KR20060002521A - Mobile banking method using fingerprint authentication and system thereof - Google Patents

Abstract

The present invention discloses a technology that enables a user to securely use mobile banking by reinforcing authentication for mobile banking using a mobile terminal having a fingerprint authentication function.

To this end, the present invention, the fingerprint data for the fingerprint authentication is stored in the mobile terminal, the personal identification information that encrypts the user's fingerprint data is stored in the financial server, the user authentication using the fingerprint in the mobile terminal when the user's mobile banking request After performing the fingerprint authentication, the financial server re-executes the user authentication by using the personal identification information transmitted from the mobile terminal upon successful fingerprint authentication, and provides the mobile banking service requested by the user upon successful authentication. As a result, when the mobile banking request is requested, the authentication can be performed twice only by the user's fingerprint input, so that the mobile banking service can be used safely and conveniently from the user's point of view.

Description

Mobile banking method using fingerprint authentication and system

1 is an overall configuration diagram of a mobile banking system using fingerprint authentication according to an embodiment of the present invention.

2 is a detailed configuration diagram of the portable terminal 10 of FIG.

3 is a detailed configuration diagram of the fingerprint registration system 30 of FIG. 1.

4 to 5 are flowcharts for explaining a mobile banking method using a fingerprint authentication according to an embodiment of the present invention.

The present invention relates to a mobile banking method using a fingerprint authentication method, and more particularly, a technology for enabling a user to safely use mobile banking by reinforcing authentication for mobile banking using a mobile terminal having a fingerprint authentication function. It is about.

As the penetration rate of mobile terminals increases, a payment function is added to a mobile terminal or a mobile banking function is added, so that financial transaction services such as account inquiry and account transfer can be conveniently performed using a mobile terminal that a user always possesses. It is made available. Here, the mobile terminal includes all of cellular phones, PCS phones, PDAs, and the like.

In order to use a mobile terminal as a payment method or mobile banking, a chip for performing a payment function or a mobile banking function must be installed in the mobile terminal. In the case of mobile banking, a mobile terminal with a mobile banking chip is registered in a financial institution. If so, a financial institution stores a personal identification number (PIN number) and a user's account number in the mobile banking chip. In general, the mobile banking chip is a smart card (Subscriber Indetification Module) type of smart card (smart card) is used, the personal identification number is composed of six digits, can be changed by the owner.

After completing the above procedure, the user inputs a personal identification number to use the mobile banking to access the mobile banking chip, the mobile banking chip is a personal identification number registered in advance from the user If it does not match, it is requested to re-enter it. At this time, if the number of incorrect input times exceeds a certain number of times, for example, five times, the automatic locking function is operated to limit the user's use of mobile banking.

The personal identification number is authenticated by the mobile banking chip provided in the mobile terminal, and when the user requests a financial transaction such as deposit inquiry and transfer, additional authentication using the bank account password and the security card password is performed at the financial institution server. After performing the authentication, the user performs the financial transaction requested by the user.

However, in the case of mobile banking that relies on the security of personal identification number, account password, and security card number by using the mobile banking chip, it may have all of the weaknesses of the existing password. The personal identification number is composed of 6 digits. Like general passwords, the amount of information that a person can remember is limited, the risk of forgetting, and the intruder's guessing is possible. It is difficult to guarantee stability. In order to solve this problem, financial institutions are additionally distributing security cards, but users are inconvenienced by complicated authentication procedures.

In an attempt to solve such a problem, there is a "mobile banking method using a mobile terminal having a fingerprint recognition function" disclosed in Korean Patent Laid-Open Publication No. 2001-0110084. According to such a method, fingerprint authentication of a user of a mobile terminal is performed. If registered on the server and compares the fingerprint data input during mobile banking with the registered fingerprint data, the user can use the mobile banking normally, so that the third party, not the user, personal identification number and bank account password, and security Once you have your card password, you can block it from attempting a financial transaction.

However, according to the above-described method, since the fingerprint data of the user is managed by the fingerprint authentication server, this also cannot be ruled out as a malicious one, and thus the user may be concerned about the leakage of personal information. In addition, financial institutions also have problems such as developing a server system for providing fingerprint authentication-based mobile banking and establishing a fingerprint database that stores / authenticates fingerprint data of all users.

