KR20060102459A - System and method for authentication of user in internet banking, server and recording medium - Google Patents

Abstract

The present invention provides a customer identifier information receiving step of receiving predetermined customer identifier information from the customer first terminal in a predetermined information receiving means (1) when accessing the Internet banking of the first client terminal; A customer authentication information receiving step of receiving, by the predetermined information receiving means, the predetermined customer authentication information from the second customer terminal; And a customer authentication step of authenticating a customer accessing the Internet banking through the first terminal of the customer based on the received customer authentication information. It's about internet banking servers and recording media.

In addition, the present invention provides a customer authentication method for authenticating a customer when accessing an Internet banking of a first customer terminal, comprising: receiving customer authentication information receiving predetermined customer authentication information from a second customer terminal; And a customer authentication step of authenticating a customer accessing the Internet banking through the first terminal of the customer based on the received customer authentication information. It's about internet banking servers and recording media.

Accordingly, when accessing the Internet banking through the predetermined customer first terminal, the customer authentication procedure is performed through the predetermined customer second terminal that inputs, generates, and extracts predetermined customer authentication information to the banking server. There is an advantage of providing better security than performing a customer authentication procedure through the connected customer first terminal.

Internet, banking, authentication

Description

System and Method for Authentication of User in Internet Banking, Server and Recording Medium}

1 is a diagram schematically illustrating an Internet banking user authentication system configured as a single server according to an embodiment of the present invention.

2 is a diagram illustrating a configuration of an Internet banking user authentication system configured of a plurality of server sides according to an exemplary embodiment of the present invention.

3 is a diagram illustrating a configuration of an Internet banking user authentication system configured of a plurality of server sides according to another exemplary embodiment of the present invention.

4 is a diagram illustrating a configuration of an Internet banking user authentication system configured with a plurality of servers according to another exemplary embodiment of the present invention.

5 is a diagram illustrating a customer first terminal and / or a customer second terminal type according to the present invention.

6 is a view showing a preferred functional configuration of the Internet banking user authentication system configured as a single server side according to an embodiment of the present invention.

7 is a view showing a preferred functional configuration of the Internet banking user authentication system composed of a plurality of server in accordance with a preferred embodiment of the present invention.

8 is a view showing a preferred functional configuration of the Internet banking using customer authentication system composed of a plurality of server in accordance with another preferred embodiment of the present invention.

9 is a view showing a preferred functional configuration of the Internet banking user authentication system composed of a plurality of server side according to another preferred embodiment of the present invention.

10 is a view showing a preferred functional configuration of a customer second terminal according to an embodiment of the present invention.

11 is a diagram illustrating a dual customer authentication method according to an embodiment of the present invention.

12 is a diagram illustrating a dual customer authentication method according to another embodiment of the present invention.

13 and 14 illustrate a method of transmitting customer authentication information based on an IC chip (IC card) according to another exemplary embodiment of the present invention.

15 is a view showing a method of transmitting customer authentication information based on an IC chip (IC card) according to another embodiment of the present invention.

<Description of main parts of drawing>

105: customer first terminal 150: customer second terminal

210: information receiving means (1) 230: information receiving means (2)

250: customer authentication means 270: Internet banking means

290: Internet banking transaction approval means 300: Authentication result transmission means

400: information confirmation means 410: information transmission means

The present invention, upon accessing the Internet banking of the first customer terminal, receives predetermined customer identifier information from the first customer terminal at the predetermined information receiving means 1, and the second customer terminal at the predetermined information receiving means 2; Receiving predetermined customer authentication information from the customer, based on the received customer authentication information and the customer authentication method and system for using the Internet banking, characterized in that for processing the customer accessing the Internet banking through the customer first terminal and this It is to provide an internet banking server and a recording medium.

Alternatively, in a customer authentication method for authenticating a customer when the customer first terminal accesses the Internet banking, the client first terminal receives predetermined customer authentication information from the second client terminal and based on the received customer authentication information. The present invention provides an internet banking user authentication method and system for authenticating a customer connected to the internet banking through a terminal, and an internet banking server and a recording medium therefor.

Internet banking services are provided due to the development of information and communication technology, and conventional internet banking servers allow access through a public certificate provided in the customer terminal when a predetermined customer (client) accesses through a predetermined customer terminal. Although the service is provided, the illegal acquisition of an authorized certificate password through hacking and phishing using a predetermined key stroke means may not be prevented.

