KR101493057B1 - Method for Providing One Time Code - Google Patents

Abstract

A method of providing a disposable code, the method comprising: confirming customer information based on a customer login to a website through a customer terminal, And confirms the dynamically generated disposable code so that the authentication result can be confirmed through the registered device of the customer if the customer's device is registered, The disposable code is displayed in a predetermined area of a web page provided to the customer terminal through the site.

Token information, authentication

Description

{Method for Providing One Time Code}

FIG. 1 illustrates a configuration of a token providing system for authentication of a financial company Internet banking server according to an embodiment of the present invention.

FIG. 2 illustrates an operation flow of an Internet banking server for providing a web interface for authentication of an Internet banking server to a client terminal in an Internet banking server according to an embodiment of the present invention.

3 is an illustration of an Internet banking site displaying a site authentication number for site authentication according to an embodiment of the present invention.

DESCRIPTION OF THE EMBODIMENTS

100: Internet banking server 105: Web interface unit

110: Web interface operating unit 115: Information receiving unit

120: information extracting unit 125: information checking unit

130: token generating unit 140: D / B

150: General Manager D / B 160: Financial System

170: customer terminal 175: wire terminal

180: wireless terminal

The present invention provides a method of providing a disposable code executed by a server, the method comprising: confirming customer information based on a customer login to a website through a customer terminal; Checking whether the device is registered, checking the dynamically generated one-time code so that the authentication result can be confirmed through the registered device of the customer when the device of the customer is registered, The disposable code is displayed in a predetermined area of the web page.

With the development of rapid network environment, modern society has become an environment that can access the Internet anytime and anywhere. With the development of the Internet, it is possible to easily provide bank service without visiting the bank.

However, due to the leakage of customer information due to hacking techniques such as phasing and pharming, the development of the Internet has recognized the problem of the leakage of customer information due to the Internet banking service to the customers receiving the Internet banking service , As well as financial institutions offering Internet banking services, have found problems with Internet banking security.

According to an aspect of the present invention, there is provided a method of providing a disposable code executed by a server, the method comprising: a first step of checking customer information based on a customer login to a website through a customer terminal; A second step of confirming whether a customer's device capable of verifying the authentication result of the disposable code is registered on the basis of the disposable code and a second step of verifying whether the customer's device is registered, A third step of checking the code, and a fourth step of processing the disposable code to be displayed in a predetermined area of a web page provided to the customer terminal through the web site.

A method of providing a disposable code according to the present invention is a method of providing a disposable code executed by a server, the method comprising: a first step of checking customer information based on a customer login to a website through a customer terminal; A second step of confirming whether a customer's device capable of verifying the authentication result of the disposable code is registered; and a second step of verifying whether the customer's device is registered if the customer's device is registered, And a fourth step of displaying the disposable code in a predetermined area of a web page provided to the customer terminal through the web site, The authentication result is confirmed.
In the method of providing a disposable code according to the present invention, the third step is characterized in that the disposable code is dynamically generated through the designated number generation information, or the generated disposable code is received through a designated code generation server.
The disposable code according to the present invention is characterized in that the disposable code is displayed with a disposable code to be compared with the disposable code displayed in a predetermined area of the web page through the registered device of the customer.
The disposable code according to the present invention is characterized in that the disposable code includes a disposable code for site authentication for authenticating a website accessed through the customer terminal.
The method for authenticating a web site (or server) according to the present invention comprises the steps of: confirming previously stored token generation related information in association with customer information at a server when accessing a customer terminal; Generating a token information for authenticating a web site (or server) by using the generated token information, and displaying the generated token information in a predetermined area of a web site (or web page) The method comprising the steps of:

According to the present invention, the token information generated by the server is the token information for the client authentication or the token information for authentication of a separate web site (or server).

According to the present invention, the token is an OTP (One Time Password).

According to the present invention, the website (or server) is a web site (or server) for Internet banking.

On the other hand, the present invention includes a recording medium characterized by recording a program for executing the above-described web site (or server) authentication method.

Meanwhile, the web site (or server) authentication information providing server according to the present invention checks the token generation related information processed in association with the customer information when accessing the customer terminal, and transmits the confirmed token generation related information to a predetermined token And displays all or part of the generated token information in a predetermined area of a web site (or web page) accessed by the customer terminal.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings. It should be understood, however, that the drawings and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention, and are not to be construed as limiting the present invention. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The terms used below are defined in consideration of the functions of the present invention, which may vary depending on the user, intention or custom of the operator. Therefore, the definition should be based on the contents throughout the present invention.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. The configuration is omitted as much as possible, and a functional configuration that should be additionally provided for the present invention is mainly described. Those skilled in the art will readily understand the functions of components that have been used in the prior art among the functional configurations that are not shown in the following description, The relationship between the elements and the components added for the present invention will also be clearly understood.

