KR101413120B1 - Method for Integrating Wire and Wireless Network by using One Time Code - Google Patents

Abstract

The present invention relates to a wire / wireless integration method using a token code, and more particularly, to a wire / wireless integration method using a token code executed by a server capable of communicating with a program installed in a customer wireless terminal, Storing the customer information including the wireless terminal information on which the authenticated program is installed and the customer's personal information based on the result, checking the connected customer using the wired terminal, Receiving the indicated token code through an authenticated program of the corresponding customer wireless terminal and processing the validity of the received token code to be authenticated using the authentication code generated under the same condition as the dynamic generation of the token code, When the validity of the talk code is authenticated, the customer who is connected through the wired terminal Hyosung is treated as certified.

Description

[0001] METHOD FOR INTEGRATING WIRELESS AND WIRELESS NETWORKS [0002]

The present invention provides a wire / wireless integration method using a token code executed by a server capable of communicating with a program provided in a customer wireless terminal, the method comprising: receiving the authenticated program based on a result of authenticating the validity of a program installed in the customer wireless terminal; Storing the customer information including the wireless terminal information and the customer's personal information, verifying the connected customer using the wired terminal, and transmitting the authenticated program to the customer wireless terminal corresponding to the confirmed customer's customer information The method comprising the steps of: receiving a displayed token code, processing to validate the received token code using an authentication code generated under the same conditions as the dynamic generation of the token code, and, when the validity of the token code is authenticated, Wired / wireless using code that treats validity of customer connected through terminal as authenticated Sum relates to the method.

With the development of Internet infrastructure and financial transaction infrastructure, authentication has become very important for financial transactions and website access.

In particular, phishing has recently been used as a means of obtaining phishing, such as obtaining personal financial transaction information (e.g., an authentication number, a credit card number, account information, etc.) Pharming to steal personal information such as personal ID, password, account information, etc., by stealing the domain of the user that owns it or by tricking the domain name system (DNS) name into causing the user to mistake it as a real site, There is a problem such as keyboard hacking for hacking input key input information (e.g., personal ID, password, account information, etc.).

An object of the present invention is to provide a wired / wireless integration method using a token code executed by a server capable of communicating with a program provided in a customer wireless terminal, A first step of storing customer information including wireless terminal information on which the program is installed and personal information of the customer, a second step of confirming a customer connected using the wired terminal, A third step of receiving a token code displayed through an authenticated program of the customer wireless terminal, and a third step of processing the received token code so that the validity of the received token code is authenticated using the authentication code generated under the same condition as the dynamic generation of the token code And if the validity of the talk code is authenticated, the validity of the customer connected through the wired terminal And the third step includes receiving the token code input through the wired terminal used by the customer or receiving the token code transmitted through the program of the customer wireless terminal To-wire integration method using a token code.

A method for integrating a wired and wireless line using a token code according to the present invention is a method for integrating a wired and wireless line using a token code executed by a server capable of communicating with a program provided in a customer wireless terminal, A first step of storing customer information including the wireless terminal information on which the authenticated program is installed and the customer's personal information based on the result, a second step of confirming a customer connected using the wired terminal, A third step of receiving a displayed token code through an authenticated program of the customer wireless terminal corresponding to the customer information of the customer and a third step of receiving the token code using the authentication code generated under the same condition as the dynamic generation of the token code A fourth step of processing the validity of the talk code so that the validity is authenticated, The method comprising the steps of: receiving a token code input through a wired terminal used by the customer, or receiving the token code input through the wired terminal used by the customer, And receives the token code transmitted through the program.

delete

delete

delete

delete

In the wire / wireless integration method using the token code according to the present invention, the customer information may further include relationship information for establishing a relationship between a customer using the authenticated program and the program.

It is possible to provide a financial transaction processing method and a system according to the present invention in which a customer can perform a more secure financial transaction through a predetermined token code volatilized temporally and / .

Also, by using the token generating program information associated with the financial transaction means owned customer information (and / or the customer owned wireless terminal information), financial transaction means information (e.g. financial account information, credit card information, debit card information, Information, check card information, prepaid card information, electronic money information, and the like).

1 is a diagram illustrating a financial transaction processing system according to the present invention.
FIG. 2 illustrates a system for providing a predetermined token agent to the customer wireless terminal according to an embodiment of the present invention.
FIG. 3 is a diagram illustrating token agent information to be provided to a customer wireless terminal according to an embodiment of the present invention.
FIG. 4 is a diagram illustrating token agent information to be provided to a customer wireless terminal according to an embodiment of the present invention.
FIG. 5 is a flowchart illustrating a method of providing and installing a token agent program to a customer wireless terminal according to an embodiment of the present invention.
6 is a diagram illustrating an information structure of wireless terminal information stored in the storage medium according to an embodiment of the present invention.
7a and 7b illustrate information configuration of token agent information stored in the storage medium according to an embodiment of the present invention.
8 is a diagram illustrating the structure of information of customer information stored in the storage medium according to an embodiment of the present invention.
FIGS. 9A and 9B are diagrams illustrating information configuration of financial transaction means information stored in the storage medium according to an embodiment of the present invention.
FIG. 10 is a block diagram of a financial transaction processing system using a wireless terminal number according to an embodiment of the present invention.
11 is a diagram illustrating a functional configuration of a customer wireless terminal equipped with a token agent according to an embodiment of the present invention.
FIG. 12 is a diagram illustrating a token code structure according to an embodiment of the present invention.
13a and 13b are diagrams illustrating a token code operation process according to an embodiment of the present invention.
14a, 14b, and 14c illustrate a token code operation process according to an embodiment of the present invention.
15A and 15B are diagrams illustrating a token code operation process according to an embodiment of the present invention.
16a, 16b, and 16c illustrate a token code operation process according to an embodiment of the present invention.
FIG. 17 illustrates a process for initiating a token code based financial transaction in accordance with an embodiment of the present invention.
FIG. 18 is a flowchart illustrating an application process of a token code-based financial transaction to Internet banking according to an embodiment of the present invention.
Figures 19a, 19b, and 19c illustrate performing Internet banking of a token code based financial transaction in accordance with an embodiment of the present invention.
FIG. 20 is a flowchart illustrating an application process of a token code-based financial transaction to Internet banking according to an embodiment of the present invention.
Figures 21a, 21b and 21c illustrate performing banking of token code based financial transactions in accordance with an embodiment of the present invention.

The operation principle of the preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings and description. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator.

Therefore, the definition should be based on the contents throughout the book.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. The configuration is omitted as much as possible, and a functional configuration that should be additionally provided for the present invention is mainly described.

Those skilled in the art will readily understand the functions of components that have been used in the prior art among the functional configurations that are not shown in the following description, The relationship between the elements and the components added for the present invention will also be clearly understood.

In the present invention, each of the means constituting the financial transaction processing system using the wireless terminal number includes a program recorded in a recording medium provided in a predetermined server according to a characteristic (or a role) (Or a program including at least one or more function components for performing a unique function (or role) of the means), and / or configured as an independent server performing a unique function defined in the means For example, the present invention can be implemented by a plurality of server systems interworking through predetermined server-to-server interfaces. The preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings. A program recorded on a recording medium provided in a predetermined server and / or a plurality of servers interlinked with each other Would be described as the display, but are not limited to the exemplary method of the device, if more than the embodiment in no way.

In addition, the following embodiment uses a method in which a predetermined token generation program is installed in a customer wireless terminal, whereby the token generation program is referred to as a token agent and / or a token agent program for convenience.

In addition, the terms used in the following embodiments will be appropriately modified in accordance with the field to which the token code-based financial transaction according to the present invention is applied, and thus the present invention is not limited thereto.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

1 is a diagram illustrating a financial transaction processing system according to the present invention.

1 illustrates a client wireless terminal 1100 that generates a predetermined token code using a predetermined token generating program and a server 115 on a communication network to perform a predetermined financial transaction, A client terminal 1100 for providing the token code generated by the client terminal 1100 to the server 115 and a client terminal 1100 for providing at least one financial transaction means information and / In association with a predetermined storage medium 110 (or storage medium operating means) that stores and manages predetermined token generation program information for the generated program, information on the financial transaction means corresponding to the financial transaction and / To-be-generated program information associated with the transaction-means-owned customer information (and / or the customer-owned wireless terminal 1100 information), and uses the token- It illustrates a financial transaction processing system comprising the server 115 to authenticate the validity of the token code.

1 illustrates a client terminal 1100 that performs a predetermined financial transaction by connecting to a server 115 on a communication network in accordance with another embodiment of the present invention and a predetermined token A customer wireless terminal 1100 for generating a code and providing the generated token code to the client terminal 1100 or the server 115, and at least one financial transaction means information and / (Or storage medium operating means) that stores and manages customer information and predetermined token generating program information for the token generating program provided in the customer terminal in association with the financial transaction And / or the token generating program information associated with the financial transaction means owned customer information (and / or the customer owned wireless terminal 1100 information) , Illustrates a financial transaction processing system, characterized in that by using the token generation program information comprises a server 115 to authenticate the validity of the token code.

Referring to FIG. 1, the financial transaction processing system may further include a token agent providing means 100 for providing a predetermined token generating program to the customer wireless terminal 1100.

Further, the financial transaction processing system may include an information transmission means 125 for transmitting predetermined financial transaction processing details (or payment approval specialization) data corresponding to the financial transaction processing to the customer wired and / or wireless terminal 1100 It is preferable to further comprise

In addition, the financial transaction processing system may connect predetermined financial transaction processing details (or payment approval specialization) data corresponding to the financial transaction processing to a predetermined storage medium 135 And an information storage unit 135 for storing the information in the storage unit 135. [

According to an embodiment of the present invention, the server 115 preferably processes the financial transaction in accordance with the result of the validity authentication, and the financial transaction may be a payment transaction, a financial transaction, and / Preferably, the financial transaction means includes at least one of a financial account, a credit card, a debit card, a cash card, a check card, a prepaid card, and electronic money.

According to the method of the present invention, the customer terminal 1100 preferably includes at least one personal computer (PC) and / or a notebook computer, and is connected to the server 115 through Internet banking And / or provide the server 115 with certain financial transaction information.

According to an embodiment of the present invention, the customer wireless terminal 1100 may be a Personal Communication System (PCS) and / or a Global System for Mobile communications (GSM) terminal and / or a Personal Digital Cellular PDC) and / or a PHS (Personal Handyphone System) terminal and / or a PDA (personal digital assistant) and / or a smart phone and / or a telematics and / Or a mobile terminal 1100 including at least one mobile Internet terminal, and it is also possible to use a predetermined code (or a PIN (Personal Identification Number) or a PIN number) input through a predetermined input means And the token agent program installed in the customer terminal.

According to the embodiment of the present invention, when the server 115 further provides at least one authentication information (or secret code) associated with the financial transaction means in the client terminal 1100, the server 115 transmits the authentication information Code), and it is preferable to refer to the token agent program information associated with the financial transaction means information and / or the financial transaction means owned customer information (and / or the customer-owned wireless terminal 1100 information) A predetermined token authentication code corresponding to the received token code is generated, and the validity of the token code is verified by comparing the token code with the token authentication code.

FIG. 2 illustrates a system for providing a predetermined token agent to the customer wireless terminal 1100 according to an embodiment of the present invention.

In more detail, FIG. 2 is a flowchart illustrating a method of providing a predetermined token agent program to a customer wireless terminal 1100 having at least one financial transaction means, loading the at least one financial transaction means information, FIG. 2 is a block diagram illustrating a token agent providing system according to an embodiment of the present invention. FIG. 2 is a block diagram of a token agent providing system according to an embodiment of the present invention. 1, the token agent providing system includes a financial transaction means issuing server 200 for issuing a predetermined financial transaction means to a predetermined customer, and a predetermined token agent program for providing a predetermined token agent program to the customer wireless terminal 1100 A token agent providing server 215 to be mounted on the customer wireless terminal 1100, And an information storage server (235) for storing the agent information, the customer information of the financial transaction means, and at least one financial transaction means information issued to the customer in association with each other in a predetermined storage medium (110) Explain.

