KR101611796B1 - Affiliate financial transaction system using mobile terminal and method thereof - Google Patents

Abstract

The present invention relates to a system and a method for an affiliate financial transaction using a mobile terminal, capable of performing a simple and security-enhanced financial transaction in an offline affiliate. The system includes: the mobile terminal performing an application service relating to a financial transaction; an authentication server transmitting a user unique authentication session value depending on a user authentication result in response to a user authentication session requested through the application service of the mobile terminal; a financial server generating a virtual unique number in response to a user security token generation requested through the application service, generating user unique security token information by combining the generated virtual unique number and the user unique authentication session number transmitted from the authentication server, and transmitting the same to the corresponding mobile terminal; and an affiliate terminal requesting payment approval by transmitting the user unique authentication token information and purchase price information to the financial server, and processing payment for the corresponding purchase price depending on a payment approval result.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a financial transaction system for a merchant using a mobile communication terminal,

The present invention relates to a system and a method for performing a simple and security-enhanced financial transaction at an offline merchant using a mobile communication terminal.

With the development of wired / wireless communication networks, various card payment methods such as credit cards and prepaid cards are used for payment of goods or services.

A method of paying for goods or services using a conventional financial card (e.g., credit or cash) is a method in which a customer passes his or her own financial card to the merchant's point of sale, Card terminal or the like) reads financial card information and inputs an amount of goods or service to request approval, the information is transmitted to a financial card company through a wired communication network provided by a Value Added Network (VAN) , The financial card company decides whether to approve or not, and transmits the result to the merchant through the cable network again. The card is approved for use of the financial card, the receipt is issued through the merchant terminal, and the user signs the receipt .

However, this method has a problem in that, since the user must possess the financial card, the user can not pay the financial card if the user loses or does not hold the financial card immediately.

In addition, since the payment card of the financial card terminal can be stored in the financial card terminal by the financial card user himself / herself, the stored financial card number and the stored payment card can be always exposed to a malicious third party have.

That is, in the conventional transaction method using a financial card, in particular, an MS card that uses a magnetic stripe card (MS) as a storage medium is illegible due to duplication of the lost accident and information leakage due to easy copying The use cases are very dangerous. In addition, the magnetic stripe of such a financial card contains financial institution information, bank account information, etc., so that the depositor may suffer enormous financial damage due to illegal copying.

SUMMARY OF THE INVENTION The present invention has been made in order to solve the above-mentioned problems, and it is an object of the present invention to provide a mobile communication terminal, It is possible to effectively solve the security problem that may occur when performing an existing card settlement by simply paying for a credit card transaction, System and method therefor.

In order to achieve the above object, a first aspect of the present invention provides a mobile communication terminal that performs a financial transaction related application service; An authentication server for transmitting a user unique authentication session value in response to a user authentication session requested through a financial transaction related application service of the mobile communication terminal according to whether the user authentication authentication is normal; Generating a virtual unique number in response to the user security token generation requested through the financial transaction related application service, combining the generated virtual unique number with a user specific authentication session value transmitted from the authentication server, A financial server for generating security token information and transmitting the generated security token information to the corresponding mobile communication terminal; And transmits the purchase price information together with the user's own security token information transmitted from the mobile communication terminal to the financial server to request payment approval, and to process payment for the purchase price according to the requested payment approval result, The present invention provides a merchant's financial transaction system using a mobile communication terminal.

Here, the authentication server receives the user authentication session request message including the user-specific authentication information from the mobile communication terminal, compares the user authentication session request message with the previously registered user's own authentication information, and if the same user- And transmits the generated value to the corresponding mobile communication terminal.

Preferably, the user-specific authentication information may be authentication information of at least one of a user's fingerprint, iris, face, face, voice, and PIN number.

Preferably, the authentication server temporarily stores the generated user-specific authentication session value, transmits the user-specific authentication session value to the financial server when the user requests authentication of the user from the financial server, The security service can be performed.

Preferably, the financial server receives the purchase charge information together with the user-specific security token information transmitted from the merchant terminal, compares the information with the user-specific security token information stored in advance, and if the same user-specific security token exists, The security service may be performed so that the user's unique security token used for the comparison is deleted while performing a response service for the requested payment approval according to the payment availability.