In order to efficiently explain the essential technical features of the present invention, the following embodiments are to be construed as appropriately transforming, integrating, or separating terms to be understood by a person having ordinary skill in the art to which the present invention belongs. However, the present invention is not limited thereto. That is, each of the above-described means may be a server (or terminal) provided on the system shown in the following embodiments, or a predetermined function configuration provided in at least one server (or terminal) Or a combination of at least two functional components included in the terminal (or terminal). It is to be understood that the server (or terminal) shown in the following embodiments includes at least two or more functional components for the sake of convenience of the technical features of the present invention. However, the server (or terminal) May be provided in two or more servers (or terminals) that are different from each other according to the role and function of each functional component and the corresponding server (or terminal) operator (or operator) by matching with the above-described means, It is not limited.

As a result, the technical idea of the present invention is determined by the claims, and the following embodiments are merely means for effectively explaining the technical idea of the present invention to a person having ordinary skill in the art to which the present invention belongs Only.

FIG. 1 illustrates a configuration of a token providing system for authentication of a financial company Internet banking server 100 according to an embodiment of the present invention.

1 is a block diagram illustrating a configuration of a predetermined one of a plurality of client terminals 170 connected to a communication channel for Internet banking based on a network based on TCP / IP (Transmission Control Protocol / Internet Protocol) The Internet banking server 100 provides the Internet banking service in the course of processing at least one financial transaction requested from the customer terminal 170 in cooperation with the financial system 160 in the Internet banking server 100. [ The present invention relates to a token providing system for providing a web interface including a token, and a web interface including a token for authenticating the Internet banking server 100 with reference to FIG. 1, A server that separates the Internet banking server 100 and the token providing server from the provided Internet banking system and only manages token information And a server for providing an Internet banking service, or a system configured by a server for separately authenticating the token information and an Internet banking server for generating a token for authentication of the Internet banking server. It should be understood that the present invention is not limited to the embodiment shown in FIG. 1 but includes all of the above-described embodiments.

In addition, referring to the token providing system for authentication of the Internet banking server 100 shown in FIG. 1, a person skilled in the art of the present invention can refer to a token providing system for authenticating the Internet banking server 100, The system may be applied to the case where the server authentication is required in the system for trading. However, the present invention is not limited to FIG. 1, but includes all of the above-described embodiments.

Those skilled in the art can also refer to the token providing system for authentication of the Internet banking server 100 shown in FIG. 1 and apply it to a web site or server that requires authentication in addition to the Internet banking However, the present invention is not limited to FIG. 1, but includes all of the above-described embodiments.

In addition, the Internet banking server 100 shown in FIG. 1 does not show a portion for an existing Internet banking service, and shows only a portion that is modified or added for the present invention.

Here, the client terminal 170 includes a desktop having at least one web browser for accessing the web server based on the TCP / IP-based wired communication function and the wired communication function for providing a wired web service based on browsing And a wired terminal 175 including at least one of a desktop computer and a notebook, and / or a wireless communication function based on a Code Division Multiple Access (CDMA) (E.g., a Personal Communication System (PCS) having a CDMA-based wireless modem chip) having at least one or more browsers for accessing the web server based on a function of the browser and providing browsing-based wireless web services, ) And / or a Global System for Mobile communications (GSM) terminal and / or a Personal Digital Cellular (PDA) and / or a PHS (Personal Handyphone System) terminal and / or a Personal Digital Assistant (PDA) and / or a smart phone and / or telematics) (E.g., an IEEE 802.16 based wireless modem chip having an IEEE 802.16-based wireless communication function and at least one browser for accessing the web server based on the wireless communication function to provide a browsing-based wireless web service, (PCS) and / or a personal digital assistant (PDA) and / or a smart phone and / or a telematics and / or portable internet terminal and / or a notebook computer) , And / or a wireless communication function based on the DataTAC method of Motorola Inc. or the Mobitex method of Erricson Co., (E.g., a security terminal having a modem chip of DataTAC / Mobitex type and / or a wireless communication terminal) having at least one browser for receiving the wireless web service of the wireless terminal (180).

The method of accessing the financial system 160 may include a connection method using a link provided by a financial institution through an E-mail or the like, a method of accessing the Internet banking web site address of the financial company, A site access method using a website address, and the like.

In addition, the token information for the financial institution authentication preferably means a one-time password (OTP).

