KR101413117B1 - System for Processing Financial Transaction by using Token Code - Google Patents

Abstract

The present invention relates to a financial transaction processing system using a token code, and more particularly, to a financial transaction processing system using a token code implemented in a server that processes a financial transaction by communicating with a program provided in a customer wireless terminal, Based on the result of authenticating the validity of the program, the customer information using the wireless terminal equipped with the authenticated program and the wireless terminal equipped with the authenticated program and the financial transaction means information issued by the financial institution to the customer Receiving a token code indicated in an authenticated program of a customer wireless terminal corresponding to the wireless terminal information from the customer terminal when a financial transaction is requested from a customer terminal used by the customer corresponding to the customer information, Generated under the same conditions as the dynamic generation of the token code An authentication unit for processing the received token code so that the validity of the received token code is authenticated using the authentication code and the wireless terminal information on which the authenticated program is installed when the validity of the talk code is authenticated, And a financial transaction unit for extracting the financial transaction means information stored in association with the customer information using the terminal and processing the requested financial transaction to be performed.

Description

[0001] The present invention relates to a financial transaction processing system using a token code,

The present invention provides a financial transaction processing system using a token code implemented in a server that processes a financial transaction by communicating with a program installed in a customer wireless terminal, the system comprising: A storage unit for associating the wireless terminal information on which the authenticated program is installed, the customer information using the wireless terminal equipped with the authenticated program and the financial transaction means information issued by the financial institution to the customer, Receiving a token code indicated in an authenticated program of a customer wireless terminal corresponding to the wireless terminal information from the customer terminal when a financial transaction is requested from the customer terminal to use, Code to validate the received token code When the validity of the talk code is authenticated, extracts the financial transaction means information stored in association with the customer information using the wireless terminal equipped with the authenticated program or the wireless terminal equipped with the authenticated program And a financial transaction unit for processing the requested financial transaction so that the requested financial transaction is performed.

With the development of Internet infrastructure and financial transaction infrastructure, authentication has become very important for financial transactions and website access.

In particular, phishing has recently been used as a means of obtaining phishing, such as obtaining personal financial transaction information (e.g., an authentication number, a credit card number, account information, etc.) Pharming to steal personal information such as personal ID, password, account information, etc., by stealing the domain of the user that owns it or by tricking the domain name system (DNS) name into causing the user to mistake it as a real site, There is a problem such as keyboard hacking for hacking input key input information (e.g., personal ID, password, account information, etc.).

It is an object of the present invention to provide a financial transaction processing system using a token code implemented in a server that processes a financial transaction by communicating with a program provided in a customer wireless terminal, A storage unit for associating the wireless terminal information on which the authenticated program is installed, the customer information using the wireless terminal equipped with the authenticated program, and the financial transaction means information issued to the customer from the financial institution, Receiving a token code indicated in an authenticated program of a customer wireless terminal corresponding to the wireless terminal information from the customer terminal when a financial transaction is requested from a customer terminal used by a corresponding customer, The generated authentication code is used to determine whether the received token code And an authentication unit for processing the authenticated program so that the validity of the talk code is authenticated and the validity of the talk code if the authenticity of the talk code is authenticated, or the information of the financial transaction means stored in association with the customer information using the wireless terminal equipped with the authenticated program, And a financial transaction unit for processing the requested financial transaction so as to perform the requested financial transaction.

The financial transaction processing system using the token code according to the present invention is a financial transaction processing system using a token code implemented in a server that processes a financial transaction by communicating with a program provided in a customer wireless terminal, The information about the wireless terminal on which the authenticated program is installed, the customer information using the wireless terminal equipped with the authenticated program, and the financial transaction means information issued by the financial institution to the customer are linked and stored And receiving a token code indicated in an authenticated program of a customer wireless terminal corresponding to the wireless terminal information from the customer terminal when a financial transaction is requested from a customer terminal used by the customer corresponding to the customer information, Authentication code generated under the same conditions as dynamic generation of code An authenticator for processing the received token code so as to authenticate the validity of the received token code, and a wireless terminal equipped with the authenticated program or the wireless terminal equipped with the authenticated program when the validity of the talk code is authenticated And a financial transaction unit for extracting the financial transaction means information stored in association with the used customer information and processing the requested financial transaction to be performed.

delete

delete

delete

delete

In the financial transaction processing system using the token code according to the present invention, the customer terminal includes at least one of a customer wireless terminal equipped with the authenticated program and a wired terminal used by the customer for the financial transaction .

delete

In the financial transaction processing system using the token code according to the present invention, the financial transaction includes at least one of a payment processing financial transaction and an account transfer financial transaction.

According to the present invention, by providing a method and system for processing a financial transaction, it is possible that a customer can perform a more secure financial transaction through a predetermined token code volatilized temporally and / or with a predetermined random variable There are advantages.

Also, by using the token generating program information associated with the financial transaction means owned customer information (and / or the customer owned wireless terminal information), financial transaction means information (e.g. financial account information, credit card information, debit card information, Information, check card information, prepaid card information, electronic money information, and the like).

1 is a diagram illustrating a financial transaction processing system according to the present invention.
FIG. 2 illustrates a system for providing a predetermined token agent to a client terminal according to an embodiment of the present invention.
3 is a diagram illustrating token agent information to be provided to a customer terminal according to an embodiment of the present invention.
4 is a diagram illustrating token agent information to be provided to a customer terminal according to an embodiment of the present invention.
FIG. 5 illustrates an exemplary process of providing and installing a token agent program to a client terminal according to an embodiment of the present invention. Referring to FIG.
FIG. 6 illustrates an exemplary process of providing and installing a token agent program to a client terminal according to an embodiment of the present invention. Referring to FIG.
7 is a diagram illustrating the configuration of information of token agent information stored in the storage medium according to an embodiment of the present invention.
8 is a diagram illustrating the configuration of customer information stored in the storage medium according to an embodiment of the present invention.
9 is a diagram illustrating information configuration of financial transaction means information stored in the storage medium according to an embodiment of the present invention.
10 is a block diagram of a financial transaction processing system using a wireless terminal number according to an embodiment of the present invention.
11 is a diagram illustrating a configuration of a wireless terminal equipped with a token agent according to an embodiment of the present invention.
12 is a diagram illustrating a token code structure according to an embodiment of the present invention.
13 is a diagram illustrating a token code operation process according to an embodiment of the present invention.
14 is a diagram illustrating a token code operation process according to an embodiment of the present invention.
15 is a diagram illustrating a token code operation process according to an embodiment of the present invention.
16 is a diagram illustrating a token code operation process according to an embodiment of the present invention.
17 is a flowchart illustrating an application process of applying a token code-based financial transaction to an Internet banking according to an embodiment of the present invention.
FIG. 18 illustrates performing token code based financial transaction Internet banking according to an embodiment of the present invention.
Figure 19 is an implementation of a token code based financial transaction applied to wireless banking in accordance with an embodiment of the present invention.
20 illustrates wireless banking of token code based financial transactions in accordance with an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the book.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. The configuration is omitted as much as possible, and a functional configuration that should be additionally provided for the present invention is mainly described. Those skilled in the art will readily understand the functions of components that have been used in the prior art among the functional configurations that are not shown in the following description, The relationship between the elements and the components added for the present invention will also be clearly understood.

In the present invention, each of the means constituting the financial transaction processing system using the wireless terminal number includes a program recorded in a recording medium provided in a predetermined server according to a characteristic (or a role) (Or a program including at least one or more function components for performing a unique function (or role) of the means), and / or configured as an independent server performing a unique function defined in the means For example, the present invention can be implemented by a plurality of server systems interworking through predetermined server-to-server interfaces. The preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings. A program recorded on a recording medium provided in a predetermined server and / or a plurality of servers interlinked with each other Would be described as the display, but are not limited to the exemplary method of the device, if more than the embodiment in no way. In the following embodiments, a predetermined token generation program can be installed in a customer wireless terminal and / or a wired terminal. For convenience, the token generation program is called a token agent and / or a token agent program. In addition, the terms used in the following embodiments will be appropriately modified in accordance with the field to which the token code-based financial transaction according to the present invention is applied, and thus the present invention is not limited thereto.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a diagram illustrating a financial transaction processing system according to the present invention.

1 is a block diagram of a client terminal 120 that provides a predetermined token code generated by a predetermined token agent program to the server 115 when performing a predetermined financial transaction by connecting to the server 115 on the communication network 140. [ And a predetermined token agent program information associated with at least one financial transaction means information and / or the customer information possessed by the financial transaction means and the token agent program information included in the customer terminal (145) In association with the financial transaction means information corresponding to the financial transaction and / or the customer information (and / or the customer-owned wireless terminal information) owned by the financial transaction means, in association with the storage medium 110 (or storage medium operating means) The server 115 for confirming the token agent program information and authenticating the validity of the token code using the token agent program information It relates to a financial transaction processing system which comprises the box.

1, the financial transaction processing system may further include a token agent providing means 100 for providing a predetermined token agent program to the customer terminal 145, And then associates the at least one financial transaction means information and / or the customer information owned by the financial transaction means with the predetermined token agent information for the token agent program included in the customer terminal 145 And a token agent providing means (100) for storing the token agent in a predetermined storage medium (110).

Further, the financial transaction processing system may further include an information transmission unit 125 for transmitting predetermined financial transaction processing details (or payment approval specialization) data corresponding to the financial transaction processing to the customer terminal 145 desirable.

In addition, the financial transaction processing system may connect predetermined financial transaction processing details (or payment approval specialization) data corresponding to the financial transaction processing to a predetermined storage medium 135 And an information storage unit 130 for storing the information.

According to the method of the present invention, the server 115 preferably processes the financial transaction according to the result of the validity authentication. It is preferable that the financial transaction includes a financial transaction using a wired terminal and / or a financial transaction using a wireless terminal, and / or a financial transaction involving an account such as a payment processing financial transaction and / or a money transfer .

According to an embodiment of the present invention, the financial transaction means preferably includes at least one of a financial account, a credit card, a debit card, a cash card, a check card, a prepaid card, and electronic money.

According to the method of the present invention, the customer terminal 145 may be equipped with a predetermined token agent program, and the customer terminal 145 may include a Personal Communication System (PCS) and / System for mobile communications terminal and / or a personal digital cellular (PDC) and / or a personal handyphone system (PHS) terminal and / or a personal digital assistant (PDA) A personal computer (PC) and / or a notebook computer (PC) and / or a wireless terminal including at least one or more of a mobile phone and / or telematics and / or a wireless data communication terminal and / Etc., and the customer terminal 145 preferably includes a wired terminal including at least one or more of Internet banking, Through one banking it is desirable to connect to the server 115. Particularly, it is preferable that the customer terminal 145 connects to the server 115 through the mobile banking by connecting with a wireless application protocol (WAP) method or an IC chip method.

Also, the customer terminal 145 may use a predetermined code (or a PIN (Personal Identification Number) or a PIN) input through a predetermined input means to transmit a token agent program And the customer terminal 145 may further provide the server 115 with predetermined financial transaction information.

According to the embodiment of the present invention, the server 115 refers to the token agent information associated with the financial transaction means information and / or the financial transaction means owned customer information (and / or the customer owned wireless terminal information) Wherein the client terminal generates a predetermined token authentication code corresponding to the received token code and compares the token code with the token authentication code to authenticate the validity of the token code, It is preferable to further validate the validity of the authentication information (or the secret code) when at least one authentication information (or secret code) associated with the means is further provided.

2 illustrates a configuration of a system for providing a predetermined token agent to a customer terminal 145 according to an embodiment of the present invention.

In more detail, FIG. 2 illustrates a method of providing and installing a predetermined token agent program in a customer terminal 145 having at least one financial transaction means, the at least one financial transaction means information, the financial transaction means own customer information And a token agent providing system for storing the token agent information and the token agent information in a predetermined storage medium 110. The present invention is not limited to the above embodiments, In order to easily describe the technical features of the present invention, FIG. 1 illustrates a token agent providing system, which includes a financial transaction means issuing server 200 for issuing a predetermined financial transaction means to a predetermined customer, A token agent providing server 215 for providing and loading a predetermined token agent program, And stores information stored in a predetermined storage medium 110 in association with the mounted token agent information, the financial transaction means owned customer information (and / or customer wireless terminal information), and at least one financial transaction means information issued to the customer A server 235, and the like. However, the technical features of the token agent providing system are not limited to those shown in FIG. 2. Those skilled in the art will appreciate that the financial transaction means issuing server The token agent providing server 215 and the information storing server 235 may be one server, and / or a method of implementing various token agent providing systems composed of at least two or more servers may be easily inferred You can do it.