The present invention is derived to solve the above problems, the present invention is derived to solve the above problems, the predetermined information receiving means when connecting to the Internet banking server through a predetermined first customer terminal (1) receives predetermined customer identifier information from the customer first terminal, and receives predetermined customer authentication information from the second customer terminal at the predetermined information receiving means (2), based on the received customer authentication information. The purpose of the present invention is to provide a method and system for authenticating a customer using internet banking, and an internet banking server and a recording medium for the same.

Another object of the present invention is a customer authentication method for authenticating a customer at the time of Internet banking access of a customer first terminal, receiving predetermined customer authentication information from a second customer terminal, based on the received customer authentication information. The purpose of the present invention is to provide a method and system for authenticating a customer using internet banking, and an internet banking server and a recording medium.

The present invention provides a customer identifier information receiving step of receiving predetermined customer identifier information from the customer first terminal in a predetermined information receiving means (1) when an Internet banking connection of a customer first terminal is performed; A customer authentication information receiving step of receiving, by the predetermined information receiving means, the predetermined customer authentication information from the second customer terminal; And a customer authentication step of authenticating a customer accessing the Internet banking through the customer first terminal based on the received customer authentication information.

In addition, the present invention provides a customer authentication method for authenticating a customer when accessing an Internet banking of a first customer terminal, comprising: receiving customer authentication information receiving predetermined customer authentication information from a second customer terminal; And a customer authentication step of authenticating a customer accessing the Internet banking through the customer first terminal based on the received customer authentication information.

According to a preferred embodiment of the present invention, the Internet banking user authentication method further comprises a customer authentication result transmission step of transmitting the authentication result through the customer authentication step to the Internet banking server connected to the first customer terminal. Preferably, and / or checking an internet banking server (server connected to the first client terminal) corresponding to the authentication result through the customer authentication information and / or the customer authentication step; And transmitting the authentication result through the customer authentication step to the confirmed internet banking server. And / or based on the authentication result through the customer authentication step, a predetermined internet banking transaction. It is preferable that the approval means further comprises an internet banking transaction approval step of approving the internet banking transaction through the first customer terminal.

According to a preferred embodiment of the present invention, in the receiving of the customer authentication information, when receiving the customer authentication information from a communication server or a server or relay server connected to a communication company server, the received customer authentication information to the customer first terminal Preferably, the method further comprises the step of transmitting to the connected Internet banking server, and when receiving the customer authentication information from a communication server or a server or relay server connected to the communication server, the Internet banking corresponding to the customer authentication information. Checking a server (server connected to the first client terminal); And transmitting the received customer authentication information to the confirmed internet banking server.

The customer authentication information receiving step or the customer authentication step may further include decrypting the encrypted customer authentication information when the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process. It is preferable.

The customer authentication step may be performed by comparing customer authentication information previously stored in a predetermined storage medium with customer authentication information transmitted by the second client terminal to authenticate the customer, or by identifying the predetermined client provided from the first client terminal. It is preferable to authenticate the customer by comparing the information with the customer authentication information transmitted by the second customer terminal.

According to a preferred embodiment of the present invention, the customer identifier information includes ID (ID) information, password information, customer personal information, customer biometric information, customer communication means information, at least one or more certificate information Preferably, the customer authentication information includes ID (ID) information, password information, customer personal information, customer biometric information, customer communication means information, authorized certificate information, authorized certificate password information, payment means Information, payment means password information, customer account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, and information contained in the IC chip provided in the second terminal of the customer (or Data), authorized certificate information included in the IC chip provided in the second customer terminal, IC chip unique information provided in the second customer terminal, and the customer It comprises a predetermined authentication key data included in the second terminal for at least one are preferred. In addition, the customer authentication information may further include being encrypted and transmitted according to a predetermined encryption processing process.

According to a preferred embodiment of the present invention, the customer first terminal comprises a wired terminal including a computer, a terminal (or device) including at least one information processor (or KIOSK), an ATM, a cash dispenser, a payment terminal, and the like. Home appliances equipped with communication functions, such as televisions, refrigerators, microwave ovens, audio devices, exercise equipments equipped with communication functions, wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, wired telephones, and RFID terminals. It is preferable to include one or more, wherein the customer second terminal is a wireless terminal, such as a mobile phone, PDA, portable Internet phone, telematics except the terminal used as the first customer terminal, a wired telephone and a wired terminal including a computer And a terminal (or device) including at least one information processor (or kiosk), an ATM, a cash machine, a payment terminal, a television, a refrigerator It is preferably formed by microwave, and the audio communications function is provided a home appliance, a communication function and an exercise device having, for at least one RFID terminal.