Accordingly, the present invention has been made to solve the above-mentioned problems, the present invention is to enhance the authentication for mobile banking using a mobile terminal with a fingerprint authentication function to enable the user to use mobile banking securely It is done.

Mobile banking method using the fingerprint authentication of the present invention for achieving the above object, the first step of registering the user with the mobile banking server receives the fingerprint information from the user of the mobile terminal having a fingerprint authentication function in the fingerprint registration system; A second process of performing, by the mobile terminal, a first authentication by receiving fingerprint information from the user when a financial transaction service is requested from the user; A third step of, if the first authentication succeeds, the mobile terminal requesting the mobile banking server for a financial transaction service requested from the user; And a fourth process of performing, by the mobile banking server, the second authentication for the user, performing the financial transaction service if the second authentication is successful, and then transmitting the execution result to the mobile terminal. It features.

Mobile banking system using a fingerprint authentication of the present invention for achieving the above object, the mobile terminal having a fingerprint authentication function, performing a first authentication for the user when the user requests a financial transaction service; When the financial transaction service is requested from the portable terminal through the wireless communication network, after performing the second authentication for the user, if the second authentication is successful, the financial transaction service is performed to transmit the result to the portable terminal. Providing a financial server; A fingerprint registration system storing information for performing the first authentication by the portable terminal in a security chip of the portable terminal and providing the financial server with information for performing the second authentication; And a user management DB storing information for performing the second authentication.

Hereinafter, with reference to the accompanying drawings will be described an embodiment of the present invention in more detail.

1 is a schematic diagram of a mobile banking system using fingerprint authentication according to an embodiment of the present invention.

As shown in Figure 1, the mobile banking system using a fingerprint authentication according to an embodiment of the present invention, a mobile terminal with a fingerprint authentication function 10, fingerprint registration system 30, mobile banking server 40, authentication A server 50, a user management DB 60, and a base station controller 80 are provided.

The function of each structure is demonstrated concretely.

The portable terminal 10 performs fingerprint authentication based on fingerprint data (reference fingerprint data) stored in the security chip and performs a function of requesting a financial transaction service to the mobile banking server 40 upon successful fingerprint authentication.

The fingerprint registration system 30 performs a function of inserting and installing a security chip for mobile banking into the portable terminal 10 when a user requests the portable terminal 10. In addition, the fingerprint registration system 30 transmits the encrypted personal identification information and the account information, etc. extracted from the fingerprint data of the user to the mobile banking server 40 at the time of user registration of the specific mobile terminal 10. The security chip stores the user's fingerprint data and user information, and the user information includes account information opened to the user. Such a fingerprint registration system 30 corresponds to a financial institution such as a branch office or branch office.

The mobile banking server 40 stores the encrypted personal identification information and account information transmitted from the fingerprint registration system 30 in the user management DB 60, and works in conjunction with the authentication server 50 to register the fingerprint registration system 30. Performs user authentication for the financial transaction service requested from

The authentication server 50 inquires the personal identification information of the user to be authenticated in the user management DB 60 at the request of the mobile banking server 40, and performs authentication for the user based on the personal identification information. , And transmits the authentication result to the mobile banking server 40.

The user management DB 60 stores a user's account information, encrypted personal identification information, basic information, and the like.

When the base station controller 80 requests a financial transaction from the mobile terminal 10, the base station controller 80 transmits the corresponding financial transaction call to the mobile banking server 40 through the communication network 90, and processes the financial transaction transmitted from the mobile banking server 40. It performs the function of delivering the result to the mobile terminal (10).

In the embodiment of the present invention, the mobile banking server 40 and the authentication server 50 is configured separately, but this is for load balancing of the mobile banking server 40, in some cases, the financial institution server is a mobile banking server ( 40 and the function of the authentication server 50 can be covered.

As described above, the portable terminal 10 of the present invention can perform a fingerprint authentication function, the detailed configuration of the portable terminal 10 is as shown in FIG.