The financial transaction means issuing server 200 includes a financial account financial transaction means, a credit card financial transaction means, a debit card financial transaction means, a cash card financial transaction means, a check card financial transaction means, And a financial transaction means including an electronic money financial transaction means for issuing to a customer a bank and / or a financial company, which is provided with at least one financial transaction means And a financial transaction means information D / B 210 for storing and storing at least one financial transaction means information issued to the customer in association with the customer information.

The financial transaction means issuing unit 205 acquires predetermined customer information for the customer through the predetermined financial transaction means issuing interface 250 and / or issues the customer information to the customer based on the acquired customer information The method includes generating at least one financial transaction means information, storing the financial transaction means information in a DBMS provided in a predetermined financial system, and / or printing the financial transaction means information in a predetermined passbook and / (For example, an MS card and / or an IC card) and / or a wireless chip medium (for example, an IC chip mounted or detached from the wireless terminal).

According to an embodiment of the present invention, the method for acquiring customer information for the customer includes receiving the customer information through a document including a predetermined customer information entry form, And a method of using the financial transaction means issuing interface 250 to acquire in an offline manner via a predetermined information input means (for example, an information input terminal), and / or a method of using a predetermined customer terminal A financial transaction means issuing interface 250 for providing a predetermined customer information input interface to a customer terminal (for example, a wired terminal owned by a customer and / or a wireless terminal owned by the customer) and acquiring the customer information on-line via the customer information input interface And a method of using it.

The financial transaction means issuing unit 205 generates at least one financial transaction information to be issued to the customer by reading the obtained customer information (for example, a customer's credit rating), and the generated financial transaction means It is preferable that the information is stored in a DBMS provided in a predetermined financial system and / or the financial transaction means information is printed on a predetermined passbook or stored in a predetermined card medium and / or a wireless chip medium and issued to the customer .

When at least one financial transaction means is issued to the customer, the financial transaction means issuing unit 205 associates the customer information with at least one financial transaction means information issued to the customer, / B (210).

Referring to FIG. 2, the token agent providing server 215 includes a token agent D / B 225 storing at least one token agent corresponding to at least one customer wireless terminal platform, (220) for providing a predetermined token agent stored in the customer wireless terminal (210) to the customer wireless terminal (200). The agent providing unit (220) And a token agent diagnosis unit 230 for diagnosing the validity of the agent.

Wherein the token agent D / B 225 stores at least one token agent program capable of operating in correspondence with a predetermined customer wireless terminal platform, and token agent related information corresponding to the token agent program, A detailed description of the token agent D / B 225 will be described with reference to FIG. 3 and / or FIG.

The agent providing unit 220 extracts a predetermined token agent program corresponding to a platform included in the customer terminal 145 from the token agent D / B 225 and / or extracts at least one token generation information The client terminal 145 dynamically generates a predetermined token agent program executable on the platform included in the customer terminal 145 and transmits the token agent program via the predetermined token agent providing interface 255 to the token agent program and / The at least one token generation information is provided to the customer terminal 145 and loaded.

In order for the agent providing unit 220 to provide a predetermined token agent program to the customer terminal 145, the wireless terminal information is required to provide the token agent to the customer terminal 145, And the like.

According to an embodiment of the present invention, the financial transaction means issuing server 200 issues at least one financial transaction means to the customer, and / or issues at least one financial transaction means to the customer, Requesting the token agent providing server 215 to provide and provide the token agent program to the customer terminal 145 issued with the financial transaction means in order to process the financial transaction using the wireless terminal number based on the token code, The financial transaction means issuing server 200 provides the wireless terminal information included in the customer information to the agent providing unit 220 of the token agent providing server 215.

According to another embodiment of the present invention, the customer accesses the token agent providing server 215 through a predetermined customer terminal (e.g., a customer owned wired terminal and / or a wireless terminal) It is preferable to provide the wireless terminal information to the token agent providing server 215 for financial transaction processing using the terminal number.

When the token agent program is provided and the installed wireless terminal information is provided, the agent providing unit 220 identifies the platform of the client terminal 145 based on the wireless terminal information. For example, when the customer terminal 145 is a mobile communication terminal connected to a predetermined mobile communication network, the agent providing unit 220 uses the mobile terminal information to transmit the subscriber D / B (for example, , A Home Location Register (HLR), or a Visitor Location Register (VLR)) (not shown).

When the platform of the customer terminal 145 is identified as described above, the agent providing unit 220 extracts a predetermined token agent program corresponding to the wireless terminal platform from the token agent D / B 225, and / And dynamically generates one or more token generation information.

Also, the agent providing unit 220 extracts at least one token generation information corresponding to the token agent program from the token agent D / B 225, and extracts the extracted (and / or dynamically generated) (E.g., the wired / wireless network 140 to which the customer terminal 145 is connected) to the customer terminal 145 by associating the program and / or the extracted at least one token generation information with a predetermined token agent providing interface 255 The client terminal 145 loads the token agent program.

According to an embodiment of the present invention, the token agent program can be mounted on an IC chip mounted on the platform of the customer terminal 145 and / or mounted on or removed from the wireless terminal, The present invention is not limited thereto.

The token agent program provided to the customer terminal 145 according to the present invention includes at least one of a time-synchronous method and a challenge-response method, And the present invention is not limited by the token code generation method.

If the token agent program is installed in the customer terminal 145, the token agent diagnosis unit 230 may diagnose whether the token agent program installed in the wireless terminal is normally operated in cooperation with the customer terminal 145 .

According to an embodiment of the present invention, a method of diagnosing the token agent program loaded on the customer terminal 145 includes: generating the predetermined diagnostic token code by the token agent program loaded on the customer terminal 145 The token agent diagnosis unit 230 generates a predetermined diagnostic token authentication code corresponding to the received token code, and transmits the generated token authentication code to the token agent diagnosis unit 230. [ It is preferable to diagnose the validity of the token agent program loaded on the customer terminal 145 by comparing the codes.

According to the present invention, the token agent providing server 215 performs a function of a token agent program providing means for providing and providing a predetermined token agent program to the customer terminal 145.

When the predetermined token agent program is normally provided and loaded into the customer terminal 145 as described above, the information storage server 235 transmits the at least one financial transaction means issued by the financial transaction means issuing server 200 to the customer The predetermined wireless terminal information for the customer terminal 145 and the token agent information loaded on the customer terminal 145 and stores them in a predetermined storage medium 110. [

Referring to FIG. 2, the information storage server 235 receives at least one financial transaction information and / or customer information (e.g., wireless terminal information) from the financial transaction means information D / B 210 An information extraction unit 240 for extracting token agent information provided from the token agent D / B 225 to the customer terminal 145 and extracting the loaded token agent information; And an information storage unit 110 for storing the means information, the financial transaction means owned customer information (and / or the customer wireless terminal information) and the token agent information provided in the customer terminal 145, (245).

According to the present invention, the information storage server 235 stores at least one financial transaction means information, customer information (and / or customer wireless terminal information) owned by the financial transaction means, and predetermined And the information storage unit 105 stores the token agent information in a predetermined storage medium 110 in association with the token agent information.

FIG. 3 is a diagram illustrating token agent information to be provided to a customer terminal 145 according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates a predetermined token agent for generating a time-synchronous token code, which includes a predetermined token for each platform corresponding to the platform of the customer terminal 145 on which the token agent is to be installed, The token agent information includes a token agent program corresponding to each platform (or a source code to be compiled into a token agent program), a version of the token agent, a token generation algorithm At least one token generation information, and / or a token update period. However, the at least one information item may be further included according to the intention of a person skilled in the art, and the information item does not necessarily limit the present invention .

According to the present invention, the token agent program is installed in the customer terminal 145 owned by the customer to generate a predetermined token code, whereby the token agent program is installed in the customer terminal 145 platform And program code that can be driven and / or operated. For example, if the customer terminal 145 is a wireless terminal equipped with a wireless internet platform for interoperability (WIPI) platform, the token agent includes program code operating on the WIPI basis, (For example, GVM / SK-VM / BREW, etc.) is installed, program code running on the platform is included. Alternatively, if the customer terminal 145 is a wired terminal equipped with a Microsoft Windows operating system, the token agent includes program code operating in the window operating system.

3, the token agent program is included in the token agent D / B 225 in the form of a precompiled program, and / or is included in the token agent D / B 225 in the form of source code to be compiled. Is stored in the memory.

According to an embodiment of the present invention, when the token agent program is provided in the token agent D / B 225 in a precompiled program form, the token agent providing server 215 transmits the token agent program via the predetermined network 140 At the time of providing and loading the token agent program to the customer terminal 145, at least one token generation information corresponding to the token agent program (for example, the number generated randomly in the token agent providing server 215) It is preferable that the client terminal 145 is provided with a corresponding secret key value and stored in a predetermined storage device. When the token agent program installed in the customer terminal 145 generates a predetermined token code The token agent program stores the token agent external storage (e.g., the memory portion of the customer terminal 145, And if the customer terminal 145 is a wireless terminal, extracts at least one or more pieces of token generation information from a memory included in the IC chip mounted or detached from the wireless terminal) It is desirable to generate the token code.

If the token agent program is stored in the token agent D / B 225 in the form of a source code to be compiled according to another embodiment of the present invention, (For example, a secret key value corresponding to a randomly generated number in the token agent providing server 215) corresponding to the token agent program at the time of providing the token agent program with the token agent program Into the token generation information variable included in the token agent source code, and generates the predetermined token agent program by compiling the token agent source code in which at least one token generation information is substituted into the predetermined token generation information variable as described above , The token agent program dynamically generated as described above, The token agent program is preferably provided to the customer terminal 145 via the network 140. When the token agent program installed in the customer terminal 145 generates a predetermined token code, It is preferable to generate a predetermined token code based on the token generation information assigned to the token agent program internal variable.

According to another embodiment of the present invention, even when at least one token generation information is assigned to the token agent program as described above, the dynamically generated token agent program is provided to the customer terminal 145 according to the intention of a person skilled in the art The at least one token generation information may be provided together with the customer terminal 145 and stored in a predetermined storage device, and the token agent program loaded on the customer terminal 145 may be provided with a predetermined token code It is possible to generate a predetermined token code using both the token generation information provided in the token agent program and the token generation information provided in the external storage device at the time of generating the token code, It does not.

The version of the token agent information includes version information of the token agent program for each platform to be provided to the customer terminal 145.

According to the embodiment of the present invention, even if the same kind of token agent program (for example, a token agent program running on the same platform) is used, the type and / or version of the applied token generation algorithm may be different depending on the version of the token agent program As a result, since the token code generated by the token agent program will also be different, the version information provides information for accurately determining the token agent loaded in the customer terminal 145. [ The token code authentication error that may occur in the process of authenticating the predetermined token code generated in the customer terminal 145 by the version information of the token code agent program can be minimized.

The token generation algorithm of the token agent information includes the hashing algorithm information applied to the token agent program and / or the detailed attribute information of the hashing algorithm. At present, the most commonly used hashing algorithms for generating tokens are MD4, MD5, and SHA. Hashing algorithms (for example, SHA1 hashing algorithms modified from SHA, etc.) .

The token generation information of the token agent information is information for generating a token code of a time synchronization type. Referring to FIG. 3, the token code generation information is information for generating the token code at a time (or time) And if the secret key value corresponding to the value randomly generated by the token agent providing server 215 and / or the private key value corresponding to the wireless terminal on which the token agent is mounted, if the customer terminal 145 is a wireless terminal, And / or the MIN / ESN added to the second generation information and / or the third generation information.

When the client terminal 9145 is a wireless terminal and the token agent uses the MIN / ESN of the wireless terminal as token generation information for generating a predetermined token code, the MIN / ESN can be used as the token generation information. To prevent the token agent from overflowing in the process of generating the token code by having the MIN / ESN have an excessively large value, the MIN / It is all possible to apply a predetermined hash function to the ESN to convert it into a value within a certain size, which is determined by the intent of the person skilled in the art and / or the computing power of the wireless platform.

