KR20040026034A - System for dual password service of credit/cash/debit card and method thereof - Google Patents

Abstract

PURPOSE: A system and a method for a dual password service of a financial transaction card are provided to prevent an illegal use through the password flown out by loss, a robbery, and a threat, and secure a user by dualizing the password as the password for a normal use and an emergency. CONSTITUTION: The user terminals(110) output the dual password registration data inputted from the user to a server computer(120) and receive a dual password processing result for a financial organization computer(140). The server computer outputs the form data to register the dual password service to the user terminal after certification, stores the dual password registration data to a database, requests the dual password process to the financial organization computer by outputting the dual password registration data, and store the processing result. A certification organization computer(130) performs the electronic certification if the certification request data of the user is inputted from the server computer, and outputs a certification result to the server computer.

Description

System and method for password dualization of financial transaction cards {System for dual password service of credit / cash / debit card and method}

The present invention relates to a password dualization service system and method.

More specifically, the passwords of various financial transaction cards such as credit cards, cash cards, loan cards, etc. can be dualized into normal passwords and emergency passwords. The present invention relates to a system and method for password dualization of a financial transaction card, which prevents fraudulent use and promotes personal safety of the financial transaction card user.

In recent years, due to the ease of use and the establishment of a credit society, financial institutions such as banks have issued various financial transaction cards such as cash cards, credit cards, and loan cards to general users. I use various financial transaction cards freely and conveniently.

Accordingly, a user who possesses various financial transaction cards such as cash card, credit card, loan card, etc., can immediately withdraw the desired amount through the cash payment terminal managed and operated by each financial institution according to the usage status, or purchase goods or It can be used to pay for the service.

Each user using the various financial transaction cards will use a predetermined password when applying for issuance of the financial transaction card as part of securing transaction safety.

However, the conventional various financial transaction cards as described above have a system that allows a user to set and use only one password, so that a user possessing a financial transaction card may receive external physical and psychological pressure (eg, For example, there is a problem that an illegal use of a financial transaction card occurs due to exposure of a password regardless of the intention of the user due to threats caused by robbery.

In addition, even if the password is exposed due to external physical and psychological pressures, the financial institution cannot recognize the facts, so the financial institution can not automatically notify the security institutions such as financial damages. Of course, there was a problem that can not perform personal protection.

The purpose of the present invention is to solve the above problems, by using the password of various financial transaction cards such as credit card, cash card, loan card, etc. can be dualized into a password used normally and an emergency used, lost, stolen And a password dualization service system and method for a financial transaction card that prevents fraudulent use of the financial transaction card through a password leaked by threats and promotes personal safety of the financial transaction card user.

Another object of the present invention is to provide a small amount to a fraudulent user within a payment limit amount set by a financial transaction card user at a financial institution when a credit card, a cash card, a loan card or the like is used through an emergency password. The present invention provides a system and method for password dualization service of a financial transaction card that enables a fraudulent arrest and security of a user by a security institution in a state where a fraudulent user recognizes normal use by paying cash.

1 is a block diagram schematically showing the configuration of an embodiment of a password dualization service system of a financial transaction card according to the present invention;

2 is a block diagram showing in detail the configuration of the financial institution computer of FIG.

3 is a block diagram schematically showing the configuration of another embodiment of a password dualization service system of a financial transaction card according to the present invention;

Figure 4 is a flow chart showing in detail the operation of an embodiment of the password dualization service method of the financial transaction card according to the present invention,

5 to 7 are flowcharts showing in more detail the operation of each subroutine of FIG.

8 is a flowchart showing in detail the operation of another embodiment of the password dualization service method of the financial transaction card according to the present invention.

Explanation of symbols on the main parts of the drawings

110, 210: user terminal

120: server computer

122: data communication unit

124: control unit

126: database section

130, 230: Certificate authority computer

140, 220: financial institution computer

150, 240: cash payment terminal

160, 250: carrier computer

170, 260: Security Authority Computer

The system according to the present invention for achieving these objects outputs a new member registration or login data input by a user who has made a communication connection to a server computer through a network communication network to the server computer, and in accordance with the form data provided by the server computer. The password binary registration data of the financial transaction card including the payment amount for the transaction financial institution, the card number, the mobile phone number, the normal password, the emergency password, and the emergency password entered by the user are output to the server computer. A plurality of user terminals that receive password binary processing results from a specific financial institution computer; Form data for password dualization registration of financial transaction card at the user's request after performing the electronic authentication of the user through the certification authority computer based on the new member registration or login data input from the user terminal connected through the network communication network To the corresponding user terminal, and the password dualization registration data of the financial transaction card including the limit amount paid when using the financial institution, card number, mobile phone number, normal password, emergency password, and emergency password input from the user terminal to the database At the same time, the data is output to the corresponding financial institution computer to request password dualization of the financial transaction card, and the result of password dualization processing of a specific user input from the financial institution computer is stored in a database. Servers are computers that store and process result of fraudsters using the emergency password in the database; A certification authority computer that outputs the authentication result to the server computer after performing the electronic authentication of the user when the authentication request data of the specific user is input from the server computer; Based on the password dualization registration data of the financial transaction card of a specific user inputted from the server computer, the process of password dualization of the financial transaction card possessed by the user is output, and the processing result is output to the corresponding user terminal and the server computer, and the specific cash payment terminal When the banking business proceeds using the emergency password from the mobile phone company, the mobile phone computer requests the location information through the mobile phone of the user who holds the financial transaction card, receives the location information of the user, and detects the unauthorized user or the user of the financial transaction card. For protection, the information of the fraudulent user using the emergency password and the location information of the user provided by the mobile carrier computer are output to the security agency computer, and the processing result of the fraudulent user using the emergency password input from the security authority computer is displayed. Storing a plurality of financial institutions and at the same time output to the server computer and the computer; A plurality of cash dispensing terminals for performing financial operations such as cash withdrawal and money transfer under the control of a financial institution computer based on a financial transaction type and a password for inputting a financial transaction card by a user; When the financial institution computer requests the location information through the mobile phone number of the user who holds the financial transaction card, the location of the mobile phone that the user has is tracked to determine the location of the user, and the verified financial information of the user is A mobile telecommunication company computer for outputting to a computer; When the fraudulent user's information and the location information of the user using the emergency password are input from the financial institution's computer, the result is notified to the person in charge of the relevant business process to control the arrest of the fraudulent user or the protection of the personal information of the financial transaction card user immediately. It includes a security institution computer for outputting the processing result of the fraudulent user using the emergency password to the financial institution computer.