Advantageously, the mobile communication terminal can transmit the user specific security token information to the merchant terminal using local communication.

Preferably, the financial server converts the generated user-specific security token information into physical card secret information (Track 2) data type and transmits the same to the corresponding mobile communication terminal, Specific security token information converted in the form of physical card secret information (Track 2), and can transmit the user specific security token information to the merchant terminal.

Preferably, the financial server may periodically update the generated virtual unique number, or perform a service so that the virtual server is updated when the number of settlement times or the amount of money is exceeded.

Preferably, a VAN server connected via the communication network between the financial server and the merchant terminal, and for connecting the merchant terminal and the financial server in order to process the merchant purchase payment service may be further provided.

According to a second aspect of the present invention, there is provided a method for performing a financial transaction using a system including a mobile communication terminal, an authentication server, a financial server, and an affiliate terminal, the method comprising the steps of: (a) Requesting a user authentication session to the authentication server through a service; (b) transmitting a user specific authentication session value in response to the user authentication session requested in the step (a) through the authentication server according to whether the user authentication confirmation is normal; (c) requesting the financial server to generate a user security token through a financial transaction related application service provided in the mobile communication terminal; (d) generating a virtual unique number in response to the generation of the user security token requested in step (c) through the financial server, and generating a virtual unique number using the generated virtual unique number, Generating a user-specific security token information by combining authentication session values and transmitting the user-specific security token information to the corresponding mobile communication terminal; And (e) transmitting purchase price information together with user specific security token information transmitted from the mobile communication terminal through the merchant terminal to the financial server to request payment approval, and, in response to the requested payment approval result, The method comprising the steps of: (a) receiving a transaction from a mobile terminal;

Preferably, in the step (b), the authentication server receives the user authentication session request message including the user-specific authentication information from the mobile communication terminal, compares the user authentication session request message with the previously registered user's own authentication information, , It is possible to generate and transmit the corresponding user authentication session value to the corresponding mobile communication terminal.

Preferably, the authentication server temporarily stores the generated user-specific authentication session value, transmits the user-specific authentication session value to the financial server when the user authentication session value is requested to be checked from the financial server, The security service can be performed as much as possible.

Preferably, in the step (e), the financial server receives purchase charge information together with the user-specific security token information transmitted from the merchant terminal, compares the received purchase charge information with previously stored user-specific security token information, , The security service can be performed to perform the response service for the requested payment approval according to the availability of payment of the purchase price and to delete the user specific security token used in the comparison.

Preferably, in the step (e), the mobile communication terminal can transmit the user specific security token information to the merchant terminal using near field communication.

Preferably, in step (d), the financial server converts the generated user-specific security token information into physical card secret information (Track 2) data type and transmits the same to the corresponding mobile communication terminal, , The mobile communication terminal can receive the user specific security token information converted in the form of the physical card secret information (Track 2) and transmit it to the merchant terminal.

Preferably, in step (d), the financial server may periodically update the generated virtual unique number, or perform a service such that the service is updated when the number of settlement times or the amount of money is exceeded.

According to the merchant's financial transaction system and method using the mobile communication terminal of the present invention as described above, when a customer uses an application related to financial transactions provided in his / her mobile communication terminal without using an existing physical financial card, It is possible to effectively solve the security problem that may occur when performing an existing card settlement by easily paying for goods or service money, and it is advantageous in that a financial transaction can be carried out at any time and anywhere with enhanced simplicity and security.

FIG. 1 is a block diagram of a merchant's financial transaction system using a mobile communication terminal according to an embodiment of the present invention. Referring to FIG.
FIG. 2 is a flowchart illustrating an exemplary merchant's financial transaction method using a mobile communication terminal according to an exemplary embodiment of the present invention. Referring to FIG.

The above and other objects, features, and advantages of the present invention will become more apparent by describing in detail exemplary embodiments thereof with reference to the attached drawings, which are not intended to limit the scope of the present invention. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, the following embodiments of the present invention may be modified into various other forms, and the scope of the present invention is not limited to the embodiments described below. The embodiments of the present invention are provided to enable those skilled in the art to more fully understand the present invention. In the drawings, the same reference numerals are used to denote the same or similar elements.