Wherein the token update period of the token agent information is a time interval during which the predetermined token code generated by the token agent is volatilized and invalidated when the token generation algorithm complies with a time synchronization scheme, (Or time) information of the token code with the token code in the process of transmitting the token code to the financial transaction server 1000, it is difficult for the customer terminal 145 and the financial transaction server 1000, Is used to synchronize the token creation time (or time) information for a certain period of time. That is, the token code generated by the token agent is transmitted to the predetermined financial transaction server 1000 within the token update period, and a predetermined token authentication code corresponding to the token code is generated in the financial transaction server 1000 . That is, when a predetermined token code is generated in the token agent provided in the customer terminal 145 and a predetermined token authentication code is generated in the torque update cycle in the financial transaction server 1000, The validity of the validity is confirmed. Accordingly, the token update period may be determined by a time required to provide the token code generated by the customer terminal 145 to a predetermined settlement terminal, a time required to transmit the token code to the financial transaction server 1000, The time required to generate a predetermined token authentication code in the financial transaction server 1000, and the like.

According to another embodiment of the present invention, the token generation algorithm follows a time synchronization method and it is easy to transmit the time (or time) information at which the token code is generated in the token agent to the financial transaction server 1000 In this case, the token update period may be omitted or may be set at a very short time interval.

FIG. 4 is a diagram illustrating token agent information to be provided to a customer terminal 145 according to an embodiment of the present invention.

4 is a diagram illustrating a predetermined token agent for generating a challenge-response token code. The predetermined token agent is a predetermined token agent for each platform corresponding to the platform of the customer terminal 145 on which the token agent is to be installed. The token agent information includes a token agent program corresponding to each platform (or a source code to be compiled into a token agent program), a version of the token agent, Algorithm, and at least one token generation information. According to the intention of those skilled in the art, at least one information item may be further included, and the information item does not necessarily limit the present invention.

According to the present invention, the token agent program is installed in the customer terminal 145 owned by the customer to generate a predetermined token code, whereby the token agent program is installed in the customer terminal 145 platform And program code that can be driven and / or operated. For example, if the customer terminal 145 is a wireless terminal equipped with a wireless internet platform for interoperability (WIPI) platform, the token agent may include program codes operating on the WIPI basis, (For example, GVM / SK-VM / BREW, etc.) is installed, program code running on the platform is included. Alternatively, if the customer terminal 145 is a wired terminal equipped with a Microsoft Windows operating system, the token agent includes program code operating in the window operating system.

4, the token agent program is included in the token agent D / B 225 in the form of a precompiled program, and / or is included in the token agent D / B 225 in the form of source code to be compiled. Is stored in the memory.

According to an embodiment of the present invention, the token agent program is provided in the token agent D / B 225 in a precompiled program form, and the token agent program generates the token code from the predetermined server 115 The token agent providing server 215 provides the token agent program to the customer terminal 145 through the predetermined network 140 and mounts the token agent program on the predetermined network 140. [ At the time when the token agent program installed in the customer terminal 145 generates a predetermined token code, the token agent program is programmed to generate a predetermined token code based on a predetermined challenge value received from the server 115 It is desirable to generate the token code.

According to another embodiment of the present invention, when the token agent program is provided in the token agent D / B 225 in a precompiled program form, the token agent providing server 215 transmits a predetermined network 140 (For example, a number randomly generated by the token agent providing server 215) corresponding to the token agent program at the time of providing and loading the token agent program to the customer terminal 145 through the client terminal 145 It is preferable that the token agent program included in the customer terminal 145 generates a predetermined token code by providing the token agent program together with the customer terminal 145 and storing the same in a predetermined storage device At the time point, the token agent program sends a challenge value received from the server 115 to the token (For example, the memory portion of the customer terminal 145 and / or the memory provided in the IC chip mounted or detached from the wireless terminal if the customer terminal 145 is a wireless terminal) It is preferable to extract the generation information and generate a predetermined token code based on the token generation information.

When the token agent program is stored in the token agent D / B 225 in the form of a source code to be compiled according to another embodiment of the present invention, (For example, a secret key value corresponding to a randomly generated number in the token agent providing server 215) corresponding to the token agent program at the time of providing the token agent program with the token agent program Token generation information variable included in the token agent source code, compiles the token agent source code in which at least one or more pieces of token generation information are assigned to a predetermined token generation information variable, and generates a predetermined token agent program , And the dynamically generated token agent program is executed as described above It is preferable that the token agent program is provided to the customer terminal 145 via the network 140 of the token agent program 140. When the token agent program installed in the customer terminal 145 generates a predetermined token code, The server 115 generates a predetermined token code based on the challenge value received from the server 115 and the token generation information assigned to the token agent program internal variable.

According to another embodiment of the present invention, even when at least one token generation information is assigned to the token agent program as described above, the dynamically generated token agent program is provided to the customer terminal 145 according to the intention of a person skilled in the art The at least one token generation information may be provided together with the customer terminal 145 and stored in a predetermined storage device, and the token agent program loaded on the customer terminal 145 may be provided with a predetermined token code The token agent program uses the predetermined challenge value received from the server 115, the token generation information provided in the corresponding token agent program, the token generation information provided in the external storage device, and the like It is possible to generate a predetermined token code, whereby the present invention is limited It does not.

The version of the token agent information includes version information of the token agent program for each platform to be provided to the customer terminal 145.

According to the embodiment of the present invention, even if the same kind of token agent program (for example, a token agent program running on the same platform) is used, the type and / or version of the applied token generation algorithm may be different depending on the version of the token agent program As a result, since the token code generated by the token agent program will also be different, the version information provides information for accurately determining the token agent loaded in the customer terminal 145. [ The token code authentication error that may occur in the process of authenticating the predetermined token code generated in the customer terminal 145 by the version information of the token code agent program can be minimized.

The token generation algorithm of the token agent information includes the hashing algorithm information applied to the token agent program and / or the detailed attribute information of the hashing algorithm. At present, most commonly used hashing algorithms for generating tokens are MD4, MD5, SHA, and the like, and a hashing algorithm (for example, a SHA-1 hashing algorithm modified from SHA) .

Referring to FIG. 4, the token code generation information is information indicating that the token agent program included in the customer terminal 145 is a predetermined token A predetermined challenge value to be provided to the customer terminal 145 through the server 115 at the time of generating the token code is set as the first generation information, and the token agent providing server 215 randomly Or the MIN / ESN uniquely assigned to the wireless terminal on which the token agent is mounted if the customer terminal 145 is a wireless terminal, and / or third generation information It is preferable to use it as information.

According to an embodiment of the present invention, the challenge value may be a random value generated randomly by the server 115 at the time when the token agent program included in the customer terminal 145 generates a predetermined token code , The server 115 transmits a challenge value transmitted to the customer terminal 145 until the token code generated based on the challenge value is received from the customer terminal 145 (for example, a response corresponding to the challenge) Preferably, when the token code is received, a predetermined token authentication code is generated based on the challenge value to authenticate the received token code.

When the client terminal 145 is a wireless terminal and the token agent uses the MIN / ESN of the wireless terminal as token generation information for generating a predetermined token code, the MIN / ESN can be directly used as the token generation information. To prevent the token agent from overflowing in the process of generating the token code by having the MIN / ESN have an excessively large value, the MIN It is possible to apply a predetermined hash function to / ESN to convert the value into a value within a certain size, and this is determined according to the intention of the person skilled in the art and / or the computing ability of the wireless platform.

FIG. 5 illustrates an exemplary process of providing and installing a token agent program to a customer terminal 145 according to an embodiment of the present invention.

5 is a flowchart illustrating a process of installing a token agent program for a token code-based financial transaction in the wireless terminal, when the customer terminal 145 on which the token agent program is installed is the customer- will be. Those skilled in the art will be able to easily infer various methods of mounting a predetermined token agent in the wireless terminal in addition to the method shown below with reference to FIG. 5 , It should be noted that the present invention is not limited by the present method.

Referring to FIG. 5, predetermined client information (and / or wireless terminal information) to be loaded with a token agent program for a token code-based financial transaction is provided to the token agent providing server 215 (500).

According to an embodiment of the present invention, the process 500 may include receiving predetermined client information (and / or wireless data) to be loaded from a predetermined financial instrument issuing server 200 to the token agent providing server 215 And / or providing the customer information (and / or the wireless terminal information) by connecting the client to the token agent providing server 215, and / or providing the client information Do.

When the customer information (and / or wireless terminal information) is provided as described above, the token agent providing server 215 reads the customer information (and / or wireless terminal information) To be mounted (505).

According to an embodiment of the present invention, when a valid token agent program is installed in the wireless terminal, the token agent providing server 215 does not need to mount the token agent in the wireless terminal, It is preferable to provide and install the token agent when the token agent program is not installed.

If the wireless terminal needs to provide a predetermined token agent program 510, the token agent providing server 215 reads the customer information (and / or wireless terminal information) and transmits the token to the wireless terminal The agent program is confirmed (515).

According to an embodiment of the present invention, when the wireless terminal on which the token agent is to be installed accesses the mobile communication network, the token agent providing server 215 transmits a subscriber D / B (for example, Or visited location register) to identify the wireless terminal platform, thereby identifying the token agent program to be provided to the wireless terminal. Alternatively, in the process 500 of receiving the customer information (and / or the wireless terminal information) in order to process the present token agent providing process regardless of the mobile communication company according to the method, Model information of the mobile terminal).

When the token agent to be provided to the wireless terminal is identified as described above, the token agent providing server 215 extracts or compiles the confirmed token agent program from the token agent D / B 225 and dynamically generates the token agent program , And / or extracts or dynamically generates (e.g., generates a random value) certain token generation information that the token agent program is required to generate a predetermined token code from the token agent D / B 225 (520).

When the predetermined token agent program to be provided to the wireless terminal and the at least one token generation program corresponding to the token agent program are prepared as described above, the token agent providing server 215 transmits the token agent to the wireless terminal (525).

According to an embodiment of the present invention, the token agent providing server 215 may transmit a predetermined wireless message including a predetermined callback URL for providing the token agent to the wireless terminal (E.g., Service), Enhanced Message Service (EMS), Multimedia Messaging Service (MMS), and the like) and accesses the token agent providing server 215 through the callback portal at the wireless terminal, It is desirable to provide and install an agent.

According to another embodiment of the present invention, the token agent providing server 215 may transmit the token to the wireless network through another type of wireless software loading method that does not use the callback URL by the intention of a person skilled in the art and / It is possible to provide and install the token agent in the terminal, and thus the present invention is not limited thereto.

After the predetermined token agent program is loaded into the wireless terminal as described above, the wireless terminal determines to execute the diagnostic mode for the loaded token agent program. If the diagnostic mode for the token agent is executed (530) The wireless terminal executes the loaded token agent program to generate a predetermined diagnostic token code and transmits the generated diagnostic token code to the token agent providing server 215 (535). The token agent providing server 215 transmits the diagnostic token code to the diagnostic token code A corresponding diagnostic token authentication code is generated (540), and the validity of the token agent program loaded in the wireless terminal is confirmed by comparing the diagnostic token code with the diagnostic token authentication code (545).

According to an embodiment of the present invention, the token agent program installed in the wireless terminal generates a predetermined token code in a time synchronous manner. To this end, the token agent program extracts a current time from an internal timer provided in the wireless terminal Or time) information, and generates the diagnostic token code using the extracted time (or time) information as predetermined token generation information for generating a diagnostic token code. Of course, depending on the intentions and / or methods of those skilled in the art, the token agent program may include at least one token creation information (e.g., from a token agent providing server 215 in the process of providing the token agent program) The MIN / ESN information of the wireless terminal stored in the NAM (Number Assignment Module) of the wireless terminal, and the like), to generate the diagnostic token code .

The diagnostic token code generated as described above is provided to the token agent providing server 215 via a predetermined wired / wireless network, and the token agent providing server 215 receives the diagnostic token code at the time Time) information, and compares the received diagnostic token code with the generated diagnostic token authentication code to check the validity of the token agent program loaded on the wireless terminal.

According to another embodiment of the present invention, the token agent program installed in the wireless terminal generates a predetermined token code in a challenge-response manner. To this end, the token agent providing server 215 generates a predetermined challenge value And the token agent program generates the diagnostic token code using the provided challenge value as predetermined token generation information for generating the diagnostic token code. Of course, depending on the intentions and / or methods of those skilled in the art, the token agent program may include at least one token creation information (e.g., from a token agent providing server 215 in the process of providing the token agent program) A secret key including a random value transmitted together, and / or MIN / ESN information of the wireless terminal stored in the NAM of the wireless terminal) to generate the diagnostic token code.

The diagnostic token code generated as described above is provided to the token agent providing server 215 via a predetermined wired / wireless network, and the token agent providing server 215 transmits the diagnostic token code used for generating the diagnostic token code at the wireless terminal And compares the received diagnostic token code with the generated diagnostic token authentication code to verify the validity of the token agent program loaded on the wireless terminal.