However, the technical features of the token agent providing system are not limited to those shown in FIG. 2. Those skilled in the art will appreciate that the financial transaction means issuing server The token agent providing server 215 and the information storing server 235 may be one server, and / or a method of implementing various token agent providing systems composed of at least two or more servers may be easily inferred You can do it.

The financial transaction means issuing server 200 includes a financial account financial transaction means, a credit card financial transaction means, a debit card financial transaction means, a cash card financial transaction means, a check card financial transaction means, And a financial transaction means including an electronic money financial transaction means for issuing to a customer a bank and / or a financial company, which is provided with at least one financial transaction means And a financial transaction means information D / B 210 for storing and storing at least one financial transaction means information issued to the customer in association with the customer information.

The financial transaction means issuing unit 205 acquires predetermined customer information for the customer through the predetermined financial transaction means issuing interface 250 and / or issues the customer information to the customer based on the acquired customer information The method includes generating at least one financial transaction means information, storing the financial transaction means information in a DBMS provided in a predetermined financial system, and / or printing the financial transaction means information in a predetermined passbook and / (For example, an MS card and / or an IC card) and / or a wireless chip medium (for example, an IC chip mounted on or removed from the customer wireless terminal 1100).

According to an embodiment of the present invention, the method for acquiring customer information for the customer includes receiving the customer information through a document including a predetermined customer information entry form, And a method of using the financial transaction means issuing interface 250 for acquiring in an offline manner via a predetermined information input means (for example, an information input terminal), and / or a method of using a predetermined wired terminal A financial transaction means issuing interface 250 for providing a predetermined customer information input interface to a customer terminal (for example, a wired terminal owned by the customer and / or a wireless terminal owned by the customer) and acquiring the customer information on-line through the customer information input interface, And a method of using the above-mentioned method.

The financial transaction means issuing unit 205 generates at least one financial transaction information to be issued to the customer by reading the obtained customer information (for example, a customer's credit rating), and the generated financial transaction means It is preferable that the information is stored in a DBMS provided in a predetermined financial system and / or the financial transaction means information is printed on a predetermined passbook or stored in a predetermined card medium and / or a wireless chip medium and issued to the customer .

When at least one financial transaction means is issued to the customer, the financial transaction means issuing unit 205 associates the customer information with at least one financial transaction means information issued to the customer, / B (210).

Referring to FIG. 2, the token agent providing server 215 includes a token agent D / B 225 storing at least one token agent corresponding to at least one customer wireless terminal platform, (220) for providing a predetermined token agent stored in the customer wireless terminal (210) to the customer wireless terminal (200). The agent providing unit (220) And a token agent diagnosis unit 230 for diagnosing the validity of the agent.

Wherein the token agent D / B 225 stores at least one token agent program capable of operating in correspondence with a predetermined customer wireless terminal platform, and token agent related information corresponding to the token agent program, A detailed description of the token agent D / B 225 will be described with reference to FIG. 3 or FIG.

The agent providing unit 220 extracts a predetermined token agent program corresponding to a platform included in the customer wireless terminal 1100 from the token agent D / B 225 and / or extracts at least one token generation information And a token agent providing program for providing the token agent program and / or the token agent program via the predetermined token agent providing interface (255) to the client wireless terminal (1100) And at least one token generation information associated with the at least one token generation information is provided to the customer wireless terminal 1100 to be mounted thereon.

In order for the agent providing unit 220 to provide a predetermined token agent program to the customer wireless terminal 1100, the wireless terminal information is required to provide the token agent to the customer wireless terminal 1100 To be mounted.

According to an embodiment of the present invention, the financial transaction means issuing server 200 issues at least one financial transaction means to the customer, and / or issues at least one financial transaction means to the customer, The token agent providing server 215 requests the token agent program to provide the token agent program to the customer wireless terminal 1100 to which the financial transaction means has been issued in order to process the financial transaction using the wireless terminal number based on the token code, The financial transaction means issuing server 200 provides the wireless terminal information included in the customer information to the agent providing unit 220 of the token agent providing server 215.

According to another embodiment of the present invention, the customer accesses the token agent providing server 215 through a predetermined customer's wireless terminal and / or a customer's wireless terminal, It is preferable to provide the wireless terminal information to the token agent providing server 215 for processing.

When the token agent program is provided and the installed wireless terminal information is provided, the agent providing unit 220 identifies the platform of the customer wireless terminal 1100 based on the wireless terminal information. For example, when the customer wireless terminal 1100 is a mobile communication terminal connected to a predetermined mobile communication network, the agent providing unit 220 uses the wireless terminal information to transmit the subscriber D / The mobile terminal platform can be identified by referring to, for example, a home location register (HLR) or a visitor location register (VLR)) (not shown).

When the platform of the customer wireless terminal 1100 is identified as described above, the agent providing unit 220 extracts a predetermined token agent program corresponding to the platform of the wireless terminal 1100 from the token agent D / B 225, And / or at least one or more token generation information.

Also, the agent providing unit 220 extracts at least one token generation information corresponding to the token agent program from the token agent D / B 225, and extracts the extracted (and / or dynamically generated) (E.g., the wireless network 140 to which the customer wireless terminal 1100 is connected) and associates the program and / or the extracted at least one token creation information with a predetermined token agent providing interface 255 ), Thereby loading the token agent program in the customer wireless terminal 1100.

According to an embodiment of the present invention, the token agent program can be mounted on an IC chip mounted on the platform of the customer wireless terminal 1100 and / or mounted on or removed from the wireless terminal 1100 And are not intended to limit the present invention thereby.

The token agent program provided to the customer wireless terminal 1100 according to the present invention includes at least one of a time-synchronous method and a challenge-response method, And the present invention is not limited by the token code generation method.

When the token agent program is installed in the customer wireless terminal 1100 as described above, the token agent diagnosis unit 230 transmits the token agent program installed in the wireless terminal 1100 in cooperation with the customer wireless terminal 1100 And diagnoses whether it operates normally.

According to an embodiment of the present invention, a method of diagnosing the token agent program installed in the customer wireless terminal 1100 may include the steps of: receiving the token agent program stored in the customer wireless terminal 1100, Generates the predetermined diagnostic token authentication code corresponding to the received token code in the token agent diagnosis unit 230, and transmits the generated token agent authentication code to the token agent diagnosis unit 230, It is preferable to diagnose the validity of the token agent program loaded in the customer wireless terminal 1100 by comparing the token authentication code.

According to the present invention, the token agent providing server 215 performs a function of a token generating program providing means for providing and providing a predetermined token agent program to the customer wireless terminal 1100.

When the predetermined token agent program is normally provided and loaded into the customer wireless terminal 1100 as described above, the information storage server 235 transmits the at least one financial transaction The predetermined wireless terminal information for the customer wireless terminal 1100 and the token agent information loaded in the customer wireless terminal 1100 are linked and stored in a predetermined storage medium 110. [

Referring to FIG. 2, the information storage server 235 receives at least one financial transaction information and / or customer information (e.g., wireless terminal information) from the financial transaction means information D / B 210 An information extraction unit 240 for extracting the token agent information from the token agent D / B 225 and extracting the loaded token agent information provided to the customer wireless terminal 1100 from the token agent D / B 225; And an information storage unit (245) for storing the transaction means information, the financial transaction means ownership customer information, and the token agent information provided to the customer wireless terminal (1100) in association with each other in a predetermined storage medium (110) .

According to the present invention, the information storage server 235 associates at least one financial transaction means information, customer information owned by the financial transaction means, and predetermined token agent information with respect to the token agent program included in the wireless terminal 1100 And stores the information in a predetermined storage medium 110. The information storage unit 105 stores the information in the storage medium 110. [

FIG. 3 is a diagram illustrating token agent information to be provided to a customer wireless terminal 1100 according to an embodiment of the present invention.

3 illustrates a predetermined token agent for generating a time-synchronous token code. The predetermined token agent is a predetermined token agent for each platform corresponding to the platform of the wireless terminal 1100 on which the token agent is to be installed, The token agent information includes a token agent program corresponding to each platform (or a source code to be compiled into a token agent program), a version of the token agent, a token generation algorithm At least one token generation information, and / or a token update period. However, the at least one information item may be further included according to the intention of a person skilled in the art, and the information item does not necessarily limit the present invention .

According to the present invention, the token agent program is installed in the wireless terminal 1100 owned by the customer to generate a predetermined token code, whereby the token agent program is installed in the customer wireless terminal 1100 And program code that can be driven and / or operated on the computer. For example, if a wireless Internet platform for interoperability (WIPI) platform is provided in the wireless terminal 1100, the token agent includes program code operating on a WIPI basis, / BREW, etc.), the program code that runs on the platform is included.

3, the token agent program is included in the token agent D / B 225 in the form of a precompiled program, and / or is included in the token agent D / B 225 in the form of source code to be compiled. Is stored in the memory.

According to an embodiment of the present invention, when the token agent program is provided in the token agent D / B 225 in a precompiled program form, the token agent providing server 215 transmits a predetermined wireless network 140 At least one token generation information corresponding to the token agent program (for example, a number randomly generated by the token agent providing server 215) is generated at the time of providing the token agent program to the wireless terminal 1100 through the wireless terminal 1100, Is preferably stored in a predetermined storage device, and the token agent program installed in the wireless terminal 1100 may generate a predetermined token code At this point, the token agent program sends the token agent external storage device (e.g., It is preferable to extract at least one or more token generation information from a memory (e.g., a memory provided in the IC chip mounted or detached from the wireless terminal 1100) and generate a predetermined token code based on the token generation information Do.

According to another embodiment of the present invention, when the token agent program is stored in the token agent D / B 225 in the form of a source code to be compiled, the token agent providing server 215 transmits the token agent program to the wireless terminal 1100, (For example, a secret key value corresponding to a randomly generated number in the token agent providing server 215) corresponding to the token agent program at the time of providing the token agent program with the token agent program Into the token generation information variable included in the token agent source code, and generates the predetermined token agent program by compiling the token agent source code in which at least one token generation information is substituted into the predetermined token generation information variable as described above , The token agent program dynamically generated as described above, It is preferable to provide the token agent program to the wireless terminal 1100 via the wireless network 140 and mount the token agent program on the wireless terminal 1100. When the token agent program installed in the wireless terminal 1100 generates a predetermined token code, It is preferable to generate a predetermined token code based on the token generation information assigned to the token agent program internal variable.

According to another embodiment of the present invention, even when at least one token generation information is assigned to the token agent program as described above, the dynamically generated token agent program is provided to the wireless terminal 1100 according to the intention of a person skilled in the art The at least one other token generation information may be provided together with the wireless terminal 1100 and may be stored in a predetermined storage device, and the token agent program installed in the wireless terminal 1100 may include a predetermined token code It is possible to generate a predetermined token code using both the token generation information provided in the token agent program and the token generation information provided in the external storage device at the time of generating the token code, It does not.

The version of the token agent information includes version information of the token agent program for each platform to be provided to the wireless terminal 1100.

According to the embodiment of the present invention, even if the same kind of token agent program (for example, a token agent program running on the same platform) is used, the type and / or version of the applied token generation algorithm may be different depending on the version of the token agent program Since the token code generated by the token agent program will also be different, the version information provides information for correctly determining the token agent loaded in the wireless terminal 1100. [ The token code authentication error that may occur in the process of authenticating the predetermined token code generated in the wireless terminal 1100 by the version information of the token code agent program can be minimized.

The token generation algorithm of the token agent information includes the hashing algorithm information applied to the token agent program and / or the detailed attribute information of the hashing algorithm. At present, the most commonly used hashing algorithms for generating tokens are MD4, MD5, and SHA. Hashing algorithms (for example, SHA1 hashing algorithms modified from SHA, etc.) .

The token generation information of the token agent information is information for generating a token code of a time synchronization type. Referring to FIG. 3, the token code generation information is information for generating the token code at a time (or time) And a secret key value corresponding to a value randomly generated by the token agent providing server 215 and / or a MIN / ESN uniquely assigned to the wireless terminal 1100 on which the token agent is mounted Is used as the second generation information and / or the third generation information.

