KR102007431B1 - System and method for checking the truth to application information for automatic withdrawal registration - Google Patents

Abstract

The present invention relates to a system for checking authenticity of application information for automatic transfer registration and a method thereof. According to the present invention, the system for checking authenticity of application information for automatic transfer registration comprises: a used agency server for receiving customer information from a customer who applies for automatic transfer and transmitting automatic transfer application information and personal agreement evidence materials (electronic signature result value) to an upper level; a relay server for transmitting an OTT to an authentication agency together with a specialized receipt number (tx-id), requesting OTT verification, receiving an OTT verification result, and displaying an automatic transfer application registration screen on a terminal of the customer who applies for automatic transfer; a messenger authentication server for verifying an electronic signature from the terminal of the customer who applies for automatic transfer, issuing OTT, submitting the OTT to the relay server through the terminal of the customer who applies for automatic transfer together with the tx-id, and transmitting an OTT verification result according to the OTT verification request from the relay server to the relay server; a user terminal as a terminal of the customer who applies for automatic transfer, checking an automatic transfer application registration request message to perform an electronic signature, inputting automatic transfer application content through an automatic transfer application registration screen, performing an electronic signature, checking an automatic transfer application content confirmation request message, and performing an electronic signature; an automatic transfer integrated management agency server for checking whether customer information on automatic transfer application information is identical to customer information on an electronic signature result value, and transmitting the automatic transfer application information to a transaction financial agency; and a financial agency server for registering automatic transfer application content in an account ledger of a customer.

Description

System and method for checking the truth to application information for automatic withdrawal registration}

The present invention relates to a system and method for checking the authenticity of the application for direct debit registration, and more specifically, to debit the debit card or credit card in the process of automatic debit registration before the debit registration of the applicant is registered on the direct debit. The present invention relates to an authenticity inspection system and method for debit registration application information that can fundamentally prevent false or fraudulent application of direct debit by systematically inspecting the authenticity of an application.

The direct debit service used by ordinary people living in modern times is automatically charged by the banks, securities companies, and credit card companies that have been entrusted with the payment of utility bills, insurance premiums, and apartment management fees from the payer's deposit account or credit card account. It is a service that withdraws money and deposits it into the account of a direct debiting institution. The number of such direct debit service usage is about 3 billion a year, and the number of new registrations is estimated to be about 10% of the number of usage every year.

For companies, direct debit services are a very efficient and attractive way to collect payouts. The cost of direct debit services is also very low, making it widely used by not only large corporations, but also SMEs, civic groups, and public institutions. On the other hand, customers of banks and other financial companies (collectively referred to as "banks") are openly exposed to the likelihood that money may be unfairly withdrawn from their accounts. The malicious user can withdraw the customer's money from the bank account by simply registering the customer's name, account number, date of birth, etc. with the financial institution's customer ledger. As a result, accidents occur every year. In February 2014, a fraudulent organization was found and accused of buying more than 76,000 personal information from the Internet and registering it in a direct debit ledger under the name of a ghost IT company.

In principle, the direct debit service requires customers who have entrusted their money to the bank to present their ID card and directly designate the direct debit user and apply for direct debit. However, as the application for new direct debit registration has expanded to more than 300 million annually, it is very inefficient for customers to go directly to the bank and apply for direct debit.

For this reason, we recently allowed direct debiting institutions to directly apply for direct debit registration from payers (bank customers) and then apply for direct debit registration with banks instead of customers (this is called 'direct debit direct payment system'). A bank entrusted with managing a customer's property has no way of confirming in advance whether its customer has applied for direct debit. Therefore, in the event of an accident, the client confirms his or her application agreement afterwards. As the direct debit system is operated in this way, the false debit application accidents are repeated every year. It is a loophole of the direct debit system which is indispensable for modern economic activities. Therefore, there is an urgent need to prepare countermeasures.