If the token diagnosis token code and the diagnostic token authentication code do not match (550), the token agent providing server 215 requests the wireless terminal to retransmit the token diagnosis token code (555) 545) to verify the validity of the token agent.

On the other hand, if the validity of the token agent is authenticated (550) because the token diagnosis token code matches the diagnostic token authentication code, the information storage server 235 stores the financial transaction means information provided from the financial instrument issuing server 200 The token agent information is linked with the customer information (and / or the wireless terminal information) and stored in a predetermined storage medium (560).

FIG. 6 is a flowchart illustrating an exemplary process of providing and installing a token agent program to a customer terminal 145 according to an embodiment of the present invention.

6 is a flowchart illustrating a process of loading a token agent program for a token code-based financial transaction to the wired terminal in a case where the customer terminal 145 on which the token agent program is installed is the customer's wired terminal will be. Those skilled in the art will be able to easily infer various methods of mounting a predetermined token agent on the wired terminal in addition to the method shown below with reference to FIG. 6 , It should be noted that the present invention is not limited by the present method.

Referring to FIG. 6, a customer connects to the token agent providing server through a predetermined wired terminal (600) and provides predetermined customer information (and / or wired terminal information) to the token agent providing server, (605).

According to another embodiment of the present invention, when requesting the wired terminal to load the token agent into the customer-owned wireless terminal, the wired terminal provides the customer-owned wireless terminal information in addition to the customer information, The process of loading the token agent to the customer-owned wireless terminal based on the terminal information is as shown in FIG.

When the token agent loading request is requested, the token agent providing server reads the client information (and / or the wired terminal information) and transmits a predetermined token agent to the wired terminal from the token agent D / (610).

According to an embodiment of the present invention, in the process of confirming the token agent, the token agent providing server accesses the financial instrument issuing server based on the customer information to check whether the customer is provided with a valid financial transaction means As shown in Fig.

When the token agent to be provided to the wired terminal is confirmed as described above, the token agent providing server 215 extracts or compiles the confirmed token agent program from the token agent D / B 225 and dynamically generates the token agent program , And / or extracts or dynamically generates (e.g., generates a random value) certain token generation information that the token agent program is required to generate a predetermined token code from the token agent D / B 225 (615).

When the predetermined token agent program to be provided to the wired terminal and provided with at least one token generation information corresponding to the token agent program is prepared, the token agent providing server 215 transmits the token agent to the wired terminal (620).

After the predetermined token agent program is loaded into the wired terminal as described above, the wired terminal determines execution of the diagnostic mode for the loaded token agent program. If the diagnostic mode for the token agent is executed (625) The wired terminal executes the loaded token agent program to generate a predetermined diagnostic token code, and transmits the generated diagnostic token code to the token agent providing server 215 (630). The token agent providing server 215 transmits the diagnostic token code to the diagnostic token code A corresponding predetermined diagnostic token authentication code is generated (635), and the validity of the token agent program installed in the wired terminal is confirmed by comparing the diagnostic token code with the diagnostic token authentication code (640).

According to an embodiment of the present invention, the token agent program installed in the wired terminal generates a predetermined token code in a time synchronous manner. To this end, the token agent program extracts a current time from the internal timer provided in the wired terminal Or time) information, and generates the diagnostic token code using the extracted time (or time) information as predetermined token generation information for generating a diagnostic token code. The token agent program may further include at least one token generation information from a storage device provided in the wired terminal according to an intention and / or method of a person skilled in the art to generate the diagnostic token code.

The diagnostic token code generated as described above is provided to the token agent providing server 215 via a predetermined wired / wireless network, and the token agent providing server 215 transmits the diagnostic token code to the wired terminal at a time Time) information, and compares the received diagnostic token code with the generated diagnostic token authentication code, thereby verifying the validity of the token agent program loaded on the wired terminal.

According to another embodiment of the present invention, the token agent program installed in the wired terminal generates a predetermined token code in a challenge-response manner. To this end, the token agent providing server 215 generates a predetermined challenge value And the token agent program generates the diagnostic token code using the provided challenge value as predetermined token generation information for generating the diagnostic token code. The token agent program may further include at least one token generation information from a storage device provided in the wired terminal according to an intention and / or method of a person skilled in the art to generate the diagnostic token code.

The diagnostic token code generated as described above is provided to the token agent providing server 215 via a predetermined wired / wireless network, and the token agent providing server 215 transmits the diagnostic token code used for generating the diagnostic token code at the wired terminal And checks the validity of the token agent program loaded in the wired terminal by comparing the received diagnostic token code with the generated diagnostic token authentication code.

If the token diagnosis token code and the diagnostic token authentication code do not match (645), the token agent providing server 215 requests retransmission of the token diagnosis token code to the wired terminal (650) 640) to verify the validity of the token agent.

On the other hand, if the validity of the token agent is authenticated (650) because the token diagnosis token code matches the diagnostic token authentication code (650), the information storage server (235) The financial transaction means information is extracted (655), the financial transaction means information of the customer, the token agent information and the customer information (and / or the customer-owned wireless terminal information) are linked and processed and stored in a predetermined storage medium (660).

FIGS. 7A and 7B illustrate information configuration of token agent information stored in the storage medium 110 according to an embodiment of the present invention.

In more detail, FIGS. 7a and 7b illustrate a case where the token agent is installed in the customer wireless terminal, and the token agent information corresponding to the token agent program loaded on the financial transaction customer wireless terminal for the token code- FIG. 7A illustrates a preferred information structure of the token agent information corresponding to the time-synchronized token agent program, and FIG. 7B illustrates a preferred information structure of the challenge-response token agent program corresponding to the challenge- The preferred information configuration of the token agent information is illustrated.

According to an embodiment of the present invention, the token agent information is preferably associated with the financial transaction wireless terminal information and / or the financial transaction means information on which the token agent program is installed, May be further added to at least one information item in accordance with the intention of a person skilled in the art practicing the present invention, and thus the present invention is not limited thereto.

Referring to FIGS. 7A and 7B, the token agent information includes information for identifying which kind of token agent is loaded on the customer wireless terminal, and generating a token authentication code for authenticating the token code generated in the token agent The token agent information includes platform information of a wireless terminal equipped with the token agent program, a token agent version mounted on the platform, a token generation algorithm, and at least one token generation information. .

Referring to FIG. 7A according to an embodiment of the present invention, the time synchronization type token agent information may further include a predetermined token update period in which time synchronization is maintained.

Referring to FIG. 7B according to another embodiment of the present invention, a challenge value (for example, the first generation information in FIG. 7B) of the token generation information included in the challenge- A challenge value to be transmitted to the financial transaction customer wireless terminal is generated, and when the challenge value to be transmitted to the financial transaction customer wireless terminal is generated, the generated challenge value is substituted, and the token agent It is preferable to maintain the assigned challenge value until a predetermined token code (response) corresponding to the challenge value is received from the program, and after the authentication procedure for the received token code is performed through the challenge value (E.g., a token authentication code corresponding to the received token code is generated via the held challenge value ), The first generation information of the challenge value (e.g., a view 7b of the token generation information), it is preferable to again include a null value.

Wherein the wireless terminal information includes at least one of a telephone number (MIN) and a serial number (ESN) of a financial transaction customer's wireless terminal equipped with the token agent, And may further include platform information, communication company information, terminal model information, and the like.

According to the method of the present invention, it is possible that at least one information item is added to the wireless terminal information according to the intention of a person skilled in the art. For example, the wireless terminal information may further include IC chip specific information (ICCHIP) (not shown) on an IC chip mounted or detached from the wireless terminal, and / or a SIM (Subscriber Identity Module ), A universal identification module (UIM), or a universal subscriber identity module (USIM), it is possible to further include the SIM information, the UIM information, or the USIM information.

8 is a diagram illustrating the configuration of information of customer information stored in the storage medium 110 according to an embodiment of the present invention.

More specifically, FIG. 8 illustrates a preferred information configuration of certain customer information for a financial transaction customer associated with and / or associated with the financial transaction means information for a token code based financial transaction, The information stored in the storage medium 110 may be further added to at least one information item according to the intention of a person skilled in the art to which the present invention is applied, and thus the present invention is not limited thereto.

Referring to FIG. 8, the customer information includes customer personal information including at least one name, resident registration number, and address of the financial transaction customer, a token agent relationship that sets a relationship between the financial transaction customer and the token agent, Information is included.

Referring to FIG. 8, which is a preferred embodiment of the present invention, the token agent relationship information preferably includes the financial transaction customer owned wireless terminal information, and thereby, the token agent program A token-code-based financial transaction is performed.

FIGS. 9A and 9B are diagrams illustrating information configuration of financial transaction means information stored in the storage medium 110 according to an embodiment of the present invention.

In more detail, FIG. 9a illustrates a flow diagram of a method for associating with financial transaction means owned customer information (and / or customer wireless terminal information) and / or associated with the financial transaction means and / And more specifically includes at least one or more pieces of customer financial account information corresponding to the financial transaction means issued by the predetermined bank to the customer And the like.

The financial transaction means may be a predetermined card medium (for example, a magnetic stripe (MS) card and / or an integrated circuit (IC) card) (For example, an MS card and / or an IC card and / or an IC card) to the financial transaction means information when it is associated with a wireless chip medium (for example, an IC chip mounted or detached from the customer wireless terminal) IC chip) and / or media storage information stored in the card medium and / or the wireless chip medium (e.g., information stored in Track-II if the medium is an MS card, etc.) The present invention is not limited to the items constituting the financial transaction means information.

Referring to FIG. 9A, the financial transaction means information stored in the storage medium 110 includes a type of a financial instrument corresponding to the financial transaction means, and a type of financial transaction means for issuing the financial transaction means (or a passbook corresponding to the financial transaction means) And financial information of the financial transaction corresponding to the financial transaction means. The financial transaction information includes financial information of the financial transaction means.

According to an embodiment of the present invention, in the financial account information, the financial account information corresponding to the financial transaction means includes a predetermined account number for the financial transaction means, an opening date of the passbook corresponding to the financial transaction means, (Not shown) of the passbook corresponding to the financial transaction means and a settlement date (for example, a settlement date) of the bank account corresponding to the financial transaction means, , Second Friday of each month, first, fifth, eighth, and so on) information (not shown).

In more detail, FIG. 9b is a flow chart of a financial transaction associated with financial transaction means owned customer information (and / or customer wireless terminal information) for token code based payment processing and / or associated with token agent information mounted on the customer wireless terminal. And more specifically, the payment means issued to the customer by a predetermined payment means issuing agency includes an MS (at least one of which includes at least one track-II and / or track-III data) Magnetic Stripe) card, the financial transaction means information included in the MS card is illustrated.

As a person skilled in the art, referring to FIG. 9B, in addition to financial transaction means information included in the MS card, an IC (Integrated Circuit) card and / or an IC card (For example, the information included in the track II of the MS card is also recorded in the payment means provided in the IC card and / or the IC chip) The present invention is not limited to the financial transaction means information configuration item. For example, if financial transaction means information stored in the IC card and / or the IC chip having a predetermined authorized certificate is stored in the storage medium 110, information corresponding to the authorized certificate (for example, an authorized certificate An issuing authority, a copy of an authorized certificate, etc.).

9B, the financial transaction means information stored in the storage medium 110 includes credit card payment means, debit card payment means, cash card payment means, check card payment means, prepaid card payment means, Financial transaction means information including at least one financial account settlement means and an electronic money settlement means; a settlement means issuing organization that has issued the settlement means; (For example, an English name of a customer) that has been issued with a payment means of the payment means, and further includes information stored in the track II of the payment means and / or information stored in the track III. .

According to the method of the present invention, the information stored in the track-II of the payment means includes at least one 16-digit card number, the issuing date of the payment means, the valid period of the payment means, and the CVC number The information stored in the Track-III of the payment means may further include at least one affiliate information and / or supplementary service information associated with the payment means.

In the following description, the server 115, the information transmitting means 125, the information storing means 130 and / or the financial transaction server 1000 providing the token code-based financial transaction according to the present invention are defined as the invention Will be described in detail. For convenience, the customer information (and / or the wireless terminal information and / or the wire terminal information) is referred to as customer information, and the customer information includes basically customer terminal information on which the token agent is mounted .

FIG. 10 is a block diagram of a financial transaction processing system using a wireless terminal number according to an embodiment of the present invention.