When the MIN / ESN of the wireless terminal 1100 is used as the token generation information for generating the token code, the MIN / ESN is directly used as the token generation information The MIN / ESN may have a predetermined hash function to prevent the token agent from overflowing in generating the token code by having the MIN / ESN have an excessively large value. It is possible to apply and convert the value into a value within a certain size, which is determined according to the intention of the person skilled in the art and / or the computing ability of the wireless platform.

Wherein the token update period of the token agent information is a time interval during which the predetermined token code generated by the token agent is volatilized and invalidated when the token generation algorithm complies with a time synchronization scheme, (Or time) information of the token code with the token code in the process of transmitting the token code to the financial transaction server 1000, the wireless terminal 1100 and the financial transaction server 1000, Is used to synchronize the token creation time (or time) information for a certain period of time.

That is, the token code generated by the token agent is transmitted to the predetermined financial transaction server 1000 within the token update period, and a predetermined token authentication code corresponding to the token code is generated in the financial transaction server 1000 .

That is, when a predetermined token code is generated in the token agent included in the wireless terminal 1100 and a predetermined token authentication code is generated in the torque update period in the financial transaction server 1000, The validity of the validity is confirmed.

Accordingly, the token update period may include a time required to provide the token code generated in the wireless terminal 1100 to a predetermined settlement terminal, a time required to transmit the token code to the financial transaction server 1000, The time required to generate a predetermined token authentication code in the financial transaction server 1000, and the like.

According to another embodiment of the present invention, the token generation algorithm follows a time synchronization method and it is easy to transmit the time (or time) information at which the token code is generated in the token agent to the financial transaction server 1000 In this case, the token update period may be omitted or may be set at a very short time interval.

FIG. 4 is a diagram illustrating token agent information to be provided to a customer wireless terminal 1100 according to an embodiment of the present invention.

FIG. 4 illustrates a token agent for generating a challenge-response token code. The predetermined token agent is a predetermined token agent for each platform corresponding to the platform of the wireless terminal 1100 on which the token agent is to be installed. The token agent information includes a token agent program corresponding to each platform (or a source code to be compiled into a token agent program), a version of the token agent, Algorithm, and at least one token generation information. According to the intention of those skilled in the art, at least one information item may be further included, and the information item does not necessarily limit the present invention.

According to the present invention, the token agent program is installed in the wireless terminal 1100 owned by the customer to generate a predetermined token code, whereby the token agent program is installed in the customer wireless terminal 1100 And program code that can be driven and / or operated on the computer.

For example, if a wireless Internet platform for interoperability (WIPI) platform is provided in the wireless terminal 1100, the token agent includes program code operating on a WIPI basis, / BREW, etc.), the program code that runs on the platform is included.

4, the token agent program is included in the token agent D / B 225 in the form of a precompiled program, and / or is included in the token agent D / B 225 in the form of source code to be compiled. Is stored in the memory.

According to an embodiment of the present invention, the token agent program is provided in the token agent D / B 225 in a precompiled program form, and the token agent program generates the token code from the predetermined server 115 And the token agent providing server 215 provides the token agent program to the customer wireless terminal 1100 through a predetermined wireless network 140 The token agent program may be installed based on a predetermined challenge value received from the server 115. The token agent program may be installed in the wireless terminal 1100, It is preferable to generate a predetermined token code.

According to another embodiment of the present invention, when the token agent program is provided in the token agent D / B 225 in a precompiled program form, At least one token generation information corresponding to the token agent program (for example, at least one token generated by the token agent providing server 215 at random) is generated at the time of providing the token agent program to the wireless terminal 1100 through the wireless terminal 1100 It is preferable that the token agent program installed in the wireless terminal 1100 generates and transmits a predetermined token code to the wireless terminal 1100, , The token agent program stores a predetermined challenge value received from the server 115 and a predetermined challenge value Extracts at least one token generation information from a large agent external storage device (e.g., a memory included in the IC chip mounted on or removed from the memory of the wireless terminal 1100 and / or the wireless terminal 1100) It is preferable to generate a predetermined token code based on the generation information.

If the token agent program is stored in the token agent D / B 225 in the form of a source code to be compiled according to another embodiment of the present invention, the token agent providing server 215 transmits the token agent program to the wireless terminal 1100 (For example, a secret key value corresponding to a randomly generated number in the token agent providing server 215) corresponding to the token agent program at the time of providing the token agent program with the token agent program Token generation information variable included in the token agent source code, compiles the token agent source code in which at least one or more pieces of token generation information are assigned to a predetermined token generation information variable, and generates a predetermined token agent program , And the dynamically generated token agent program is executed as described above It is preferable that the wireless terminal 1100 be provided with the wireless terminal 1100 through the wireless network 140 of the wireless terminal 1100. When the token agent program installed in the wireless terminal 1100 generates a predetermined token code, The program preferably generates a predetermined token code based on the predetermined challenge value received from the server 115 and the token generation information assigned to the token agent program internal variable.

According to another embodiment of the present invention, even when at least one token generation information is assigned to the token agent program as described above, the dynamically generated token agent program is provided to the wireless terminal 1100 according to the intention of a person skilled in the art The at least one other token generation information may be provided together with the wireless terminal 1100 and may be stored in a predetermined storage device, and the token agent program installed in the wireless terminal 1100 may include a predetermined token code The token agent program uses the predetermined challenge value received from the server 115, the token generation information provided in the corresponding token agent program, the token generation information provided in the external storage device, and the like It is possible to generate a predetermined token code, whereby the present invention It is not fixed.

The version of the token agent information includes version information of the token agent program for each platform to be provided to the wireless terminal 1100.

According to the embodiment of the present invention, even if the same kind of token agent program (for example, a token agent program running on the same platform) is used, the type and / or version of the applied token generation algorithm may be different depending on the version of the token agent program Since the token code generated by the token agent program will also be different, the version information provides information for correctly determining the token agent loaded in the wireless terminal 1100. [ The token code authentication error that may occur in the process of authenticating the predetermined token code generated in the wireless terminal 1100 by the version information of the token code agent program can be minimized.

The token generation algorithm of the token agent information includes the hashing algorithm information applied to the token agent program and / or the detailed attribute information of the hashing algorithm.

At present, most commonly used hashing algorithms for generating tokens are MD4, MD5, SHA, and the like, and a hashing algorithm (for example, a SHA-1 hashing algorithm modified from SHA) .

Referring to FIG. 4, the token code generation information is information indicating whether the token agent program included in the wireless terminal 1100 is a predetermined token A predetermined challenge value to be provided to the wireless terminal 1100 through the server 115 at the time of generating the token code is set as the first generation information, and the token agent providing server 215 randomly It is preferable to use the secret key value corresponding to the generated value and / or the MIN / ESN uniquely assigned to the wireless terminal 1100 on which the token agent is installed as the second generated information and / or the third generated information .

According to the embodiment of the present invention, the challenge value may be a random value generated randomly by the server 115 at the time when the token agent program included in the wireless terminal 1100 generates a predetermined token code , The server 115 transmits a challenge value transmitted to the wireless terminal 1100 until a token code generated based on the challenge value (for example, a response corresponding to the challenge) is received from the wireless terminal 1100 Preferably, when the token code is received, a predetermined token authentication code is generated based on the challenge value to authenticate the received token code.

When the MIN / ESN of the wireless terminal 1100 is used as the token generation information for generating the token code, the MIN / ESN is directly used as the token generation information The MIN / ESN may have a predetermined hash function to prevent the token agent from overflowing in generating the token code by having the MIN / ESN have an excessively large value. It is possible to apply and convert the value into a value within a certain size, which is determined according to the intention of the person skilled in the art and / or the computing ability of the wireless platform.

FIG. 5 illustrates an exemplary process of providing and installing a token agent program to a customer wireless terminal 1100 according to an embodiment of the present invention.

5 illustrates a process of loading a token agent program for a token code-based financial transaction into a predetermined customer wireless terminal 1100. As a person skilled in the art, 5, it will be appreciated that various methods of mounting a given token agent on the customer wireless terminal may be easily conceived, and the present invention is not limited to this embodiment. I will reveal.

Referring to FIG. 5, predetermined client information (and / or wireless terminal information) to be loaded with a token agent program for a token code-based financial transaction is provided to the token agent providing server 215 (500).

According to an embodiment of the present invention, the process 500 may include receiving predetermined client information (and / or wireless data) to be loaded from a predetermined financial instrument issuing server 200 to the token agent providing server 215 (And / or wireless terminal information) for the customer-owned wireless terminal 1100 by accessing the token agent providing server 215, and / or providing the token agent providing server 215 with the customer information (and / And a step of providing the image data.

When the customer information (and / or the wireless terminal information) is provided as described above, the token agent providing server 215 reads the customer information (and / or the wireless terminal information) A token agent program is provided to confirm whether to mount (505).

According to an embodiment of the present invention, when a valid token agent program is installed in the customer wireless terminal 1100, the token agent providing server 215 needs to mount the token agent in the wireless terminal 1100 And if the wireless terminal 1100 does not have a valid token agent program, the token agent is preferably provided and mounted.

If the predetermined token agent program is to be provided to the customer wireless terminal 1100 (510), the token agent providing server 215 reads the wireless terminal information of the customer and transmits the read token to the customer wireless terminal 1100 The token agent program to be provided is confirmed (515).

According to one embodiment of the present invention, when the wireless terminal information is connected to a mobile communication network, the token agent providing server 215 transmits a subscriber D / B (e.g., a home location register or a visited location register) And confirms the token agent program to be provided to the customer wireless terminal 1100 by checking the platform of the wireless terminal 1100. [

Alternatively, in order to process the present token agent providing process regardless of the mobile communication company according to the method, the platform information (or the model information of the wireless terminal) of the wireless terminal 1100 in the process of receiving the wireless terminal information, May be further provided.

When the token agent to be provided to the customer wireless terminal 1100 is identified, the token agent providing server 215 extracts or compiles the confirmed token agent program from the token agent D / B 225 Dynamically generates and / or dynamically generates (e. G., Generates a random token) information from the token agent D / B 225, extracts the predetermined token generation information required for the token agent program to generate a predetermined token code, (Step 520).

When the predetermined token agent program to be provided to the customer wireless terminal 1100 and the at least one token generation information corresponding to the token agent program are prepared as described above, (Step 525).

According to an embodiment of the present invention, the token agent providing server 215 transmits a predetermined wireless message including a predetermined callback URL for providing the token agent to the customer wireless terminal 1100, (Short Message Service), Enhanced Message Service (EMS), Multimedia Messaging Service (MMS), and the like), and when the wireless terminal 1100 accesses the token agent providing server 215 via the callback URL It is preferable that the wireless terminal 1100 provides and installs the token agent.

According to another embodiment of the present invention, the token agent providing server 215 may transmit the token to the customer via the other type of wireless software loading method which does not use the callback URL, by the intention of the person skilled in the art and / It is possible to provide and install the token agent in the wireless terminal 1100, and thus the present invention is not limited thereto.

After the predetermined token agent program is loaded into the customer wireless terminal 1100 as described above, the customer wireless terminal 1100 determines execution of the diagnostic mode for the loaded token agent program. If the diagnosis for the token agent Mode is executed 530, the wireless terminal 1100 executes the loaded token agent program to generate a predetermined diagnostic token code and transmits it to the token agent providing server 215 (535). The token agent The providing server 215 generates a predetermined diagnostic token authentication code corresponding to the diagnostic token code 540 and compares the diagnostic token authentication code with the diagnostic token authentication code to determine whether the token agent The validity of the program is confirmed (545).

According to an embodiment of the present invention, the token agent program installed in the customer wireless terminal 1100 generates a predetermined token code in a time synchronous manner. To this end, the token agent program is provided to the wireless terminal 1100 It is preferable to extract the current time (or time) information from the internal timer, and generate the diagnostic token code using the extracted time (or time) information as predetermined token generation information for generating the diagnostic token code.

Of course, depending on the intentions and / or methods of those skilled in the art, the token agent program may provide at least one token creation information (e.g., a token agent program from the storage device provided in the wireless terminal 1100) ESN information of the wireless terminal 1100 stored in the NAM (Number Assignment Module) of the wireless terminal 1100), and further transmits the MIN / ESN information of the wireless terminal 1100, It is possible to generate diagnostic token codes.