The system according to the present invention outputs new member registration or login data input by a user who has made a communication connection to a financial institution computer through a network communication network to a financial institution computer, and according to the form data provided by the financial institution computer. The password dualization registration data of the financial transaction card including the card number, mobile phone number, normal password, emergency password, and emergency payment amount inputted by the user is output to the financial institution computer, and the result of the password dualization processing from the financial institution computer is output. A plurality of user terminals provided; Form for password dualization registration of financial transaction card at the user's request after performing the electronic authentication of the user through the certification authority computer based on the new member registration or login data inputted from the specific user terminal connected through the network communication network The data is output to the corresponding user terminal, and the user owns the data on the basis of the password dualization registration data of the financial transaction card including the card number, mobile phone number, normal password, emergency password, and limit payment amount used in the emergency password. After performing the password dualization processing of the financial transaction card, output the processing result to the corresponding user terminal, and when the financial business using the emergency password is performed from the specific cash payment terminal, the mobile phone of the user who holds the financial transaction card with the mobile operator computer After requesting the location information through the user, the user's location information is inputted, and the information of the unauthorized user using the emergency password to the security agency computer and the user's provided from the mobile operator computer to detect the illegal user or to protect the user of the financial transaction card. A financial institution computer that outputs location information and stores processing results of an unauthorized user using an emergency password input from a security institution computer in a database; A certification authority computer that outputs the authentication result to the financial institution computer after performing the electronic authentication of the user when the authentication request data of the specific user is input from the financial institution computer; A plurality of cash dispensing terminals for performing financial operations such as cash withdrawal and money transfer under the control of a financial institution computer based on a financial transaction type and a password for inputting a financial transaction card by a user; When the financial institution computer requests the location information through the mobile phone number of the user who holds the financial transaction card, the location of the mobile phone that the user has is tracked to determine the location of the user, and the verified financial information of the user is A mobile telecommunication company computer for outputting to a computer; When the fraudulent user's information and the location information of the user using the emergency password are input from the financial institution's computer, the result is notified to the person in charge of the relevant business process so as to immediately handle the arrest of the fraudulent user or the protection of the personal information of the financial transaction card user. In addition, it is another feature that comprises a security institution computer for outputting the results of the processing of the fraudulent user using the emergency password to the financial institution computer.

In addition, the method according to the present invention, (1) after performing a new member registration or member login of a specific user terminal that performs a communication connection from the server computer through a network communication network, and performs the electronic authentication through the certification authority computer, the password Storing password dualization registration data of the financial transaction card inputted from the corresponding user terminal for the dualization service in a database; (2) The server computer performs communication connection with the financial institution computer based on the password dualization service registration data of the specific user, and then outputs the password dualization registration data of the financial transaction card inputted by the specific user to the financial institution computer. Performing the password dualization processing of the financial transaction card on the basis of the password dualization registration data of the financial transaction card of the specific user in the institution computer and providing the processing result to the corresponding user terminal and the server computer; (3) When a financial transaction is performed using an emergency password from a specific cash payment terminal, the computer of the financial institution provides cash within the range not exceeding the payment limit set by the user of the financial transaction card and at the same time through the mobile communication computer. In order to receive the location information of the user who holds the corresponding financial transaction card using the mobile phone number, and to protect the personal information of the fraudulent user or the financial transaction card user, the information of the unauthorized user who uses the emergency password to the security agency computer and the mobile operator computer. And outputting the location information of the provided user, and providing the server computer with the processing result of the unauthorized user input from the security authority computer.