On the other hand, Korean Patent Publication No. 10-1156729 (Patent Document 1) discloses a "automatic transfer agreement application system and method using a communication terminal", according to the automatic transfer agreement application system using a communication terminal , A subscriber terminal 100, a merchant terminal 200, a relay server 300, a communication company server 400, and a financial institution server 500, wherein the relay server 300 is received from the subscriber terminal 100. On the basis of the personal information of the consent and the terminal information of the consent of the subscriber in conjunction with the carrier server 400 determines whether or not match with each other's subscriber information and authenticates that the person applying for direct debit agreement through the subscriber terminal (100) At the same time, the identity verification unit 320 for authenticating that the application for the automatic transfer agreement through the terminal of the name of the consent; An account inquiry unit 330 for inquiring the corresponding account from the financial institution server 500 using the personal information and the account information transmitted through the terminal 100 in the name of a synonym; And if the account holder of the corresponding account agrees with the authorized authenticator, the automatic debit agreement is applied to the financial institution server 500 by applying the debit agreement to the financial institution server 500 in consideration of the automatic debit consent application. Applicator 340, including, the name of the consent terminal 100, the consent to apply for automatic debit agreement through the terminal 100, and only if the account holder of the debit target account The debit agreement is characterized in that for processing.

In the case of Patent Document 1 as described above, since the applicant can apply for the direct debit agreement only based on the information on the direct debit agreement entered through the terminal, the name and account holder of the terminal and the account holder can agree. Although the written consent method of the company may be effective in resolving the problem of disclosure and impersonation of the personal information in question, the user (consent) may be directly involved in the direct debit application and processing process to take necessary actions required by the system. There is a problem that is difficult to verify.

Korea Patent Registration No. 10-1156729 (2012.06.08 registration)

The present invention has been created in consideration of the above-mentioned matters, and the bank or automatic debit integrated management institution automatically registers the debit registration application contents of the applicant in the customer ledger during the debit registration process of the deposit account or credit card. The debit request customer obtains an electronically signed electronic document and systematically checks whether it matches the debit application data of the user organization, and checks the authenticity of the debit registration request in advance to check for false or fraudulent requests for direct debit. The purpose of the present invention is to provide a system and method for checking the authenticity of application for direct debit registration that can be blocked at source.

In order to achieve the above object, the authenticity inspection system of the debit registration application information according to the present invention,

Receive customer information from customers who apply for direct debit, request electronic signatures from customers, and send debit application information and self-confirmation data (results of electronic signatures) to higher layers. User institution server;

It is electrically connected to the user institution server, receives the automatic transfer application information from the user institution server (transmission to the first certification body) and receives a professional reception number (tx-id), and receives a professional reception number ( tx-id) transmits the OTT to the certification authority, requests the OTT verification and receives the OTT verification result, and if the OTT matches, permits the access of the terminal of the direct debit applicant, and reminds the debit application registration screen. A relay server which is displayed on a terminal of a debit application customer and transmits (secondary transmission) the debit application information including the debit application contents to the certification authority;

Direct debit application registration request message is displayed on the terminal of the direct debit applicant, verify the digital signature from the terminal of the direct debit applicant, and issue a One Time Token (OTT) to receive a professional reception number (tx-id) is submitted to the relay server through the terminal of the direct debit applicant, and transmits the OTT verification result according to the OTT verification request from the relay server to the relay server, and requests for confirmation of the debit application. A messenger authentication server which displays a message on the terminal of the direct debit applicant, verifies the electronic signature from the terminal of the direct debit applicant, and transmits the digital signature result to the relay server;

Check the direct debit application registration request message displayed on the screen by the operation of the messenger authentication server to perform an electronic signature, and the contents of the direct debit application through the direct debit application registration screen displayed on the screen by the operation of the relay server. A user terminal as a terminal of an automatic debit applicant, which inputs and performs an electronic signature, checks the debit application contents confirmation request message displayed on the screen by the operation of the messenger authentication server, and performs the electronic signature;

Receive direct debit application information and self-confirmation data (digital signature result value) from the user institution server, and confirm that the customer information on the debit application information and the customer information on the electronic signature result value does not match. In case the customer information mismatch notification message is sent to the user institution server, and if the match, direct debit integration management server for transmitting the debit application information to the transaction financial institution of the direct debit application customer; And

It is characterized in that it includes a financial institution server that receives the direct debit application information from the automatic debit integrated management server server, and registers the debit application details in the customer's account ledger.