The diagnostic token code generated as described above is provided to the token agent providing server 215 through a predetermined wireless network and the token agent providing server 215 generates the diagnostic token code at the wireless terminal 1100 Generates the predetermined diagnostic token authentication code including the time (or time) information, compares the received diagnostic token code with the generated diagnostic token authentication code, and transmits the generated token to the token agent program loaded in the wireless terminal 1100 Check for validity.

According to another embodiment of the present invention, the token agent program installed in the customer wireless terminal 1100 generates a predetermined token code in a challenge-response manner, And provides the generated challenge value to the wireless terminal 1100. The token agent program generates the diagnostic token code using the provided challenge value as predetermined token generation information for generating the diagnostic token code.

Of course, depending on the intentions and / or methods of those skilled in the art, the token agent program may provide at least one token creation information (e.g., a token agent program from the storage device provided in the wireless terminal 1100) And the MIN / ESN information of the wireless terminal 1100 stored in the NAM of the wireless terminal 1100) to generate the diagnostic token code It is possible to do.

The generated diagnostic token code is provided to the token agent providing server 215 via a predetermined wireless network and the token agent providing server 215 generates the diagnostic token code at the wireless terminal 1100 Generates a predetermined diagnostic token authentication code including the used challenge value and compares the received diagnostic token code with the generated diagnostic token authentication code to determine validity of the token agent program loaded in the wireless terminal 1100 .

If the token diagnosis token code and the diagnostic token authentication code do not match (550), the token agent providing server 215 requests the wireless terminal 1100 to retransmit the token diagnosis token code (555) The validity of the token agent is confirmed by repeating the steps 535 to 545.

On the other hand, if the validity of the token agent is authenticated (550) because the token diagnosis token code matches the diagnostic token authentication code, the information storage server 235 stores the financial transaction means information provided from the financial instrument issuing server 200 The token agent information is linked with the customer information (and / or the wireless terminal information) and stored in a predetermined storage medium (560).

6 is a diagram illustrating the configuration of information of wireless terminal information stored in the storage medium 110 according to an embodiment of the present invention.

More specifically, FIG. 6 illustrates a preferred information configuration of financial transaction wireless terminal information associated with and / or associated with the financial transaction means information for a token code based financial transaction, 110 may be further added with at least one information item according to the intention of a person skilled in the art to which the present invention is applied, and thus the present invention is not limited thereto.

6, the wireless terminal information includes at least one of a phone number (MIN) and a serial number (ESN) of a wireless terminal owned by a financial transaction customer on which the token agent is installed, And may further include platform information, communication company information, terminal model information, and the like for the wireless terminal 1100.

According to the method of the present invention, it is possible that at least one information item is added to the wireless terminal information according to the intention of a person skilled in the art. For example, the wireless terminal information may further include IC chip specific information (ICCHIP) (not shown) on an IC chip mounted or detached from the wireless terminal, and / or a SIM (Subscriber Identity Module ), A universal identification module (UIM), or a universal subscriber identity module (USIM), it is possible to further include the SIM information, the UIM information, or the USIM information.

FIGS. 7A and 7B illustrate information configuration of token agent information stored in the storage medium 110 according to an embodiment of the present invention.

7a and 7b illustrate a preferred information configuration of token agent information corresponding to a token agent program loaded on the financial transaction customer wireless terminal 1100 for a token code based financial transaction, 7B illustrates a preferred information configuration of the token agent information corresponding to the challenge-response type token agent program, and FIG. 7B illustrates a preferred information configuration of the token agent information corresponding to the challenge-response type token agent program.

According to an embodiment of the present invention, the token agent information is preferably associated with the financial transaction wireless terminal information and / or the financial transaction means information on which the token agent program is installed, May be further added to at least one information item in accordance with the intention of a person skilled in the art practicing the present invention, and thus the present invention is not limited thereto.

Referring to FIGS. 7A and 7B, the token agent information includes information for identifying which kind of token agent is loaded on the customer wireless terminal, and generating a token authentication code for authenticating the token code generated in the token agent The token agent information includes platform information of a wireless terminal equipped with the token agent program, a token agent version mounted on the platform, a token generation algorithm, and at least one token generation information. .

Referring to FIG. 7A according to an embodiment of the present invention, the time synchronization type token agent information may further include a predetermined token update period in which time synchronization is maintained.

Referring to FIG. 7B according to another embodiment of the present invention, the challenge value of the token generation information included in the challenge-response token agent information (for example, the first generation information of FIG. 7B) And a null value is generated before a challenge value to be transmitted to the financial transaction customer wireless terminal 1100 is generated. When the challenge value to be transmitted to the financial transaction customer wireless terminal 1100 is generated, the generated challenge value is substituted, It is preferable to maintain the substituted challenge value until a predetermined token code (response) corresponding to the challenge value is received from the token agent program loaded in the terminal 1100, and the received token After the authentication procedure for the code is performed (e.g., the token authentication code corresponding to the received token code via the held challenge value Generated after), the first generation of a challenge value information (e.g., reference 7b of the token generation information) is preferred to include a null value back.

The wireless terminal information includes at least one of a telephone number (MIN) and a serial number (ESN) of a financial transaction customer's wireless terminal on which the token agent is installed, And may further include platform information for the wireless terminal 1100, communication company information, terminal model information, and the like.

According to the method of the present invention, it is possible that at least one information item is added to the wireless terminal information according to the intention of a person skilled in the art. For example, the wireless terminal information may further include IC chip specific information (ICCHIP) (not shown) on an IC chip mounted or detached from the wireless terminal, and / or a SIM (Subscriber Identity Module ), A universal identification module (UIM), or a universal subscriber identity module (USIM), it is possible to further include the SIM information, the UIM information, or the USIM information.

8 is a diagram illustrating the configuration of information of customer information stored in the storage medium 110 according to an embodiment of the present invention.

More specifically, FIG. 8 illustrates a preferred information configuration of certain customer information for a financial transaction customer associated with and / or associated with the financial transaction means information for a token code based financial transaction, The information stored in the storage medium 110 may be further added to at least one information item according to the intention of a person skilled in the art to which the present invention is applied, and thus the present invention is not limited thereto.

Referring to FIG. 8, the customer information includes customer personal information including at least one name, resident registration number, and address of the financial transaction customer, a token agent relationship that sets a relationship between the financial transaction customer and the token agent, Information is included.

Referring to FIG. 8, which is a preferred embodiment of the present invention, the token agent relationship information preferably includes the financial transaction customer owned wireless terminal information, and thereby the token agent A token code based financial transaction using the program is performed.

FIGS. 9A and 9B are diagrams illustrating information configuration of financial transaction means information stored in the storage medium 110 according to an embodiment of the present invention.

In more detail, FIG. 9A illustrates the token-agent-related information, which is associated with the financial-transaction-means-owned customer information for the token-code-based financial transaction and / And more specifically, financial transaction means information including at least one customer financial account information corresponding to the financial transaction means issued by the predetermined bank to the customer, .

The financial transaction means may be a predetermined card medium (for example, a magnetic stripe (MS) card and / or an integrated circuit (IC) card) (For example, the MS card and / or the IC card) to the financial transaction means information in the case where it is associated with the financial transaction means information and / or the wireless chip medium (for example, an IC chip mounted or detached from the customer wireless terminal 1100) And / or an IC chip) and / or media storage information stored in the card medium and / or the wireless chip medium (e.g., information stored in Track-II if the medium is an MS card, etc.) , And the present invention is not limited by the financial transaction means information configuration item.

Referring to FIG. 9A, the financial transaction means information stored in the storage medium 110 includes a type of a financial instrument corresponding to the financial transaction means, and a type of financial transaction means for issuing the financial transaction means (or a passbook corresponding to the financial transaction means) And financial information of the financial transaction corresponding to the financial transaction means. The financial transaction information includes financial information of the financial transaction means.

According to an embodiment of the present invention, in the financial account information, the financial account information corresponding to the financial transaction means includes a predetermined account number for the financial transaction means, an opening date of the passbook corresponding to the financial transaction means, (Not shown) of the passbook corresponding to the financial transaction means and a settlement date (for example, a settlement date) of the bank account corresponding to the financial transaction means, , Second Friday of each month, first, fifth, eighth, and so on) information (not shown).

In more detail, FIG. 9B illustrates preferred information of financial transaction means information associated with customer transaction information owned by financial transaction means for token code based payment processing and / or associated with token agent information loaded on the customer wireless terminal 1100 More specifically, in the case of an MS (Magnetic Stripe) card in which the payment means issued by the predetermined payment means issuing institution to the customer includes at least one of the track-II and / or track-III data And financial transaction means information included in the MS card.

9B, the IC card and / or the customer wireless terminal 1100 may be installed in addition to the financial transaction means information included in the MS card. (For example, the payment means provided in the IC card and / or the IC chip may also be included in the track II of the MS card) And the financial transaction means information configuration item is not limited to the present invention.

For example, if financial transaction means information stored in the IC card and / or the IC chip having a predetermined authorized certificate is stored in the storage medium 110, information corresponding to the authorized certificate (for example, an authorized certificate An issuing authority, a copy of an authorized certificate, etc.).

9B, the financial transaction means information stored in the storage medium 110 includes credit card payment means, debit card payment means, cash card payment means, check card payment means, prepaid card payment means, Financial transaction means information including at least one financial account settlement means and an electronic money settlement means; a settlement means issuing organization that has issued the settlement means; (For example, an English name of a customer) that has been issued with a payment means of the payment means, and further includes information stored in the track II of the payment means and / or information stored in the track III. .

According to the method of the present invention, the information stored in the track-II of the payment means includes at least one 16-digit card number, the issuing date of the payment means, the valid period of the payment means, and the CVC number The information stored in the Track-III of the payment means may further include at least one affiliate information and / or supplementary service information associated with the payment means.

In the following description, the server 115, the information transmission means 125, the information storage means 130 and / or the financial transaction server 1000 providing the token code-based financial transaction according to the present invention are defined as follows. The technical features are described in detail.

FIG. 10 is a block diagram of a financial transaction processing system using a wireless terminal number according to an embodiment of the present invention.

More specifically, FIG. 10 is a flowchart illustrating a method of generating a token code according to a token code generation method including at least one token generation information and a predetermined token generation algorithm, To the predetermined financial transaction server (1000) through a predetermined client terminal (145).

Referring to FIG. 10, the financial transaction server 1000 includes an interface unit 1005 for connecting a communication channel for financial transactions with at least one client terminal 145 for a financial transaction based on a token code, The financial transaction information data including financial transaction information for financial transactions based on the token code, customer information possessed by the financial transaction means, and token codes from the customer terminal (145) via the interface unit (1005) An information receiving unit 1010 for receiving the financial transaction information, an information checking unit 1015 for reading the received financial transaction information data and confirming the customer information and / or financial transaction means information owned by the financial transaction means, An extracting unit 1020 for extracting token agent information associated with the customer information from the storage medium 110 based on the extracted token information, (E.g., the same token generation information and the token generation algorithm) that generates the token code in the token agent program provided in the customer terminal 145 based on the information, And an authentication unit (1025) for comparing the token code received from the wired terminal (145) with the generated token authentication code and authenticating the validity of the received token code.

In addition, when the validity of the received token code is authenticated by the authentication unit 1025, the financial transaction server 1000 transmits the financial transaction information corresponding to the financial transaction information included in the financial transaction information data, And a financial transaction unit (1030) for performing a financial transaction.

In addition, when the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 may associate at least one financial transaction transaction history with the financial transaction means information and / And a storage unit (1035) for storing the data in the storage medium (135).

In addition, when the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 transmits the transaction details to the customer terminal 145 through the interface unit 1005 And an information transferring unit 1040 for transferring the information.

The interface unit 1005 connects the at least one client terminal 145 with a communication channel for financial transactions for financial transactions based on the token code through a predetermined financial transaction network 140 The network for trading 140 may include at least one wired network 140 (e.g., TCP / IP based Internet) and / or a wired / wireless network 140 (e.g., , A CDMA-based mobile communication network) and / or a value-added communication network (VAN) and / or a financial common network.