In more detail, FIG. 10 shows a token agent program in the customer terminal 145 generating a predetermined token code according to a token code generation method including at least one token generation information and a predetermined token generation algorithm, And provides a token code to a predetermined financial transaction server 1000 through a predetermined customer terminal 145. [

Referring to FIG. 10, the financial transaction server 1000 includes an interface unit 1005 for connecting a communication channel for financial transactions with at least one customer terminal 145 for a financial transaction based on a token code, Receiving financial transaction information for financial transactions based on the token code, financial transaction information data including at least one or more tokens codes of the financial transaction means owned customer information from the customer terminal (145) An information receiving unit 1010, an information checking unit 1015 for reading the received financial transaction information data and confirming the financial transaction means owned customer information and / or financial transaction means information, An extraction unit 1020 for extracting token agent information associated with the customer information from the storage medium 110, On the other hand, the token agent program included in the customer terminal 145 generates a predetermined token authentication code in the same condition (for example, the same token generation information and the token generation algorithm) that generated the token code, The authentication unit 1025 compares the generated token authentication code with the token code received from the authentication unit 1025 and authenticates the validity of the received token code.

In addition, when the validity of the received token code is authenticated by the authentication unit 1025, the financial transaction server 1000 transmits the financial transaction information corresponding to the financial transaction information included in the financial transaction information data, And a financial transaction unit (1030) for performing a financial transaction.

In addition, when the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 may associate at least one financial transaction transaction history with the financial transaction means information and / And a storage unit (1035) for storing the data in the storage medium (135).

When the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 transmits the transaction details to the customer terminal 145 through the interface unit 1005 And an information transferring unit 1040. [

The interface unit 1005 connects the at least one customer terminal 145 with a communication channel for financial transactions for financial transactions based on the token code through a predetermined financial transaction network 140 , The financial transaction network 140 may include at least one wired network 140 (e.g., TCP / IP based Internet) and / or a wired / wireless network 140 (e.g., CDMA Based mobile communication network) and / or a value added communication network and / or a financial common network.

The information receiving unit 1010 includes at least one or more than one of financial transaction information transmitted from the customer terminal 145 through the interface unit 1005, financial transaction means own customer information and / or financial transaction means information, And receives financial transaction information data.

According to an embodiment of the present invention, the customer information and / or the financial transaction means information and the token code of the financial transaction means are included in the financial transaction information data including the financial transaction information, .

According to another embodiment of the present invention, the financial transaction means-owned customer information and / or financial transaction means information and the token code are transmitted from the customer terminal 145 to the financial transaction information data including the financial transaction information, (Or data) for transmission of a separate token code before being received by the receiving unit 1010.

According to another embodiment of the present invention, the financial transaction means-owned customer information and / or the financial transaction means information and the token code are transmitted from the customer terminal 145 to the financial transaction information data, It may be received by the information receiving unit 1010 and then received via a special message (or data) for transmitting the token code.

According to another embodiment of the present invention, when the token agent is installed in the customer-owned wireless terminal, the information receiver can extract the wireless terminal information as caller information in the process of receiving the financial transaction information data.

The information verification unit 1015 reads out the financial transaction information data received by the information receiving unit 1010 to thereby identify the customer information and / or financial transaction means information owned by the financial transaction means included in the financial transaction information data (Or data) for transmitting the token code is received when the customer information and / or the financial transaction means information owned by the financial transaction means are received through a special message (or data) for transmitting the token code, It is preferable that the customer information and / or the financial transaction means information owned by the financial transaction means are identified and extracted.

The extracting unit 1020 extracts, from the storage medium 110, the customer information and / or financial transaction means information owned by the financial transaction means using the extracted customer information and / or financial transaction means information Extracts the token agent information, and provides the extracted token authentication information to the authentication unit 1025.

Based on the extracted token agent information, the authentication unit 1025 generates the same token generation information used to generate the token code in the token agent program included in the customer terminal 145 and a predetermined token authentication And authenticates the validity of the received token code by comparing the token code received from the customer terminal 145 with the generated token authentication code. The authentication unit 1025 Authentication of the received token code is authenticated includes ensuring confidentiality, authentication, integrity, and nonrepudiation of the financial transaction based on the token code .

When the validity of the token code is authenticated by the authentication unit 1025, the financial transaction unit 1030 performs a financial transaction corresponding to the financial transaction information included in the financial transaction information data .

According to an embodiment of the present invention, the financial transaction unit 1030 performs a financial transaction corresponding to the financial transaction information in cooperation with a predetermined financial system based on the financial transaction information.

According to an embodiment of the present invention, the financial transaction unit 1030 preferably performs a financial transaction corresponding to the financial transaction information, and generates a predetermined financial transaction transaction record corresponding to the payment transaction / financial transaction And the storage unit 1035 stores the generated at least one financial transaction processing history in a predetermined storage medium 135 in association with the financial transaction means information and / or the customer information, The transmission unit 1040 transmits the generated financial transaction processing details to the customer terminal 145 through the interface unit 1005. [

According to another embodiment of the present invention, when the token code received from the customer terminal 145 is generated in a challenge-response manner, the authentication unit 1025 has a function of dynamically generating an arbitrary challenge value And the information transmitting unit 1040 may transmit the generated challenge value to the customer terminal 145.

Hereinafter, technical features of the present invention will be described with reference to an embodiment in which the token agent is installed in a wireless terminal. However, it should be noted that the technical features of the present invention are by no means limited to the installation of a token agent in a customer wireless terminal.

FIG. 11 is a diagram illustrating a configuration of a wireless terminal equipped with a token agent according to an embodiment of the present invention.

In more detail, FIG. 11 illustrates a case where the token agent is installed in a customer wireless terminal, the function configuration of the customer terminal is a wireless terminal that connects to a mobile communication network based on CDMA (Code Division Multiple Access) A terminal for generating a token code for the token code-based financial transaction in addition to the mobile communication terminal may be provided in the mobile terminal of the present invention, For example, a wireless data communication terminal, or a portable Internet terminal). As a result, the wireless terminal function configuration in which the token agent program is installed is not limited to that illustrated in FIG. 11, and various types of wireless terminal functions may be used according to the wireless terminal type and / It is possible to carry out the modification.

A wireless terminal that provides mobile communication services in terms of hardware includes an outer body, a speaker, a microphone, a keypad, a liquid crystal display (LCD), an antenna, and a battery 1125. Internally, (For example, an MSM series modem chip of Qualcomm of the United States) that incorporates functions of a code division multiple access (CDMA) modem, a central processing unit (CPU) / micro processing unit (MPU) A power amplifier that amplifies the transmit signal, a high power amplifier (HPA), an isolator that prevents reverse transmission of high-power transmit signals, and a despreader An RF / IF SAW filter for removing out-of-band spurious signals, a frequency upstream circuit for the transmission path, a frequency downconversion circuit for the reception path, A UHF frequency synthesizer used as a local signal of a frequency up / down conversion, and a codec chip for converting an analog voice signal into a digital signal. Is gradually integrated into the modem chip, and various functions for various multimedia services and / or additional services are integrated in the modem chip in addition to core components for the mobile communication service.

Referring to FIG. 11, a wireless terminal for generating a predetermined token code for the token code-based financial transaction includes a control unit 1105, a screen output unit 1110, a sound processing unit 1115, a key input unit 1120, An IC chip 1150 having a wireless processing unit 1130, a short range communication unit 1135, a memory unit 1155 and a battery 1125 for power supply and mounted or detached from the wireless terminal according to an embodiment, And an IC chip reader 1145 for reading / writing predetermined information or data to / from the IC chip 1150.

The control unit 1105 includes a processor including a CPU / MPU provided in the modem chip and an execution memory, and includes a predetermined program routine for providing a function specific to the wireless terminal from a predetermined memory device, And a bus (BUS) for inputting and / or outputting program data and / or a predetermined electronic circuit (or an integrated circuit) provided for the bus (BUS) from the memory device and / The program routine and / or program data that are loaded into the processor and processed through the processor to perform a specific function (thus, the present invention provides a generic term for the token code based financial transaction, For convenience, the control unit 1105 may include a predetermined token agent program routine to be recorded, The control unit 1105 realizes various functions to be implemented in the wireless terminal and controls and controls the overall operation of the wireless terminal in order to realize the functions as described above. And the like. In particular, when power is input to the wireless terminal to perform the function of the controller 1105 for controlling and managing the overall operation of the wireless terminal, the operating system routines, system management routines, and / System variables are loaded into the execution memory and processed by the processor to perform variables for providing an operating system, a system management program, and / or a mobile communication service.

The screen output unit 1110 is a LCD (Liquid Crystal Display) driver for outputting a screen image by the control unit 1105 (e.g., a program routine for outputting predetermined information or data to the LCD) (E.g., text content, image content, and / or multimedia content) extracted and / or generated in the course of performing a predetermined function provided in the wireless terminal, (LCD), and the screen output unit 1110 is connected to a screen output device (LCD) to perform the token code based financial transaction It is preferable to perform a function of outputting predetermined information necessary for generating the token code.

The sound processing unit 1115 encodes a predetermined sound signal input from a microphone provided in the wireless terminal and provides the encoded sound signal to a control unit 1105 or a predetermined sound The sound processor 1115 is provided with a vocoder and a codec for decoding the signal and outputting it through a speaker. Performs sound input means provided in the wireless terminal through the sound processing unit 1115 and a microphone or performs sound input means provided in the wireless terminal through the sound processing unit 1115 and a speaker .

The key input unit 1120 may include at least one key button having a predetermined number key and / or a character key and / or a function key, (Or signal) input from a keypad and detects a predetermined key input from a predetermined key button provided on the keypad in a specific input mode and / or operation mode of the wireless terminal controlled by the control unit 1105 (E.g., MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, and MH_KEY_RELEASEEVENT) corresponding to the input information (or signal), and provides the generated key event to the control unit 1105 The control unit 1105 reads predetermined key data corresponding to the key event in a current input mode and / or an operation mode of the wireless terminal (for example, Reading key data from the key table storing (managing) at least one key data corresponding to a specific key event in the terminal input mode and / or the operation mode), and / And reads a command for executing a predetermined function. The keypad having the key input unit 1120 and at least one or more key buttons performs a function of a key input unit included in the wireless terminal.

The radio processing unit 1130 may perform location registration and / or slot mode and / or power control and / or power control in cooperation with the controller 1105 (e.g., a program routine for providing a mobile communication service) Or a hand-off and / or a call processing procedure. In the process of providing the mobile communication service, a base station corresponding to an end of the mobile communication network, (For example, antenna control, modulation, synthesis, amplification, and / or filtering of a radio frequency signal) for performing transmission and reception of a radio frequency signal. In particular, the radio processing unit 1130 processes information or signals transmitted from the wireless terminal to the base station in order to provide the mobile communication service, or transmits predetermined information or signals from the CDMA stack received from the base station And provides the function of reading.

According to an embodiment of the present invention, the wireless terminal connects a predetermined wireless section with a base station on a predetermined mobile communication network through the wireless processor 1130, and transmits the wireless section to a mobile communication network Or a predetermined communication channel with a predetermined server (or device) provided on a predetermined communication network interlocked with the mobile communication network.

According to an embodiment of the present invention, the radio processor 1130 connects a predetermined communication channel with the token agent providing server 215 to load a predetermined token agent program in the radio terminal, and the controller 1105 To receive the predetermined token agent program from the token agent providing server 215. [

According to another embodiment of the present invention, when the token agent program generates a predetermined token code for a predetermined token code-based financial transaction in a challenge-response manner, the radio processing unit 1130 transmits the token code to the control unit 1105 And may receive a predetermined challenge value for generating the token code from the financial transaction server 1000. In this case,

According to another embodiment of the present invention, in providing the token code generated by the token agent program to the financial transaction server 1000, the token code is transmitted from the wireless terminal to a predetermined wired / wireless network 140 (For example, transmitting a part of the generated token code to the financial transaction server 1000 or providing the generated token code to the financial transaction server 1000) The radio processing unit 1130 connects the predetermined transaction channel with the financial transaction server 1000 in cooperation with the control unit 1105 and transmits the generated token transaction code to the financial transaction server 1000, .

The short-range communication unit 1135 is connected to the local area communication unit 1135 through an infrared ray communication and / or a radio frequency (RF) communication and / or a Bluetooth and / or a wireless LAN and / or a Wi- (Or device) through at least one or more short-range wireless communication means including an Ultra Wide Band (UWB), and is characterized in that the infrared communication, the RF communication, And a predetermined short range wireless communication module for short range wireless communication including Bluetooth, wireless LAN, Wi-Fi, ultra-wideband communication, and comprises a communication protocol and / or driver for the short range wireless communication in software.