FIG. 1 is a block diagram of a merchant's financial transaction system using a mobile communication terminal according to an embodiment of the present invention. Referring to FIG.

Referring to FIG. 1, a merchant's financial transaction system using a mobile communication terminal according to an exemplary embodiment of the present invention includes a mobile communication terminal 100, an authentication server 200, a financial server 300, and an affiliate terminal 400, And the like.

Here, the mobile communication terminal 100 is connected to the authentication server 200, the financial server 300, and the merchant terminal 400 via a communication network 10 so that data can be transmitted / received to / 10 is a high speed communication network in a large communication network capable of large capacity, long distance voice and data service, and may be a next generation wireless network including WiFi, Wibro, and Wimax for providing Internet or high speed multimedia service.

The Internet includes a plurality of services such as HTTP (Hyper Text Transfer Protocol), Telnet, File Transfer Protocol (FTP), Domain Name System (DNS), Simple Mail Transfer Protocol (SMTP) Refers to a worldwide open computer network structure that provides a Simple Network Management Protocol (SNMP), a Network File Service (NFS), and a Network Information Service (NIS). An arbitrary user of the mobile communication terminal 100 accesses the authentication server 200 ) And the financial server 300. [0040] Meanwhile, the Internet may be a wired or wireless Internet, or may be a core network integrated with a wired public network, a local area network, a wireless mobile communication network, or a portable Internet.

If the communication network 10 is a mobile communication network, it may be a synchronous mobile communication network or an asynchronous mobile communication network. As an example of the asynchronous mobile communication network, a WCDMA (Wideband Code Division Multiple Access) communication network is exemplified. In this case, although not shown in the drawing, the mobile communication network may include, for example, a radio network controller (RNC). Meanwhile, although the WCDMA network is described as an example, it may be a next generation communication network such as a 3G LTE network, a 4G network, and a 5G network, or an IP network based on other IPs. The communication network 10 transmits signals and data between the mobile communication terminal 100 and the authentication server 200, the financial server 300, and the merchant terminal 400.

The mobile communication terminal 100 may be connected to the authentication server 200, the financial server 300 and the merchant terminal 400 through the communication network 10 and may be any type of wired / .

For example, the mobile communication terminal 100 includes various mobile terminals communicating via a wireless Internet or a portable Internet, and also includes a Palm PC, a smart phone, a mobile play-station, All the wired / wireless home appliances / devices having a user interface for accessing the authentication server 200, the financial server 300 and the merchant terminal 400, such as a digital multimedia broadcasting (DMB) phone having a communication function, a tablet PC, Communication devices may be meant to be inclusive.

In particular, when the mobile communication terminal 100 is implemented as a normal smartphone, the smartphone can be freely used by downloading various application programs desired by the user, unlike a general mobile phone (a feature phone) It is a phone based on an open operating system that can be deleted and deleted. It has not only all the functions of voice / video call, internet data communication, etc., but also all mobile phones or mobile phones with mobile office function, It is desirable to be understood as a communication device including all possible Internet phones or Tablet PCs.

Such an open-type operating system may include, for example, Symbian of NOKIA, BlackBerry of RIMS, iPhone of Apple, Microsoft's Windows Mobile, Google's Google Android, and Samsung's ocean.

As described above, since the smartphone uses an open operating system, a user can arbitrarily install and manage various application programs, unlike a mobile phone having a closed operating system.

That is, the smartphone basically includes a control unit, a memory unit, a screen output unit, a key input unit, a sound output unit, a sound input unit, a camera unit, a wireless network communication module, a near field wireless communication module, and a battery for power supply.

The controller is a generic term for controlling the operation of the smartphone, and includes at least one processor and an execution memory, and is connected to each functional unit provided in the smart phone through a bus.

The controller controls the operation of the smartphone by loading at least one program code included in the smartphone into the execution memory through the processor and calculating the result by transferring the result to at least one functional unit through the bus .