In addition, the method according to the present invention, (A) perform a new member registration or member login of a specific user terminal that performs a communication connection from the financial institution computer through a network communication network, and performs electronic authentication through the certification authority computer, Storing password dualization registration data of the financial transaction card input from the corresponding user terminal for which the password dualization service is desired; (B) performing a password dualization process of the financial transaction card on the basis of the password dualization registration data of the financial transaction card inputted from the specific user terminal in the financial institution computer and providing the processing result to the corresponding user terminal; (C) When a financial transaction is performed using an emergency password from a specific cash dispensing terminal, the financial institution computer shall provide cash within the limits not exceeding the payment limit set by the user of the financial transaction card and at the same time through the mobile communication computer. In order to receive the location information of the user who holds the corresponding financial transaction card using the mobile phone number, and to protect the personal information of the fraudulent user or the financial transaction card user, the information of the unauthorized user who uses the emergency password to the security agency computer and the mobile operator computer. And outputting the location information of the provided user, and storing the processing result of the fraudulent user input from the security authority computer in a database.

Hereinafter, with reference to the accompanying drawings will be described in detail the password dualization service system and method of the financial transaction card of the present invention.

1 is a block diagram schematically showing the configuration of an embodiment of a password dualization service system of a financial transaction card according to the present invention.

As shown, the plurality of user terminals 110 performs a communication connection to the server computer 120 through a network communication network according to the user's operation, and register a new member input by the user at the request of the server computer 120 Outputs data or login data to the server computer 120, receives predetermined form data for password dualization registration of the financial transaction card from the server computer 120 according to a user's request for which the electronic authentication process is performed, The password binary registration data of the financial transaction card including the transaction financial institution, the card number, the mobile phone number, the normal password, and the emergency password, which are input by the user according to the form data, is output to the server computer 120. Voice or text message (for example, password dualization processing result from a specific financial institution computer 140 performing) Uh, it is provided as SMS, email, etc.).

In this case, the above-described network communication network is a communication network such as the Internet or a financial computer network, and includes a user terminal 110, a server computer 120, a certification authority computer 130, a financial institution computer 140, and a cash payment terminal 150. By connecting a communication line between the communication company computer 160 and the security agency computer 170, various data communication related to the password dualization service of the financial transaction card is performed.

The server computer 120 performs electronic authentication of the corresponding user through the certification authority computer 130 on the basis of the new member registration or login data input from the specific user terminal 110 performing the communication connection through the network communication network. According to the request of the predetermined form data for password dualization registration of the financial transaction card to the corresponding user terminal 110, the transaction financial institution, card number, mobile phone number, normal password, The password dualization registration data of the financial transaction card including the emergency password is stored in the database and output to the financial institution computer 140 to request the password dualization registration processing of the financial transaction card, and input from the financial institution computer 140. The results of password dualization processing for a specific user Stores, post processing the result of the unauthorized user using an emergency password is input from each of the financial institutions computer 140 to the database.

In this case, the server computer 120 described above receives a predetermined application fee from each user who wants a password dualization service, the application fee provided by the user is called a commercial deposit rate, and will operate to return the application fee upon termination of the password dualization service. Can be. And, if the user makes a false report, the application fee is exhausted to prevent misuse of the emergency password, or the payment limit amount set in advance is borne by the user to prevent misuse.

When the authentication authority data of a specific user is input from the server computer 120, the certification authority computer 130 performs electronic authentication of the corresponding user, and outputs the electronic authentication result to the server computer 120.

The plurality of financial institution computers 140 perform the password dualization registration processing of the financial transaction card possessed by the user based on the password dualization registration data of the financial transaction card of the specific user inputted from the server computer 120 and then process the processing result. Output to the user terminal 110 and the server computer 120, and then proceeds to the financial business of the fraudulent user using the emergency password from the specific cash payment terminal 150 of the user holding the financial transaction card to the mobile carrier computer 160 After requesting the location information through a mobile phone, the user's location information is input, and a security institution (private security company contracted with the police and financial institution) for the protection of the fraudulent user's arrest or financial transaction card user's personal information ( Use information of the fraudulent user using the emergency password (for example, the fraudulent user's location, etc.) It outputs the location information of the user provided by the mobile communication company computer 160, and stores the processing result for the fraudulent user using the emergency password input from the security authority computer 170 to the fraudulent user with the server computer 120 at the same time. It outputs the result of processing by the security agency.

At this time, the above-described plurality of financial institution computer 140, when the emergency password set by the user of the financial transaction card from the cash payment terminal 150 is input, exceeding the payment limit amount set by the financial transaction card user It can be restricted from paying. That is, the user pays only a small amount of cash set in advance, and if a user wants to withdraw more cash, a message indicating a lack of a bank account balance or a credit balance is induced, so that a fraudulent user may recognize it as normal use.

In addition, the plurality of financial institution computers 140 may pre-arrange with the respective users such that the amount paid within the payment limit amount according to the use of the emergency password is borne by the corresponding financial transaction card user who has set the emergency password. .

The plurality of cash dispensing terminals 150 performs financial operations such as cash withdrawal and money transfer under the control of the financial institution computer 140 based on the financial transaction type and the password for which the financial transaction card is input by the user.

The mobile communication company computer 160 confirms the location of the user by tracking the location of the mobile phone possessed by the user when the financial institution computer 140 requests the location information through the mobile phone number of the user holding the financial transaction card. The location information of the identified user is output to the financial institution computer 140.

When the security institution computer 170 receives the fraudulent user information and the location information of the user using the emergency password from the financial institution computer 140, the security agency computer 170 notifies the person in charge of the relevant business process to detect the illegal user or the financial transaction card user. It controls to immediately handle the personal protection work, and outputs the processing result of the fraudulent user using the emergency password to the financial institution computer 140.