According to the present invention, a program for executing the Internet banking user authentication method is recorded in a predetermined recording medium provided on the system for the Internet banking user authentication method.

The Internet banking use customer authentication system for the Internet banking use customer authentication method includes information receiving means (1) for receiving predetermined customer identifier information from the first customer terminal when accessing the Internet banking of the first customer terminal; Information receiving means (2) for receiving predetermined customer authentication information from a second customer terminal; And customer authentication means for authenticating a customer accessing the Internet banking through the customer first terminal on the basis of the customer authentication information received by the information receiving means (2).

In addition, information receiving means for receiving a predetermined customer authentication information from the customer second terminal, when the Internet banking connection of the customer first terminal; And customer authentication means for authenticating a customer accessing the Internet banking through the customer first terminal based on the customer authentication information received by the information receiving means.

According to a preferred embodiment of the present invention, the customer authentication means compares the predetermined customer authentication information associated with the customer identifier information sent by the customer first terminal and the customer authentication information transmitted by the second customer terminal. It is preferable to authenticate the customer accessing the Internet banking through the first terminal, and / or compare the customer authentication information previously stored in a predetermined storage medium with the customer authentication information transmitted by the second customer terminal. It is preferable to authenticate the customer who accesses the Internet banking through the customer first terminal.

According to a preferred embodiment of the present invention, it is preferable that the Internet banking use customer authentication system further comprises an authentication result transmitting means for transmitting the authentication result of the customer authentication means to the information receiving means, and / or the customer authentication. On the basis of the authentication result through the means, it is preferable to further comprise a predetermined Internet banking transaction approval means for approving the Internet banking transaction through the first customer terminal.

According to a preferred embodiment of the present invention, the information receiving means (2) is provided in a server or a relay server associated with a communication company server or a communication company server, to identify the Internet banking server corresponding to the customer authentication information Preferably, the apparatus further comprises an information checking means and an information transmitting means for transmitting the customer authentication information to the identified Internet banking server, all of which are the same as or separately from the information receiving means 1. It is possible.

According to a preferred embodiment of the present invention, the customer authentication means is provided in a communication server or a server linked to the communication server, or provided in a relay server on a network, or in an Internet banking server connected to the first terminal of the customer. Preferably, and / or when the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process, it is preferable to decrypt the encrypted customer authentication information.

According to the embodiment of the present invention, each of the means is preferably provided in a single server or a plurality of servers (or terminals).

According to the present invention, a program for executing the means function is recorded in a predetermined recording medium provided in the Internet banking user authentication system.

According to the present invention, an Internet banking user authentication system includes: a first client terminal which accesses an internet banking server and provides predetermined customer identifier information; A second client terminal connected to the Internet banking server and transmitting predetermined customer authentication information; And an internet banking server that authenticates the customer accessing the internet banking through the customer first terminal based on the customer authentication information transmitted by the second client terminal.

In addition, the Internet banking user authentication system according to the present invention includes a first client terminal for accessing the Internet banking server; A second client terminal connected to the Internet banking server and transmitting predetermined customer authentication information; And an internet banking server configured to authenticate a customer accessing the internet banking through the customer first terminal based on the customer authentication information transmitted by the second customer terminal.

According to an embodiment of the present invention, the second client terminal may further include encrypting and transmitting the customer authentication information according to a predetermined encryption process.

According to a preferred embodiment of the present invention, the internet banking server compares the predetermined customer authentication information associated with the customer identifier information sent by the first client terminal and the customer authentication information transmitted by the second client terminal. It is preferable to authenticate the customer who accesses the Internet banking through the first terminal.

In addition, a predetermined server provided in the Internet banking user authentication system compares customer authentication information previously stored in a predetermined storage medium with customer authentication information transmitted by the second client terminal through the first client terminal. It is preferable to authenticate the customer connected to the Internet banking, and / or decrypt the encrypted customer authentication information when the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process. Do.

According to the embodiment of the present invention, the Internet banking server may be composed of a single server or a combination of a plurality of servers (or terminals).

According to the present invention, an Internet banking server provided in an Internet banking user authentication system includes: an information receiving unit (1) for receiving predetermined customer identifier information from a first client terminal connected to the Internet banking; When a second client of the customer transmits customer authentication information and / or authenticates the customer using the customer authentication information transmitted by the second client of the client from a predetermined server, and receives the data when the customer authentication result data is transmitted. An information receiving unit 2; And a customer authentication unit configured to authenticate a customer accessing the Internet banking through the customer first terminal based on the customer authentication information and / or customer authentication result data received by the information receiver 2. It is done.