The information receiving unit 1010 may include at least one of financial transaction means information and / or token code and / or financial transaction means own customer information transmitted from the client terminal 145 through the interface unit 1005 And receives financial transaction information data.

According to an embodiment of the present invention, the financial transaction means information and / or the token code and / or the customer information possessed by the financial transaction means are included in the financial transaction information data including the financial transaction information, And / or the token code and / or the customer information possessed by the financial transaction means are received from the customer terminal 145 by the financial transaction information data including the financial transaction information, (Or data) for transmission of the token code before the information is received by the information receiving unit 1010, and / or the information about the financial transaction means and / or the token code and / The customer information is transmitted from the customer terminal (145) to the financial transaction information data including the financial transaction information After received in 1010 is preferably received via a separate specialized (or data) for transmitting the token code.

According to another embodiment of the present invention, the token code is preferably received from the customer wireless terminal 1100 including the financial transaction information to the information receiving unit 1010, It is preferable that the financial transaction information data including the financial transaction information is received through the customer wireless terminal 1100 before being received by the information receiving unit 1010 and / The financial transaction information data including financial transaction information may be received through the customer wireless terminal 1100 after being received by the information receiving unit 1010. [

When the token agent is mounted on the customer-owned wireless terminal 1100 according to another embodiment of the present invention, the information receiver may extract the wireless terminal information as caller information in the process of receiving the financial transaction information data It is possible.

The information verification unit 1015 reads out the financial transaction information data received by the information receiving unit 1010 to thereby identify the customer information and / or financial transaction means information owned by the financial transaction means included in the financial transaction information data (Or data) for transmitting the token code is received when the customer information and / or the financial transaction means information owned by the financial transaction means is received through a special message (or data) for transmission of the token code, It is preferable that the customer information and / or the financial transaction means information owned by the financial transaction means are identified and extracted.

The extracting unit 1020 extracts, from the storage medium 110, the customer information and / or financial transaction means information owned by the financial transaction means using the extracted customer information and / or financial transaction means information Extracts the token agent information, and provides the extracted token authentication information to the authentication unit 1025.

Based on the extracted token agent information, the authentication unit 1025 generates the same token generation information used to generate the token code in the token agent program included in the customer wireless terminal 1100 and a predetermined token Authenticating the validity of the received token code by comparing the generated token authentication code with the token code received from the client terminal 145 and / or the customer wireless terminal 1100 Authentication of the received token code by the authentication unit 1025 is performed based on confidentiality, authentication, integrity, and / or security for the financial transaction based on the token code. Nonrepudiation is ensured.

When the validity of the token code is authenticated by the authentication unit 1025, the financial transaction unit 1030 performs a financial transaction corresponding to the financial transaction information included in the financial transaction information data .

According to an embodiment of the present invention, the financial transaction unit 1030 performs a financial transaction corresponding to the financial transaction information in cooperation with a predetermined financial system based on the financial transaction information.

According to an embodiment of the present invention, the financial transaction unit 1030 preferably performs a financial transaction corresponding to the financial transaction information, and generates a predetermined financial transaction processing corresponding to the settlement processing / financial transaction , The storage unit 1035 stores the generated at least one financial transaction processing history in a predetermined storage medium 135 in association with the financial transaction means information and / or the customer information, Unit 1040 transmits the generated financial transaction processing details to the client terminal 145 through the interface unit 1005. [

According to another embodiment of the present invention, when the token code received from the client terminal 145 is generated by the client wireless terminal 1100 in a challenge-response manner, the authentication unit 1025 may generate a random challenge And the information transmission unit 1040 may include a function of transmitting the generated challenge value to the customer wireless terminal 1100. [

FIG. 11 is a diagram illustrating a functional configuration of a customer wireless terminal 1100 equipped with a token agent according to an embodiment of the present invention.

In more detail, FIG. 11 illustrates a case where a mobile communication terminal accessing a mobile communication network based on Code Division Multiple Access (CDMA) performs a function of a wireless terminal for generating a token code for the token code- And a preferred functional configuration of the mobile communication terminal for generating the token code.

As shown in FIG. 11, the mobile communication terminal may be a wireless terminal for generating token codes for the token code-based financial transactions (for example, a wireless data communication terminal, The portable Internet terminal) can easily be conceived.

As a result, the configuration of the wireless terminal equipped with the token agent program is not limited to that illustrated in FIG. 11, and various types of wireless terminals may be used in accordance with the types of wireless terminals and / It is possible to carry out the modification.

The wireless terminal 1100 for providing mobile communication services in terms of hardware includes an outer body, a speaker, a microphone, a keypad, a liquid crystal display (LCD), an antenna and a battery 1125, A predetermined modem chip (for example, an MSM series modem chip of Qualcomm of the United States) having a function of a CDMA (Code Division Multiple Access) modem, a CPU / MPU (Central Processing Unit / Micro Processing Unit) , A memory device, a duplexer filter that separates the transmit and receive signals from one antenna, a power amplifier that amplifies the transmit signal, a high power amplifier (HPA), an isolator that prevents reverse transmission of high- ), An RF / IF SAW filter to remove the desired out-of-band spurious signal, a frequency upstream circuit of the transmission path, a frequency downconversion circuit of the reception path, and a reference clock source A UHF frequency synthesizer used as a local signal of a frequency up / down conversion, and a codec chip for converting an analog voice signal into a digital signal. Is gradually integrated into the modem chip, and various functions for various multimedia services and / or additional services are integrated in the modem chip in addition to core components for the mobile communication service.

Referring to FIG. 11, a wireless terminal 1100 that generates a predetermined token code for the token code based financial transaction basically includes a control unit 1105, a screen output unit 1110, a sound processing unit 1115, a key input unit A wireless communication unit 1135 and a memory unit 1155 and a battery 1125 for supplying power to the wireless terminal 1100 and an IC And an IC chip reader 1145 for reading / writing predetermined information or data to / from the IC chip 1150. [

The control unit 1105 includes a processor including a CPU / MPU provided in the modem chip, and an execution memory, and is provided with a predetermined program routine for providing a function peculiar to the wireless terminal 1100 from a predetermined memory element. And a bus (BUS) for inputting / outputting program data and / or a predetermined electronic circuit (or an integrated circuit) provided therefor, and is characterized in that it comprises software from a predetermined memory device and / or a chipset A generic term for program routines and / or program data that are loaded into the execution memory and processed through the processor to perform a specific function (thus, in the present invention, the token code for the token code- 1100 for convenience of description, The control unit 1105 realizes various functions to be implemented in the wireless terminal 1100. In order to realize the functions as described above, And controls and manages the overall operation of the display device 1100. Particularly, when power is input to the wireless terminal 1100 to perform the function of the control unit 1105 for controlling and managing the overall operation of the wireless terminal 1100, an operating system routine, Management routines, and / or system variables are loaded into and loaded into the execution memory and processed by the processor to serve as variables for providing an operating system, system management program, and / or mobile communication service.

The screen output unit 1110 is a LCD (Liquid Crystal Display) driver for outputting a screen image by the control unit 1105 (e.g., a program routine for outputting predetermined information or data to the LCD) And / or content (e.g., text content, image content, and / or content) extracted and / or generated in the course of performing a predetermined function provided in the wireless terminal 1100, (LCD), and the screen output unit 1110 is connected to a screen output device (LCD) and displays the token code-based financial information It is desirable to perform a function of outputting predetermined information required in the process of generating the token code for the transaction.

The sound processing unit 1115 encodes a predetermined sound signal input from the microphones included in the wireless terminal 1100 and provides the encoded sound signal to the control unit 1105 or the control unit 1105 extracts and / The sound processor 1115 decodes a predetermined sound signal and outputs the sound signal through a speaker. For this purpose, the sound processor 1115 includes a predetermined vocoder and a codec.

The sound processing unit 1115 and the microphone may be used to perform a function of sound input means provided in the wireless terminal 1100 or a sound output unit provided in the wireless terminal 1100 through the sound processing unit 1115 and a speaker Function as a means.

The key input unit 1120 may include at least one key button having a predetermined number key and / or a character key and / or a function key, (Or signal) input from a keypad and detects a predetermined key button (not shown) provided in the keypad in a specific input mode and / or an operation mode of the wireless terminal 1100 controlled by the controller 1105, (E.g., MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, and MH_KEY_RELEASEEVENT) corresponding to the input information (or signal), and transmits the generated key event to the control unit 1105 The control unit 1105 reads predetermined key data corresponding to the key event in the current input mode and / or the operation mode of the wireless terminal 1100 (for example, (Read key data to the key event from the key table storing (managing) at least one key data corresponding to a specific key event in the input mode and / or the operation mode of the line terminal 1100), and / And reads a command for executing a predetermined function matched and defined.

The keypad having the key input unit 1120 and at least one or more key buttons performs a function of a key input unit included in the wireless terminal 1100 in cooperation with each other.

The radio processing unit 1130 may perform location registration and / or slot mode and / or power control and / or power control in cooperation with the controller 1105 (e.g., a program routine for providing a mobile communication service) Or a hand-off and / or a call processing procedure. In the process of providing the mobile communication service, a base station corresponding to an end of the mobile communication network, (E.g., antenna control, modulation, synthesis, amplification, and / or filtering of a radio frequency signal) for performing transmission and reception of a radio frequency signal.

In particular, the radio processing unit 1130 processes information or signals transmitted from the mobile station 1100 to the base station in order to provide the mobile communication service to the CDMA stack, or receives predetermined information from the CDMA stack received from the base station Or a function of reading a signal.

According to an embodiment of the present invention, the wireless terminal 1100 connects a predetermined wireless section with a base station on a predetermined mobile communication network through the wireless processor 1130, and transmits the wireless section 1100 through a predetermined wired section including the base station It is preferable to connect a predetermined communication channel with a predetermined server (or device) provided on a mobile communication network and / or a predetermined communication network interlocked with the mobile communication network.

According to an embodiment of the present invention, the radio processor 1130 connects a predetermined communication channel with the token agent providing server 215 to load a predetermined token agent program in the radio terminal 1100, And can receive a predetermined token agent program from the token agent providing server 215 in cooperation with the control unit 1105. [

According to another embodiment of the present invention, when the token agent program generates a predetermined token code for a predetermined token code-based financial transaction in a challenge-response manner, the radio processing unit 1130 transmits the token code to the control unit 1105 And may receive a predetermined challenge value for generating the token code from the financial transaction server 1000. In this case,

According to another embodiment of the present invention, in providing the token code generated by the token agent program to the financial transaction server 1000, the token code is transmitted from the wireless terminal 1100 to a predetermined wireless (For example, transmitting a part of the generated token code to the financial transaction server 1000) or providing the generated token code to the financial transaction server 1000 through the network 140 The radio processing unit 1130 connects the predetermined transaction channel with the financial transaction server 1000 in cooperation with the control unit 1105 and transmits the generated transaction transaction information to the financial transaction server 1000 It is preferable to transmit the token code.

The short-range communication unit 1135 is connected to the local area communication unit 1135 through an infrared ray communication and / or a radio frequency (RF) communication and / or a Bluetooth and / or a wireless LAN and / or a Wi- (Or device) through at least one or more short-range wireless communication means including an Ultra Wide Band (UWB), and is characterized in that the infrared communication, the RF communication, And a predetermined short range wireless communication module for short range wireless communication including Bluetooth, wireless LAN, Wi-Fi, ultra-wideband communication, and comprises a communication protocol and / or driver for the short range wireless communication in software.

According to an embodiment of the present invention, the wireless terminal 1100 connects a wireless section connecting a predetermined short range wireless communication session with a predetermined short range wireless terminal 1140 through the short range communication section 1135, (Or devices) provided on a predetermined communication network through a wired section including a predetermined network 140 connected to the plurality of wireless terminals 1140 and 1140.