2 is a block diagram showing the configuration of the server computer 120 of FIG. 1 described above in more detail.

As shown, the data communication unit 122 performs data input / output according to the electronic user authentication and the password dual registration of the financial transaction card and the specific user terminal 110 connected through a network communication network under the control of the control unit 124. Perform communication connection with the certification authority computer 130 according to the control of the controller 124 to perform data input / output for electronic authentication of a specific user, and each financial institution computer 140 under the control of the controller 124. ), And perform input / output of data on the result of password dualization registration processing of specific user and the processing result of fraudulent user using emergency password.

The control unit 124 controls the new member registration or member login based on the data input from the specific user terminal 110 through the data communication unit 122, and the computer of the certification authority of the user who performed the new member registration or member login. Password dualization registration data of the financial transaction card, including the control financial institution, card number, mobile phone number, normal password, emergency password inputted from the specific user terminal 110, the electronic authentication is performed through Store the data in the database unit 126, control the communication connection with the specific financial institution computer 140, and control the financial institution to process the password dual registration data of the financial transaction card input by the user. Password dualization processing of a specific user inputted from each financial institution computer 140 through 122). And and controls to store the financial institutions computer 140, 126 a processing result of the unauthorized user database using the emergency password is received from the.

The database unit 126 stores personal information of each user performing new member registration under the control of the control unit 124, and provides a transaction financial institution, a card number, and a mobile phone provided by each user in order to use a password dualization service. It stores the password dualization registration data of the financial transaction card including the number, the normal password and the emergency password, and divides the processing result of the fraudulent user using the emergency password provided from each financial institution computer 140 for each user using the password dualization service. Save it.

On the other hand, Figure 3 is a block diagram schematically showing the configuration of another embodiment of the password dualization service system of the financial transaction card according to the present invention, unlike the above-described embodiment, the password dualization service directly from the financial institution computer to each user It is an embodiment to provide.

As shown, the plurality of user terminals 210 outputs new member registration or login data input by a user who performs a communication connection to the financial institution computer 220 to the financial institution computer 220 through a network communication network. According to the form data provided by the financial institution computer 220, the password dualization registration data of the financial transaction card including the card number, the mobile phone number, the normal password, the emergency password, and the amount of payment for the emergency password is used. And outputs the password dualization processing result from the financial institution computer 220 in a voice or text message.

The financial institution computer 220 performs electronic authentication of the corresponding user through the certification authority computer 230 based on the new member registration or login data input from the specific user terminal 210 connected through a network communication network. According to the request of the user who performed the operation, the predetermined form data for the password dualization registration of the financial transaction card is output to the corresponding user terminal 210, and the card number, mobile phone number, normal password, Based on the password dualization registration data of the financial transaction card including the emergency password and the limit payment amount when using the emergency password, the password dualization processing of the financial transaction card held by the user is performed and the password dualization processing result is output to the corresponding user terminal 210. And the emergency password from the specific cash payment terminal 240 As long as the financial business is in progress, the mobile communication company computer 250 requests the location information through the mobile phone of the user who holds the financial transaction card, receives the location information of the user, and detects the illegal user or protects the user of the financial transaction card user. It outputs the information of the fraudulent user using the emergency password to the security authority computer 260 and the location information of the user provided by the mobile carrier computer 250 for the purpose of the fraudulent user using the emergency password input from the security authority computer 260 Store the results in a database.

The certification authority computer 230 performs the electronic authentication of the user when the authentication request data of the specific user is input from the financial institution computer 220, and outputs the electronic authentication result of the user to the financial institution computer 220.

The plurality of cash dispensing terminals 240 perform financial operations such as cash withdrawal and money transfer under the control of the financial institution computer 220 based on the financial transaction type and password in which the financial transaction card is input by the user.

The mobile communication company computer 250 checks the location of the user by tracking the location of the mobile phone when the user requests the location information through the mobile phone number of the user who holds the financial transaction card from the financial institution computer 220, The location information of the identified user is output to the financial institution computer 220.

The security institution computer 260 notifies the person in charge of the business process of the fraudulent user's arrest or financial transaction card user when the information of the fraudulent user using the emergency password and the user's location information are input from the financial institution computer 220. It controls to immediately handle the personal protection work, and outputs the processing result of the fraudulent user using the emergency password to the financial institution computer 220.

Next, each embodiment of the password dualization service method of the financial transaction card according to the present invention configured as described above will be described in detail with reference to FIGS. 3 to 8.

First, Figures 3 to 7 are flowcharts showing in detail the operation of an embodiment of the password dualization service method of the financial transaction card according to the present invention.

In the server computer 120 that provides password dualization services of various financial transaction cards possessed by users, after performing a new member registration or member login of a specific user terminal 110 that performs communication access through a network communication network, The electronic authentication is performed through the computer 130 and the password dualization registration data of the financial transaction card input from the corresponding user terminal 110 for which the password dualization service is desired is stored in the database (S110).

In detail, the server computer 120 requests a new member registration or a member login to a specific user terminal 110 that performs a communication connection through a network communication network (S111), and a new member from the corresponding user terminal 110. It is determined whether registration selection data is input or login data is input (S112).