Here, the customer information received from the direct debit application customer by the user institution server may include the name, mobile phone number, date of birth of the customer.

In addition, the automatic transfer application information transmitted from the relay server to the external certification authority (primary transmission) may include customer information (name, mobile phone number, date of birth), mobile web address, guide letter, and the like.

In addition, the direct debit application information transmitted from the user institution server to the upper layer may include a customer's account number and bank name, date of birth, name, direct debit use institution name, customer management number.

In addition, the relay server may be configured as a mobile web server.

In addition, the messenger authentication server may include a cacao authentication server.

In addition, the electronic signature performed by the user terminal may be performed by fingerprint authentication or authentication password input.

In addition, the authenticity inspection method of the debit registration application information according to the present invention in order to achieve the above object,

A method for checking the authenticity of the debit registration application information by the authenticity inspection system of the debit registration application information including a user institution server, a relay server, a messenger authentication server, a user terminal, an automatic debit integrated management institution server, and a financial institution server,

a) receiving customer information from a direct debit applicant by the user institution server, and requesting a digital signature from the customer;

b) receiving the automatic transfer application information from the user institution server by the relay server and transmitting the primary transfer request information to the messenger authentication server (first transmission), and receiving a professional reception number (tx-id) from the messenger authentication server;

c) displaying, by the messenger authentication server, a debit request registration request message on a terminal of the debit request customer (hereinafter, referred to as a user terminal);

d) checking, by the user terminal, a direct debit application registration request message and performing an electronic signature;

e) after verifying the electronic signature from the user terminal by the messenger authentication server, issuing a one-time access security token (OTT) to the user terminal together with a professional reception number (tx-id); Submitting to the relay server;

f) transmitting, by the relay server, an OTT together with a professional reception number (tx-id) to the messenger authentication server, requesting OTT verification, and receiving an OTT verification result from the messenger authentication server;

g) allowing access of the user terminal when the OTT matches by the relay server, and displaying a direct debit application registration screen on the user terminal;

h) inputting a direct debit application contents and performing an electronic signature through the debit application registration screen displayed on the screen by the user terminal;

i) transmitting (secondary transmission), by the relay server, the direct debit request information including the debit request contents to the messenger authentication server;

j) displaying, by the messenger authentication server, a debit request confirmation message on the user terminal;

k) checking, by the user terminal, a debit application confirmation message on the screen and performing an electronic signature;

l) verifying the digital signature from the user terminal by the messenger authentication server and transmitting the digital signature result value to the relay server;

m) transmitting, by the user institution server, the direct debit application information and the self-certification document (digital signature result value) to the automatic debit integration management server server;

n) checking whether the customer information on the direct debit application information and the customer information on the electronic signature result value match by the direct debit integrated management server;

o) transmitting a customer information disagreement notification message to the user institution server if it does not match, and transmitting a direct debit application information to the financial institution server if there is a match; And

p) receiving the direct debit application information by the financial institution server, and registering the debit application details in the customer's account ledger.

Here, the customer information received from the direct debit application customer by the user institution server in step a) may include the name, mobile phone number, date of birth of the customer.

Further, in step b), the direct debit application information transmitted from the relay server to the messenger authentication server (primary transmission) may include customer information (name, customer's name, mobile number, date of birth), mobile web address, guide letter, and the like. Can be.

In addition, the debit application information transmitted from the user institution server to the integrated automatic transfer management server in step m) includes the customer's account number and bank name, date of birth, name, name of the direct debit using institution, customer management number, etc. can do.

In addition, the relay server may be configured as a mobile web server.

In addition, the messenger authentication server may include a cacao authentication server.

In addition, the digital signature performed by the user terminal in the steps d), h), k) may be performed by fingerprint authentication or authentication password input.

According to the present invention, the electronic document signed by the bank or automatic debit integration management customer electronically signed by the customer before the debit registration application contents registered in the customer ledger in the automatic debit registration process of the deposit account or credit card By checking the authenticity of the contents of the debit registration application in advance by systematically checking whether it matches the data of the direct debit application of the user institution, thereby preventing the false and fraudulent application of the direct debit.

