KR20050019339A - Method for preventing illegal use of account information and System using the same - Google Patents

Abstract

PURPOSE: A method and a system for preventing piracy of financial account information on the on/offline are provided to automatically perform a piracy preventing process preset from a member or a service institution based on information inputted for a financial process, when the financial process for the financial account information registered to a piracy preventing service is generated. CONSTITUTION: Financial servers(21-2k) inform a piracy preventing device(3) of financial process trial information including financial process condition information when users(11-1n) perform the financial process by using the financial account information. The piracy preventing device is equipped with a call processor for being combined with the network, a database, and a controller. The database stores an account number, a password, contact information, and the condition information according to the account number for each member. If financial process trail information is received from the financial server, the controller performs the piracy preventing process matched with the condition information of the corresponding account number by searching the database based on the received information.

Description

Method for preventing illegal use of account information and system using the same}

The present invention provides a method for preventing theft of financial account information that effectively prevents the use of financial account information such as account numbers and passwords to be stolen or robbed by third parties when the financial services provided online or offline are provided. And to the system.

In recent years, as the communication environment including the Internet is diversified and advanced, services provided to individuals or institutions are gradually becoming online and networked.

While the development of the above system provides time and space for members who subscribe to the service, the service registration information of the member is always exposed to the risk of being stolen by others. In fact, the damage from the theft of service registration information is increasing. Recently, various information security tools have been developed and commercialized. Even in the case of such information security tools, the information security tool is designed to be made online to check information registered in a predetermined database. This is not true.

For example, in the case of a bank, anyone with a bank account, a password, and a seal can be able to withdraw the money deposited in the bank account or transfer it to another account. Therefore, a third party having the purpose of a crime can find out the password from the user and visit the bank directly, and withdraw the amount of the user's account without any difficulty when the account and seal are stolen from the user.

Also, in the case of securities companies, anyone with a securities account and password or stamp, or who knows the securities card and password, can withdraw the amount deposited in the securities account or use the deposited amount to trade stocks. do. In particular, there are many cases in which a user deposits a certain amount in a securities account and delegates a stock transaction to a securities company employee. Recently, a securities company employee impersonates a user's securities account to perform a stock transaction and cause economic damage to the user. There is often an unpleasant task of withdrawing the money deposited. However, the reality is that the user cannot take any action on this.

 In addition, if the financial account information is stolen by the third party and the financial processing for the corresponding account occurs, the user may find out only after arranging the account and the probation becomes late.

In addition, the financial processing of financial companies such as banks and securities companies has been online, so that only the user information, account number and password can be entered through the Internet without stamping or signing to perform financial processing on the amount deposited in the account. . Since only the relevant information needs to be stolen, the stealing of financial account information by a third party may be made easier. Therefore, the bank is required to install various security programs, but this also only confirms whether or not the password set by the user is not a fundamental countermeasure.

Accordingly, the present invention was created in view of the above circumstances, and when a financial processing for financial account information registered for a service is generated for members who have subscribed to an anti-theft service, the present invention is based on information inputted for financial processing. It is a technical object of the present invention to provide a method and system for preventing theft of financial account information in which the anti-theft processing set in advance by a service organization can be automatically performed.

In addition, through the means designated by the member to immediately notify the use of the fact that the confirmation and approval process by the member to be carried out automatically take measures to prevent damage caused by the theft of financial account information It is another technical object to provide a method and system for preventing theft of information.

The anti-theft method of the financial account information according to the first aspect of the present invention for achieving the above object is to provide a financial server for providing a financial service, and provides an anti-theft function for the user's financial account in conjunction with the financial server In the anti-theft system comprising an anti-theft device, service registration for registering and processing the account number provided by the user and at least one or more condition information corresponding to the anti-theft method for the account number in the database of the anti-theft device. Step, the case in which the financial server reports the attempt to use the service to the anti-theft device when the user wants to use the predetermined financial service, and the anti-theft device in the database is based on the service use attempt information received from the financial server. Check the condition information registered for the account number It characterized in that it comprises a case action step for performing the financial account information theft prevention process corresponding to the.