The memory unit is a general term of a non-volatile memory included in a smart phone, and stores and maintains at least one program code executed through the control unit and at least one data set in which the program code is used. The memory unit basically stores a system program code and a system data set corresponding to an operating system of a smartphone, a communication program code and a communication data set for processing a wireless communication connection of the smartphone, at least one application program code and an application data set , And the program code and data set for implementing the present invention are also stored in the memory unit.

The screen output unit is composed of a screen output device (e.g., an LCD, an LED device) and an output module for driving the screen output device. The screen output unit is connected to the control unit through a bus, And outputs it to the device.

The key input unit is composed of a key input device having at least one key button (or a touch screen device interlocked with the screen output unit) and an input module for driving the key input unit. The control unit is connected to the control unit via a bus, Or inputs data necessary for the operation of the control unit.

The sound output unit includes a speaker for outputting a sound signal and a sound module for driving the speaker. The sound output unit is connected to the control unit through a bus, and outputs a result of operation corresponding to the sound output from the various operation results of the control unit through the speaker . The sound module decodes sound data to be output through the speaker and converts the sound data into a sound signal.

The sound input unit includes a microphone for receiving a sound signal and a sound module for driving the microphone, and transmits the sound data input through the microphone to the control unit. The sound module encodes and encodes a sound signal input through the microphone.

The camera unit includes an optical unit, a CCD (Charge Coupled Device) and a camera module for driving the CCD unit, and obtains bitmap data input to the CCD through the optical unit. The bitmap data may include both still image data and moving image data.

The wireless network communication module is a collective term for communicating wireless communication and includes at least one antenna, an RF module, a baseband module, and a signal processing module for transmitting and receiving a radio frequency signal of a specific frequency band. And transmits the calculation result corresponding to the wireless communication among the various calculation results of the control unit through the wireless communication or receives the data through the wireless communication and transmits the data to the control unit, , Communication, and handoff procedures.

Also, the wireless network communication module includes a mobile communication structure for performing at least one of connection, location registration, call processing, call connection, data communication, and handoff to a mobile communication network according to the CDMA / WCDMA standard. Meanwhile, according to the intention of those skilled in the art, the wireless network communication module may further include a portable Internet communication structure for performing at least one of connection to the portable Internet, location registration, data communication, and handoff according to the IEEE 802.16 standard, It is evident that the present invention is not limited by the wireless communication configuration provided by the communication module.

The short-range wireless communication module is composed of a short-range wireless communication module that connects a communication session using a radio frequency signal as a communication medium within a predetermined distance. Preferably, the short-range wireless communication module includes RFID communication, Bluetooth communication, Wi- And wireless communication. The short-range wireless communication module may be integrated with the wireless network communication module.

In particular, when the mobile communication terminal 100 according to an exemplary embodiment of the present invention is implemented as a smart phone, a financial transaction related application program (e.g., Woori Bank mobile payment application, etc.) is downloaded through an App Store, Can be downloaded to perform various electronic financial transaction services.

That is, the mobile communication terminal 100 performs a function of requesting a user authentication session to the authentication server 200 through a financial transaction related application service provided in the mobile communication terminal 100, And transmits a user authentication session request message including user specific authentication information to the authentication server 200 using the service.

In this case, the user-specific authentication information may be authentication information of at least one of a user's fingerprint, iris, face, face, voice, and PIN.

The mobile communication terminal 100 can also receive a user specific security transmitted from a financial server 300 to be described later by using a local communication means (e.g., RFID communication, Bluetooth communication, Wi-Fi communication, It is preferable that the token information is wirelessly transmitted to the merchant terminal 400.

The authentication server 200 is connected to the mobile communication terminal 100 and the financial server 300 via the communication network 10 so that data can be transmitted to and received from the mobile communication terminal 100 and the financial server 300, And transmits the user authentication session value according to whether the user authentication authentication is normal or not.

That is, the authentication server 200 receives the user authentication session request message including the user-specific authentication information from the mobile communication terminal 100 and compares the user authentication session request message with the previously registered user's own authentication information, It is determined that the authentication has been normally performed, and the unique authentication session value of the user is generated and transmitted to the mobile communication terminal 100 of the corresponding user.

In this case, it is preferable that the pre-registered user specific authentication information is registered in advance in the authentication server 200 when installing the financial transaction related application of the mobile communication terminal 100. In the authentication server 200, It is desirable to store and manage information in a database (DB) for each user.