1 is a view schematically showing the configuration of the authenticity inspection system of the debit registration application information according to an embodiment of the present invention.
2A and 2B are flowcharts illustrating an execution process of an authenticity checking method of debit registration application information according to an exemplary embodiment of the present invention.
3 is a view showing an operation sequence of the authenticity inspection system of the debit registration application information according to an embodiment of the present invention.
4 is a view showing a debit application registration request message display, electronic signature, debit application information input through the user terminal in the authenticity inspection method of the direct debit registration application information according to the present invention.
FIG. 5 is a view showing a debit application contents confirmation request message display, a debit application contents confirmation, and an electronic signature in the authenticity checking method of the direct debit registration application information according to the present invention.

The terms or words used in this specification and claims are not to be construed as being limited to the common or dictionary meanings, and the inventors may properly define the concept of terms in order to best explain their invention in the best way. Based on the principle, it should be interpreted as meaning and concept corresponding to the technical idea of the present invention.

Throughout the specification, when a part is said to "include" a certain component, it means that it may further include other components, except to exclude other components unless specifically stated otherwise. In addition, the terms “… unit”, “… unit”, “module”, “device”, and the like described in the specification mean a unit that processes at least one function or operation, which is hardware or software or a combination of hardware and software. It can be implemented as.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view schematically showing the configuration of the authenticity inspection system of the debit registration application information according to an embodiment of the present invention.

1, the authenticity inspection system 100 of the debit registration application information according to the present invention is a user institution server 110, relay server 120, messenger authentication server 130, user terminal 140, automatic It is configured to include a transfer integrated management institution server 150, financial institution server 160.

The user institution server 110 receives customer information from the direct debit application customer, requests the electronic signature to the customer, and the upper layer (here, automatic debit integration) of the direct debit application information and self-confirmation data (the result of the electronic signature). To the management authority server 150). In this case, the customer information received from the direct debit application customer by the user institution server 110 may include the name, mobile phone number, date of birth of the customer. In addition, the debit application information transmitted from the user institution server 110 to the upper layer (direct debit integrated management agency server 150) is the customer's account number and bank name, date of birth, name, debit user name, customer management Number and the like. In addition, the user institution associated with such a user institution server 110 may be any user institution without any special limitations if the direct debit application customer requests (directed) the debit. For example, if a customer who applies for direct debit wants to pay the communication fee of the carrier (for example, SKT) that he or she is using by direct debit, SKT can become a user organization when applying for direct debit to SKT.

The relay server 120 is electrically connected to the user institution server 110 and receives the automatic transfer application information from the user institution server 110 and transmits it to an external certification authority (here, the messenger authentication server 130) (1). Car), and receives the professional receipt number (tx-id) from the messenger authentication server 130, and is issued by the messenger authentication server 130 to be described later together with the professional receipt number (tx-id). The OTT (One Time Token) received through) is transmitted to the certification authority (messenger authentication server 130), and the OTT verification request and the OTT verification result are received from the messenger authentication server 130. When the OTT verification results match the OTT, the relay server 120 permits access to the terminal of the user who applies for direct debit (in this case, the user terminal 140), and displays the automatic debit application registration screen of the terminal for the debit application. Displayed on the user terminal 140, and transmits (secondary transmission) to the certificate authority (messenger authentication server 130) the debit application information including the debit application contents. Here, the direct transfer application information transmitted from the relay server 120 to the external certification authority (messenger authentication server 130) (primary transmission) is customer information (name of customer, mobile number, date of birth), mobile web May include address, notice, and so on. In addition, the relay server 120 as described above may be configured as a mobile web server. In this case, the relay server 120 and the user institution server 110 as described above may be configured as independent servers, respectively, or may be configured as an integrated server in which two servers are integrated into one.