The token information may include a token information generating process for authenticating the banking company Internet banking server 100 and a token for authenticating the Internet banking server 100 for the bank in the process of generating token information for customer transaction authentication, A token for customer transaction for authentication may be generated according to each token generation method, or a method for integrating a token for authentication of a separate Internet banking server 100 for a bank and a customer transaction token for customer transaction authentication May be generated in accordance with a token generation method by < RTI ID = 0.0 >

Also, the method of displaying the token information may display all of the generated token information (e.g., 12345678, ab123cd45, etc.), or display only a part of the token information (e.g., 1234 ***, ab12 ****, etc.) .

Also, the token information may be provided in the form of a code consisting of a single digit or letter, or a plurality of numbers or letters or a combination of numbers and letters, according to the intention of a person skilled in the art.

The token may be an OTP (One Time Password).

The point of providing the token information may be a time point when a web interface is provided from the Internet banking server 100 by clicking on a link provided through E-mail or the like, and an address of the Internet banking web site of the financial company is input Or accesses the Internet banking server 100 using the Internet banking web site address of the financial company stored in the Internet banking server 100. The Internet banking server 100 accesses the Internet banking server 100 through a customer authentication method in which the customer includes at least one of an ID, It is preferable to include at least one or more time points of providing the web interface after the authentication process.

In addition, the token information is preferably displayed in a specific area of a web page.

In addition, the customer information preferably includes at least one or more information such as a resident registration number, a customer information file (CIF), a customer name, a wire telephone number, and a wireless telephone number.

According to an embodiment of the present invention, the token providing system for authenticating the financial company Internet banking server 100 includes at least one client terminal 170 and at least one client terminal 170 based on a TCP / IP (Transmission Control Protocol / Internet Protocol) The Internet banking service is provided in a process of processing at least one financial transaction requested from the customer terminal 170 in cooperation with the financial system 160 in a predetermined Internet banking server 100 to which a communication channel for net banking is connected An Internet banking server 100 for providing a web interface including a token for authentication of the Internet banking server 100, at least one or more face-to-face or non-face financial transaction channels provided at a branch (or branch office) A financial system for providing one or more financial transactions (eg, credit, receipt, currency exchange, foreign exchange remittance, financial investment, etc.) 160).

The Internet banking server 100 transmits the customer information transmitted from the customer terminal 170 to the ledger D / B (150) of the financial system 160, when the web banking server 100 is requested to provide a web interface for the Internet banking service from the customer terminal 170 150 to generate token generation terminal information and token generation information associated with the customer information to generate token information associated with the customer information in the Internet banking server 100 and transmit the generated token information to the customer terminal 170 The Internet banking server 100 may be configured to provide the Internet banking service by displaying it on a specific area of the web interface for providing the Internet banking service to the Internet banking server 100. As a person skilled in the art, How to provide the authentication token is not displayed on the web interface, but the method of providing using SMS, or displaying only a part of the generated token on the screen and not displaying some But it is based on the preferred embodiment in which all of the generated tokens are displayed.

The Internet banking server 100 includes a D / B 140 for confirming the connection of a customer and storing customer information and login information for linking with the ledger D / B 150 of the financial system 160 Or a D / B server for storing token generation device information and token generation information for generating a token, or may be connected to a separate D / B server having a D / B 150 of the financial system 160 that stores customer information and login information for interworking with the D / B 150. The D /

1, the Internet banking server 100 includes a web interface unit 105 for providing a predetermined interface to at least one customer terminal 170, a web interface unit 105 for providing a predetermined interface to the web interface unit 105 and the internet banking server 100) a web interface operating unit 110 for operating a web interface to be provided to at least one of the customer terminals 170 in cooperation with the D / B 140 or in conjunction with the token generating unit 130, An information receiving unit 115 for receiving customer information from the customer terminal 170 via the web interface provided by the financial system 105 or receiving ledger information from the ledger D / B 150 of the financial system 160, An information extracting unit for extracting customer information from the customer information received from the customer terminal 170 at the information processing unit 115 or extracting the token generating device information from the ledger information received from the financial system 160 at the information receiving unit 115 12 An information checking unit 125 comparing and checking customer information received from the customer terminal 170 received from the information receiving unit 115 and customer information received from the financial system 160; And a token generation unit 130 for generating tokens by bringing the token generation information from the ledger D / B 150 of the financial system 160 in connection with the token generation device information associated with the customer information confirmed by the customer information 125, .

According to the embodiment of the present invention, the web interface unit 105 may provide a web interface for a customer to login for a predetermined internet banking service or a web interface for an internet banking service to be provided to a customer, It is preferable to provide the service to the customer terminal 170 in cooperation with the web interface operating unit 110.