According to an embodiment of the present invention, the wireless terminal connects a wireless section connecting a predetermined short range wireless communication session with a predetermined short range wireless communication section 1140 through the short range communication section 1135, and the short range wireless communication section 1140 It is preferable to connect a predetermined communication channel with a predetermined server (or device) provided on a predetermined communication network through a wired section including a predetermined network 140 connected thereto.

According to an embodiment of the present invention, the local area communication unit 1135 communicates with the token agent providing server 215 via the local area network 1140 in order to load a predetermined token agent program in the wireless terminal, And can receive a predetermined token agent program from the token agent providing server 215 in conjunction with the control unit 1105. [

According to another embodiment of the present invention, when the token agent program generates a predetermined token code for a predetermined token code-based financial transaction in a challenge-response manner, the short-range communication unit 1135 transmits the token code to the controller 1105 And may receive a predetermined challenge value for generating the token code from the financial transaction server 1000 by connecting the predetermined communication channel with the financial transaction server 1000 through the short- have.

According to another embodiment of the present invention, the short range device 1140 may be a customer terminal 145 that processes the token code based financial transaction, and / or a short range communication module included in the customer terminal 145 The local area communication unit 1135 connects the local area communication channel with the local area communication unit 1140 in cooperation with the control unit 1105 and transmits the local area communication channel to the local area communication unit 1140 via the local area communication channel, It is possible to provide the generated token code in the program.

The memory unit 1155 may store predetermined program routines (or codes) and / or program data (e.g., information that is input / output when an operation by a program routine (or code) is performed) (Read only memory) corresponding to a read-only memory, a flash memory (FM) capable of reading / writing, and an EEPROM (electrically erasable and programmable read only memory) Memory) and the like. In general, the ROM stores system information that should not be deleted, and the flash memory stores an operating system routine, a call processing program routine, and / or an application program routine provided through the wireless terminal, information or data for the program, The EEPROM stores terminal registration related parameters and at least one information and / or data extracted and / or generated during execution of a telephone number (e.g., address book) or an application provided in the wireless terminal.

According to an embodiment of the present invention, the token generation information is read out from an internal function configuration provided in the wireless terminal (for example, when the token agent program generates a token code in a time synchronous manner, (Or time) information from the memory 1155 as token generation information), and / or stored in the token generation information area of the memory 1155, and / or included within the token agent program, The unit 1155 may store at least one token generation information defined to be stored in a storage device provided in the wireless terminal. For example, the memory unit 1155 may store MIN / ESN information for the wireless terminal in a Number Assignment Module (NAM) area and / or store at least one MIN / ESN information uniquely assigned to the token agent program in a predetermined token generation information area. The above secret key value can be stored.

The IC chip reader unit 1145 reads the IC chip related function configuration (for example, an IC chip agent included in the wireless terminal) included in the wireless terminal through an IC chip standard including ISO / IEC 7816 and / or ISO / IEC 14443 Program) and the IC chip 1150 mounted on or removed from the wireless terminal. For example, the IC chip reader unit 1145 provides information and / or data exchange between the IC chip agent program and the IC chip 1150 through an APDU (Application Protocol Data Unit).

Referring to a specification including ISO / IEC 7816 and / or ISO / IEC 14443, an IC chip 1150 mounted on or removed from a customer wireless terminal receives power supply VCC, a reset signal RST, a clock signal Output interface (for example, command or data exchange) with the IC chip reader unit 1145 via a contact point such as a power supply line CLK, a ground GND, a programming power supply VPP, and / or an input / And a processor unit including at least one computing element including a central processing unit (CPU), a micro processing unit (MPU), and / or a coprocessor, a ROM (Read Only Memory), a RAM (For example, ROM) among the memory devices, and a memory unit including at least one memory device including a memory, an EEPROM (Electrically Erasable and Programmable Read Only Memory), and an FM (Flash Memory) The IC card When a predetermined power is supplied from the IC chip reader unit 1145 through a power supply (VCC) contact point of the input / output interface, a chip operating system (COS) (For example, 3.57 MHz or 4.9 MHz) of the clock signal (CLK) contact point and controls the overall operation of the IC chip 1150 by loading a COS stored in a predetermined execution memory Data unit) between the IC chip 1150 and the IC chip reader unit 1145. [0051]

According to another embodiment of the present invention, the token agent program may be provided in the IC chip 1150 (for example, the token agent program may be recorded in a recording medium provided in the IC chip 1150) The present invention is not limited thereto.

According to another embodiment of the present invention, when the token agent program is provided in the wireless terminal platform and / or is provided in the IC chip 1150, some of the token generation information is transmitted to the IC chip 1150 The present invention is not limited thereto.

Referring to FIG. 11, a predetermined token agent is installed in the wireless terminal, and the token agent is received in connection with the token agent providing server 215 on the wired / wireless network 140, and / or received by the token agent And a communication processing unit 1180 for generating a predetermined token code or performing a communication function required for processing a predetermined financial transaction with the token code.

Referring to FIG. 11 according to a preferred embodiment of the present invention, the token agent installed in the wireless terminal includes an input unit 1160 for receiving at least one piece of information (or data) for generating the token code, A generation unit 1170 for generating a predetermined token code by applying the read token generation information to a predetermined token generation algorithm, And an output unit 1175 for outputting the generated token code to the wireless terminal screen.

The input unit 1160 receives at least one piece of information (or data) for generating the token code in cooperation with the key input unit. The input information (or data) generates a predetermined token code And / or a predetermined PIN (Personal Identification Number) information for internal authentication of the generated token code, and / or the generated token code to the wireless terminal screen, And a token code output command to be output to the outside of the wireless terminal through the wireless processing unit 1130 and / or the local communication unit 1135 in cooperation with the processing unit 1180. [

According to an embodiment of the present invention, the generation unit 1170, which is input from the key input unit through the input unit 1160, can be used as predetermined token generation information for generating a predetermined token code, And / or the token code generated by the generator 1170 is output (e.g., output to the wireless terminal screen and / or output to the outside of the wireless terminal).

According to another embodiment of the present invention, when the token agent is provided in the IC chip 1150 mounted on or removed from the wireless terminal, the PIN information may include a user authentication procedure defined in the IC chip 1150 And the like.

The reading unit 1165 reads out the token agent from the wireless terminal internal resource and / or the token agent internal code and / or the memory unit provided in the memory unit 1155 and / or the IC chip 1150, The at least one token code generation information defined to be used for generating the token code of the token code generation unit.

According to the method of the present invention, the reading unit 1165 preferably reads the time (or time) information required for generating the token code from the wireless terminal internal resource (for example, a timer resource in the wireless terminal) And / or a predetermined secret key value set for generation of the token code from the memory unit included in the memory unit 1155 and / or the IC chip 1150, and / And / or it is preferable to read a predetermined MIN / ESN from the NAM area of the memory unit 1155. [

In the case of token generation information defined to apply a predetermined hash function among the read token generation information, the reading unit 1165 applies a predetermined hash function to the read token generation information to generate corresponding token generation information It is preferable to further include a function of converting (or limiting) the value to a value within a predetermined size.

According to another embodiment of the present invention, the reading unit 1165 can generate a real-time (for example, randomly dynamic in the financial transaction server 1000) from the financial transaction server 1000 in cooperation with the communication processing unit 1180, As the predetermined token generation information used to generate the predetermined token code in the generating unit 1170. [

The generating unit 1170 generates a predetermined token code that can not be predicted according to a predetermined token generation algorithm based on at least one token generation information read by the reading unit 1165, It is preferable to include a data block having a predetermined length.

The output unit 1175 outputs the token code generated by the generation unit 1170 to the wireless terminal screen. The wireless processing unit 1130 and / or the local communication unit 1135 may be configured to transmit the token code, (Or all) of the generated token code to the financial transaction server 1000 via the local communication unit 1135 and / or the customer terminal 145 ).

The communication processor 1180 is connected to the token agent providing server 215 on the wired / wireless network 140 and receives a predetermined token agent to be mounted on the wireless terminal. It is preferable that the wireless terminal further includes a function configuration for mounting (or installing) the wireless terminal in the customer's wireless terminal.

When the token agent receives a predetermined challenge value from the financial transaction server 1000 in the process of generating the predetermined token code, the communication processing unit 1180 transmits the challenge code to the radio processing unit 1130 and / (Or a communication channel connection process can be omitted when receiving the challenge value via a wireless message) to the financial transaction server 1000 in cooperation with the financial transaction server 1135, It is desirable to receive a predetermined challenge value dynamically generated in the server 1000. [

In addition, when the token code and / or a part of the token code generated by the token agent is transmitted to the financial transaction server 1000 through the radio processing unit 1130 and / or the local communication unit 1135, The processing unit 1180 connects the predetermined communication channel to the financial transaction server 1000 in cooperation with the radio processing unit 1130 and / or the local communication unit 1135, and transmits the predetermined communication channel to the financial transaction server 1000 It is preferable to transmit the generated token code and / or a part of the token code.

Further, when providing the token code and / or a part of the token code generated by the token agent to the customer terminal 145 that processes the token code based financial transaction through the local communication unit 1135, The processing unit 1180 connects the predetermined local communication channel with the customer terminal 145 in cooperation with the local communication unit 1135 and sends the generated token code and / Or transmit a portion of the token code.

According to an embodiment of the present invention, the wireless terminal may perform the function of the customer terminal 145 that processes the token code based financial transaction, and the wireless terminal processes the token code based financial transaction And a risk finance processing unit 1185, as shown in FIG.

According to an embodiment of the present invention, the financial processing unit is a browser for providing a WAP wireless banking service and / or a banking program for providing an IC chip wireless banking service desirable.

FIG. 12 is a diagram illustrating a token code structure according to an embodiment of the present invention.

More specifically, FIG. 12 illustrates a preferred embodiment of a token code generated by the token agent program, wherein each information location forming the token code can be modified by one skilled in the art. Those skilled in the art will readily be able to deduce a token code structure containing more information with reference to FIG. 12, and the present invention is not limited thereto.

Referring to FIG. 12, a token code generated by the token agent program is generated through a hash algorithm for generating a predetermined token code based on at least one token generation information in the token agent as shown in FIG. 12 (a) And the hashing code may further include at least one or more pieces of information according to an intention of a person skilled in the art and / or an information subject intuitively authenticated through the token code.

Referring to FIG. 12 (b), the token code is transmitted to a predetermined hash code generated through a hash algorithm for generating a predetermined hash token code defined in the token agent program, PIN information, or further includes predetermined user input information input by the user (customer) as shown in (D) of FIG. 12, (For example, reducing the length of the user input information to a predetermined length) by applying a predetermined hash function to the input information, and thus the present invention is not limited thereto.

Referring to (e) of FIG. 12, the token code further includes the PIN information and the user input information in a predetermined hashing code generated through a hash algorithm for generating a hash token code defined in the token agent program Alternatively, as shown in (b) of FIG. 12, the hashing code may further include the PIN information and the hashed input information in which a predetermined hash function is applied to the user input information, It is not limited.

13a and 13b are diagrams illustrating a token code operation process according to an embodiment of the present invention.

13A and 13B illustrate a case where a predetermined token code is generated in the customer terminal 145 to perform a financial transaction, the token agent of the customer terminal generates a 10-digit token code And transmits the generated 10-digit token code to the financial transaction server 1000 through the wired / wireless network 140 at the customer terminal, and authenticates the token code at the financial transaction server 1000 For convenience, the process of inputting the predetermined PIN information in order to execute the token agent program and / or the internal authentication procedure in the token agent is omitted.

13A and 13B illustrate that only the token code is transmitted from the customer terminal to the financial transaction server 1000 in order to efficiently explain the token code operation process. However, in the technical field of the present invention, Those skilled in the art will appreciate that the token code can be transmitted to the financial transaction server 1000 in conjunction with certain financial transaction information for the token code based financial transaction, It is not limited.

Referring to FIG. 13A, a predetermined token code generation command input by the input unit 1160 of the token agent program causes the reading unit 1165 to transmit the token agent internal code and / or the token agent internal code and / (1300) at least one token code generation information defined to be used by the token agent to generate a predetermined token code from the memory unit included in the memory unit 1155 and / or the IC chip 1150, , And provides the read at least one token generation information to the generator 1170 (1305).