The authentication server 200 temporarily stores the generated user unique authentication session value, and when requesting confirmation of the user specific authentication session value from the financial server 300, transmits the corresponding user authentication session value to the financial server 300 The security service can be performed so as to be deleted at the same time as the transmission.

The financial server 300 is a server disposed and operated in a financial institution such as a bank company (e.g., Woori Bank or the like) or a credit card company. The server 300 is connected to the mobile communication terminal 100, the authentication server 200, And are connected to each other to enable data transmission / reception with the terminal 400.

The financial server 300 generates a virtual unique number in response to the user security token generation requested through the financial transaction related application service of the mobile communication terminal 10 and transmits the generated virtual unique number to the authentication server 200 And transmits the generated user specific security token information to the mobile communication terminal 100 of the corresponding user.

In addition, the financial server 300 preferably stores the created user-specific security token information in a database (DB) and stores and manages the user-specific security token information.

[0030] In detail, a rule for generating the user-specific security token information will be described in more detail. First, a fixed virtual unique number is generated, and a token- And the unique authentication session value of the corresponding user obtained from the authentication server 200, which is the third authentication authority, to the allocated token to generate the user specific security token information.

In addition, the financial server 300 compares the purchase price information with the user-specific security token information transmitted from the merchant terminal 400, compares the received purchase price information with the user-stored security token information, and if the same user-specific security token exists, The security service can be performed to perform the response service for the requested payment approval according to whether the payment can be made and to delete the user specific security token used for the comparison.

In addition, the financial server 300 converts the generated user-specific security token information into physical card secret information (Track 2) data type and transmits it to the corresponding mobile communication terminal 100. The mobile communication terminal 100 Specific security token information converted into physical card secret information (Track 2) form from the financial server 300 and transmit the received user specific security token information to the merchant terminal 400.

In addition, the financial server 300 may periodically update the generated virtual unique number, or perform a service so that the virtual server 300 is updated when the number of settlements or the amount of money is exceeded.

Then, the merchant terminal 400 transmits the purchase price information together with the user-specific security token information transmitted from the mobile communication terminal 100 to the financial server 300 to request payment approval, and according to the requested payment approval result And performs payment processing for the purchase price.

Although not shown in the figure, the merchant terminal 400 includes components such as a control unit, a memory unit, a unique code reader unit, a key input unit, a screen output unit, a communication processing unit, a security application module, a print output unit, And may include at least one terminal function or the like according to the intention of a person skilled in the art. On the other hand, the components constituting the merchant terminal 400 are generally known, and a detailed description thereof will be omitted.

The financial server 300 is connected to the merchant terminal 400 via the communication network 10 and is connected to the financial server 300 through the affiliate terminal 400 in order to process the merchant purchase payment service, (VAN) server (not shown).

However, those skilled in the art are aware of the technical features of processing the merchant purchase payment service in cooperation with the financial server 300 and the merchant terminal 400 in the company server The specific function configuration for processing the merchant purchase payment service in cooperation with the financial server 300 and the merchant terminal 400 in the above-described bank server will be omitted for the sake of convenience.

Further, it is preferable that the bank server includes a merchant DB (not shown) that stores merchant information on one or more merchant stores including the merchant terminal 400, the merchant store address information, and the merchant store account information in association with each other .

Herein, the merchant information is information to be matched (or compared) with the merchant information included in the payment request message generated and transmitted by the merchant terminal 400, and it is preferable that the merchant information includes at least one of the merchant terminal number or the merchant number .

Hereinafter, a method of financing a merchant using a mobile communication terminal according to an embodiment of the present invention will be described in detail.

FIG. 2 is a flowchart illustrating an exemplary merchant's financial transaction method using a mobile communication terminal according to an exemplary embodiment of the present invention. Referring to FIG.

Referring to FIGS. 1 and 2, a merchant's financial transaction method using a mobile communication terminal according to an exemplary embodiment of the present invention includes an authentication server 200 (FIG. 1) through a financial transaction application service provided in the mobile communication terminal 100, The user authentication session (Session) is requested (S100).