The mobile terminal 10 of the present invention includes a key input unit 11 composed of a plurality of keys for allowing a user to input a financial transaction through a menu selection, a fingerprint input unit 12 configured to receive a fingerprint from the user with a fingerprint input window, A fingerprint processing unit 13 for extracting a feature point from a fingerprint input through the fingerprint input unit 12 to generate fingerprint data, an encryption information generation module 15 for generating a unique value (encrypted personal identification information) from the fingerprint data; Fingerprint authentication module unit 16 for performing fingerprint authentication using the security chip 18 inserted by the fingerprint registration system 30, the fingerprint data output from the fingerprint processing unit 13 and the fingerprint data stored in the security chip 18. ), The financial transaction officer wirelessly transmits the personal identification information and the financial transaction-related request data generated by the encryption information generation module unit 15 to the base station 70 and is transmitted from the base station 70. Receiving result data, and a communication I / F unit 19 that performs the function of transmitting it to the control unit 20.

In addition, the control unit 20 of the portable terminal 10 is the fingerprint processing unit 13, the encryption information generation module 15, the fingerprint to perform fingerprint authentication for financial transactions based on the key signal input from the key input unit 11 It performs the function of interlocking the authentication module unit and the communication I / F unit 19.

In addition, the portable terminal 10 may include a screen output unit 21 and a portable terminal for outputting a command input state through the key input unit 11 and a character for checking a financial transaction processing state through the mobile banking server 40. Each portion of 10) includes a memory unit 14 that provides a workspace for performing fingerprint information processing, authentication, and security functions.

In addition, the detailed configuration of the fingerprint registration system 30 of the present invention is as shown in FIG.

As shown in FIG. 3, the fingerprint registration system 30 extracts feature points of the fingerprint input unit 31 and the fingerprint information (input 1, input 2) that receive a plurality of fingerprint information (input 1, input 2) from the user. After generating the fingerprint data (T1, T2) by synthesizing the fingerprint data (T1, T2) to generate the reference fingerprint data (T3), the fingerprint processing unit 32, the reference fingerprint data (T3) to encrypt the personal identification information Personal identification information generation unit 35 for generating a fingerprint quality identification unit 34 for determining the quality of the fingerprint data (T1, T2), the reference fingerprint data (T3), fingerprint in the security chip 18 of the mobile terminal Data T1, a security chip management unit 36 for storing user information, and a network interworking unit 37 for transmitting personal identification information and user information to the mobile banking server 40.

The fingerprint registration system 30 controls the overall operation of each unit so that the personal identification information and the user information corresponding to the fingerprint information of the user are transmitted to the mobile banking server 40, and the user's portable terminal 10 The control unit 38 is further provided to store information for fingerprint authentication.

Hereinafter, a fingerprint registration process in a mobile banking method using fingerprint authentication according to an embodiment of the present invention will be described in detail with reference to the block diagram shown in FIG. 3 and the flowchart shown in FIG. 4.

When the user of the mobile terminal 10 applies for mobile banking with the fingerprint registration system 30 (S2), the fingerprint registration system 30 performs a user verification through a procedure such as real name verification for the user (S4). Open a new account for mobile banking (S6). The fingerprint registration system 30 corresponds to an office such as a financial institution, for example, a bank, and described as an example of opening a new account in S6. However, if the user has an account at the financial institution, the account is used as a mobile banking account. You can also register.

Subsequently, the fingerprint registration system 30 requests the fingerprint registration from the user (S8), and the user registers the fingerprint through the fingerprint input window 31 provided in the fingerprint registration system 30 (S10).

The fingerprint registration system 30 receives N, for example, two fingerprint information through the fingerprint input window 31, and extracts a feature point for the fingerprint information from the fingerprint processor 32 to print the fingerprint for the fingerprint information. Generate data T1 and T2 (see FIG. 4).

Subsequently, the controller 38 of the fingerprint registration system 30 checks the quality of the fingerprint information based on the number of feature points of the fingerprint data T1 and T2 through the fingerprint quality discriminator 34 (S12). If it is determined that the information is bad (No in S14), the user is notified of the fingerprint input error (S16).

