KR19980071993A - Non-connection type security card for financial transaction, secure phone and method of applying phone banking using it - Google Patents

Abstract

The present invention relates to a phone banking security system that enables secure financial transaction by improving a security vulnerability in a financial transaction using a telephone, and is a non-connected portable card method which does not use a smart card as an alternative.

The most serious problem when using the phone banking is that the customer's password is exposed and transmitted, and the card reader is required when using the smart card. To solve this problem, the present invention takes the information to be transmitted by the customer, The present invention relates to a non-contact type security card for financial transactions that can transmit information from a DTMF generator to a bank's ARS system via a general telephone without using a card reader, a method for using the security card in a phone banking, A digital phone, and a PCS terminal, and then applying the above process as it is by using only a telephone .

Description

Non-connection type security card for financial transaction, secure phone and method of applying phone banking using it

1. Application Method

A security system for applying security devices for financial transactions, which is an object of the present invention, is as follows.

1.1 Connection between Phone Banking Applicant Account and Security Device (Application for Phone Banking)

In the security device, an encrypted unique serial number is attached in the form of a barcode, which is restored to the original serial number through the terminal used in the bank, and is input to be connected to the account number of the requesting person of the phone banking recorded in the bank (6) (1), the necessary information such as the phone number for the banking of the bank and the related account are stored through the input device attached to the device.

1.2 Use of Security Devices (Phones Banking Use Phase)

After the user presses the start and transfer button of the security device, the telephone is connected to the banking ARS system of the financial institution by the DTMF tone corresponding to the pre-recorded telephone number (7), and the data (transaction type, home banking password, (2). (2) In the security device, if the user inputs an input error, the security device displays the password, the account number of the counterpart, the transfer amount, etc. in the security device. Of course, personal passwords are not displayed on the display device for security reasons.)

1.3 Internal operation of security equipment

In the phone banking processing step, all necessary contents are inputted, and the encrypted transmission data is changed to a cipher value by a cipher algorithm in the security device, and the encrypted transmission data is output from the DTMF generator through the speaker attached to the security device (3) to the ARS of the financial institution through the telephone transmitter.

1.4 Financial Institutions Processing

After deciphering the received encrypted data to its original value, it judges the justification of the process, informs the customer about the contents of the process by voice, obtains the final confirmation of the customer through the input of the telephone dialer, , 4, 5, 10).

2. Non-connected security card for financial transactions

A data input unit, a liquid crystal display unit, a tone output unit, a CPU and a peripheral device control unit, and a power supply unit.

2.1 Transfer of Data

As well as the effect of encrypting financial transaction data, which may be leaked, with the encryption algorithm inside the security device and outputting it as a tone that can be generated from the phone itself through the DTMF generator, send.

2.2 Prevention of personal password hacking

When a user tries more than a certain number of times with an incorrect password, he / she can not use the security device for an unspecified time using a timer in the financial institution. (Preventing attempts to obtain passwords by using a computer after acquiring a portable security device)

2.3 Prevention of Reuse of Encrypted Contents

Since the encrypted data is eavesdropped and can be used next time, it is encrypted and transmitted together with the current date and time generated from the timer in the security device, and when it is equal to or smaller than the previous transaction time recorded in the transaction details of the financial institution Do not process. (The setting of the timer inside the security device is only available for financial institutions)

2.4 Preventing Phone Banking Without Carrying Security Device

Since the phone banking process can be performed only by a security device, even if a password is leaked, it can not be processed by an existing method using a general telephone.

2.5 Prevent restoration of encryption algorithms inside portable security devices

Encryption Algorithm programmed in the security device In order to prevent the restoration of the source, all the functions mentioned above are converted into ASIC to prevent the disassemble attempts.

3. How to Apply Phone Banking Security Phone

The functions applied in the mobile phone banking security card are converted to ASIC and added to the general telephone, digital mobile phone and PCS terminal so that the functions of 1 and 2 are made possible only by the telephone itself.

[Object of the invention]

1. Security Enhancement

1.1 Customer's legitimacy In the authentication process, the client encrypts the necessary information such as the account number and password, and transmits it to the financial institution with an unintelligible password code.

1.2 Limit the processing of phone banking to only the security card or security phone connected to the related account number, so that even if a password is leaked, it can not be processed without the related security equipment.

2. Provide ease of use and practicality

2.1 You can memorize your account number as well as the account number of your frequent trading partner so that you can easily enter your account number with a short number.

2.2 Make a secure card with the current credit card size to make it portable and easy to use.

2.3 Increase the practicality of use with low production cost (no expensive card reader required).

Phone banking, introduced in a new way of financial transactions, is a convenient way to conduct financial transactions using a telephone even if it does not go to a financial institution. However, there are more cases of abuse due to insufficient security devices and usage is being avoided.

As an alternative to this, smart card technology is emerging, and expensive card readers are not readily available due to the necessary conditions.

In addition, recent speech recognition technologies are also expected to reproduce and reproduce eavesdropped audio, to exploit using speech synthesis, to inconvenience in inputting user's voice, and lack of recognition accuracy.

In order to improve the vulnerability of security, which is the biggest problem in the current phone banking, it is necessary to create a practical financial transaction portable terminal device in which each user can directly encrypt his / her financial transaction contents and can easily carry and use it, have.

To do this, the necessary elements such as the encryption program, the DTMF generator, and the memory device are made ASIC, making the credit card size easy to carry and use. In addition, this function is added to the telephone to expand the value added of the telephone itself and the type of usable device.

Since the system needs to evolve while accepting all the previous functions, it is aimed at implicit security system while managing the version of the system when transmitting data. In addition, it maintains and uses the existing equipment and system for the phone banking system while minimizing the problems that may occur when introducing a new system.

Figure 1: Security system configuration of non-connection type security card and secure phone for financial transaction

2: Internal configuration block diagram of a non-connected security card for financial transactions

The noncontact security card for financial transactions includes an input device 11 for receiving data, a liquid crystal display device 12 for confirming the input data, a CPU 15 for processing data while controlling functional units, a ROM A control device 14 composed of RAMs 17 and 16 and a speaker device 13 for outputting processed values and a power supply device 18. A terminal Works without baggage equipment.

The phone banking processing system, which is processed using the above-described terminal, operates in the same manner as described in the 'Detailed Description of the Invention' (application method) while interacting with the user terminal.

The secure phone for financial transactions allows the functions of the secure card described above to be inserted into the telephone set as an ASIC except for the devices overlapping with the telephone set, and to include all the functions in a financial transaction using the telephone set.

By making it easier and safer to conduct financial transactions using the telephone, which is the most convenient communication means, financial manpower and costs are reduced, and automatic debit processing can be extended to society as a whole instead of paying cash in the future.

Claims (3)

The second item of the 'Detailed Description of the Invention' A method for applying a phone banking security telephone, which is the third paragraph of the 'detailed description of the invention' A phone banking security system processing procedure using the security devices of the first and second embodiments