The messenger authentication server 130 displays a debit application registration request message on the terminal of the direct debit application customer (user terminal 140), and displays an electronic signature from the terminal of the debit application customer (user terminal 140). After verifying, issue a one-time access security token (OTT) and the relay server 120 through the user's terminal (user terminal 140) of the direct debit applicant with a professional reception number (tx-id). And submits the OTT verification result according to the OTT verification request from the relay server 120 to the relay server 120. In addition, the messenger authentication server 130 displays a debit request contents confirmation request message on the terminal (user terminal 140) of the direct debit application customer, and from the terminal (user terminal 140) of the debit application customer. After verifying the digital signature of the electronic signature result is transmitted to the relay server 120. Here, the messenger authentication server 130 may include a cacao authentication server.

The user terminal 140 checks the direct debit application registration request message displayed on the screen by the operation of the messenger authentication server 130 to perform an electronic signature, and is displayed on the screen by the operation of the relay server 120. Enter the debit application details and perform the electronic signature through the debit application registration screen. In addition, the user terminal 140 checks the debit application contents confirmation request message displayed on the screen by the operation of the messenger authentication server 130 and performs an electronic signature. Here, the electronic signature performed by the user terminal 140 may be performed by inputting fingerprint authentication or authentication password. In addition, the user terminal 140 may include a smartphone, a tablet PC, a notebook PC, and the like.

The direct debit integration authority server 150 receives the direct debit application information and the self-certification document (electronic signature result value) from the user institution server 110, the customer information and the electronic signature result value on the debit application information Check whether the customer information on the match is matched, and if it does not match, the customer information mismatch notification message is sent to the user institution server 110, and if it matches, the direct debit application information of the bank transfer financial institution (ie, To the financial institution server 160.

The financial institution server 160 receives the direct debit application information from the automatic debit integration management server server 150, and registers the contents of the direct debit application to the customer's account ledger. In this case, the financial institution server 160 may include a server of a bank, a securities company, a credit card company, etc. that the customer applies for direct debit.

Next, the authenticity inspection method of the debit registration application information based on the authenticity inspection system of the debit registration application information according to the present invention having the above configuration will be described.

2A and 2B are flowcharts illustrating an execution process of a method for checking authenticity of direct debit registration application information according to an embodiment of the present invention, and FIG. 3 is an operation of a system for checking authenticity of direct debit registration application information according to an embodiment of the present invention. It is a figure which shows a sequence.

The authenticity checking method of the debit registration application information according to the present invention, the user institution server 110, the relay server 120, the messenger authentication server 130, the user terminal 140, automatic debit integrated management institution as described above The authenticity checking method of the debit registration application information based on the authenticity inspection system 100 of the debit registration application information including the server 150 and the financial institution server 160. As described above, the relay server 120 may be configured as a mobile web server. In addition, the messenger authentication server 130 may include a cacao authentication server.

2A, 2B, and 3, according to the authenticity inspection method of the direct debit registration application information according to the present invention, first receiving customer information from the direct debit application customer by the user institution server 110, the customer Request an electronic signature (step S201, ① in FIG. 3). In this case, the customer information received from the direct debit application customer by the user institution server 110 may include the name, mobile phone number, date of birth of the customer. At this time, the user institution server 110 also transfers the application information received from the direct debit application customer to the relay server 120.

The relay server 120 receives the automatic transfer application information from the user institution server 110 and transmits it to the messenger authentication server 130 (primary transmission), and receives the professional receipt number (tx-) from the messenger authentication server 130. id) (step S202, ② in FIG. 3). Here, the direct debit application information transmitted from the relay server 120 to the messenger authentication server 130 (primary transmission) includes customer information (name of customer, mobile phone number, date of birth), mobile web address, guide letter, and the like. can do.

When the automatic transfer application information is transmitted from the relay server 120 to the messenger authentication server 130 in this way, the messenger authentication server 130 transfers the automatic transfer request registration request message to the automatic transfer as shown in FIG. The display is displayed on the terminal (user terminal 140) of the customer (step S203, 3 in FIG. 3). In this embodiment, the direct debit application from the customer is based on the customer to apply for direct debit (that is, the direct debit application on-line) using his terminal (user terminal 140), but not necessarily The present invention is not limited to this form, and the direct debit application information received from the customer in a written application or recording method is directly input by the user institution server 110, and the direct debit application information is then sent to the messenger authentication server 130. By sending a message to the user terminal 140 may be displayed on the user terminal 140 by the messenger authentication server 130.