In addition, the Internet banking server according to the present invention, when the customer's first terminal accesses the Internet banking, when the customer's second terminal transmits the customer authentication information, and / or the customer authentication information transmitted by the customer's second terminal from a predetermined server An information receiving unit which authenticates the customer using the service and receives the customer authentication result data; And a customer authentication unit configured to authenticate a customer accessing the Internet banking through the customer first terminal based on the customer authentication information and / or the customer authentication result data received by the information receiving unit.

According to a preferred embodiment of the present invention, the customer authentication unit compares the predetermined customer authentication information associated with the customer identifier information transmitted by the customer first terminal and the customer authentication information transmitted by the second customer terminal to compare the customer authentication information. It is preferable to authenticate the customer accessing the Internet banking through the first terminal, and / or compare the customer authentication information previously stored in a predetermined storage medium with the customer authentication information transmitted by the second customer terminal. It is preferable to authenticate the customer who accesses the Internet banking through the first terminal.

According to a preferred embodiment of the present invention, it is preferable that the internet banking server further comprises an internet banking transaction approval unit for approving the internet banking transaction through the first customer terminal based on the authentication result through the customer authentication unit. .

In addition, when the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process, the Internet banking server preferably decrypts the encrypted customer authentication information.

According to the present invention, a program for executing the server function configuration is recorded in a recording medium provided in the Internet banking server.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the preferred embodiment of the present invention to be carried out below will be described as a predetermined means provided on the terminal side or the server side in order to efficiently describe the technical components constituting the present invention, the intention and / or method of those skilled in the art As such, the means can be implemented in a variety of ways. For example, the means provided on the terminal side may consist of a program recorded on a recording medium provided in the terminal according to the functional configuration of the terminal and / or the unique characteristics (or roles) of the terminal, and / Alternatively, the device may be configured as a device mounted on the terminal (for example, a custom semiconductor or IC chip mounted on a PCB) or a device detachable from the terminal (for example, a device detachable from a slot provided in the terminal). In addition, the means provided on the server side may be a program (eg, unique to each means) recorded on a recording medium provided in the server according to the functional configuration of the server and / or the unique characteristics (or roles) of the server. A program comprising at least one or more functional units for performing a function (or role), and / or the at least one or more means are configured as one independent server so that a plurality of servers It is possible to configure to interwork through the interface.

In addition, a plurality of terms that perform a similar function among the terms defined in the following embodiments will be distinguished by specifying "(number)" after the term, but those skilled in the art to which the present invention belongs, The same terminology is merely for easily explaining the technical construction of the present invention, it will be clearly understood that the term is not limited to the claims as it is. As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram schematically illustrating an Internet banking user authentication system configured as a single server side 200 according to an exemplary embodiment of the present invention.

In more detail, FIG. 1 shows a first client 105 connected to a predetermined server side 200, providing predetermined customer identifier information, and receiving an Internet banking service from the server side 200, and a predetermined terminal. A terminal side 100 including a customer second terminal 150 for inputting and / or extracting and / or generating customer authentication information and transmitting it to the server side 200 to which the customer first terminal 105 is connected; After receiving predetermined customer identifier information from the first customer terminal 105, and receiving predetermined customer authentication information from the second customer terminal 150, based on the customer authentication information the first customer ( The Internet banking use customer authentication system including a single server side 200 for authenticating a customer connected through 105).

The client first terminal 105 includes server connection means including a function of connecting to the server side 200 among terminals used by a predetermined customer and a function of transmitting predetermined customer identifier information to the server side 200 ( It characterized in that it comprises a terminal having a 110). For example, when the server side 200 is a web server on the Internet and the customer first terminal 105 is a personal computer that can access the Internet, the server connecting means 110 is a web browser provided in the personal computer (eg, , Internet Explorer of Microsoft Corporation, or Netscape Navigator of Netscape, Inc. and / or any Plug-in that works with the web browser.

The customer second terminal 150 includes information input means 155 and / or predetermined customer authentication information including a function of inputting predetermined customer authentication information to be transmitted to the server side 200 among terminals used by a given customer. Information generating means 165 including a function of extracting the information and / or information generating means 165 including a function of generating predetermined customer authentication information, and the input / extraction / generated customer authentication information on the server side. It characterized in that it comprises a terminal having an information transmitting means 170 including a function for transmitting to (200), the information input means 155 and / or information extraction means 160 and / or information generation The means 165 and / or the information transmitting means 170 are recorded on the recording medium provided in the corresponding customer second terminal 150 to perform the operation defined in each means in the platform provided in the customer wireless terminal 150. Of the program being It is preferred comprises a capability configuration.