According to an embodiment of the present invention, the local area communication unit 1135 may communicate with the token agent providing server 215 via the local area network 1140 in order to load a predetermined token agent program in the wireless terminal 1100, And may receive a predetermined token agent program from the token agent providing server 215 in conjunction with the control unit 1105. [

According to another embodiment of the present invention, when the token agent program generates a predetermined token code for a predetermined token code-based financial transaction in a challenge-response manner, the short-range communication unit 1135 transmits the token code to the controller 1105 And may receive a predetermined challenge value for generating the token code from the financial transaction server 1000 by connecting the predetermined communication channel with the financial transaction server 1000 through the short- have.

According to another embodiment of the present invention, the short range device 1140 may be a client terminal processing the token code based financial transaction and / or a local area communication module provided in the client terminal, The local area communication unit 1135 is connected to the local area communication unit 1140 in cooperation with the control unit 1105 and connects the local area communication channel to the local area communication unit 1140 via the local area communication channel, It is possible to provide a token code.

The memory unit 1155 may store a predetermined program routine (or code) and / or program data (for example, a program routine (Read only memory) corresponding to a read-only memory, a flash memory (FM) capable of reading / writing, and an EEPROM (Electrically Erasable and Programmable Read) Only Memory).

In general, the ROM stores system information that should not be deleted, and the flash memory includes an operating system routine, a call processing program routine, and / or an application program routine provided through the wireless terminal 1100 and information or data therefor And at least one information and / or data extracted and / or generated during execution of an application provided in the wireless terminal 1100 are stored in the EEPROM, do.

According to an embodiment of the present invention, the token generation information is read out from an internal functional configuration of the wireless terminal 1100 (for example, when the token agent program generates a token code in a time synchronous manner, (Or time) information from the timer provided in the memory unit 1155 as token generation information), and / or stored in the token generation information area of the memory unit 1155, and / or inside the token agent program And the memory unit 1155 may store at least one token generation information defined to be stored in a storage device provided in the wireless terminal 1100. [

For example, the memory unit 1155 stores the MIN / ESN information for the wireless terminal 1100 in the NAM (Number Assignment Module) area and / or assigns the MIN / ESN information to the predetermined token generation information area Lt; RTI ID = 0.0 > secret key value. ≪ / RTI >

The IC chip reader 1145 reads the IC chip related function configuration (for example, the wireless terminal 1100) provided in the wireless terminal 1100 through the IC chip standard including ISO / IEC 7816 and / or ISO / IEC 14443, And / or data exchange between the IC chip 1150 mounted on or removed from the wireless terminal 1100. In this case,

For example, the IC chip reader unit 1145 provides information and / or data exchange between the IC chip agent program and the IC chip 1150 through an APDU (Application Protocol Data Unit).

Referring to the specification including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip 1150 mounted on or removed from the customer wireless terminal 1100 includes a power supply VCC, a reset signal RST, (E.g., command or data exchange, etc.) with the IC chip reader unit 1145 through contact points such as a clock signal (CLK), ground (GND), programming power supply (VPP), and / or input / output (I / O) And a processor unit including at least one computing element including a central processing unit (CPU), a micro processing unit (MPU), and / or a coprocessor, a ROM (Read Only Memory), a RAM A memory unit including at least one memory device including a random access memory (EEPROM), an electrically erasable and programmable read only memory (EEPROM), and a flash memory (FM). In particular, , ≪ / RTI > ROM) A chip operating system (COS) for managing and operating auxiliary resources is stored. When a predetermined power is supplied from the IC chip reader 1145 through the power supply (VCC) contact point of the input / output interface, The COS stored in the APC unit 1150 is loaded into a predetermined execution memory to control the overall operation of the IC chip 1150 and the APDU application program is executed based on the clock frequency (e.g., 3.57 MHz or 4.9 MHz) of the clock signal (CLK) And controls the exchange of information or data between the IC chip 1150 and the IC chip reader unit 1145 through a protocol data unit.

According to another embodiment of the present invention, the token agent program may be provided in the IC chip 1150 (for example, the token agent program may be recorded in a recording medium provided in the IC chip 1150) The present invention is not limited thereto.

According to another embodiment of the present invention, when the token agent program is provided in the platform of the wireless terminal 1100 and / or is provided in the IC chip 1150, The present invention can be stored in a memory unit included in the chip 1150, and thus the present invention is not limited thereto.

Referring to FIG. 11, there is shown a wireless communication system including a wireless communication device, such as a wireless communication device, which receives a token agent in connection with a token agent on the wireless terminal 1100 and a token agent providing server 215 on the wireless network 140, And a communication processing unit 1180 that generates a predetermined token code by the agent or performs a communication function required to process a predetermined financial transaction with the token code.

Referring to FIG. 11 according to a preferred embodiment of the present invention, a token agent installed in the wireless terminal 1100 includes an input unit 1160 for receiving at least one piece of information (or data) for generating the token code, A read unit 1165 that reads at least one token generation information required to generate a token code of the token generation unit, and a generation unit 1160 that applies the read token generation information to a predetermined token generation algorithm to generate a predetermined token code And an output unit 1175 for outputting the generated token code to the screen of the wireless terminal 1100.

The input unit 1160 receives at least one piece of information (or data) for generating the token code in cooperation with the key input unit. The input information (or data) generates a predetermined token code And / or a predetermined PIN (Personal Identification Number) information for internal authentication of the generated token code, and / or the generated token code on the screen of the wireless terminal 1100, Or a token code output command to be output to the outside of the wireless terminal 1100 through the wireless processing unit 1130 and / or the local communication unit 1135 in cooperation with the communication processing unit 1180. [

According to an embodiment of the present invention, the generation unit 1170, which is input from the key input unit through the input unit 1160, can be used as predetermined token generation information for generating a predetermined token code, And the token code generated by the generating unit 1170 is output in the process of being output (e.g., output to the screen of the wireless terminal 1100 and / or output to the outside of the wireless terminal 1100) .

According to another embodiment of the present invention, when the token agent is provided in the IC chip 1150 mounted or detached from the wireless terminal 1100, the PIN information is transmitted to the user 1150 defined in the IC chip 1150, And performing an authentication procedure.

The read unit 1165 reads the token agent internal code and / or the token agent internal code from the memory unit 1155 and / or the memory unit included in the IC chip 1150, And the at least one token code generation information defined so that the agent is used to generate a predetermined token code.

According to an embodiment of the present invention, the reading unit 1165 reads the time (or time) information required for generating the token code from the internal resource of the wireless terminal 1100 (for example, a timer resource in the wireless terminal 1100) And / or a predetermined secret set for generating the token code from the memory unit 1155 and / or the memory unit included in the IC chip 1150, and / It is desirable to read the key value and / or to read a predetermined MIN / ESN from the NAM area of the memory unit 1155. [

In the case of token generation information defined to apply a predetermined hash function among the read token generation information, the reading unit 1165 applies a predetermined hash function to the read token generation information to generate corresponding token generation information It is preferable to further include a function of converting (or limiting) the value to a value within a predetermined size.

According to another embodiment of the present invention, the reading unit 1165 can generate a real-time (for example, randomly dynamic in the financial transaction server 1000) from the financial transaction server 1000 in cooperation with the communication processing unit 1180, As the predetermined token generation information used to generate the predetermined token code in the generating unit 1170. [

The generating unit 1170 generates a predetermined token code that can not be predicted according to a predetermined token generation algorithm based on at least one token generation information read by the reading unit 1165, It is preferable to include a data block having a predetermined length.

The output unit 1175 outputs the token code generated by the generation unit 1170 to the screen of the wireless terminal 1100. The wireless processing unit 1130 and / (Or all) of the generated token code to the financial transaction server 1000 via the local communication unit 1135 and / or to the financial transaction server 1000 through the local communication unit 1135, It is preferable to provide the terminal to a wired terminal.

The communication processing unit 1180 is connected to the token agent providing server 215 on the wireless network 140 and receives a predetermined token agent to be mounted on the wireless terminal 1100. The control unit 1105 (Or installing) the customer's wireless terminal 1100 through the wireless terminal 1100.

When the token agent receives a predetermined challenge value from the financial transaction server 1000 in the process of generating the predetermined token code, the communication processing unit 1180 transmits the challenge code to the radio processing unit 1130 and / (Or a communication channel connection process can be omitted when receiving the challenge value via a wireless message) to the financial transaction server 1000 in cooperation with the financial transaction server 1135, It is desirable to receive a predetermined challenge value dynamically generated in the server 1000. [

In addition, when the token code and / or a part of the token code generated by the token agent is transmitted to the financial transaction server 1000 through the radio processing unit 1130 and / or the local communication unit 1135, The processing unit 1180 connects the predetermined communication channel to the financial transaction server 1000 in cooperation with the radio processing unit 1130 and / or the local communication unit 1135, and transmits the predetermined communication channel to the financial transaction server 1000 It is preferable to transmit the generated token code and / or a part of the token code.

When providing the token code and / or a part of the token code generated by the token agent to the client terminal processing the token code-based financial transaction through the local communication unit 1135, 1180 is connected to the local wire communication unit 1135 to connect the predetermined local communication channel with the customer terminal and transmits a part of the generated token code and / or token code to the customer terminal through the local communication channel .

FIG. 12 is a diagram illustrating a token code structure according to an embodiment of the present invention.

More specifically, FIG. 12 illustrates a preferred embodiment of a token code generated by the token agent program, wherein each information location forming the token code can be modified by one skilled in the art.

Those skilled in the art will readily be able to deduce a token code structure containing more information with reference to FIG. 12, and the present invention is not limited thereto.

Referring to FIG. 12, a token code generated by the token agent program is generated through a hash algorithm for generating a predetermined token code based on at least one token generation information in the token agent as shown in FIG. 12 (a) And the hashing code may further include at least one or more pieces of information according to an intention of a person skilled in the art and / or an information subject intuitively authenticated through the token code.

Referring to FIG. 12 (b), the token code is transmitted to a predetermined hash code generated through a hash algorithm for generating a predetermined hash token code defined in the token agent program, PIN information, or further includes predetermined user input information input by the user (customer) as shown in (D) of FIG. 12, (For example, reducing the length of the user input information to a predetermined length) by applying a predetermined hash function to the input information, and thus the present invention is not limited thereto.

Referring to (e) of FIG. 12, the token code further includes the PIN information and the user input information in a predetermined hashing code generated through a hash algorithm for generating a hash token code defined in the token agent program Alternatively, as shown in (b) of FIG. 12, the hashing code may further include the PIN information and the hashed input information in which a predetermined hash function is applied to the user input information, It is not limited.

13a and 13b are diagrams illustrating a token code operation process according to an embodiment of the present invention.

13A and 13B illustrate a case where the token agent is installed in the customer wireless terminal 1100 and the financial transaction using the generated token code is performed in the customer wireless terminal 1100 during a financial transaction using a predetermined wired terminal Specifically, the token agent of the customer wireless terminal 1100 generates a 10-digit token code, and transmits the generated 10-digit token code to the financial transaction server 110 via a predetermined customer terminal 135. [ (1000), and authenticates the token code at the financial transaction server (1000).

For convenience, the process of inputting the predetermined PIN information in order to execute the token agent program and / or perform the internal authentication procedure in the token agent is omitted.

13A and 13B illustrate that only the token code is transmitted to the financial transaction server 1000 in the financial transaction in order to efficiently explain the token code operation process. However, in the technical field of the present invention, The token code is included in the predetermined financial transaction information data including the predetermined financial transaction information for the token code based financial transaction, the financial transaction means information, and / or the customer information, (1000), and the present invention is not limited thereto.

Referring to FIG. 13A, the read unit 1165 reads the internal resources of the customer wireless terminal 1100 and / or the internal resources of the token agent 1100 according to a predetermined token code generation command input by the input unit 1160 of the token agent program. Code and / or at least one token code generation information defined to be used by the token agent to generate a predetermined token code from the memory unit 1155 and / or the memory unit included in the IC chip 1150 (1300), and provides at least one or more token generation information read out to the generator (1170) (1305).

The generating unit 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on at least one token generation information provided from the reading unit 1165 in operation 1310, The unit 1175 outputs the generated token code to the wireless terminal screen (1315).