The generating unit 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on at least one token generation information provided from the reading unit 1165 in operation 1310, The unit 1175 outputs the generated token code to the wireless terminal screen in operation 1315 and transmits the generated token code to the financial transaction server 1000 through a predetermined wired / wireless network 140 in cooperation with the communication processing units 1180 and 1180 (1320), and transmits the generated token code further including financial transaction means information for providing a predetermined financial transaction in transmission of the token code.

According to another embodiment of the present invention, when the customer terminal equipped with the token agent program performs the function of the predetermined customer terminal 145 for the token code-based financial transaction, The processing unit 1180 transmits the generated token code and the financial transaction information to the financial transaction server 1000 through the wired / wireless network 140 in cooperation with the generated token code.

Referring to FIG. 13B, an information receiver of the financial transaction server 1000 receives a predetermined token code transmitted from a customer terminal through the wired / wireless network 140 (1330), and the information receiver receives the token code The extracting unit extracts financial transaction means information for providing a predetermined financial transaction in the course of receiving and provides the extracted financial transaction means information to the extracting unit in step 1340. The extracting unit extracts financial transaction means information from the storage medium 110, Extracts predetermined token agent information (corresponding to the token code) (1345), and provides the extracted token agent information to the authentication unit (1340).

If the token agent information is provided as described above, the authentication unit may generate the token generation information and / or the token generation information identical to the token generation information used to generate the token code in the token agent provided in the customer customer terminal, based on the token agent information, The agent generates a predetermined token authentication code (1355) through the same procedure as the procedure for generating the token code, compares the token code received through the information receiver with the generated token authentication code, The validity is confirmed (1360). If the validity of the token code is authenticated (1365), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

14a, 14b, and 14c illustrate a token code operation process according to an embodiment of the present invention.

14A, 14B, and 14C illustrate a case where a customer terminal 145 generates a predetermined token code to perform a financial transaction, A token code is generated by receiving a predetermined challenge value from the transaction server 1000 to generate a 10-digit token code, and the generated 10-digit token code is transmitted from the customer terminal 145 to the financial transaction server 140 via a predetermined wired / (1000), and authenticating the token code at the financial transaction server (1000). For convenience, the token agent may be a predetermined method for operating the token agent program and / The process of inputting PIN information is omitted.

14A and 14B illustrate that only the token code is transmitted from the customer terminal 145 to the financial transaction server 1000 in order to efficiently explain the token code operation process. However, It will be clear to those skilled in the art that the token code can be transmitted to the financial transaction server 1000 in conjunction with certain financial transaction information for the token code based financial transaction, The present invention is not limited thereto.

Referring to FIG. 14A, an authentication unit included in the financial transaction server 1000 extracts (1400) predetermined radio terminal information to transmit a predetermined challenge value from the storage medium 110, and transmits the extracted radio terminal information to the customer terminal 145 (1405) dynamically generates a predetermined challenge value to be transmitted to the provided token agent program, and provides the wireless terminal information and the challenge value to the information transmission unit, the information transmission unit transmits the challenge information to the predetermined wired / wireless network (1410) the generated challenge value to the customer terminal 145 through the server 140. [

When the generated challenge value is transmitted to the customer terminal 145 equipped with the token agent program as described above, the authentication unit stores the challenge value transmitted to the customer terminal 145 in the storage medium 110 (1415 ).

Referring to FIG. 14B, the token agent program reading unit 1165 receives (1420) a predetermined challenge value received from the financial transaction server 1000 through the communication processing unit, and stores the received challenge value Token agent internal code and / or at least one token (s) defined to be used by the token agent to generate a predetermined token code from a memory unit or the like included in the memory unit 1155 and / or the IC chip 1150 Code generation information (1425), and provides the generated at least one token generation information to the generation unit 1170 (1430).

The generating unit 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on at least one token generation information provided from the reading unit 1165, The financial transaction server 1000 outputs the generated token code to the wireless terminal screen 1440 in cooperation with the communication processing unit 1180 and transmits the generated token code to the financial transaction server 1000 through a predetermined wired / (1445), and transmits information including financial transaction means for providing a predetermined financial transaction in the process.

According to another embodiment of the present invention, when the customer terminal 145 on which the token agent program is installed performs the function of the predetermined customer terminal 145 for the token code-based financial transaction, 1175 and the communication processing unit 1180 transmit the generated token code and the financial transaction information to the financial transaction server 1000 through the wired / wireless network 140 in cooperation with the generated token code.

Referring to FIG. 14C, the information receiver of the financial transaction server 1000 receives (1455) a predetermined token code transmitted from the customer terminal 145 through the wired / wireless network 140, The extracting unit extracts financial transaction means information for providing a predetermined financial transaction in the course of receiving the code and provides the extracted financial transaction means information to the extracting unit 1465. The extracting unit extracts financial transaction means information from the storage medium 110 Extracts predetermined token agent information (corresponding to the generated token code), and provides the extracted token agent information to the authentication unit (1475).

If the token agent information is provided as described above, the authentication unit generates token generation information and / or token generation information that is the same as the token generation information used to generate the token code in the token agent provided in the customer customer terminal 145 based on the token agent information, (1480) a predetermined token authentication code through the same procedure as the procedure of generating the token code in the token agent, and comparing the token code received through the information receiver with the generated token authentication code, The validity of the code is confirmed (1485). If the validity of the token code is authenticated 1490, the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

15A and 15B are diagrams illustrating a token code operation process according to an embodiment of the present invention.

More specifically, FIGS. 15A and 15B illustrate a financial transaction using the generated token code at the wireless terminal when the token agent is installed in a customer wireless terminal and performs a financial transaction using a predetermined wired terminal. More specifically, Generates a 10-digit token code in the token agent provided in the wireless terminal, transmits the generated 10-digit token code to the financial transaction server (1000) through a predetermined customer terminal (155) 1000) to authenticate the token code. For convenience, the process of inputting the predetermined PIN information in order to execute the token agent program and / or perform the internal authentication procedure in the token agent is omitted.

It should be noted that FIGS. 15A and 15B illustrate that only the token code is transmitted to the financial transaction server 1000 in the financial transaction to efficiently explain the token code operation process. However, in the technical field of the present invention, The token code is included in the predetermined financial transaction information data including the predetermined financial transaction information for the token code based financial transaction, the financial transaction means information, and / or the customer information, (1000), and the present invention is not limited thereto.

Referring to FIG. 15A, a predetermined token code generation command input by the input unit 1160 of the token agent program causes the reading unit 1165 to read the wireless terminal internal resource and / or the token agent internal code and / (1500) at least one token code generation information defined to be used by the token agent to generate a predetermined token code from the memory unit included in the memory unit 1155 and / or the IC chip 1150, And provides the read out at least one token generation information to the generator 1170 (1505).

The generator 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on the at least one token generation information provided from the reading unit 1165 in operation 1510, The unit 1175 outputs the generated token code to the wireless terminal screen (1515).

When the token code is output to the wireless terminal screen as described above, the token code is input (1520) to the customer terminal 155 through a predetermined key input unit provided in the customer terminal 155, The customer terminal 155 is transmitted to the customer terminal 155 through a predetermined local communication means provided in the customer terminal 155 and the customer terminal 155 transmits the token code 150 through the predetermined payment network 150. [ To the financial transaction server 1000 (1525).

According to the embodiment of the present invention, in the process of transmitting the token code to the financial transaction server 1000 through the payment network 150 for the token code based financial transaction, It is preferable that the token code, the financial transaction means information, and the predetermined financial transaction information for the token-based financial transaction are included in the predetermined financial transaction information data and transmitted to the financial transaction server 1000.

Referring to FIG. 15B, the information receiving unit of the financial transaction server 1000 receives a predetermined token code, financial transaction means information, and financial transaction information transmitted from the customer terminal 155 through the payment network 150, In operation 1530, the information confirmation unit checks the financial transaction information from the financial transaction information data 1535 and provides the extracted financial transaction information data to the extraction unit 1540.

The extracting unit provided with the financial transaction means information extracts predetermined token agent information associated with the financial transaction means information (or corresponding to the received token code) from the storage medium 110 (1545) And provides the token agent information to the authentication unit (1540).

If the token agent information is provided as described above, the authentication unit may generate the same token generation information and / or the token generation information used to generate the token code in the token agent provided to the customer wireless terminal based on the token agent information and / The agent generates a predetermined token authentication code (1555) through the same procedure as the procedure for generating the token code, compares the token code received through the information receiver with the generated token authentication code, The validity is confirmed (1560). If the validity of the token code is authenticated 1565, the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

16a, 16b, and 16c illustrate a token code operation process according to an embodiment of the present invention.

In more detail, FIG. 16A, FIG. 16B, and FIG. 16C illustrate a case where the token agent is installed in a customer wireless terminal and performs a financial transaction using a generated token code in the wireless terminal during a financial transaction using a predetermined wired terminal, The token agent provided in the wireless terminal receives a predetermined challenge value from the financial transaction server 1000 to generate a 10-digit token code, and transmits the generated 10-digit token code to a predetermined client terminal 145 And transmits the token transaction code to the financial transaction server 1000 and authenticates the token code in the financial transaction server 1000. [ For convenience, the process of inputting the predetermined PIN information in order to execute the token agent program and / or perform the internal authentication procedure in the token agent is omitted.

However, although FIG. 16A and FIG. 16B illustrate that only the token code is transmitted to the financial transaction server 1000 in the financial transaction in order to efficiently explain the token code operation process, in the technical field of the present invention, The token code is included in predetermined financial transaction information data including the predetermined financial transaction information for the token code based financial transaction and the financial transaction means information and transmitted to the financial transaction server 1000 It will be understood that the present invention is not limited thereto.

Referring to FIG. 16A, an authentication unit included in the financial transaction server 1000 extracts 1600 predetermined wireless terminal information to transmit a predetermined challenge value from the storage medium 110, The information transmission unit may generate a predetermined challenge value to be transmitted to the agent program 1605 and provide the wireless terminal information and the challenge value to the information transmission unit 160. The information transmission unit transmits the challenge information to the predetermined payment network 140 based on the wireless terminal information, And transmits the generated challenge value to the wireless terminal (1610).

When the generated challenge value is transmitted to the wireless terminal equipped with the token agent program, the authentication unit stores the challenge value transmitted to the wireless terminal in the storage medium 110 (1615).

Referring to FIG. 16B, the token agent program reading unit 1165 receives (1620) a predetermined challenge value received from the financial transaction server 1000 through the communication processing unit, and stores the received challenge value Token agent internal code and / or at least one token (s) defined to be used by the token agent to generate a predetermined token code from a memory unit or the like included in the memory unit 1155 and / or the IC chip 1150 Code generation information (1625), and provides the generated at least one token generation information to the generator (1170) (1630).

The generating unit 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on at least one token generation information provided from the reading unit 1165, The unit 1175 outputs the generated token code to the wireless terminal screen (1640).

When the token code is output to the wireless terminal screen as described above, the token code is input (1645) to the customer terminal 145 through a predetermined key input unit provided in the customer terminal 145, The customer terminal 145 is transmitted to the customer terminal 145 through a terminal and a predetermined local communication means provided in the customer terminal 145. The customer terminal 145 transmits the token code To the financial transaction server 1000 (1650).

According to the embodiment of the present invention, in the process of transmitting the token code to the financial transaction server 1000 through the payment network 140 for the token code based financial transaction, The financial transaction information for providing the predetermined financial transaction with the token code and the predetermined financial transaction information for the token-based financial transaction are included in the predetermined financial transaction information data and are transmitted to the financial transaction server 1000 .

Referring to FIG. 16c, the information receiving unit of the financial transaction server 1000 receives a predetermined token code, financial transaction means information and financial transaction information transmitted from the customer terminal 145 through the payment network 140, In operation 1655, the information checking unit checks the financial transaction information from the financial transaction information data (1660) and provides the extracted financial transaction information data to the extracting unit (1665).

The extracting unit, which has received the financial transaction means information, extracts predetermined token agent information associated with the financial transaction means information (or corresponding to the received token code) from the storage medium 110 (1670) And provides the token agent information to the authentication unit (1675).

If the token agent information is provided as described above, the authentication unit may generate the same token generation information and / or the token generation information used to generate the token code in the token agent provided to the customer wireless terminal based on the token agent information and / The agent generates a predetermined token authentication code (1680) through the same procedure as the procedure for generating the token code, and compares the token code received through the information receiver with the generated token authentication code, Validity is confirmed (1685). If the validity of the token code is authenticated (1690), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

FIG. 17 is a flowchart illustrating an application process of applying a token code-based financial transaction to an Internet banking according to an embodiment of the present invention.