According to an embodiment of the present invention, the second client terminal 150 may be a personal communication system (PCS) and / or a global system for mobile communications (GSM) terminal and / or a personal digital cellular terminal. The PDC and / or PHS (Personal Handyphone System) terminal and / or Personal Digital Assistant (PDA) and / or a mobile terminal including a smart phone. The means 155 and / or the information extracting means 160 and / or the information generating means 165 and / or the information transmitting means 170 perform respective defined operations in the Wireless Internet Platform for Interoperability (WIPI) platform. Preferably, the program is recorded in a recording medium provided in the second client terminal 150. According to the method, the information transmitting means 170 may transmit a predetermined wireless message (e.g., a short message service (SMS), It is possible to be recorded in a recording medium provided on the second client terminal 150 as a program for the program, or wireless Internet access for (Enhanced Message Service) or MMS (Multimedia Messaging Service), EMS) transceiver.

According to another exemplary embodiment of the present invention, when the second client terminal 150 is a portable Internet terminal connected to the portable Internet (Wibro), the information input unit 155 and / or the information extraction unit 160 and / or Alternatively, the information generating means 165 and / or the information transmitting means 170 are programs for performing respective defined operations in the platform provided in the portable Internet terminal, and are stored in the recording medium provided in the second client terminal 150. It is desirable to be recorded. That is, each means provided in the customer second terminal 150 is a program defined to operate on a platform provided in each customer second terminal 150 and recorded in a recording medium provided in the corresponding customer second terminal 150. .

The information input means 155 of the customer second terminal 150 is the case where the customer authentication information includes a predetermined key data (for example, customer authentication information is ID (ID) information, password information, customer personal information, And the authentication certificate password information, payment method password information, password information corresponding to the customer account, account transfer password information corresponding to the customer account), key input means for inputting the key data, and / Or when the customer authentication information includes predetermined biometric data (for example, when the customer authentication information includes customer biometric information), biometric information input means 155 for inputting the biometric data of the customer is included. .

The information extracting means 160 of the second client terminal 150 includes information extracted from the predetermined memory unit 1070 provided in the second client terminal 150. , When the customer authentication information is communication means information for the second customer terminal 150), means for extracting predetermined storage information from the memory unit 1070, and / or the customer authentication information. When the information is extracted from the IC chip mounted on or detached from the customer second terminal 150 and / or the IC card interlocked through the IC card reader mounted on the customer second terminal 150 ( For example, the customer authentication information includes official certificate information, payment means information, customer account information, and information (or data) included in the IC chip provided in the second customer terminal 150 provided in the IC chip (or IC card). Is provided in the customer second terminal 150 Including the certificate information included in the integrated IC chip, the IC chip unique information provided in the second terminal 150 of the customer, and means for extracting predetermined information from the IC chip (or IC card). Is done.

The information generating means 165 of the second client terminal 150 transmits the customer authentication information input / extracted through the information input means 155 and / or the information extracting means 160 to the server side 200. Means for generating secondary customer authentication information through a predetermined information processing procedure and / or a data structure changing procedure, if a predetermined information processing and / or data structure change process is necessary before It is made, including. For example, the customer authentication information input / extracted by the information generating means 165 may be disclosed corresponding to the server side 200 by a predetermined encryption key (eg, a public key infrastructure (PKI)). Key).

According to the present invention, the first customer terminal 105 and the second customer terminal 150 is characterized by maintaining the device independence composed of different terminals. According to a preferred embodiment, the customer first terminal 105 and the customer second terminal 150 is a different type of terminal device for connecting to the server side 200 or transmitting predetermined information through different networks. Preferably, according to another embodiment, if only the device independence is maintained, the customer first terminal 105 and the customer second terminal 150 is the server side 200 through the same type of terminal device or the same network It is also possible to connect to or transmit predetermined information.

Referring to FIG. 1, the server side 200 includes information receiving means (1) 210 for receiving predetermined customer identifier information from the first client terminal 105 and the second client terminal 150. Information receiving means (2) (230) for receiving predetermined customer authentication information, and customer authentication means (250) for authenticating a customer connected via the customer first terminal (105) based on the customer authentication information. Internet banking means 270 for providing an internet banking service to the customer first terminal 105 and / or internet banking for providing a predetermined financial transaction to the customer first terminal 105. It is preferable that the transaction approval means 290 is further provided.