In addition, the anti-theft system of financial account information according to the second aspect of the present invention for achieving the above object is a financial server for performing a financial processing service, theft of the financial account information of the anti-theft service member in conjunction with the financial server And an anti-theft device for performing the prevention process, wherein the financial server steals the financial processing attempt information for the corresponding account number including the financial processing condition information when the user wants to perform the financial processing using the financial account information. The anti-theft device is configured to notify the anti-theft device, and the anti-theft device stores predetermined call processing means for combining with a communication network, account number and password for each member, contact information, and condition information according to the anti-theft processing type for each account number. When the financial processing attempt information about the account number is received from the database and the financial server, And a control means configured to search the database on the basis of the financial account information theft prevention process corresponding to the financial processing condition information of the corresponding account number.

That is, according to the above, when the financial processing is to be performed using the financial account information, the anti-theft processing guided by the member is automatically performed based on the information input by the user. It is possible to minimize or prevent damages caused by theft of financial account information by preventing or minimizing the damage to be processed and promptly performing automatic report processing even in the case of force majeure caused by robbery or kidnapping.

Next, an embodiment according to the present invention will be described with reference to the accompanying drawings.

1 is a system overview showing the overall configuration of the financial account information theft prevention system according to the present invention.

As shown in FIG. 1, the financial account information theft prevention system according to the present invention comprises a financial server 2 and an antitheft device 3 that provide various financial services to the user 1. The financial server 2 and the anti-theft device 3 are combined through a predetermined communication network. Here, the communication network may include all communication means such as public switched telephone network (PSTN), integrated services digital network (ISDN), wireless local loop (WLL), mobile communication network, the Internet, IMT-2000, LAN, MAN, RS232, and the like.

In the above configuration, the financial server 2 is a device for providing various financial processing services to the user 1, and may be combined with the user 1 online or offline, and is provided to the user, for example, by telebanking, PC banking, or debit / securities. Users will be authenticated in providing various financial services, including credit cards, financial services through banks and securities companies.

The anti-theft device 3 interoperates with the financial server 2 to provide a predetermined financial account information theft prevention function for the user 1. In order to use the various financial services provided by the financial server 2 to the anti-theft service subscriber (hereinafter referred to as "member"), for example, his / her member ID, financial account information, password, Information on how to respond to each condition, member contact network type information such as wired / wireless telephone network or internet for communication with members, contact priority information, member's phone number, contact information for sending request information such as e-mail address, etc. If you enter the financial server (2) is authorized to input the information and the unique information, such as bank / securities company, financial server access information to the anti-theft device (3), the anti-theft device (3) is stealing the member The prevention treatment type is set in advance. The anti-theft device 3 is then configured to provide the anti-theft service guided by the member based on the financial account information and the financial processing condition information input from the financial server 2.

In addition, the anti-theft device 3 is provided with a predetermined call processing means to notify the financial processing attempt for the financial account to the contact specified by the member through a predetermined communication network, that is, a mobile communication network, a PSTN network, the Internet, and the like, and the database and the contact information. On the basis of the confirmation information provided from the financial processing approval or rejection information for the financial account is sent to the financial server (2).

For example, when a financial processing request for a member's bank account is required at any bank window or online, the corresponding financial account information (account number and password) is authorized to the financial server 2, and the financial server 2 prevents theft. The device 3 reports the financial processing attempt including the corresponding financial account information. Then, the anti-theft device (3) checks the password corresponding to the corresponding account number in the database, and after the anti-theft processing, that is, approval, rejection, report, notification, identity verification according to the condition information such as the password and its financial processing type Processing and the like. At this time, if a password corresponding to the notification or identity verification is provided from the financial server 2, the predetermined verification request information is sent to the corresponding contact, and the corresponding financial server (2) is based on the confirmation notification information provided from the contact designated by the member. ), You will be asked to approve or reject the bank account. And, the anti-theft device (3) will immediately send the report information to the designated contact, such as financial institutions or police station when a report for the service is requested. In addition, if a financial processing request such as stock trading or deposit of a deposit is required for a member's securities account, it is processed as described above.