The web interface unit 105 may provide the interface including the token information to the customer terminal 170 in cooperation with the token generating unit 130 in the web interface unit 105 according to the time of providing the token information have.

According to an embodiment of the present invention, the web interface operating unit 110 provides a web interface unit 105 for a predetermined internet banking service to the customer terminal 170, and an Internet banking service in cooperation with the D / .

In addition, the web interface operating unit 110 may provide a web interface including token information at a time of providing the token information, in cooperation with the web interface unit 105 and the D / B.

According to an embodiment of the present invention, the information receiving unit 115 may receive the login information of the customer provided from the customer terminal 170 and provide the login information to the information extracting unit 120.

The information receiving unit 115 receives the ledger information from the ledger D / B 150 and provides the received information to the information extracting unit 120 in the internet banking server 100 Function.

Here, the login information is preferably at least one of ID / PW information of a customer, authorized certificate information, biometric information of a customer, and the like.

In addition, the login information may be provided to the Internet banking server 100 according to a conventional log-in information transmission / reception procedure, and may provide the login information by various encryption methods to provide a more secure security to a customer. It is preferable that the terminal 170 further includes a function for decrypting the encrypted data to the Internet banking server 100 when a portion for encrypting the login information provided by the terminal 170 is added.

According to the embodiment of the present invention, the information extracting unit 120 extracts ID / PW information, authorized certificate information or biometric information of the customer from the login information of the customer provided from the customer terminal 170 in the information receiving unit 115 And provides the information to the information confirmation unit 125.

The information extracting unit 120 extracts token generation information associated with customer information, token generating device information associated with customer information, and token generation information associated with customer information from the ledger information received from the financial system 160 by the information receiving unit 115 And providing the extracted information to the information confirming unit 125. [

According to the embodiment of the present invention, the information confirming unit 125 confirms customer information from the D / B 140 of the Internet banking server 100 in cooperation with the ID / PW information of the customer extracted by the information extracting unit 120 And provide the confirmed customer information to the financial system 160 to request the token generation device information and token generation information associated with the customer information from the ledger D / B 150 of the financial system 160.

The information verifying unit 125 compares the customer information stored in the D / B 140 of the Internet banking server 100 with the customer information provided from the financial system 160 ledger D / B 150 It is preferable that the customer information of the Internet banking server 100 D / B 140 and the customer information of the financial system 160 are checked against the login information provided by the customer terminal 170.

According to the embodiment of the present invention, the token generating unit 130 generates a token from the customer information of the Internet banking server 100 D / B 140 and the customer information comparison result of the financial system 160 in the information checking unit 125 And generates token information based on the token generating device information and token generating information provided from the financial system 160 when the comparison results match, and provides the generated token information to the web interface operating unit 110 desirable.

The token generation information for generating the token may be generated by a token generation method including at least one of the same method as that of the token generation device owned by the customer and the method of generating a separate token for authentication of the Internet banking server 100 .

FIG. 1 illustrates a configuration of a token providing system for authentication of a financial company Internet banking server 100 according to an embodiment of the present invention.

2 is a flowchart illustrating an operation flow of the Internet banking server 100 for providing a web interface for authentication of the Internet banking server 100 to the client terminal 170 in the Internet banking server 100 according to an embodiment of the present invention. FIG.

2, the Internet banking server 100 receives customer login information from a customer terminal 170, provides customer information associated with the login information to the financial system 160, Provides the token generation device information and token generation information associated with the provided customer information to the Internet banking server 100. The Internet banking server 100 uses the provided token generation device information and token generation information The present invention relates to a process of generating token information for authentication of an Internet banking server 100 and providing a web interface to a customer terminal 170. It will be apparent to those skilled in the art that, Various methods of generating token information for authentication of the banking server 100 may be inferred, but the present invention is not limited to this FIG. 2, The method includes the City.

Hereinafter, in FIG. 2, the Internet banking server 100 shown in FIG. 1 is referred to as a "server" for the sake of convenience.

Referring to FIG. 2, the server provides a web interface for customer login from the client terminal 170 (200).

The customer then inputs the customer's login information to the customer terminal 170 and transmits the login information stored in the customer terminal 170 to the server (205).

Here, the login information is preferably at least one of ID / PW information of a customer, authorized certificate information, biometric information of a customer, and the like.

In addition, the login information may be provided to the Internet banking server 100 according to a conventional log-in information transmission / reception procedure, and may provide the login information by various encryption methods to provide a more secure security to a customer. If a portion for encrypting the login information provided by the terminal 170 is added to the Internet banking server 100, the Internet banking server 100 may further include a function for decrypting the Internet banking server 100, but will be omitted for the sake of convenience.