On the other hand, when the debit request registration request message is displayed on the terminal (user terminal 140) of the debit request customer, the user terminal 140 confirms the debit application registration request message on the screen and the electronic signature (Step S204, ④ of FIG. 3). Here, the electronic signature performed by the user terminal 140 may be performed by fingerprint authentication or authentication password input as shown in FIG.

As described above, when the electronic signature is performed by the user terminal 140, the messenger authentication server 130 verifies the electronic signature from the user terminal 140 and then uses a one-time access token (OTT). Issuing is submitted to the relay server (ie, mobile web server) 120 through the user terminal 140 with a professional reception number (tx-id) (step S205, ⑤, 5-2 of Fig. 3). .

Then, the relay server 120 transmits the OTT to the messenger authentication server 130 together with the professional reception number (tx-id) and requests the OTT verification and receives the OTT verification result from the messenger authentication server 130 (step). S206, 6 and 7 in FIG. 3).

Then, the relay server 120 allows access of the user terminal 140 (that is, the corresponding direct debit application customer) when the OTT according to the OTT verification result is matched, and the debit application registration screen is displayed on the user terminal ( 140) (step S207, (8 in Fig. 3)).

Accordingly, the terminal (user terminal 140) of the debit application customer through the debit application registration screen displayed on the screen, as shown in FIG. (Step S208, 9 in FIG. 3). Here, the digital signature performed by the user terminal 140 may be performed by fingerprint authentication or authentication password input as well.

In this way, when the debit application details are input by the user terminal 140, the relay server 120 sends the debit application information (customer information and application details) including the debit application details in the messenger authentication server 130 (Secondary transmission) (step S209, Fig. 3B).

Then, the messenger authentication server 130, as shown in (D) of FIG. 5, displays a debit request information confirmation request message on the user terminal 140 (step S210, FIG. 3B).

Accordingly, the user terminal 140 checks the debit application contents confirmation request message on the displayed screen and performs an electronic signature as shown in FIGS. 5E and 5F (step S211, FIG. 3). Iii). In this case, the electronic signature performed by the user terminal 140 may be performed by fingerprint authentication or authentication password input.

When the electronic signature is performed by the user terminal 140 by the above, the messenger authentication server 130 verifies the electronic signature from the user terminal 140 and transmits the electronic signature result value to the relay server 120. (Step S212, i of FIG. 3) At this time, the relay server 120 transmits the received electronic signature result value to the user institution server 110.

In this way, when the electronic signature result value is transmitted to the relay server 120, the user institution server 110 receives the electronic signature result value from the relay server 120, and the automatic transfer application information and self-certification document (electronic signature result). Value) is transmitted to the direct debit integration authority server 150 (step S213, FIG. 3B). Here, the direct debit application information transmitted from the user institution server 110 to the automatic debit integrated management server server 150 is the customer's account number and bank name, date of birth, name, automatic debit using institution name, customer management number, etc. It may include.

Thereafter, the direct debit integrated management server server 150 confirms whether the customer information on the received direct debit application information and the customer information on the electronic signature result value match (step S214, FIG. 3B).

As a result of the check, when the customer information on the debit application information and the customer information on the electronic signature result value do not match, the automatic debit integrated management server server 150 sends a customer information mismatch notification message to the user institution server 110. And if it matches, the debit application information is sent to the financial institution server 160 (step S215, FIG. 3B, No. 16). Here, before the bank account or credit card debit applicant's application for direct debit registration is registered in the customer ledger, the direct debit integration agency obtains the electronic document signed by the customer for direct debit and the direct debit of the user. By systematically checking whether the data match the application data and checking the authenticity of the contents of the direct debit registration application in advance, it is possible to fundamentally block the false and fraudulent application of the direct debit.