As a result of the determination, when the new member registration selection data is input from the user terminal 110, the server computer 120 outputs the form data for new member registration to the corresponding user terminal 110 (S113), and the corresponding user terminal 110. After storing the new member registration data input from the database to process the new member registration and requests the re-connection of the user terminal 110 (S114).

However, if the log-in data of the ID and password are input from the user terminal 110 as a result of the determination in step S112 described above, the server computer 120 performs a communication connection to the authentication authority computer 130 through a network communication network. After processing the electronic certificate issuance of the user based on the login data (S115), it is determined whether the password dualization service registration request data of the financial transaction card is input from the user terminal 110 that performed the electronic authentication (S116). .

As a result of the determination, when the password dualization service registration request data of the financial transaction card is input from the corresponding user terminal 110, the server computer 120 outputs the form data for registering the password dualization of the financial transaction card to the corresponding user terminal 110. (S117), from the corresponding user terminal 110 determines whether the password dualization registration data of the financial transaction card including the limit amount paid when using the transaction financial institution, card number, mobile phone number, normal password, emergency password, emergency password (S118).

As a result of determination, when the password dualization registration data of the financial transaction card is input from the user terminal 110, the server computer 120 checks whether there is an error in the description of the password dualization registration data of the financial transaction card input from the user terminal 110. After confirming, the password dualization registration data of the financial transaction card input by the user is stored in the database to terminate the registration process (S119).

After performing a new member registration or member login of the user through the above-described process (S100) and storing the password dualization registration data of the financial transaction card, the corresponding computer based on the password dualization service registration data of the specific user in the server computer 120 After performing a communication connection with the institution computer 140, the password dualization registration data of the financial transaction card input by a specific user is output to the financial institution computer 140, and the financial institution computer 140 of the financial transaction card of the specific user. After performing the password dualization processing of the financial transaction card based on the password dualization registration data of the provided to the user terminal 110 and the server computer 120 (S120).

In detail, the server computer 120 performs a communication connection with the corresponding financial institution computer 140 through a network communication network based on the password dualization service registration data of the financial transaction card of the specific user stored in the database unit 126. In operation S121, the financial institution computer outputs the password dualization service registration data of the financial transaction card provided by the specific user and requests registration processing (S122).

Then, the financial institution computer 140 that receives the password dualization service registration data of the financial transaction card of the specific user from the server computer 120 performs the password dualization registration processing of the specific financial transaction card provided by the user. (S123).

Thereafter, the financial institution computer 140 outputs the result data for the process of password dualization registration of the financial transaction card performed according to the user's request to the corresponding user terminal 110 in the form of voice and text messages through a network communication network. At the same time provided to the server computer 120 (S124).

After performing the password dualization process of the financial transaction card possessed by each user in the specific financial institution computer 140 at the request of the server computer 120 through the above-described process (S100), the corresponding financial institution computer 140 When the financial business using the emergency password proceeds from the specific cash payment terminal 150, the financial transaction card user provides the cash within the range not exceeding the predetermined payment limit amount and at the same time the mobile phone through the mobile carrier computer 160 Receiving the user's location information using the financial transaction card using the number, the information of the unauthorized user using the emergency password to the security agency computer 170 for the arrest of the fraudulent user or the protection of the user of the financial transaction card user and the mobile operator computer The supine which outputs the location information of the user provided at 160 and is input from the security authority computer 170 Store's processing results, and provides the processing result at the same time manages the server computer (120) (S130).

In detail, the financial institution computer 140 determines whether a password of a specific financial transaction card using a password dualization service is input from a specific cash payment terminal 150 scattered around the country (S131).

As a result of the determination, if a password for using a specific financial transaction card is input from the cash payment terminal 150, the financial institution computer 140 receives the password from the cash payment terminal 150 based on the registered information of the corresponding financial transaction card stored in the database. It is determined whether the input password is a password normally used or a password used in an emergency (S132).

If it is determined that the password input from the cash payment terminal 150 is a password normally used, the financial institution computer 140 normally processes the financial business requested by the financial transaction card user (S133).

However, if the password input from the cash payment terminal 150 is a password used in an emergency as a result of the determination in the above-described step (S132), the financial institution computer 140 sets the payment limit amount set by the financial transaction card user when registering the password dualization service. Process the financial business requested by the fraudulent user within the range not exceeding (S134). In other words, when a user with a financial transaction card applies for a password dualization service, he / she pays only a small amount of cash to the fraudulent user within the preset payment limit, and wants to withdraw cash above the payment amount. It prints a message of insufficient balance so that the fraudster can recognize it as normal use.

In addition, the financial institution computer 140 outputs a mobile phone number previously designated by a user who holds a financial transaction card to the mobile communication company computer 160 to request location information of the corresponding user, and then the user from the mobile communication company computer 160. The location information is received (S135).

Subsequently, the financial institution computer 140 performs a communication connection with the security institution computer 170 through a network communication network, and then uses the financial transaction card information of the fraudulent user for the purpose of arresting the fraudulent user or protecting the user of the financial transaction card user. And outputs the location information of the user provided from the mobile communication company computer 160 to the security authority computer 170 (S136).

Then, the security agency computer 170 controls the arrest of the fraudulent user or the protection of the user of the financial transaction card based on the financial transaction card use information and the location information of the fraudulent user input from the financial institution computer 140 (S137). ), When the processing for the arrest of the fraudulent user or the protection of the user of the financial transaction card is ended, the corresponding processing result data is provided to the financial institution computer 140 (S138).