In more detail, FIG. 17 is a flowchart illustrating a method for performing Internet banking according to a conventional Internet banking procedure, including confidentiality, authentication, integrity, and the like of the Internet banking based on the token code according to the present invention. The token agent is provided in the customer terminal 145 that performs the Internet banking, and the token agent is provided in the financial transaction of FIG. 10, And the server provides a predetermined Internet banking service in cooperation with the customer terminal 145. [

Referring to FIG. 17, a customer terminal 145 (for example, a client terminal that performs Internet banking) accesses a server for Internet banking (for example, a financial transaction server 1000 that provides an Internet banking service) (1705), a predetermined financial transaction is processed according to a predetermined financial transaction (for example, bank transfer) corresponding to the Internet banking service in association with the server, as shown in FIG. 18a, During the financial transaction procedure, the server requests a predetermined token code as the financial transaction authentication means to the customer terminal 145 as shown in FIG. 18B.

According to an embodiment of the present invention, the token code request is requested to the customer terminal 145 at the server for authentication for the entire financial transaction before the financial transaction procedure is started.

According to another embodiment of the present invention, the token code request is requested to the customer terminal 145 at the server to authenticate the financial transaction step while the financial transaction procedure is performed. In this case, The server can request financial transaction information and / or authentication information (for example, an account password, a security card number, a public certificate, etc.) to the customer terminal 145.

According to another embodiment of the present invention, the token code request is requested to the customer terminal 145 at the server for final authentication of the financial transaction before the financial transaction procedure is terminated.

If a predetermined token code is requested (1710) while performing the financial transaction procedure, the customer terminal 145 executes a predetermined token agent as shown in FIG. 18c, and the token agent transmits predetermined token generation information, A predetermined token code is generated through a generation algorithm (1715).

According to the embodiment of the present invention, a predetermined PIN input process for approving (or authenticating) a predetermined token code through the token agent in the process of executing a predetermined token agent in the customer terminal 145 And a predetermined PIN input process for accepting (or authenticating) the token code generation according to an implementation method may be performed through a public key certificate provided in the customer terminal 145 It is also possible that the authentication server transmits the authentication result to the token agent and generates a predetermined token code corresponding to the authentication result when the authentication server transmits the authentication information to the authentication server through the certificate.

If the token code is generated in the customer terminal 145 through the above procedure, the customer terminal 145 transmits the token code to the server. According to the embodiment of the present invention, The generated financial transaction information and the token code are transmitted to the server (step 1720).

The server receiving the token code from the customer terminal 145 extracts predetermined token agent information associated with the financial transaction means information from the storage medium 110, (1725) generates a token authentication code using the same token generation information and the token generation algorithm that the token agent used in the terminal 145 generates the token code, and transmits the generated token code to the generated token The validity of the received token code is confirmed by comparing the authentication code (1730).

If the validity of the received token code is not authenticated (e. G., If the token code and the token authentication code do not match) (1735), the server generates certain financial transaction error information, (1740).

On the other hand, if the validity of the received token code is authenticated (e.g., if the token code and the token authentication code coincide) (1735), the server transmits a predetermined financial transaction corresponding to the financial transaction information (For example, an Internet banking-based financial transaction) (1745), generates a predetermined financial transaction processing history corresponding to the financial transaction processing result, and transmits the generated financial transaction processing history to the customer terminal 145 (1750). Also, the server stores the generated financial transaction processing details in the storage medium 135 in association with the financial transaction means information (1755).

Figures 18a and 18b and 18c and 18d and 18e and 18f illustrate performing Internet banking of a token code based financial transaction in accordance with an embodiment of the present invention.

18a, 18b, 18c, 18d, 18e and 18f illustrate the use of the token code as authentication means for the financial transaction in the course of a predetermined financial transaction through the procedure shown in FIG. 17 As shown in FIG. 17, FIG. 181, FIG. 18B, FIG. 18C, FIG. 18D, FIG. 18E and FIG. 18F, the Internet banking process of the token It will be appreciated that various ways of using the code as a means of authenticating a financial transaction may be easily conceived, and the invention is not limited thereby.

18b illustrates a request for a predetermined token code to a financial transaction authentication number in the Internet banking procedure, and FIG. 18b illustrates an example of requesting a predetermined token code to a financial transaction authentication number in the Internet banking procedure. When the "generate authentication number" button is clicked, a predetermined token agent provided in the customer terminal 145 is executed as shown in FIG. 18c.

According to the method of the present invention, it is preferable that a predetermined PIN input process is performed to approve (or authenticate) the token agent usage right in the process of executing the token agent provided in the customer terminal 145, And / or the token agent usage right may be approved (or authenticated) through a public certificate according to the method of operation.

As shown in FIG. 18d, when a predetermined token code is generated in the token agent, the generated token code is input as shown in FIG. 18e. According to an embodiment of the present invention, the client transmits the token code generated by the token agent It is all possible that the generated token code is automatically input by the token agent when inputting the token code via the predetermined key input means and / or by clicking the "OK" button in FIG. 18D.

According to the method of the present invention, the method of generating the token code at the customer terminal 145 is preferably performed through at least one of the methods shown in FIG. 13A and / or FIGS. 14A and 14B , The present invention is not limited by the token code generation method.

When the predetermined token code is input as described above, the customer terminal 145 transmits the inputted token code (and / or financial transaction information) to the server. In the transmission process, , And / or the authentication procedure for the financial transaction is further performed through an authorized certificate as shown in FIG. 18f.

According to another embodiment of the present invention, the process of generating a predetermined token code through a predetermined token agent provided in the customer terminal 145 as shown in FIGS. 18c and 18d and inputting the predetermined token code as shown in FIG. 15a and / or 16a and 16b, a predetermined token code may be generated and input through the token agent provided in the customer's wireless terminal, so that the present invention is not limited thereto.

FIG. 19 is a flowchart illustrating an application process of applying a token code-based financial transaction to wireless banking according to an embodiment of the present invention.

In more detail, FIG. 19 is a flowchart illustrating a method of performing wireless banking according to a conventional WAP-based wireless banking procedure, wherein confidentiality, authentication, integrity, and non-repudiation of the wireless banking are firmly established based on the token code according to the present invention The token agent is provided in the wireless terminal 145 performing the wireless banking, and the financial transaction server of FIG. 10 is provided with the wireless terminal 145 and the wireless terminal And provides a predetermined wireless banking service in conjunction with the service.

Referring to FIG. 19, a wireless terminal 145 (e.g., a wireless terminal that performs wireless banking) accesses a server for wireless banking (e.g., a financial transaction server 1000 that provides a wireless banking service) (1905), a predetermined financial transaction is processed according to a predetermined financial transaction (e.g., bank transfer) corresponding to the wireless banking service in cooperation with the server, as shown in FIG. 20A, During the financial transaction procedure, the server requests a predetermined token code as the financial transaction authentication means to the wireless terminal 145 as shown in FIG. 20b.

According to one embodiment of the present invention, the token code request is requested to the wireless terminal 145 at the server for authentication for the entire financial transaction before the financial transaction procedure is initiated.

According to another embodiment of the present invention, the token code request is preferably requested from the server to the wireless terminal 145 to authenticate the financial transaction step while the financial transaction procedure is performed, The server can request financial transaction information and / or authentication information (for example, account password, security card number, authorized certificate, etc.) to the wireless terminal 145.

According to another embodiment of the present invention, the token code request is requested to the wireless terminal 145 at the server for final authentication for the financial transaction before the financial transaction procedure is terminated.

If a predetermined token code is requested 1910, the wireless terminal 145 executes a predetermined token agent as shown in FIG. 20B, and transmits a predetermined token generation information and a token A predetermined token code is generated through a generation algorithm (1915).

When the token code is generated in the wireless terminal 145 through the above procedure, the wireless terminal 145 inputs the token code into the wireless banking interface as shown in FIG. 20c and transmits the token code to the server. If the token code is generated while generating the predetermined financial transaction information for wireless banking during WAP wireless banking, the generated financial transaction information and the token code are transmitted to the server in operation 1920.

The server receiving the token code from the wireless terminal 145 extracts predetermined token agent information associated with the financial transaction means information from the storage medium 110, (1925) a token authentication code using the same token generation information and token generation algorithm used by the token agent in the terminal 145 to generate the token code, and transmits the generated token code and the generated token The validity of the received token code is confirmed by comparing the authentication code (1930).

If the validity of the received token code is not authenticated (e.g., if the token code and the token authentication code do not match) (1935), the server generates certain financial transaction error information, (Step 1940).

On the other hand, if the validity of the received token code is authenticated (for example, if the token code and the token authentication code are identical) (1935), the server transmits a predetermined financial transaction corresponding to the financial transaction information (For example, a wireless banking-based financial transaction) (1945), generates a predetermined financial transaction processing breakdown corresponding to the financial transaction processing result, and transmits it to the wireless terminal 145 as shown in FIG. . In addition, the server stores the generated financial transaction processing details in the storage medium 135 in connection with the financial transaction means information (1955).

Figures 20a, 20b, 20c, and 20d illustrate performing wireless banking of a token code based financial transaction in accordance with one embodiment of the present invention.

20a, 20b, 20c and 20d illustrate the use of the token code as an authentication means for the wireless financial transaction in the course of a predetermined wireless financial transaction through the procedure shown in FIG. 19, Those skilled in the art will appreciate that the token code can be used in a wireless banking process (e.g., wire transfer via wireless banking) with reference to Figures 19, 20a, 20b and 20c, The present invention is not limited thereto, and various methods for use as the financial transaction authentication means can easily be deduced.

FIG. 20A illustrates performing a financial transaction corresponding to an account transfer in a wireless banking procedure, FIG. 20B illustrates requesting a predetermined token code to a financial transaction authentication number during the Internet banking procedure, A predetermined token code is generated as shown in FIG. 20C.

According to the method of the present invention, the method of generating the token code at the wireless terminal 145 is preferably performed through at least one of the methods shown in FIGS. 13A and / or 14A and 14B , The present invention is not limited by the token code generation method.

FIG. 20D shows the financial transaction processing details corresponding to the account transfer, and it means that the token code generated in the wireless terminal 145 is authenticated by the server as shown in FIG. 20C.

As a person skilled in the art will appreciate that the IC chip-based wireless banking (for example, an IC chip mounted on a wireless terminal may be referred to as an IC chip) may be constructed by referring to FIGS. 19, 20A, 20B and 20C, To wireless banking in which a predetermined banking transaction based on a predetermined wireless banking is used as a wireless banking authentication means and a financial transaction processing information corresponding to the financial transaction is transmitted to a server in a batch) And the present invention is not limited thereto. For example, if the token code based wireless banking is applied to wireless banking based on an IC chip, the wireless terminal 145 performs a predetermined financial transaction based on the IC chip to generate financial transaction processing information, A predetermined token code is generated through a process as shown in FIG. 20B and / or FIG. 20C before the information is transmitted to the server, and the token code is transmitted to the server in connection with the financial transaction processing information, It will more firmly assure the confidentiality, authentication, integrity and non-repudiation of wireless banking for wireless banking.

100: token agent providing means
105: Information storage means
110: Storage medium
115: Server
125: Information transmission means
130: Information storage means
135: Storage medium
140: Network means
145: Customer terminal

Claims (8)

A financial transaction processing system using a token code implemented in a server that processes a financial transaction by communicating with a program provided in a customer wireless terminal,
The method comprising the steps of: acquiring wireless terminal information on which the authenticated program is installed, customer information using the wireless terminal equipped with the authenticated program, and financial information issued by the financial institution to the customer based on the result of authenticating the validity of the program installed in the customer wireless terminal A storage unit for storing the transaction means information in association with each other;
A receiving unit for receiving a token code indicated in an authenticated program of a customer wireless terminal corresponding to the wireless terminal information from the customer terminal when a financial transaction is requested from a customer terminal used by the customer corresponding to the customer information;
An authentication unit for processing the received token code so that the validity of the received token code is authenticated using an authentication code generated under the same condition as the dynamic generation of the token code; And
If the validity of the talk code is authenticated, extracts the information on the radio terminal on which the authenticated program is installed or the information on the financial transaction means stored in association with the customer information using the radio terminal equipped with the authenticated program, And a financial transaction unit for processing the financial transaction using the token code.
delete delete delete delete The method according to claim 1,
A customer wireless terminal equipped with the authenticated program,
And a wired terminal used by the customer for the financial transaction.
delete The method according to claim 1,
A payment transaction financial transaction, and an account transfer financial transaction.

Images