In this case, it is preferable that the message transmitted and received between the anti-theft device 3 and the financial server 2 is encrypted so as to prevent information from being leaked to a third party.

On the other hand, the anti-theft system according to the present invention, as shown in Figure 2a, the financial server 2 is individually combined with a predetermined anti-theft device 3 to provide the anti-theft service through the anti-theft device (3). Can be configured to In addition, as shown in FIG. 2B, the financial server 2 may include a module 3 for performing the anti-theft function according to the present invention.

In other words, the anti-theft device according to the present invention can be coupled to a predetermined system in a variety of ways.

3 is a block diagram showing functional separation of the above-described antitheft device 3.

As illustrated in FIG. 3, the anti-theft device 3 includes a service control terminal 31 and a service processing terminal 32 coupled through a dedicated network 33.

The service control unit 31 may include a service control unit 311 which performs an overall control operation for providing an anti-theft service, a database 312, and various data processed by the service control unit 311, for example, various information according to an event report. And a data memory 313 for temporarily storing the data, an operator matching unit 314 for operator matching, and a web matching unit 315 for providing an Internet interface function.

Here, each element such as the service control unit 311, database 312, operator matching unit 314, web matching unit 315 may be configured using a separate server, the web matching unit 315 is financed It comprises a predetermined web page for allowing the server 2 or the user 1 to access the system via the Internet.

The web matching unit 315 receives a subscription and withdrawal of the theft prevention service from the member and the financial server 2, changes information, and receives various kinds of information necessary to provide the antitheft service. 312).

As shown in FIG. 4, the database 312 includes, for example, member ID information, a financial company such as a bank / securities company, an account number for preventing theft, password / financial processing type / payment amount / time of use / by account number / Date of use / Location of service such as domestic, overseas, home, office, etc. / Information on each condition such as telephone, internet, debit card or securities card, ATM machine, access method of service such as bank or securities company window Member contact network type information such as a wired / wireless telephone network or the Internet for communication with the contact information, contact priority information, and contact information for transmission of confirmation request information such as a member's telephone number and an e-mail address are stored.

The database 312 may be registered with at least one account number for each bank or securities company registered in the member ID, a plurality of passwords and a plurality of contact network type information, contact priority information and contact information for each account number Can be configured to register and store.

That is, the service control unit 31 controls the service processing unit 32 based on the information stored in the database 312 and notifies the member of the financial processing attempt and the result of the registered financial account and the member. Receive a response of the.

On the other hand, the service processing unit 32 is coupled to the service control terminal 31 through the dedicated network 33, is coupled to the Internet via a LAN (LAN), and the wired and wireless telephone network through a relay line, wireless or subscriber lines Connected. For example, as shown in FIG. 3, the service processor 32 may be coupled with a wired or wireless telephone network through a relay line E1 link and an ISUP protocol. The service processing unit 32 provides a predetermined notification and response reception function to each member under the control of the service control unit 31.

5 is a block diagram illustrating the detailed configuration of the service processing stage 32 coupled to the telephone network via the E1 link and ISUP protocol.

The service processor 32 includes a service processor 321, a signal processor 322, a service resource unit 323, and a switch 324. The service processor 321 is coupled to the dedicated network 33 through the hub 325, and the service processor 321, the signal processor 322, the service resource unit 323, and the switch 324 are controlled by a control bus ( Control BUS: 326).

The service processing unit 321 performs an E1 relay line management function, performs a network matching function that performs No.7 protocol processing of MTP level 3 or higher, sends confirmation request information to the member, and confirms confirmation notification information received from the member. The service control unit 31 performs the function of transmitting. In addition, the service processing unit 321 is provided with a predetermined number translation table to perform the call processing for the contact specified by the member.