The information receiving means (1) 210 of the server side 200 is a server connection means 110 provided in the customer first terminal 105 is connected to a predetermined network 180 and / or communication means 180 Permits access to the server side 200 via the first communication channel 105 and connects a predetermined communication channel with the customer first terminal 105, and obtains predetermined customer identifier information from the customer first terminal 105 through the communication channel. It is characterized by receiving.

According to a preferred embodiment of the present invention, the information receiving means (1) 210 receives the customer identifier information received from the customer first terminal 105 through the information receiving means (2) 230 through the customer second. Until the validity of the customer authentication information received from the terminal 150 is confirmed, it is preferably stored in a predetermined information storage means (not shown).

The information receiving means (2) 230 of the server side 200 allocates a predetermined communication session for receiving customer authentication information input / extracted / generated from the customer second terminal 150, and the communication session. Through the customer second terminal 150 is characterized in that for receiving predetermined customer authentication information.

The customer authentication means 250 of the server side 200 receives predetermined customer identifier information from the first client terminal 105 through the information receiving means 1 and 210, and the information receiving means 2 When receiving the predetermined customer authentication information from the second customer terminal 150 through the 230, the predetermined customer authentication information and the customer second information associated with the customer identifier information transmitted by the first customer terminal 105 Comparing the customer authentication information transmitted by the terminal 150 is characterized in that the authentication process for the customer connected through the customer first terminal 105.

In addition, the customer authentication means 250 has predetermined customer authentication information for comparing with the customer authentication information received from the second customer terminal 150 through the information receiving means (2) 230, a predetermined storage medium ( 260, the client first terminal 105 is compared with the customer authentication information previously stored in the storage medium 260 and the customer authentication information transmitted by the second client terminal 150. Characterized in that the authentication process of the customer connected through.

According to a preferred embodiment of the present invention, when the customer authentication information is encrypted by a predetermined encryption process, the customer authentication means 250 decrypts the customer authentication information through a predetermined decryption process corresponding to the encryption process. It is desirable to.

The internet banking means 270 of the server side 200 is linked with at least one financial transaction means including an account system and / or external system and / or information system and / or card system provided in a predetermined financial system It is characterized in that a predetermined financial transaction service is provided to a customer connected through the customer first terminal 105 based on the Internet.

The Internet banking transaction approval means 290 of the server side 200 is a customer by the customer authentication means 250 in the Internet banking means 270 to provide a predetermined financial transaction service on the server side 200 Authorization information It is characterized by approving each financial transaction step and / or financial transaction process based on the authentication result.

According to the embodiment of the present invention, the information receiving means (1) 210, the information receiving means (2) 230, the customer authentication means 250, the Internet banking means 270 provided in the server side 200 The Internet banking transaction approval means 290 may be included in a functional configuration provided in a single server according to the implementation method, or at least one or more means may be provided as a predetermined server.

2 is a diagram illustrating a configuration of an Internet banking user authentication system including a plurality of server sides 200 according to an exemplary embodiment of the present invention.

More specifically, Figure 2 is connected to a predetermined server side (1) (200-1), and transmits the predetermined customer identifier information to the server side (1) (200-1), the server side (1) ( 200-1) inputs and / or extracts and / or generates customer first terminal 105 provided with the Internet banking service and predetermined customer authentication information, and transmits them to predetermined server side 2 (200-2). Receives predetermined customer identifier information from the terminal side 100 including the second client terminal 150 and the first client terminal 105, and provides the Internet banking service to the first client terminal 105 Receive predetermined customer authentication information from the server side (1) 200-1 and the second client terminal 150, which provide and / or approve a predetermined financial transaction corresponding to the Internet banking service. On the basis of the information, authentication processing of a customer connected via the customer first terminal 105 is performed, and the authentication result is sent to the server side (1) 200-. 1) the Internet banking use customer authentication system comprising a plurality of server side 200 including the server side (2) (200-2) to transmit to.