However, if it is determined that the fingerprint information is satisfactory as a result of S12 (Yes in S14), the controller 38 synthesizes the fingerprint data T1 and T2 through the personal identification information generation unit 35 to generate the reference fingerprint data T3. ) Subsequently, the fingerprint registration system 30 extracts a value generated solely during the matching process of the reference fingerprint data T3 and the specific fingerprint data T1 or T2. Subsequently, the fingerprint registration system 30 generates encrypted personal identification information by applying a keying key algorithm and a hash function to the extracted information (S18). In the present invention, by applying a hash function, which is a one-way function, to the encrypted information, the encrypted information can be converted into an encrypted bit string of a specific bit, thereby securing the fingerprint data of the individual.

Subsequently, the control unit 38 of the fingerprint registration system 30 transmits personal identification information, user information, etc. to the mobile banking server 40 through the network interworking unit 37 (S20), and the mobile banking server 40 The user registration is completed by storing the personal identification information, the user information, and the account information in the user management DB 60 (S22).

As the user registration is completed, when the registration result is notified from the mobile banking server 40 (S24), the control unit 38 of the fingerprint registration system 30 through the security chip management unit 36, a plurality of fingerprint information, user information The back is stored in the security chip 18 and installed in the mobile terminal 10 (S26, 28). The fingerprint data stored in the security chip 18 is used to synthesize fingerprint data (eg, T1) for fingerprint information input from a user and fingerprint data (T1, T2, ...) for a plurality of fingerprint information input from a user. The reference fingerprint data T3 generated by the data is stored.

After the user registration is completed through the procedure as shown in FIG. 4, the user of the mobile terminal 10 can use the financial transaction service provided by the mobile banking server 40.

Next, the financial transaction procedure in the mobile banking method using fingerprint authentication according to an embodiment of the present invention will be described in detail with reference to the flowchart shown in FIG. 5.

When the user of the mobile terminal 10 requests a financial transaction through the key input unit 11 (S30), the control unit 20 of the mobile terminal 10 is provided to the user through the screen output unit 21 of the security chip access information Request an input (S32).

By the request, when the user inputs a PIN number corresponding to the security chip access information through the key input unit 11 (S34), the control unit 20 compares the PIN number and the PIN number stored in the security chip 18. Authentication is performed by (S36).

If the PIN numbers do not match, that is, authentication fails (No in S36), the control unit 20 proceeds to S32 and re-requests input of security chip access information to the screen output unit 21.

On the other hand, if the PIN numbers match each other, that is, if authentication is successful (Yes in S36), a fingerprint input for a financial transaction of the financial transaction information is requested through the screen output unit 21 (S38).

In response to the request, when the user inputs fingerprint information through the fingerprint input unit 12 (S40), the fingerprint processing unit 13 extracts a feature point from the fingerprint information to generate fingerprint data TX, and then the fingerprint. The user fingerprint is authenticated based on the degree of correspondence between the data TX and the reference fingerprint data T3 stored in the security chip 18 (S42).

As a result of performing the authentication, if the match degree between the fingerprint data TX and the reference fingerprint data T3 is less than a threshold value, it is determined that the authentication has failed (No in S44) and notifies the fingerprint authentication failure through the screen output unit 21. At the same time, the process proceeds to S38 and the fingerprint input is requested again. However, if the match between the fingerprint data TX and the reference fingerprint data T3 is greater than or equal to a threshold as a result of performing the authentication, it is determined that the authentication is successful (Yes in S44) and requests input of a financial transaction to be used (S46). ). Financial transactions provided by the mobile banking server 40 are balance inquiry, account transfer and the like.

In response to the request, when the user inputs the financial transaction information by selecting a specific financial transaction through the key input unit 11 (S48), the control unit 20 through the encryption information generation module unit 15, the security chip 18 Using the fingerprint data (T1) and the reference fingerprint data (T3) stored in the) to generate encrypted personal identification information for the user's fingerprint information.