If the token code is displayed on the screen of the customer wireless terminal 1100 as described above, the token code is input to the customer terminal 135 through a predetermined key input unit provided in the customer terminal 135 (1320) Or is transmitted to the customer terminal 135 through a predetermined local communication means provided in the customer wireless terminal 1100 and the customer terminal 135 And transmits the token code to the financial transaction server 1000 through the communication network 130 (1325).

According to an embodiment of the present invention, in the process of transmitting the token code to the financial transaction server 1000 through the payment network 130 for the token code based financial transaction, It is preferable that the token code, the financial transaction means information, and the predetermined financial transaction information for the token-based financial transaction are included in the predetermined financial transaction information data and transmitted to the financial transaction server 1000.

Referring to FIG. 13B, the information receiving unit of the financial transaction server 1000 receives a predetermined token code, financial transaction means information, and financial transaction information transmitted from the customer terminal 135 through the payment network 130, In operation 1330, the information verification unit checks the financial transaction information from the financial transaction information data 1335 and provides the extracted financial transaction information data to the extraction unit 1340.

The extracting unit provided with the financial transaction means information extracts predetermined token agent information associated with the financial transaction means information (or corresponding to the received token code) from the storage medium 110 (1345) And provides the token agent information to the authentication unit (1340).

If the token agent information is provided as described above, the authentication unit may generate the same token generation information and / or the token generation information used to generate the token code in the token agent provided in the customer wireless terminal 1100, based on the token agent information, Alternatively, a predetermined token authentication code is generated (1355) through the same procedure as the procedure for generating the token code in the token agent, and the token code received through the information receiving unit is compared with the generated token authentication code, The validity of the code is checked (1360). If the validity of the token code is authenticated (1365), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

14a, 14b, and 14c illustrate a token code operation process according to an embodiment of the present invention.

14A, 14B, and 14C illustrate a case where the token agent is installed in the customer wireless terminal 1100 and the generated token code is used in the customer wireless terminal 1100 in a financial transaction using a predetermined wired terminal The token agent provided in the customer wireless terminal 1100 receives a predetermined challenge value from the financial transaction server 1000 to generate a 10-digit token code, And transmits the token code to the financial transaction server 1000 through a predetermined client terminal 145 and authenticates the token code at the financial transaction server 1000. [

For convenience, the process of inputting the predetermined PIN information in order to execute the token agent program and / or perform the internal authentication procedure in the token agent is omitted.

14A and 14B illustrate that only the token code is transmitted to the financial transaction server 1000 in the financial transaction in order to efficiently explain the token code operation process. However, in the technical field of the present invention, The token code is included in predetermined financial transaction information data including the predetermined financial transaction information for the token code based financial transaction and the financial transaction means information and transmitted to the financial transaction server 1000 It will be understood that the present invention is not limited thereto.

Referring to FIG. 14A, an authentication unit included in the financial transaction server 1000 extracts (1400) predetermined wireless terminal information for transmitting a predetermined challenge value from the storage medium 110, (1405) dynamically generates a predetermined challenge value to be transmitted to the token agent program provided in the token agent program, and provides the wireless terminal information and the challenge value to the information transmission unit, And transmits the generated challenge value to the customer wireless terminal 1100 through the network 140 (1410).

When the generated challenge value is transmitted to the customer wireless terminal 1100 in which the token agent program is installed, the authentication unit stores the challenge value transmitted to the customer wireless terminal 1100 in the storage medium 110 (1415).

Referring to FIG. 14B, the token agent program reading unit 1165 receives (1420) a predetermined challenge value received from the financial transaction server 1000 through the communication processing unit, and stores the received challenge value Token agent internal code and / or at least one token (s) defined to be used by the token agent to generate a predetermined token code from a memory unit or the like included in the memory unit 1155 and / or the IC chip 1150 Code generation information (1425), and provides the generated at least one token generation information to the generation unit 1170 (1430).

The generating unit 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on at least one token generation information provided from the reading unit 1165, The unit 1175 outputs the generated token code to the wireless terminal screen (1440).

When the token code is output on the screen of the customer wireless terminal 1100 as described above, the token code is input to the customer terminal 145 through the predetermined key input unit provided in the customer terminal 145 1445 or a predetermined local communication means provided in the customer wireless terminal 1100 and the customer terminal 145 to the customer terminal 145 to transmit the customer terminal 145 to the customer terminal 145, Transmits the token code to the financial transaction server 1000 through a predetermined payment network 140 (1450).

According to the method of the present invention, in the process of transmitting the token code to the financial transaction server (1000) through the payment network (140) for the token code based financial transaction, The wired terminal 145 transmits the token code and financial transaction means information for providing a predetermined financial transaction and predetermined financial transaction information for the token based financial transaction to the financial transaction server 1000 ).

Referring to FIG. 14C, the information receiving unit of the financial transaction server 1000 transmits a predetermined token code, financial transaction means information, and financial transaction information transmitted from the customer terminal 145 through the payment network 140 In operation 1455, the information verification unit checks the financial transaction information from the financial transaction information data and provides the extracted financial transaction information data to the extraction unit 1465.

The extracting unit provided with the financial transaction means information extracts (1470) predetermined token agent information associated with the financial transaction means information (or corresponding to the received token code) from the storage medium 110, And provides the token agent information to the authentication unit (1475).

If the token agent information is provided as described above, the authentication unit may generate the same token generation information and / or the token generation information used to generate the token code in the token agent provided in the customer wireless terminal 1100, based on the token agent information, (1480) a predetermined token authentication code through the same procedure as the procedure of generating the token code in the token agent, and comparing the token code received through the information receiver with the generated token authentication code, The validity of the code is confirmed (1485). If the validity of the token code is authenticated 1490, the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

15A and 15B are diagrams illustrating a token code operation process according to an embodiment of the present invention.

15A and 15B illustrate a method of generating a 10-digit token code in the token agent provided in the customer terminal, and transmitting the generated 10-digit token code to the customer terminal through a predetermined wired / wireless network 140 And transmits the token agent program to the financial transaction server 1000 and authenticates the token code at the financial transaction server 1000. For convenience, the token agent executes the token agent program and / or performs an internal authentication procedure The process of inputting the predetermined PIN information is omitted.

Referring to FIG. 15A, a predetermined token code generation command input by the input unit 1160 of the token agent program causes the reading unit 1165 to generate the token agent internal code and / or the token agent internal code and / (1500) at least one token code generation information defined to be used by the token agent to generate a predetermined token code from the memory unit included in the memory unit 1155 and / or the IC chip 1150, And provides the read out at least one token generation information to the generator 1170 (1505).

The generator 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on the at least one token generation information provided from the reading unit 1165 in operation 1510, The financial transaction server 1000 outputs the generated token code to the wireless terminal screen 1515 and interworks with the communication processing units 1180 and 1180 to transmit the generated token code to the financial transaction server 1000 through a predetermined wired / The generated token code is transmitted (1520), and the information including the financial transaction means for providing a predetermined financial transaction in the process of transmitting the token code is further transmitted.

Referring to FIG. 15B, an information receiver of the financial transaction server 1000 receives a predetermined token code transmitted from a customer terminal through the wired / wireless network 140 (1530), and the information receiver receives the token code (1540), the extracting unit extracts financial transaction means information for providing a predetermined financial transaction in the process of providing the financial transaction information to the extracting unit (1540) Extracts predetermined token agent information (corresponding to the code) (1545), and provides the extracted token agent information to the authentication unit (1540).

If the token agent information is provided as described above, the authentication unit may generate token generation information and / or token generation information identical to the token generation information used to generate the token code in the token agent provided in the customer terminal based on the token agent information, A predetermined token authentication code is generated (1555) through the same procedure as the procedure for generating the token code at step 1555. The validity of the token code by comparing the token code received through the information receiver with the generated token authentication code (1560). If the validity of the token code is authenticated 1565, the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

16a, 16b, and 16c illustrate a token code operation process according to an embodiment of the present invention.

16A, 16B, and 16C illustrate a case where the token agent provided in the customer wireless terminal 1100 receives a predetermined challenge value from the financial transaction server 1000 and generates a 10-digit token code , The generated 10-digit token code is transmitted from the customer wireless terminal 1100 to the financial transaction server 1000 through a predetermined wire / wireless network 140, and the token code is authenticated by the financial transaction server 1000 As a matter of convenience, the process of inputting predetermined PIN information in order to execute the token agent program and / or the internal authentication procedure in the token agent is omitted for convenience.

Referring to FIG. 16A, an authentication unit included in the financial transaction server 1000 extracts 1600 a predetermined wireless terminal information to transmit a predetermined challenge value from the storage medium 110, (1605) dynamically generates a predetermined challenge value to be transmitted to the token agent program provided in the wireless terminal, and provides the wireless terminal information and the challenge value to the information transmission unit, The generated challenge value is transmitted to the customer wireless terminal 1100 through the network 140 (1610).

When the generated challenge value is transmitted to the customer wireless terminal 1100 in which the token agent program is installed, the authentication unit stores the challenge value transmitted to the customer wireless terminal 1100 in the storage medium 110 (1615).

Referring to FIG. 16B, the token agent program reading unit 1165 receives (1620) a predetermined challenge value received from the financial transaction server 1000 through the communication processing unit, and stores the received challenge value Token agent internal code and / or at least one token (s) defined to be used by the token agent to generate a predetermined token code from a memory unit or the like included in the memory unit 1155 and / or the IC chip 1150 Code generation information (1625), and provides the generated at least one token generation information to the generator (1170) (1630).

The generating unit 1170 generates a predetermined token code that can not be predicted by applying a predetermined token generation hash algorithm based on at least one token generation information provided from the reading unit 1165, The terminal 1175 outputs the generated token code to the wireless terminal screen in operation 1640 and transmits the created token code to the financial transaction server 1000 through a predetermined wired / wireless network 140 in cooperation with the communication processing unit 1180 (1645). In this case, it is preferable to further transmit the financial transaction means information for providing a predetermined financial transaction in the above process.

Referring to FIG. 16c, the information receiver of the financial transaction server 1000 receives 1655 a predetermined token code transmitted from the customer wireless terminal 1100 through the wired / wireless network 140, The extracting unit extracts financial transaction means information for providing a predetermined financial transaction in the process of receiving the token code and provides the extracted financial transaction means information to the extracting unit 1665. The extracting unit extracts financial transaction means information from the storage medium 110, Extracts predetermined token agent information (corresponding to the received token code) (1670), and provides the extracted token agent information to the authentication unit (1675).

If the token agent information is provided as described above, the authentication unit may generate the same token generation information and / or the token generation information used to generate the token code in the token agent provided in the customer wireless terminal 1100, based on the token agent information, (1680) a predetermined token authentication code through the same procedure as the procedure of generating the token code in the token agent, and comparing the token code received through the information receiver with the generated token authentication code, The validity of the code is confirmed (1685). If the validity of the token code is authenticated (1690), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

FIG. 17 illustrates a process for initiating a token code based financial transaction in accordance with an embodiment of the present invention.

More specifically, FIG. 17 illustrates a process of initiating a predetermined token code-based financial transaction corresponding to the Internet banking, which generates a predetermined token code using a token agent included in the customer wireless terminal 1100, And using the token code as a customer authentication means of the Internet banking-based financial transaction.

Referring to FIG. 17, a customer accesses a server for Internet banking through a predetermined wired terminal (1700) and requests an Internet banking-based financial transaction to the server (1705) Or financial transaction execution for the customer) (1710).

According to an embodiment of the present invention, in the process of the customer accessing the server for Internet banking through the wired terminal, the customer can perform a process of logging in to the server through a predetermined ID / PW.

When the token code input is requested as described above, the customer executes the token agent included in the predetermined customer wireless terminal 1100, and transmits the token to the predetermined token agent through the process of FIG. 13A and / or FIGS. 14A and 14B. (1715), and the customer inputs the token code output on the screen of the customer's wireless terminal through the predetermined key input means provided in the wired terminal as described above (1720 ).

According to the method of the present invention, a predetermined PIN input process for accepting (or authenticating) a predetermined token code generation through the token agent in the process of executing a predetermined token agent in the customer wireless terminal 1100 The predetermined PIN input process for accepting (or authenticating) the token code generation according to the method and / or method may be performed by the IC chip installed in or removed from the customer wireless terminal 1100 (For example, when a predetermined authorized certificate authentication information is transmitted to an authentication server through an authorized certificate, the authentication server transmits the authentication result to the token agent, and a predetermined token code is transmitted in response to the authentication result Generation).