The financial institution computer 140 provided with the fraudulent user's processing result from the security institution computer 170 stores the fraudulent user's processing result using a specific financial transaction card in the database and simultaneously stores the fraudulent user's processing result in the server computer 120. Provide and end the service (S139).

On the other hand, Figure 8 is a flow chart illustrating in detail the operation of another embodiment of the password dualization service method of the financial transaction card according to the present invention, an embodiment in which the financial institution computer 220 directly provides the password dualization service to each user to be.

After performing a new member registration or member login of a specific user terminal 210 that performs a communication connection through a network communication network in a specific financial institution computer 220 that provides password dualization services of various financial transaction cards possessed by users. Electronic authentication is performed through the certification authority computer 230, and the password dualization registration data of the financial transaction card inputted from the corresponding user terminal 210 for the password dualization service is stored in the database (S210).

Subsequently, the financial institution computer 220 dualizes the password of the financial transaction card including a card number, a mobile phone number, a normal password, an emergency password, and an amount of the payment limit when using the emergency password. After performing the password dual registration processing of the financial transaction card based on the registration data, the processing result is provided to the corresponding user terminal 210 (S220).

After performing the password dualization registration processing of the financial transaction card according to each user's request, the financial institution computer 220, if the financial business using the emergency password from the specific cash payment terminal 240 proceeds, While providing cash within a range not exceeding the preset payment amount, the mobile terminal computer 250 receives the location information of the user who holds the corresponding financial transaction card using the mobile phone number, and arrests the illegal user or In order to protect the financial transaction card user's personal information to the security authority computer 260 outputs the information of the fraudulent user using the emergency password and the location information of the user provided by the mobile communication company computer 250, which is input from the security authority computer 260 The processing result for the fraudulent user is stored in the database and the service is terminated (S230). .

According to the password dualization service system and method of the financial transaction card of the present invention as described above, by allowing a user possessing various financial transaction cards to dualize the password into a normal password and an emergency password, loss, theft and intimidation There is an effect that can prevent the illegal use of the financial transaction card through the leaked password.

In addition, if a financial transaction card is used through an emergency password at a financial institution, a small amount of cash is paid to a fraudulent user within a predetermined payment limit amount so that the fraudulent user recognizes it as normal use. It is possible to promptly arrest illegal users by security organizations such as companies, and to protect the users of financial transaction cards exposed to risks based on the location information of users using mobile phones provided by mobile carriers. There is.

Herein, while the present invention has been described with reference to the preferred embodiments, those skilled in the art will variously modify the present invention without departing from the spirit and scope of the invention as set forth in the claims below. And can be changed.

Claims (10)