At this time, the mobile communication terminal 100 transmits a user authentication session request message including user's unique authentication information (for example, user's fingerprint, iris, face, face, voice or unique PIN number) To the authentication server (200).

Thereafter, in response to the user authentication session requested in step S100, the authentication server 200 transmits the user authentication session value according to whether the user authentication is normal or not (S200).

That is, in step S200, the user authentication session request message including the user-specific authentication information is received from the mobile communication terminal 100 through the authentication server 200, and compared with the registered user-specific authentication information, It can be determined that the user authentication confirmation is normal and the unique authentication session value of the corresponding user can be generated and transmitted to the corresponding mobile communication terminal 100. [

In addition, the authentication server 200 may temporarily store the generated user-specific authentication session value, and when requesting confirmation of the user-specific authentication session value from the financial server 300, ), And may also perform a security service to be deleted at the same time.

Next, a request message for generating a user security token is transmitted to the financial server 300 through a financial transaction related application service provided in the mobile communication terminal 100 (S300).

Next, a virtual unique number is generated in response to the generation of the user security token requested in step S300 through the financial server 300, and the generated virtual unique number and the corresponding unique authentication session transmitted in step S200 To generate the user-specific security token information, and transmits the information to the corresponding mobile communication terminal 100 (S400).

At this time, when the financial server 300 receives a request message for generating a user security token from the mobile communication terminal 100, the financial server 300 transmits a request message for user authentication confirmation to the authentication server 200 for authentication of the user. Then, the authentication server 200 receives the request message for confirming the user authentication from the financial server 300 and transmits the unique authentication session value of the corresponding user to the corresponding financial server 300.

Meanwhile, in step S400, the financial server 300 may convert the generated user-specific security token information into physical card secret information (Track 2) data type and transmit the same to the corresponding mobile communication terminal 100 , The mobile communication terminal 100 receives the user specific security token information converted into the physical card secret information (Track 2) and transmits the information to the merchant terminal 400.

In addition, in step S400, the financial server 300 may periodically update the generated virtual unique number, or perform a service such that the virtual server 300 is updated when the number of settlements or the amount of money is exceeded.

Then, the purchase payment information together with the user-specific security token information transmitted from the mobile communication terminal 100 through the merchant terminal 400 is transmitted to the financial server 300 to request payment approval, and the requested payment approval result (S500). ≪ tb > < / TABLE >

At this time, in step S500, the financial server 300 receives the purchase charge information together with the user-specific security token information transmitted from the merchant terminal 400, compares the information with the user-stored security token information, The security service can perform the security service so as to perform the response service for the requested payment approval according to the availability of payment of the purchase price and delete the user specific security token used in the comparison.

That is, the financial server 300 judges whether or not the payment of the purchase price can be paid based on the balance of the real-used account account previously registered by the user or the payment amount of the financial card, etc., The security service can be performed to perform the response service for the requested payment approval and to delete the user specific security token used for the comparison.

Although the present invention has been described in connection with the preferred embodiments thereof with reference to the accompanying drawings, it is to be understood that the invention is not limited to the disclosed embodiments, It is possible to carry out various modifications within the scope of the present invention.

100: mobile communication terminal,
200: authentication server,
300: financial server,
400: Merchant terminal

Claims (17)