The signal processor 322 includes an E1 interface 322a for matching E1, a traffic interface 322b for transmitting and receiving traffic data, and a protocol processor 322c for performing No.7 level 1 and 2 protocol processing. It is composed. The signal processing unit 322 performs E1 trunk connection with the exchange, traffic data transmission and reception processing such as service information for the member, and data transmission and reception processing according to the ISUP protocol between the exchange and the service processing unit 321.

The service resource unit 323 may include a service resource control unit 323a for outputting and controlling predetermined information according to the information ID received from the service processor 321, and data storage means for storing a plurality of confirmation request message information according to a service type. In addition, the information generation unit 323b for reading out the confirmation request information corresponding to the information ID applied from the service resource control unit 323a and outputting a predetermined confirmation request message, and receiving from the destination exchange during the call processing. In addition to detecting In-Band Information (IBI) such as Busy Tone and Voice Guidance, a confirmation notification message such as DTMF tone or voice response that a member inputs in response to the confirmation request message And a response detector 323c for detection. In addition, the service resource control unit 323a controls the output of the service information and, in response to the service information downloading operation executed by the service processing unit 321 from the service control unit 31, is performed for the information generation unit 323b. Verification request information update function will be executed.

The switch unit 324 is a switching device 324a for switching and coupling the traffic interface 322b of the signal processor 322 and the information generator 323b of the service resource unit 323, and the control from the service processor 321. And a switch control unit 324b for controlling the switching device 324a according to the data. The switch unit 324 sends the confirmation request information output from the information generation unit 323b to the contact designated by the member under the control of the service processing unit 321, and the confirmation notification authorized from the contact designated by the member. The switching detection control unit 323c detects the information. The response detector 323c transmits the detected confirmation notification information to the service processor 321, and the service processor 321 transmits the confirmation notification information to the service control terminal 31.

Next, the operation of the apparatus having the above-described configuration will be described with reference to the flowchart shown in FIG.

First, the user 1 and the financial server 2 perform a predetermined anti-theft service subscription procedure with the anti-theft device 3 (ST1). The user 1 accesses a web page provided by the web matching unit 315 of the service control unit 31 and enters information about the user to perform a predetermined membership registration procedure. The prescribed service registration procedure is performed by providing the anti-theft information on the bank account and the unique information of the financial company (bank / securities company) through the web matching unit 315. That is, the user 1 and the financial server 2 may use various types of information illustrated in FIG. 4, namely, bank name / securities company name, account number, password, financial processing condition information for requesting theft prevention service, and theft prevention measures accordingly. Setting information and contact information, etc. will be provided to the anti-theft device (3).

Subsequently, the service control unit 31 of the anti-theft device 3 stores and registers various registration information provided through the web matching unit 315 in the database 312 (ST2). In this case, as shown in FIG. 4, the database 312 stores bank / securities company names, account numbers and passwords, financial processing condition information, anti-theft information, and contact information according to member IDs.

As described above, in the state where the member information is stored and registered in the database 312, if the financial processing request for the member's account is authorized to the financial server 2, the financial server 2 steals a predetermined event report message. It is sent to the prevention apparatus 3 (ST3). In this case, the incident report information includes access information with the financial server 2 such as an IP address, a member ID, an account number, a password, and financial processing condition information.

The antitheft device 3 temporarily stores the incident report message received from the financial server 2 in the data memory 313 (ST4).

Subsequently, the anti-theft device 3 searches whether the received event report message is information registered in the database 312 and performs the anti-theft process corresponding thereto (ST5). That is, the service control unit 311 of the anti-theft device 3 first searches the database 312 based on the received member information, and the account number and password received from the financial server 2 in the first retrieved information. By retrieving the financial processing condition information, the registration information retrieval operation is performed and the anti-theft processing is performed accordingly.