The new member registration or login data input by the user who has made a communication connection to the server computer through the network communication network is output to the server computer, and the transaction financial institution, card number, and cellular phone entered by the user according to the form data provided by the server computer. The password dualization registration data of the financial transaction card including the number, the normal password, the emergency password, and the limit on the payment of the emergency password are output to the server computer, and the result of the password dualization processing is provided from the specific financial institution computer that performs the password dualization registration processing. Receiving a plurality of user terminals; Based on the new member registration or login data inputted from the specific user terminal connected through the network communication network, the electronic authentication of the corresponding user is performed through the certification authority computer, and at the request of the user, the password dualization registration of the financial transaction card is performed. The form data is output to the corresponding user terminal, and the password dualization registration data of the financial transaction card including the limit amount paid when using the financial institution, card number, mobile phone number, normal password, emergency password, and emergency password entered from the user terminal At the same time, it saves the data to the relevant financial institution computer and requests password dualization processing of the financial transaction card, and stores the result of password dualization processing of a specific user input from the financial institution computer in the database. From the input store a processing result of the unauthorized user using a password in the emergency database server computer; An authentication authority computer that outputs an authentication result to the server computer after performing electronic authentication of the user when the authentication request data of a specific user is input from the server computer; Based on the password dualization registration data of the financial transaction card of the specific user inputted from the server computer, after performing the password dualization processing of the financial transaction card held by the user, the processing result is output to the corresponding user terminal and the server computer, and the specified cash When the banking business proceeds using the emergency password from the payment terminal, the mobile phone computer requests the location information through the mobile phone of the user who holds the financial transaction card, receives the location information of the user, and detects the illegal user or uses the financial transaction card user. It outputs the information of the fraudulent user who uses the emergency password to the security agency computer and the location information of the user provided by the mobile operator computer for the protection of personal information, and the result of the processing of the fraudulent user who uses the emergency password input from the security agency computer. Emitter plurality of financial institutions, and outputting at the same time storing in the base computer to the server computer; A plurality of cash dispensing terminals for performing financial operations such as cash withdrawal and money transfer under the control of the financial institution computer based on a financial transaction type and a password for inputting a financial transaction card by a user; When the location information is requested from the financial institution computer through the mobile phone number of the user holding the financial transaction card, the location of the mobile phone owned by the user is tracked to confirm the location of the user, and the location information of the identified user is recalled. A mobile telecommunication company computer output to a financial institution computer; And When the fraudulent user information and the location information of the user using the emergency password are input from the financial institution computer, the result is notified to the person in charge of the relevant business process so that the control of the arrest of the fraudulent user or the protection of the personal information of the financial transaction card user is performed immediately. And a security institution computer for outputting a fraudulent user's processing result using the emergency password to the financial institution computer. The method of claim 1, wherein the server computer, Under the control of the control unit, data input and output are performed according to the user's electronic authentication and user's electronic authentication and password dual registration of the financial transaction card connected through a network communication network. Performs data input / output for the electronic authentication of a specific user, and performs communication connection with each financial institution computer under the control of the control unit, and input / output data of the result of processing the password dualization registration of the specific user and the processing result of the fraudulent user using the emergency password. A data communication unit performing a; Controls new member registration or member login based on data input from a specific user terminal through the data communication unit, controls electronic authentication through a certificate authority computer of a corresponding user performing member login, and performs specific authentication. Controls the storage of password dualization registration data of financial transaction cards including transaction financial institutions, card numbers, mobile phone numbers, normal passwords and emergency passwords inputted from the terminal, and controls communication access with specific financial institution computers. The institution controls the password dualization registration data of the financial transaction card input by users, and stores the password dualization processing result of a specific user input from the financial institution computer through the data communication unit and the emergency password input from each financial institution computer. To this A control unit controlling the storing of the processing result of the unauthorized user; And Under the control of the control unit stores the personal information of each user performing a new member registration, the transaction financial institution, card number, mobile phone number, normal password, emergency password provided by each user to use the password dualization service And a database unit for storing password dualization registration data of the included financial transaction card, and storing the result of processing the fraudulent user using the emergency password provided from each financial institution computer for each user using the password dualization service. Password dualization service system of a financial transaction card. According to claim 1, wherein the financial institution computer, When the emergency password set by the user of the financial transaction card is input from the cash payment terminal, the password dualization service of the financial transaction card characterized in that the payment does not exceed the payment limit amount set by the user. system. According to claim 3, The amount paid within the limit payment amount according to the use of the emergency password, Password dualization service system of the financial transaction card, characterized in that the burden on the user of the financial transaction card set the emergency password. The new member registration or login data inputted by the user who has made a communication connection to the financial institution computer through the network communication network is output to the financial institution computer, and the card number and mobile number entered by the user according to the form data provided by the financial institution computer. A plurality of user terminals for outputting the password dualization registration data of the financial transaction card including the normal password, the emergency password, and the limit amount paid when using the emergency password to the financial institution computer, and receiving the password dualization processing result from the financial institution computer; Based on the new member registration or login data inputted from the specific user terminal connected through the network communication network, the electronic authentication of the corresponding user is performed through the certification authority computer, and at the request of the user, the password dualization registration of the financial transaction card is performed. The form data is output to the corresponding user terminal, and the user is based on the password dualization registration data of the financial transaction card including the card number, mobile phone number, normal password, emergency password, and limit payment amount used in the emergency password. After the password dualization of the financial transaction card is carried out, the processing result is output to the corresponding user terminal, and when a financial transaction using the emergency password is performed from a specific cash payment terminal, the user of the user who holds the financial transaction card with the mobile communication company computer After requesting location information over the phone, the user's location information is input, and the information provided by the mobile phone computer and the information of the unauthorized user using the emergency password to the security agency computer for the arrest of the fraudulent user or the protection of the user of the financial transaction card. A financial institution computer for outputting location information of the financial institution computer, and storing a processing result of a fraudulent user using an emergency password inputted from a security institution computer; An authentication institution computer for outputting an authentication result to the financial institution computer after performing electronic authentication of the user when the authentication request data of a specific user is input from the financial institution computer; A plurality of cash dispensing terminals for performing financial operations such as cash withdrawal and money transfer under the control of the financial institution computer based on a financial transaction type and a password for inputting a financial transaction card by a user; When the location information is requested from the financial institution computer through the mobile phone number of the user holding the financial transaction card, the location of the mobile phone owned by the user is tracked to confirm the location of the