According to another embodiment of the present invention, when it is possible for the customer wireless terminal 1100 and the customer terminal 145 to communicate with each other through a predetermined short distance communication, the token generated from the customer wireless terminal 1100 The code may be provided to the customer wireline terminal 145 via the short-range communication.

When the predetermined token code generated in the customer wireless terminal 1100 is input to the customer terminal 145, the customer terminal 145 transmits the token code to the server 1725, Extracts predetermined token agent information associated with the financial transaction means information from the storage medium 110, and determines whether the token agent included in the customer wireless terminal 1100, based on the extracted token agent, A predetermined token authentication code is generated (1730) through the same token generation information and the token generation algorithm as those used for generation, and the validity of the received token code is compared by comparing the received token code with the generated token authentication code (1735).

If the validity of the received token code is not authenticated (e. G., If the token code and the token authentication code do not match) (1740), the server generates a non-financial transaction message, (Step 1745).

If the validity of the received token code is authenticated (e. G., If the token code and the token authentication code match) (1740), the server notifies the client terminal 145 of the requested internet banking- A predetermined financial transaction interface screen for performing the transaction (1750).

FIG. 18 is a flowchart illustrating an application process of a token code-based financial transaction to Internet banking according to an embodiment of the present invention.

More specifically, FIG. 18 is a flowchart illustrating a method of performing Internet banking according to a conventional Internet banking procedure, including confidentiality, authentication, integrity, and the like of the Internet banking based on the token code according to the present invention. The token agent is provided to the customer wireless terminal 1100, and the financial transaction server of FIG. 10 is provided to the customer terminal 1100. In addition, And a case in which a predetermined Internet banking service is provided in connection with the wired terminal 145.

Referring to FIG. 18, a client terminal 145 (for example, a client terminal that performs Internet banking) operates in conjunction with a server for Internet banking (for example, a financial transaction server 1000 providing an Internet banking service) A predetermined financial transaction is processed in accordance with a predetermined financial transaction (for example, a bank transfer) corresponding to the Internet banking service (1800). During the financial transaction procedure, the server transmits the financial transaction 145 to request a predetermined token code as the financial transaction authentication means.

According to an embodiment of the present invention, the token code request is requested to the client terminal 145 at the server for authentication for the entire financial transaction before the transaction is initiated.

According to another embodiment of the present invention, it is preferable that the token code request is requested from the server to the client terminal 145 to authenticate the financial transaction step while the financial transaction procedure is performed, The server can request financial transaction information and / or authentication information (e.g., account password, security card number, authorized certificate, etc.) to the customer terminal 145.

According to another embodiment of the present invention, the token code request is requested to the client terminal 145 at the server for final authentication of the financial transaction before the financial transaction procedure is terminated.

If a predetermined token code is requested 1805 during execution of the financial transaction procedure, the customer wireless terminal 1100 executes a predetermined token agent as shown in FIG. 19C, 14b and outputs the generated token agent to the customer wireless terminal screen (1810). The customer then transmits the token code, which is output on the customer wireless terminal screen, to the predetermined wireless terminal Is input through key input means (1815).

According to the method of the present invention, a predetermined PIN input process for accepting (or authenticating) a predetermined token code generation through the token agent in the process of executing a predetermined token agent in the customer wireless terminal 1100 The predetermined PIN input process for accepting (or authenticating) the token code generation according to the method and / or method may be performed by the IC chip installed in or removed from the customer wireless terminal 1100 (For example, when a predetermined authorized certificate authentication information is transmitted to an authentication server through an authorized certificate, the authentication server transmits the authentication result to the token agent, and a predetermined token code is transmitted in response to the authentication result Generation).

If the token code generated in the customer wireless terminal 1100 is inputted through the above procedure, the customer terminal 145 transmits the token code to the server. In accordance with the method of the present invention, The generated financial transaction information and the token code are transmitted to the server (1820).

The server receiving the token code from the client terminal 145 extracts predetermined token agent information associated with the financial transaction means information from the storage medium 110, (1825) a token authentication code using the same token generation information and token generation algorithm used by the token agent provided in the customer's wireline terminal 145 to generate the token code, (1830) the validity of the received token code by comparing the received token authentication code.

If the validity of the received token code is not authenticated (e.g., if the token code and the token authentication code do not match) (1835), the server generates certain financial transaction error information, and the client terminal 145 (Step 1840).

On the other hand, if the validity of the received token code is authenticated (e.g., if the token code and the token authentication code match) (1835), the server transmits a predetermined financial transaction corresponding to the financial transaction information (For example, an Internet banking-based financial transaction) (1845), generates a predetermined financial transaction processing history corresponding to the financial transaction processing result, and transmits the generated financial transaction processing history to the client terminal 145 (step 1850).

In addition, the server stores the generated financial transaction processing details in the storage medium 135 in association with the financial transaction means information (1855).

Figures 19a, 19b, and 19c illustrate performing Internet banking of a token code based financial transaction in accordance with an embodiment of the present invention.

19A, 19B, and 19C illustrate the use of the token code as an authentication means for the financial transaction in a predetermined financial transaction process through the procedure shown in FIG. 18, Those skilled in the art will readily be able to infer various ways of using the token code as a financial transaction authentication means in the Internet banking process with reference to Figures 18, 18, 19b and 19c. And the present invention is not limited thereto.

FIG. 19A illustrates an example of performing a financial transaction corresponding to an account transfer in the Internet banking procedure, FIG. 19B illustrates requesting a predetermined token code to a financial transaction authentication number in the Internet banking procedure, A predetermined token agent included in the customer wireless terminal 1100 is executed as shown in 19c.

According to the method of the present invention, it is preferable that a predetermined PIN input process is performed to approve (or authenticate) the token agent usage right in the process of executing the token agent included in the customer wireless terminal 1100 , And / or the token agent usage right may be approved (or authenticated) through a public certificate according to the method of operation.

When a predetermined token code is generated in the token agent at the customer wireless terminal 1100, the generated token code is input as shown in FIG. 19c, and the customer terminal 145, to which the token code is inputted, Code to the server, thereby using the token code as an authentication means for the Internet-based financial transaction.

FIG. 20 is a flowchart illustrating an application process of a token code-based financial transaction to Internet banking according to an embodiment of the present invention.

In more detail, FIG. 20 is a flowchart illustrating a method for ensuring confidentiality, authentication, integrity, and non-repudiation of the Internet banking based on the token code according to the present invention in performing Internet banking according to a conventional Internet banking procedure 10, when the financial transaction server of FIG. 10 provides a predetermined Internet banking service in connection with the customer terminal 145, the customer's wireless terminal 1100 transmits a service request to the customer terminal 1100, And a predetermined token code is generated from the token agent and transmitted to the server.

Referring to FIG. 20, a client terminal 145 (for example, a client terminal that performs Internet banking) operates in conjunction with a server for Internet banking (for example, a financial transaction server 1000 providing an Internet banking service) A predetermined financial transaction is processed in accordance with a predetermined financial transaction (for example, a bank transfer) corresponding to the Internet banking service (step 2000). In the financial transaction procedure, The server transmits predetermined financial transaction information data including financial transaction means information to the server 2005. The server transmits the financial transaction information data to the server through the client wire terminal 145 as shown in FIG. The wireless terminal 1100 generates a predetermined token code and requests the wireless terminal 1100 to transmit the generated token code to the server (2010).

According to the embodiment of the present invention, the server stores predetermined token agent information corresponding to a token agent loaded in the customer wireless terminal 1100, whereby a predetermined token code is transmitted from the customer wireless terminal It is effective to authenticate the financial transaction information data transmitted from the client terminal 145 by reading it.

According to another embodiment of the present invention, in the course of requesting the server to generate a predetermined token code from the customer wireless terminal 1100 to the client terminal 145 and transmit the generated token code to the server, (145) provides predetermined wireless terminal information corresponding to the customer wireless terminal (1100) to the server, and requests the server to generate and send a predetermined token code to the customer wireless terminal (1100) For example, if the server sends a message for transmitting the token code to the customer wireless terminal 1100 and a callback message (e.g., a callback message for the customer wireless terminal 1100 to send the token code to the server), the customer wireless terminal 1100 ) To generate a predetermined token code and transmit it to the server via the callback portal), and thus the present invention is not limited thereto.

When a predetermined token code for authenticating the financial transaction information data to the customer wireless terminal 1100 is requested (2010), the customer wireless terminal 1100 executes a predetermined token agent as shown in FIG. 21C, A predetermined token agent is created through the procedure shown in FIG. 15A and / or FIGS. 16A and 16B, and transmitted to the server (2015).

When the token code generated in the customer wireless terminal 1100 is transmitted to the server through the above procedure, the server extracts predetermined token agent information associated with the financial transaction means information from the storage medium 110 , Generates a predetermined token authentication code through the same token generation information and token generation algorithm used by the token agent included in the client terminal 145 based on the extracted token agent to generate the token code 2020 , And checks the validity of the received token code by comparing the received token code with the generated token authentication code (2025).

If the validity of the received token code is not authenticated (e.g., if the token code and the token authentication code do not match) (2030), the server generates predetermined financial transaction error information, and the client terminal And / or transmits it to the customer wireless terminal 1100 and outputs it (2035).

On the other hand, if the validity of the received token code is authenticated (e.g., if the token code and the token authentication code match) (2030), the server transmits a predetermined financial transaction For example, an Internet banking-based financial transaction) 2040, generates a predetermined financial transaction processing history corresponding to the financial transaction processing result, and transmits the transaction history to the customer terminal 145 (step 2045).

In addition, the server stores the generated financial transaction processing details in the storage medium 135 in connection with the financial transaction means information (2050).

Figures 21a, 21b and 21c illustrate performing banking of token code based financial transactions in accordance with an embodiment of the present invention.

More specifically, FIGS. 21A, 21B, and 21C illustrate the use of the token code as an authentication means for the financial transaction in a predetermined financial transaction process through the procedure shown in FIG. 20, Those skilled in the art will readily be able to infer various ways of using the token code as a financial transaction authentication means in the Internet banking process with reference to the above Figures 20, 20, 21b and 21c. And the present invention is not limited thereto.

FIG. 21A illustrates transmission of financial transaction information data corresponding to an account transfer in the Internet banking procedure to the server, FIG. 21B illustrates transmission of a predetermined token to the customer wireless terminal 1100 to authenticate the financial transaction information data, And a financial transaction authentication number for the financial transaction information data is requested. The customer executes a predetermined token code executed by a predetermined token agent provided in the customer wireless terminal 1100 as shown in FIG. 21c, And transmits the generated token code to the server.

In FIG. 21c, the token agent has access information to the server, and if the server access information is not included in the token agent, the token agent can be provided in the form of a callback transaction from the server, The present invention is not limited thereto.

100: token agent providing means
105: Information storage means
110: Storage medium
115: Server
125: Information transmission means
130: Information storage means
135: Storage medium
140: Network means
145: Cable terminal
255: Token agent provided interface
1100: wireless terminal

Claims (6)

A wire / wireless integration method using a token code executed by a server capable of communicating with a program installed in a customer wireless terminal,
A first step of storing customer information including wireless terminal information on which the authenticated program is installed and personal information of the customer based on a result of authenticating the validity of a program installed in the customer wireless terminal;
A second step of confirming a customer connected using a wire terminal;
A third step of receiving a displayed token code through an authenticated program of a customer wireless terminal corresponding to the confirmed customer information of the customer;
A fourth step of processing the validity of the received token code to be authenticated using an authentication code generated under the same condition as the dynamic generation of the token code; And
And a fifth step of, when the validity of the talk code is authenticated, processing that the validity of the customer connected through the wired terminal is authenticated,
In the third step,
Receives the token code input through the wired terminal used by the customer, or
And receiving the token code transmitted through the program of the customer wireless terminal.
delete delete delete delete The method according to claim 1,
Further comprising relationship information for establishing a relationship between a customer using the authenticated program and the program.

Images