The server retrieves login information stored in the server D / B in association with the login information, and confirms the customer information associated with the login information (210).

Here, the customer information associated with the login information provided from the customer terminal 170 may include at least one or more information such as a resident registration number, a customer's name, a wire telephone number, and a wireless telephone number.

The server then provides the customer information to the financial system 160 to request the token generation device information and token generation information associated with the customer information, Information on token generating device information, and token generating information are provided (215).

Here, the customer information stored and registered in the ledger D / B 150 of the financial system 160 includes at least one or more information such as a resident registration number, a customer information file (CIF), a customer's name, a wire telephone number, .

The server extracts customer information from the customer information, token generating device information, and token generation information provided from the ledger D / B 150, and compares the customer information with the customer information associated with the login information provided from the customer terminal 170 (220).

If the comparison result indicates that the customer information is different from the comparison result, the token information can not be provided to the customer, and the token generation process is terminated (225).

The server generates token information for the server authentication based on the customer information, token generating device information, and token generating information provided from the ledger D / B 150 (230).

Here, the token information for the server authentication may be a one-time password (OTP).

Then, the server provides the web interface for server authentication including the generated token information to the client terminal 170 (235).

Here, the server authentication web interface may be provided to a customer using a separate web interface for server authentication, or may be provided with a predetermined web interface for an internet banking service according to a login result, Area may be displayed separately.

Also, the method of displaying the token information may display all of the generated token information (e.g., 12345678, ab123cd45, etc.), or display only a part of the token information (e.g., 1234 ***, ab12 ****, etc.) .

Further, the token information may be provided in the form of a code consisting of a single digit or letter, or a plurality of numbers or letters or a combination of numbers and letters, according to the intention of a person skilled in the art.

The token generation information for generating the token may be generated by a token generation method including at least one of the same method as that of the token generation device owned by the customer and the method of generating a separate token for authentication of the Internet banking server 100 .

FIG. 3 is an example of an Internet banking site displaying a site authentication number for site authentication according to the method of the present invention.

More specifically, FIG. 3 illustrates an example of a web interface including an Internet banking site authentication number in a form in which a site authentication number is displayed on a screen provided with a web interface, to access the Internet banking server 100 for providing an Internet banking service A person skilled in the art can refer to FIG. 3 to modify the position of the site authentication number, to modify the number of digits in the site authentication number, or to change the site authentication number in addition to the web interface The present invention is not limited to the embodiment shown in FIG. 3. However, the present invention is not limited to the embodiment shown in FIG. do.

Referring to FIG. 3, a web interface for Internet banking including a site authentication number provides a web interface including a site authentication number in addition to a web interface for an existing Internet banking service.

Here, as a method of providing the authentication number through the web interface, the site authentication number for the Internet banking service may be displayed as a whole authentication number generated by the Internet banking server 100 as shown in FIG. ***, 1 * 3 * 5 *, etc.).

In addition, a method of providing an authentication number through a web interface may be provided in a predetermined area of a web interface for an Internet banking service as shown in FIG. 3, May be provided by using the web interface of FIG.

By providing token information for authenticating the Internet banking server, the security of the Internet banking service can be further enhanced.

For example, when an Internet banking service is provided through a link to an Internet banking site delivered to a customer via e-mail, the Internet banking server authentication is used to inform the customer that the Internet banking site is secure, Phasing) can utilize safer internet banking service.

In addition, a more secure Internet banking service can be provided by the Internet banking server authentication process from the pharming by the malicious code installed in the customer's customer terminal.

Claims (6)

In a method for providing a one-time code executed by a server, A first step of confirming customer information based on a customer login to a website through a customer terminal; A second step of confirming whether a customer's device capable of verifying the authentication result of the disposable code is registered based on the customer information; A third step of confirming a dynamically generated disposable code so that the authentication result can be confirmed through the registered device of the customer when the customer's device is registered; And And processing the disposable code to be displayed in a predetermined area of a web page provided to the customer terminal through the website, Wherein the disposable code is characterized in that the authentication result is confirmed through the registered device of the customer. delete 2. The method according to claim 1, Dynamically generate a one-off code through specified number generation information, or And receives the dynamically generated one-time code through the designated code generation server. The method of claim 1, And a disposable code to be compared with a disposable code displayed in a predetermined area of the web page is displayed through the registered device of the customer. The method of claim 1, And a disposable code for site authentication for authenticating a website accessed through the customer terminal. delete

Images