A mobile communication terminal for performing a financial transaction related application service;
An authentication server for transmitting a user unique authentication session value in response to a user authentication session requested through a financial transaction related application service of the mobile communication terminal according to whether the user authentication authentication is normal;
Generating a virtual unique number in response to the user security token generation requested through the financial transaction related application service, combining the generated virtual unique number with a user specific authentication session value transmitted from the authentication server, A financial server for generating security token information and transmitting the generated security token information to the corresponding mobile communication terminal; And
And transmits the purchase price information together with the user specific security token information transmitted from the mobile communication terminal to the financial server to request payment approval and to process the payment for the purchase price according to the requested payment approval result Including,
The financial server converts the generated user specific security token information into physical card secret information (Track 2) data type and transmits the same to the corresponding mobile communication terminal, And transmits the user specific security token information converted to the secret information (Track 2) type information to the merchant terminal.
The method according to claim 1,
The authentication server receives the user authentication session request message including the user-specific authentication information from the mobile communication terminal, compares the user authentication session request message with the previously registered user's own authentication information, and if the same user-specific authentication information exists, And transmits the generated information to the corresponding mobile communication terminal.
3. The method of claim 2,
Wherein the user-specific authentication information comprises authentication information of at least one of a fingerprint, an iris, a face, a face, a voice, and a PIN number of the user.
3. The method of claim 2,
Wherein the authentication server temporarily stores the generated user unique authentication session value and transmits the corresponding user authentication session value to the financial server when the user requests authentication of the user from the financial server, Wherein the merchant bank transaction service is performed by the mobile terminal.
The method according to claim 1,
The financial server receives the purchase charge information together with the user-specific security token information transmitted from the merchant terminal, compares the information with the user-specific security token information stored in advance, and when the same user-
And performs a security service so as to delete the user specific security token used in the comparison while performing a response service for the requested payment approval in accordance with the availability of the purchase price. Trading system.
The method according to claim 1,
Wherein the mobile communication terminal transmits the user specific security token information to the merchant terminal using the local communication.
delete The method according to claim 1,
Wherein the financial server performs a service to periodically update the generated virtual unique number or to update the generated virtual unique number when the number of settlements is exceeded or a predetermined amount is exceeded.
The method according to claim 1,
Further comprising a VAN server connected via a communication network between the financial server and the merchant terminal for connecting the merchant terminal and the financial server in order to process the merchant purchase payment service. Merchant bank financial transaction system using terminal.
A method for performing a financial transaction of a bounty money using a system including a mobile communication terminal, an authentication server, a financial server, and an affiliate terminal,
(a) requesting a user authentication session to the authentication server through a financial transaction related application service provided in the mobile communication terminal;
(b) transmitting a user specific authentication session value in response to the user authentication session requested in the step (a) through the authentication server according to whether the user authentication confirmation is normal;
(c) requesting the financial server to generate a user security token through a financial transaction related application service provided in the mobile communication terminal;
(d) generating a virtual unique number in response to the generation of the user security token requested in step (c) through the financial server, and generating a virtual unique number using the generated virtual unique number, Generating a user-specific security token information by combining authentication session values and transmitting the user-specific security token information to the corresponding mobile communication terminal; And
(e) sending purchase price information to the financial server together with user specific security token information transmitted from the mobile communication terminal through the merchant terminal to request payment approval, and And processing the settlement for the transaction,
In step (d), the financial server converts the generated user-specific security token information into a physical card secret information (Track 2) data format and transmits the same to the corresponding mobile communication terminal,
Wherein, in the step (e), the mobile communication terminal receives the user specific security token information converted into the physical card secret information (Track 2) type and transmits the received information to the affiliate terminal Merchant Financial Transaction Method.
11. The method of claim 10,
In the step (b), the authentication server receives the user authentication session request message including the user-specific authentication information from the mobile communication terminal, compares the user authentication session request message with the previously registered user's own authentication information, And generating and transmitting the user authentication session value to the corresponding mobile communication terminal.
12. The method of claim 11,
Wherein the user-specific authentication information comprises authentication information of at least one of a fingerprint, an iris, a face, a face, a voice and a PIN number of the user.
12. The method of claim 11,
Wherein the authentication server temporarily stores the generated user unique authentication session value, transmits the corresponding unique authentication session value to the financial server when the user authentication session value is requested from the financial server, The method according to claim 1, wherein the mobile terminal is a mobile terminal.
11. The method of claim 10,
In the step (e), the financial server receives the purchase charge information together with the user-specific security token information transmitted from the merchant terminal, compares the received purchase charge information with the stored user-specific security token information,
And performs a security service so as to delete the user specific security token used in the comparison while performing a response service for the requested payment approval in accordance with the availability of the purchase price. How to trade.
11. The method of claim 10,
Wherein the mobile communication terminal transmits the user specific security token information to the merchant terminal using the local communication in step (e).
delete 11. The method of claim 10,
Wherein the financial server performs a service to periodically update the generated virtual unique number or to update the generated virtual unique number at a predetermined number of payment times or an amount exceeding a predetermined amount. Way.

Images