In FIG. 2, the functional configuration of the terminal side 100 including the first client terminal 105 and the second client terminal 150 is as described with reference to FIG. 1, and the server side (1) 200-1 is A server system provided on a network connected to the customer first terminal 105 and / or a network interworking with a network connected to the customer first terminal 105, the predetermined system from the customer first terminal 105. Providing through the Internet banking means 270 and / or the Internet banking means 270 for providing an Internet banking service to the information receiving means (1) 210 and the customer first terminal 105 for receiving customer identifier information. And an internet banking transaction approval means 290 for approving a financial transaction corresponding to the internet banking service, wherein the server side (2) (200-2) is the second terminal (150). The network connected and / or the network to which the second client terminal 150 is connected. A server system provided on a network cooperating with the information, comprising: information receiving means (2) 230 for receiving predetermined customer authentication information from the second client terminal 150, and a customer authentication information received by the information receiving means. Customer authentication means 250 for authenticating the customer connected through the customer first terminal 105 on the basis of the information and the authentication result of the customer authentication means 250 to the information receiving means (1) (210) It characterized in that it comprises a means for transmitting the authentication result transmitted 300, wherein the server side (1) (200-1) and the server side (2) (200-2) includes a network interface and / or communication interface Is connected through a predetermined server-to-server interface 205.

According to a preferred embodiment of the present invention, the server side (1) 200-1 and the server side (2) 200-2 are each provided with a single server having respective means or at least two or more means respectively. The server side (1) (200-1) is preferably composed of a combination of a plurality of servers (or terminals), the Internet website server, Internet banking server, communication company server, financial company server, VAN company server, PG company server, At least one server on the network associated with the server is preferably made, and the server side (2) (200-2) is a customer authentication server and / or on the network connected to the customer second terminal 150 It is preferable to include at least one authentication server of a public key infrastructure (PKI) or a wireless public key infrastructure (WPKI).

3 is a diagram illustrating a configuration of an Internet banking user authentication system including a plurality of server sides 200 according to another exemplary embodiment of the present invention.

In more detail, Fig. 3 is connected to a predetermined server side (1) 200-1 and transmits predetermined customer identifier information to the server side (1) 200-1, and the server side 1 ( 200-1) inputs and / or extracts and / or generates customer first terminal 105 provided with the Internet banking service and predetermined customer authentication information, and transmits them to predetermined server side 2 (200-2). The terminal 100 including the customer second terminal 150, the predetermined customer identifier information transmitted from the customer first terminal 105 and the customer through the server side (2) (200-2) Receives the customer authentication information transmitted from the second terminal 150, and authenticates the customer connected via the customer first terminal 105 on the basis of the customer authentication information, to the customer first terminal 105 A server side (1) 200-1 for providing an internet banking service and / or approving a predetermined financial transaction corresponding to the internet banking service; A plurality of servers including server side (2) (200-2) for receiving predetermined customer authentication information from the second customer terminal 150 and transmits the customer authentication information to the server side (1) (200-1) It is about the Internet banking use customer authentication system including the side (200).

In FIG. 3, the functional configuration of the terminal side 100 including the first client terminal 105 and the second client terminal 150 is as described with reference to FIG. 1, and the server side ( 2) when predetermined customer authentication information is transmitted from the 200-2 to the customer first terminal 105, further comprising temporary storage means 115 for receiving and temporarily storing the customer authentication information. It is done. For example, when the customer first terminal 105 is a personal computer that can access the Internet, and the server connection means 110 is a web browser provided in the personal computer, the temporary storage means 115 is connected to the personal computer. It includes at least one predetermined customer authentication program to be temporarily recorded on the recording medium provided, or a customer authentication plug-in recorded on the recording medium to be plugged into the web browser.

In addition, in FIG. 3, the server side (1) 200-1 is located on a network interworking with a network connected to the first client terminal 105 and / or a network connected to the first client terminal 105. The server system is provided, and receives predetermined customer identifier information from the first client terminal 105 and the customer authentication information transmitted from the second client terminal 150 through the server side (2) (200-2). Customer authentication means 250 for authenticating a customer connected through the customer first terminal 105 based on the information receiving means (1) 210 and the customer authentication information, and the customer first terminal 105 Internet banking means 270 for providing an internet banking service and / or an internet banking transaction approval means 290 for approving a financial transaction corresponding to an internet banking service provided through the internet banking means 270. Characterized in that, the server side (2) (200-2) A server system provided on a network connected to the customer second terminal 150 and / or a network interworking with the network connected to the customer second terminal 150, the predetermined number being from the customer second terminal 150. Confirming communication connection information for the information receiving means (2) 230 for receiving customer authentication information and for the customer first terminal 105 or the server side (1) 200-1 to receive the customer authentication information. And an information transmitting means 170 for transmitting the customer authentication information to the confirmed first client terminal 105 or the server side 1, 200-1. The server side (1) 200-1 and the server side (2) 200-2 are connected through a predetermined server-to-server interface 205 including a network interface and / or a communication interface.