Subsequently, the control unit 20 transmits the encrypted personal identification information, financial transaction information, and user information to the mobile banking server 40 through the communication I / F unit 19. Here, the financial transaction information is information for identifying the type of financial transaction requested by the user, and the user information is account number information of the user.

The mobile banking server 40 transmits the personal identification information and the user information to the authentication server 50, requests the authentication server 50 to perform authentication for the user (S54), and the authentication server 50 the user. After querying the user information to the management DB (60) to extract the personal identification information for the user information, the personal identification information extracted from the user management DB (60) and the personal identification received from the mobile banking server (40) By comparing the information, the user is authenticated (S56).

Subsequently, the authentication server 50 notifies the authentication result to the mobile banking server 40 (S58). If the authentication result is "Failed" (No in S60), the authentication terminal 50 notifies an error to the mobile terminal 10 (S62). If the authentication result is "success" (Yes at 60), the financial transaction service requested from the mobile terminal 10 is performed. If the financial transaction service requested from the mobile terminal 10 is "account inquiry", information on the account history and balance of the account included in the user information is transmitted to the mobile terminal 10, and the financial transaction service is "account". "Transfer" transfers a certain amount of the balance of the account included in the user information to a specific account and transfers the transfer performance result information to the mobile terminal (10) (S66).

In the embodiment of the present invention described with reference to Figure 5, after receiving the PIN number as the security chip access information through S32 to S36, after authentication using the PIN number is successfully received fingerprint information from the user to perform fingerprint authentication However, according to the specification of the security chip, it is possible to authenticate access to the security chip using a fingerprint without authenticating access to the security chip as a PIN number. In this case, since the fingerprint is input as the security chip access information, S36 to S40 may not be performed, and fingerprint authentication may be performed using the received fingerprint information.

According to the present invention, the fingerprint information of a mobile terminal user who is a mobile banking applicant is stored in the security chip of the portable terminal, and the personal identification information that encrypts the unique value extracted from the fingerprint information is managed on the mobile banking server side and using the same. By performing fingerprint authentication, the user's fingerprint information can be protected securely. In particular, the present invention after generating the encryption information for the fingerprint information, by applying a hash function to the encryption information to prevent malicious decryption of the encryption information, to thoroughly secure the user's fingerprint information.

In addition, the present invention after performing the fingerprint authentication on the mobile terminal side, the mobile banking server side to perform the authentication again with the personal identification information for the user, to provide a financial transaction service according to the mobile banking service only if all the authentication is successful Therefore, it is possible to provide a secure mobile banking service.

In addition, the present invention can use the mobile banking service safely through a secure authentication process without a separate information input procedure in addition to the fingerprint input, compared to the conventional mobile banking that required a plurality of information input process for user authentication.

According to the present invention as described above, there is an effect that the user can use a more convenient and secure mobile banking service using the fingerprint authentication portable terminal.

On the other hand, the present invention is not limited to the above-described embodiment, but can be modified and modified within the scope not departing from the gist of the present invention, such modifications and changes should be regarded as belonging to the following claims. will be.

Claims (13)

