the stage of the service transaction is completed, Restoring up to the stage where the service transaction is completed if the data recorded in the 'transaction step field' and the data recorded in the 'total transaction step field' do not match. Service transaction recovery method of the terminal application through smart card interworking comprising a. 16. The method of claim 15, The smart card further includes a 'transaction status field', Restoring up to the stage of the service transaction is completed, If data relating to completion is recorded in the 'transaction status field', proceeding to a subsequent step of the service transaction, after the step of the service transaction is completed; Service transaction recovery method of the terminal application through the smart card interworking further comprising. A computer-readable recording medium having recorded thereon a program for performing the method of any one of claims 9 to 11 and 13 to 16.

Images