user, and the location information of the identified user is recalled. A mobile telecommunication company computer output to a financial institution computer; And When the fraudulent user information and the location information of the user using the emergency password are input from the financial institution computer, the result is notified to the person in charge of the relevant business process so that the control of the arrest of the fraudulent user or the protection of the personal information of the financial transaction card user is performed immediately. And a security institution computer for outputting a fraudulent user's processing result using the emergency password to the financial institution computer. (1) The server computer performs new member registration or member login of a specific user terminal that performs communication access through a network communication network, performs electronic authentication through a certification authority computer, and inputs from the corresponding user terminal for password dualization service. Storing password dualization registration data of the financial transaction card in a database; (2) The server computer performs communication connection with the financial institution computer based on the password dualization service registration data of the specific user, and then outputs the password dualization registration data of the financial transaction card inputted by the specific user to the financial institution computer. Performing the password dualization processing of the financial transaction card on the basis of the password dualization registration data of the financial transaction card of the specific user in the institution computer and providing the processing result to the corresponding user terminal and the server computer; And (3) When a financial transaction is performed using an emergency password from a specific cash payment terminal, the computer of the financial institution provides cash within the range not exceeding the payment limit set by the user of the financial transaction card and at the same time through the mobile communication computer. In order to receive the location information of the user who holds the corresponding financial transaction card using the mobile phone number, and to protect the personal information of the fraudulent user or the financial transaction card user, the information of the unauthorized user who uses the emergency password to the security agency computer and the mobile operator computer. And outputting the location information of the provided user, and providing the server computer with the processing result of the fraudulent user input from the security institution computer. The method of claim 6, wherein the process (1), (1-1) requesting a new member registration or member login from a server computer to a specific user terminal which has made a communication connection through a network communication network; (1-2) determining whether new member registration selection data or login data is input from the corresponding user terminal in the server computer; (1-3) when the new member registration selection data is input from the user terminal as a result of the determination, outputting predetermined form data for new member registration from the server computer to the corresponding user terminal; (1-4) processing new member registration by storing new member registration data input from the corresponding user terminal at a server computer and requesting reconnection; (1-5) When the login data is input from the user terminal as a result of the determination in step (1-2), the server computer performs the communication connection to the certification authority computer and processes the electronic certificate issuance of the user based on the login data. Making; (1-6) judging whether the registration request data for using the password dualization service of the financial transaction card is input from the corresponding user terminal which has performed electronic authentication at the server computer; (1-7) As a result of the determination, when the registration request data for using the password dualization service of the financial transaction card is input from the corresponding user terminal, predetermined form data for the password dualization registration of the financial transaction card is output from the server computer to the corresponding user terminal. Making; (1-8) In the server computer, it is inputted from the corresponding user terminal whether the password dualization registration data of the financial transaction card including the payment amount is used when using the financial institution, card number, mobile phone number, normal password, emergency password, and emergency password. Determining; And (1-9) When the password dualization registration data of the financial transaction card is input from the user terminal as a result of the determination, the password computer registration of the financial transaction card input by the user is confirmed after checking whether the inputted content from the user terminal is missing from the server computer. Password dualization service method of a financial transaction card comprising the step of storing the data in the database. The method of claim 6, wherein the process (2), (2-1) performing communication connection with a corresponding financial institution computer through a network communication network based on password dualization service registration data of a financial transaction card of a specific user stored in a database at a server computer; (2-2) outputting password dualization service registration data of a financial transaction card provided by a specific user from a server computer to a corresponding financial institution computer that has made a communication connection through a network communication network; (2-3) performing the password dualization processing of the specific financial transaction card provided by the user on the financial institution computer which has received the password dualization service registration data of the financial transaction card of the specific user from the server computer; And (2-4) outputting the result data of the password dualization processing of the financial transaction card performed at the user's request in the financial institution computer to the corresponding user terminal and server computer in the form of voice and text message. Password dualization service method of a financial transaction card. The method of claim 6, wherein the process (3), (3-1) determining whether a password of a specific financial transaction card in use of the password dualization service is input from the cash payment terminal at the financial institution computer; (3-2) As a result of the determination, if a password of a specific financial transaction card is input from the cash payment terminal, the password inputted from the cash payment terminal is a normal password based on the financial transaction card information stored in the database on the financial institution computer. Determining cognition; (3-3) if the password inputted from the cash distributing terminal is a normal password, processing the financial service requested by the financial transaction card user in the financial institution computer normally; (3-4) If the password inputted from the cash payment terminal is an emergency password as a result of the determination in step (3-2), the financial transaction card user does not exceed the payment limit amount set by the financial transaction card user when registering the password dualization service. Processing the financial business requested by the fraudulent user in the office; (3-5) A user who holds a financial transaction card from a financial institution computer to a mobile communication company computer outputs a predetermined mobile phone number to request the user's location information, and receives the user's location information from the mobile communication company computer. step; (3-6) After the financial institution's computer communicates with the security institution computer, the financial institution's financial transaction card usage information and user's location information may be used for the fraudulent user's arrest or protection of the financial transaction card user's personal information. Outputting to a computer; (3-7) controlling the arrest of the fraudulent user or the personal protection of the financial transaction card user based on the fraudulent user's financial transaction card use information and the user's location information input from the financial institution computer at the security institution computer; (3-8) providing the result of the processing of the arrest of the fraudulent user or the protection of the user of the financial transaction card from the protection institution computer to the corresponding financial institution computer; And (3-9) at the financial institution computer, storing the fraudulent user's processing result using the specific financial transaction card inputted from the security institution computer in the database and providing the fraudulent user's processing result to the server computer. Password dualization service method of a financial transaction card. (A) After performing a new member registration or member login of a specific user terminal that has made a communication connection from a financial institution computer through a network communication network, perform electronic authentication through a certification authority computer, and from the corresponding user terminal for password dualization service. Storing password dualization registration data of the input financial transaction card in a database; (B) performing the password dualization processing of the financial transaction card on the basis of the password dualization registration data of the financial transaction card inputted from the specific user terminal in the financial institution computer and providing the processing result to the corresponding user terminal; And (C) When a financial transaction is performed using an emergency password from a specific cash dispensing terminal, the financial institution computer shall provide cash within the limits not exceeding the payment limit set by the user of the financial transaction card and at the same time through the mobile communication computer. In order to receive the location information of the user who holds the corresponding financial transaction card using the mobile phone number, and to protect the personal information of the fraudulent user or the financial transaction card user, the information of the unauthorized user who uses the emergency password to the security agency computer and the mobile operator computer. And outputting the location information of the provided user, and storing the processing result of the fraudulent user input from the security institution computer in a database.