Here, in the present embodiment, the direct debit integration authority server 150 confirms whether the customer information on the debit application information and the customer information on the electronic signature result value match, but are limited to this process. In some cases, the direct transfer request information and the user's consent document (electronic signature result value) are directly transmitted from the user institution server 110 to the financial institution server 160 to apply for direct debit from the financial institution server 160. It may consist of a process of confirming whether the customer information on the information and the customer information on the digital signature result value.

Here, in the present embodiment, as described above, it has been described that the electronic signature is performed with a private certificate such as the authentication by the messenger authentication server 130 (for example, the cacao authentication). However, the present invention is not limited thereto. Or, the authenticity test method of the direct debit registration application information of the present invention whether the electronic signature with a private certificate or an electronic certificate with a public certificate before registering the automatic debit application in the customer's account ledger server 150 ) Or the financial institution (eg, bank) server 160 systematically checks all of the debit application data including whether the customer information on the debit application information and the customer information on the electronic signature result value match.

On the other hand, when the automatic debit application information is transmitted from the automatic debit integrated management institution server 150 to the financial institution server 160 by the above, the financial institution server 160 receives the automatic debit application information, the customer's account The debit application contents are registered in the ledger (step S216, number 17 in FIG. 3).

As described above, the authenticity inspection system and method of the direct debit registration application information according to the present invention has the following advantages or effects.

First, it is possible to systematically confirm the authenticity of the 300 million debit registration application data every year, thereby fundamentally addressing the loophole of the debit system and ultimately ensuring the stability of the debit system.

Second, financial companies, such as banks entrusted with the management of customers' assets, or direct debit integrated management agencies with office delegation from financial companies, can fulfill their duty as good managers by obtaining data that can be automatically inspected.

Third, instead of collecting voice recording or written consent, which is a high-cost, low-efficiency method, the direct debit user can easily collect the self-contract of the direct debit applicant.

Fourth, customers who use financial companies, such as banks, relieve the distrust of the direct debit system that "my account number is illegally collected and money may be taken out of my bank account without my knowledge" and use the direct debit with confidence. Can be.

As mentioned above, the present invention has been described in detail through the preferred embodiments, but the present invention is not limited thereto, and various changes and applications may be made without departing from the technical spirit of the present invention. Self-explanatory Accordingly, the true scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of the same should be construed as being included in the scope of the present invention.

100: (invention) authenticity inspection system of direct debit registration application information
110: user agency server 120: relay server
130: messenger authentication server 140: user terminal
150: direct debit integrated management server server 160: financial institution server

Claims (16)