That is, if the account number information received from the financial server 2 is the information registered in the database 312, the service control unit 311 of the anti-theft device 3 and the conditions set by the member in the database 312 Based on the condition, the action information and the contact information will be read and the appropriate action will be executed. A typical operation is to send a predetermined confirmation request message through a contact designated by a member (ST6).

For example, the service control unit 311 detects a condition corresponding to the contents of the event report from the contact network information specified by the member stored in the database 312. For example, after allowing / notifying / reporting / denying / identifying the user according to the type of password Allow / Approve At least one of the actions, such as Allow after confirming password, is selected. The service control unit 311 service processing predetermined confirmation request information including contact network information set as the first priority among contact information, for example, account number information, amount, member information, and confirmation request ID information, when notification is required in connection with the selected action. It is transmitted to the stage 32 to be delivered to the information generator 323b in the service resource unit 323. Here, the information generating unit 323b stores the message format for requesting the financial processing confirmation request for the contact network information and the financial account so as to correspond to the predetermined information ID, and the confirmation request information received in the corresponding confirmation request message format information. Synthesize and generate a predetermined confirmation request message.

In addition, the service control unit 311 provides the first priority contact network and contact information retrieved from the database 312 to the service processing unit 321. If the contact network information is an e-mail, the service processor 321 reads the confirmation request information generated by the information generator 322b and transmits the information to the corresponding e-mail through the Internet.

The service processor 321 performs outgoing call processing by executing a predetermined number translation on the basis of the number translation table when the type of the first-contact network received from the service controller 311 is a mobile communication network or a PSTN telephone network. Will be performed. For example, when the signaling method is ISUP, the service processing unit 321 sends an initial address message IAM to the destination exchanger, and when the incoming response message ANN is received for the initial address message IAM, the switch unit 324. A channel setting message is sent to the switch control unit 324b of FIG. 2) to couple the incoming subscriber to the service resource unit 323 through a predetermined traffic channel. The service processor 321 transmits the channel information and the confirmation request information ID received from the service controller 31 to the service resource controller 323a of the service resource 323. Subsequently, the service resource control unit 323a controls the information generating unit 323b to synthesize the financial processing confirmation request item information and the member information of the financial account and transmit the synthesized information through the assigned traffic channel. For example, if the member's approval is required because the withdrawal amount is over 600,000 and exceeds 500,000 for Hong Gil-dong member, the information generation unit 323b asks that withdrawal request of 600,000 won from 'Hong Gil-dong's account number 0011-2233-4455-6677 There is. Press 1 to grant permission. ' The confirmation request message in the form of voice will be sent to the contact designated by the member. On the other hand, in the member's approval method, the confirmation request message notifies the financial processing attempt of the bank account, and if the member inputs the predetermined approval password information, for example, "0101", the corresponding approval process is processed. Can be performed. For example, the approval password information is registered in the database, and the member may input the predetermined approval password information according to the current status to approve, reject, and report the withdrawal of the corresponding amount. In addition, if the amount is less than 500,000 won and the password is entered as 1122, and permission and SMS / e-mail notification is required, the service processing unit 321 reads the corresponding request information from the information generation unit 323b and text message to the SMSC You will be notified. Of course, by using the interactive communication method for the text message can also provide the service with the approval of the member. In addition, if a withdrawal request is made at the current time of 22:30, the message can be sent to the contact designated by the member, and the payment processing can be performed only when the approval is received from the contact designated by the member (Fig. 4). Reference). In other words, the member or service organization registers the condition information such as the password, the amount of use, the time of use, the date of use, the type of financial processing, and a combination thereof with respect to the account number, and performs the anti-theft processing according to the corresponding condition. .