A first step of receiving fingerprint information from a user of a mobile terminal having a fingerprint authentication function in a fingerprint registration system and registering the user with a mobile banking server; A second process of performing, by the mobile terminal, a first authentication by receiving fingerprint information from the user when a financial transaction service is requested from the user; A third step of, if the first authentication succeeds, the mobile terminal requesting the mobile banking server for a financial transaction service requested from the user; And And a fourth process of performing, by the mobile banking server, the second authentication for the user, performing the financial transaction service if the second authentication is successful, and then transmitting the execution result to the mobile terminal. Mobile banking method using fingerprint authentication. The method of claim 1, wherein the first process is A first step of extracting feature points from a plurality of fingerprint information input from the user and generating fingerprint data; A second step of synthesizing the fingerprint data to generate reference fingerprint data; Generating a personal identification information by encrypting a unique value generated in the matching process between the reference fingerprint data and the input fingerprint data; A fourth step of transmitting the personal identification information and the user information to the mobile banking server; And And a fifth step of storing the reference fingerprint data, the specific fingerprint data, and the user information in a security chip of the portable terminal. The method of claim 2, wherein in the third step A sixth step of synthesizing the reference fingerprint data with specific fingerprint data of the fingerprint data to generate encryption information; And a seventh step of generating the personal identification information of a specific bit string by applying the encryption information to a hash function. The method of claim 2, And a eighth step of the mobile banking server storing the personal identification information and the user information in a user management DB. The method of claim 2, wherein the second process A ninth step of extracting feature points from fingerprint information input from the user to generate fingerprint data; And a tenth step of performing the first authentication by comparing the fingerprint data with the reference fingerprint data stored in the security chip. The method of claim 5, wherein the third process is An eleventh step of generating encrypted personal identification information using the reference fingerprint data and the specific fingerprint data stored in the security chip if the first authentication is successful; And And a twelfth step of transmitting the financial information, the personal identification information, and the user information corresponding to the financial transaction service to the mobile banking server. The method of claim 3 or 6, wherein the fourth process And the second mobile banking server performs the second authentication by comparing the personal identification information transmitted from the portable terminal with the personal identification information stored in the user management DB. A mobile terminal having a fingerprint authentication function to perform first authentication for the user when the user requests a financial transaction service; When the financial transaction service is requested from the portable terminal through the wireless communication network, after performing the second authentication for the user, and performing the financial transaction service if the second authentication is successful, the execution result is transmitted to the portable terminal. Providing a financial server; A fingerprint registration system storing information for performing the first authentication by the portable terminal in a security chip of the portable terminal and providing the financial server with information for performing the second authentication; And Mobile banking system using a fingerprint authentication, characterized in that it comprises a user management DB for storing the information for performing the second authentication. 9. The system of claim 8, wherein the fingerprint registration system is Fingerprint processing means for receiving a plurality of fingerprint information from a user, extracting feature points of the fingerprint information to generate fingerprint data, and synthesizing the fingerprint data to generate reference fingerprint data; Encryption means for encrypting the reference fingerprint data to generate personal identification information; Security chip management means for storing the reference fingerprint data, the fingerprint data, and the user information, which are information for performing the first authentication, on a security chip of the portable terminal; And And a network interworking unit for transmitting the personal identification information and the user information to the financial server, the information for performing the second authentication. The fingerprint data of claim 9, wherein the fingerprint data is stored in the security chip. Mobile banking system using a fingerprint authentication, characterized in that the specific fingerprint data of the plurality of fingerprint data received from the user. The method of claim 8, wherein the mobile terminal Fingerprint processing means for receiving fingerprint information from a user and extracting feature points of the fingerprint information to generate fingerprint data; A security chip storing reference fingerprint data, fingerprint data, and user information provided from the fingerprint registration system; Fingerprint authentication means for performing the first authentication by comparing the fingerprint data output from the fingerprint processing means with reference fingerprint data stored in the security chip when the user requests a financial transaction service; Encrypting means for generating encrypted personal identification information using reference fingerprint data and fingerprint data stored in the security chip if the fingerprint authentication is successful; And And a control unit which receives the financial transaction information from the user, transmits the financial transaction information, the personal identification information, and the user information to the financial server, and controls the entire apparatus to request a predetermined financial transaction service from the mobile banking server. Mobile banking system using a fingerprint authentication, characterized in that one. 12. The apparatus according to any one of claims 9 to 11, wherein said encryption means Mobile banking system using fingerprint authentication, characterized in that for generating unique personal identification information by applying a symmetric key algorithm and a hash function to the unique value generated in the matching process of the reference fingerprint data and the specific fingerprint data. The method of claim 8, wherein the financial server The personal identification information and the user information provided from the fingerprint registration system are stored in the user management DB, and if the authentication of the user who requested the financial transaction service is successful, the financial transaction service is performed, and then the user's portable terminal. A mobile banking server which transmits a processing result of the financial transaction service to the mobile terminal; When the authentication for the user is requested from the mobile banking server, after performing the authentication for the user using the user management DB, characterized in that it comprises an authentication server for transmitting the authentication result to the mobile banking server. Mobile banking system using a mobile terminal with a fingerprint authentication function.

Images