Receive customer information from customers who apply for direct debit, request electronic signatures from customers, and send debit application information and self-confirmation data (results of electronic signatures) to higher layers. User institution server;
It is electrically connected to the user institution server, receives the automatic transfer application information from the user institution server (transmission to the first certification body) and receives a professional reception number (tx-id), and receives a professional reception number ( tx-id) transmits the OTT to the certification authority, requests the OTT verification and receives the OTT verification result, and if the OTT matches, permits the access of the terminal of the direct debit applicant, and reminds the debit application registration screen. A relay server which is displayed on a terminal of a debit application customer and transmits (secondary transmission) the debit application information including the debit application contents to the certification authority;
Direct debit application registration request message is displayed on the terminal of the direct debit applicant, verify the digital signature from the terminal of the direct debit applicant, and issue a One Time Token (OTT) to receive a professional reception number (tx-id) is submitted to the relay server through the terminal of the direct debit applicant, and transmits the OTT verification result according to the OTT verification request from the relay server to the relay server, and requests for confirmation of the debit application. A messenger authentication server which displays a message on the terminal of the direct debit applicant, verifies the electronic signature from the terminal of the direct debit applicant, and transmits the digital signature result to the relay server;
Check the direct debit application registration request message displayed on the screen by the operation of the messenger authentication server to perform an electronic signature, and the contents of the direct debit application through the direct debit application registration screen displayed on the screen by the operation of the relay server. A user terminal as a terminal of an automatic debit applicant, which inputs and performs an electronic signature, checks the debit application contents confirmation request message displayed on the screen by the operation of the messenger authentication server, and performs the electronic signature;
Receive direct debit application information and self-confirmation data (digital signature result value) from the user institution server, and confirm that the customer information on the debit application information and the customer information on the electronic signature result value does not match. In case the customer information mismatch notification message is sent to the user institution server, and if the match, direct debit integration management server for transmitting the debit application information to the transaction financial institution of the direct debit application customer; And
Receiving the direct debit application information from the automatic debit integrated management server server, and includes a financial institution server for registering the contents of the direct debit application in the account ledger of the customer,
The direct debit application information transmitted from the relay server to an external certification authority (primary transmission) includes customer information (name, mobile phone number, date of birth), mobile web address, and instructions.
The direct debit application information transmitted from the user institution server to the upper layer includes a customer's account number and bank name, date of birth, name, direct debit use institution name, customer management number,
The electronic signature performed by the user terminal authenticity inspection system of the debit registration application information performed by the input of the authentication password.
delete delete delete delete delete delete A method for checking the authenticity of the debit registration application information by the authenticity inspection system of the debit registration application information including a user institution server, a relay server, a messenger authentication server, a user terminal, an automatic debit integrated management institution server, and a financial institution server,
a) receiving customer information from a direct debit applicant by the user institution server, and requesting a digital signature from the customer;
b) receiving the automatic transfer application information from the user institution server by the relay server and transmitting the primary transfer request information to the messenger authentication server (first transmission), and receiving a professional reception number (tx-id) from the messenger authentication server;
c) displaying, by the messenger authentication server, a debit request registration request message on a terminal of the debit request customer (hereinafter, referred to as a user terminal);
d) checking, by the user terminal, a direct debit application registration request message and performing an electronic signature;
e) after verifying the electronic signature from the user terminal by the messenger authentication server, issuing a one-time access security token (OTT) to the user terminal together with a professional reception number (tx-id); Submitting to the relay server;
f) transmitting, by the relay server, an OTT together with a professional reception number (tx-id) to the messenger authentication server, requesting OTT verification, and receiving an OTT verification result from the messenger authentication server;
g) allowing access of the user terminal when the OTT matches by the relay server, and displaying a direct debit application registration screen on the user terminal;
h) inputting a direct debit application contents and performing an electronic signature through the debit application registration screen displayed on the screen by the user terminal;
i) transmitting (secondary transmission), by the relay server, the direct debit request information including the debit request contents to the messenger authentication server;
j) displaying, by the messenger authentication server, a debit request confirmation message on the user terminal;
k) checking, by the user terminal, a debit application confirmation message on the screen and performing an electronic signature;
l) verifying the digital signature from the user terminal by the messenger authentication server and transmitting the digital signature result value to the relay server;
m) transmitting, by the user institution server, the direct debit application information and the self-certification document (digital signature result value) to the automatic debit integration management server server;
n) checking whether the customer information on the direct debit application information and the customer information on the electronic signature result value match by the direct debit integrated management server;
o) transmitting a customer information disagreement notification message to the user institution server if it does not match, and transmitting a direct debit application information to the financial institution server if there is a match; And
p) receiving the direct debit application information by the financial institution server, and registering the debit application details in the account ledger of the customer;
The digital signature performed by the user terminal in steps d), h) and k) is performed by inputting an authentication password,
Whether you sign electronically with a private certificate or digitally with an accredited certificate, before the debit application is registered in your account ledger, the debit central bank or financial institution server's customer information and digital signature results on your debit application information. A method of authenticity checking of direct debit registration information that systematically inspects all of the direct debit application data, including whether the customer information on the value matches.
delete The method of claim 8,
In the step b), the direct debit application information transmitted from the relay server to the messenger authentication server (primary transmission) is registered for direct debit including customer information (name of customer, mobile phone number, date of birth), mobile web address, and instructions. How to check the authenticity of the application information. The method of claim 8,
In the step m), the debit application information transmitted from the user institution server to the automatic debit integrated management server server is an automatic debit including the customer's account number and bank name, date of birth, name, automatic debit user institution name, customer management number How to check the authenticity of registration application information.
delete delete delete delete delete

Images