On the other hand, if the service processing stage 32 is unable to connect to the communication network set as the first priority, the predetermined connection not available message is sent to the service control stage 31, the service control stage 31 in the database 312 The contact information set as the second priority for the member is read and sent to the service processor 32 to perform the above-described operation. For example, if the SMS notification set as the first priority fails, the corresponding request information is sent to the member e-mail set to the second rank. That is, the service control unit 31 attempts to connect to the contact designated by the member through various contact networks based on the priority information of the database 312.

Then, as described above in step ST6 of FIG. 6, the financial account financial processing confirmation request information is sent to the contact point of the member through a predetermined communication network, and the corresponding confirmation notification information, for example, approval permission or rejection information is stolen from the contact point of the member. When the anti-theft device 3 is received (ST7), the anti-theft device 3 reads the contact information of the financial server 2 stored in the data memory 313 based on the received information to the corresponding financial server 2. The predetermined approval or rejection information is sent (ST8). In addition, the anti-theft device 3 is to perform a report action to the predetermined institution, for example, the police station or a contact point of the bank / financial company through the service processing unit 32 in accordance with the procedure if the report is necessary (ST9). Subsequently, the service control unit 311 of the anti-theft device 3 stores the details of the service provided for the financial account in the database 312 and ends the event report information stored in the data memory 313 (ST10). ).

That is, in the above embodiment, the member and the service organization perform the anti-theft processing set by the member and the service institution for the financial processing request for the desired financial account, thereby preventing damage caused by the theft of the financial account information. do.

For a specific example of automatic filing, for example, if a member encounters a robbery or is abducted, provide the password for the bank account as "1123" and enter the password as "1123" in order to withdraw cash from the account. If the information is provided, the information is provided to the anti-theft device (3), and confirm the action set in the password "1123" for the account number so that the approval process and report processing is automatically performed. Therefore, the criminal can withdraw cash from the account it is possible to quickly respond to the accident through automatic report processing while ensuring the safety of the member.

In addition, it is possible to prevent the theft from the theft attempt phase by adding a function of notifying the member even if the password is input incorrectly, taking into consideration that the password input error is repeated in the case of theft attempt. In this case, if a wrong password is inputted once or more than a predetermined number of times within a predetermined time (for example, 5 minutes), it may be performed to notify the designated contact.

Therefore, according to the present invention, if a third party attempts to perform financial processing using financial account information, the anti-theft processing set by the member is automatically performed based on the information input by the third party, thereby preventing theft and theft. Damage can be prevented or minimized.

In addition, in the case of securities accounts, the password for "4321" is always set to be approved only by the user, and the password for "4322" is notified to another person, for example, a securities company employee, to take over the stock sale. When the result of the stock sale occurs, it is set to be notified to its contact information so that the member can always know the result of the conclusion in real time without the hassle of contacting the securities company or checking the account. 4).

Meanwhile, the present invention is not limited to the above embodiments, and various modifications can be made without departing from the technical spirit of the present invention.

As described above, according to the present invention, when financial processing using financial account information is attempted, processing such as allowing / rejecting / notifying / accepting / reporting of financial processing according to a predetermined condition based on information inputted therefor. By automatically doing so, it is possible to prevent or minimize the damage caused by the stealing of one's own financial account information by others, and to promptly process the report even in the case of force majeure such as intimidation or abduction, thereby minimizing the damage.

1 and 2 is a system schematic diagram showing a schematic configuration of a financial account information theft prevention system according to the present invention.

Figure 3 is a block diagram showing the functional separation of the internal configuration of the anti-theft device 3 in the financial account information theft prevention system according to the present invention.

4 is a diagram showing an information table configuration of the database 312 shown in FIG.

FIG. 5 is a block diagram showing an internal configuration of the service processing stage 32 shown in FIG.

Figure 6 is a flowchart for explaining the operation of the financial account information theft prevention system according to the present invention.

                 ***** Brief description of the main parts of the drawings *****

            1: user, 2: financial server,

            3: anti-theft device, 31: service control stage,

     32: service processing unit, 33: private network.

Claims (14)

In the anti-theft system comprising a financial server for providing a financial service, and an anti-theft device for intercepting the financial account of the user in connection with the financial server, A service registration step of registering and processing the account number provided by the user and at least one or more condition information corresponding to the anti-theft method for the account number in a database of the anti-theft device, If the user wants to use a predetermined financial service case, the financial server reports the attempt to use the service to the anti-theft device, And a case action step in which the anti-theft device checks the condition information registered for the corresponding account number in the database based on the service use attempt information received from the financial server, and performs the anti-theft processing of the financial account information corresponding to the condition information. Theft prevention method of the financial account information, characterized in that the. The method of claim 1, The condition information may be selectively set among a password for financial processing, a type of financial processing, a use amount, a use time, a use date, a use location, an access means, a password input error, and a combination thereof. How to prevent theft. The method of claim 1, The anti-theft processing method of the case action step is selectively set among the approval, rejection, notification, post-identification processing, reporting and combination processing between them. The method of claim 3, As for the post-identification processing in the case action step, a confirmation request message for financial processing is sent to a contact corresponding to the condition information registered in the database, and anti-theft processing corresponding to code information provided from the contact is performed. Theft prevention method of the financial account information, characterized in that to be made. The method of claim 4, wherein The code information is a code corresponding to the approval, rejection, notification, report, and combination processing of the financial processing for each account number, the prevention of theft of financial account information, characterized in that registered in the database in the service registration step. . The method of claim 1, In the service registration step to register at least one contact number by account number and to register the priority information for the contact, If the theft prevention device attempts to access the contact in the case action step, the financial account characterized in that the access to the contact in accordance with the priority to send a financial processing confirmation request message for the account number to the connected contact How to prevent theft of information. A financial server that provides a financial service, and an anti-theft device that performs an anti-theft process on financial account information of the anti-theft service member in association with the financial server, The financial server is configured to notify the anti-theft device of the financial processing attempt information for the corresponding account number including the financial processing condition information when the user wants to perform the financial processing using the financial account information. The anti-theft device includes a predetermined call processing means for combining with a communication network, a database for storing account number and password for each member, contact information and condition information according to the anti-theft processing type for each account number, and an account number from the financial server. And a control means configured to search the database based on the financial processing attempt information for the financial processing information, and to perform the financial account information theft prevention processing corresponding to the financial processing condition information of the corresponding account number. Information theft prevention system. The method of claim 7, wherein The condition information is financial account information, characterized in that selectively set from among the password for the financial processing request, the type of financial processing, the amount of use, the time of use, the date of use, the location of use, access means, password input error and combinations thereof. Anti-theft system. The method of claim 7, wherein The anti-theft processing of the anti-theft device is selectively set among the approval, rejection, notification, post-identification processing, report, and combination processing between the financial processing. The method of claim 9, The database stores the code information according to the anti-theft processing type for each account number for the item whose condition information is processed after the identity verification, The anti-theft device sends a financial processing confirmation request message for the account number to the contact number registered in the database when the condition information of the case information authorized from the financial server corresponds to the processing after the identity verification, and is provided by the user for this. Theft prevention system of financial account information, characterized in that for performing theft prevention processing corresponding to the code information. The method of claim 10, The anti-theft processing corresponding to the code information is selectively set among the approval, rejection, notification, report and the combination of the financial processing, the anti-theft system of financial account information. The method of claim 7, wherein The anti-theft device is the anti-theft system of the financial account information, characterized in that to send a financial processing confirmation request message for the account number through the call processing means to the user's communication terminal. The method of claim 7, wherein The anti-theft device is the anti-theft system of financial account information, characterized in that to provide a short message service to the financial processing confirmation request message for the account number through the call processing means. The method of claim 7, wherein The database of the anti-theft device is stored at least one or more contact information and the corresponding priority information, The control means controls to send a financial processing confirmation request message for the account number to the connected contact by sequentially accessing the user contact through the call processing means based on the priority information stored in the database. Theft prevention system of financial account information.