According to a preferred embodiment of the present invention, the information checking means 400 reads the customer authentication information received from the second customer terminal 150 through the information receiving means (2) 230, the customer authentication information It is preferable to check the customer first terminal 105 or the server side (1) (200-1) to receive. For example, the received customer authentication information preferably includes communication connection information for the first terminal 105 or the server side (1) 200-1 to receive the customer authentication information. Confirmation means 400 reads the communication connection information to confirm the specific customer first terminal 105 to receive the final customer authentication information among the plurality of customer first terminal 105, or to finalize the customer authentication information Confirm the server side (1) 200-1 to be received.

According to another exemplary embodiment of the present invention, the information checking means 400 is configured to receive the communication connection information for the first client terminal 105 or the server side (1) 200-1 to receive the final customer authentication information. It is possible to extract from the predetermined storage means provided in the server side (2) (200-2) or to be provided from the server side (1) (200-1), the information receiving means (2) 230 In the customer authentication information received from the second client terminal 150 through the information checking means to extract the predetermined communication connection information from the predetermined storage means provided on the server side (2) (200-2) It is possible to include the required information or information for receiving predetermined communication connection information from the server side (1) 200-1.

According to a preferred embodiment of the present invention, the information transmitting means 170 is a customer first terminal 105 that will finally receive the customer authentication information based on the communication connection information confirmed by the information checking means 400 or It is preferable to transmit to the server side (1) 200-1. That is, the information transmitting means 170 transmits the customer authentication information to a predetermined server side (1) (200-1) based on the communication connection information, the server side (1) (200-1) By authenticating a customer connected through the customer first terminal 105 through the customer authentication information, or by transmitting the customer authentication information to a predetermined customer first terminal 105 based on the communication connection information. In this case, the customer first terminal 105 temporarily stores the customer authentication information.

According to a preferred embodiment of the present invention, the server side (1) 200-1 and the server side (2) 200-2 are each provided with a single server having respective means or at least two or more means respectively. The server side (1) (200-1) is preferably composed of a combination of a plurality of servers (or terminals), the Internet website server, Internet banking server, financial company server, VAN company server, PG company server, the server and Preferably, at least one server, a public key infrastructure (PKI) or a wireless public key infrastructure (WPKI) authentication server is associated with the network, and the server side (2) (200-2) is the customer. At least one carrier server on a network connected to the second terminal 150 and / or a relay server for relaying and transmitting the customer authentication information to a predetermined customer first terminal 105 or server side 1 (200-1). It is preferable to comprise as mentioned above.

Figure 4 is a diagram showing the configuration of the Internet banking user authentication system composed of a plurality of server side 200 according to another embodiment of the present invention.

In more detail, Fig. 4 is connected to a predetermined server side (1) 200-1 and transmits predetermined customer identifier information to the server side (1) 200-1, and the server side (1) ( 200-1) inputs and / or extracts and / or generates customer first terminal 105 provided with the Internet banking service and predetermined customer authentication information, and transmits them to predetermined server side 2 (200-2). Receives predetermined customer identifier information from the terminal side 100 including the customer second terminal 150 and the customer first terminal 105, and provides the Internet banking service to the customer first terminal 105. A customer who receives predetermined customer authentication information from the server side (1) 200-1 and the customer second terminal 150 and connects through the customer first terminal 105 based on the customer authentication information. Authentication process, and transmits the authentication result to the server side (1) (200-1), the server side (1) (200-1) provided to the customer first terminal 105 The present invention relates to an Internet banking user authentication system including a plurality of server sides 200 including a server side 2 (200-2) for approving a predetermined financial transaction corresponding to an internet banking service.

In FIG. 4, the functional configuration of the terminal side 100 including the first client terminal 105 and the second client terminal 150 is as described with reference to FIG. 1, and the server side (1) 200-1 is A server system provided on a network connected to the customer first terminal 105 and / or a network interworking with a network connected to the customer first terminal 105, the predetermined system from which the customer first terminal 105 is connected. And information receiving means (1) 210 for receiving customer identifier information and internet banking means 270 for providing an internet banking service to the customer first terminal 105, wherein the server side ( 2) (200-2) is a server system provided on the network connected to the network connected to the customer second terminal 150 and / or the network connected to the customer second terminal 150, the customer system Information receiving means (2) for receiving predetermined customer authentication information from the two terminals (150) 230, the customer authentication means 250 for authenticating the customer connected through the customer first terminal 105 based on the customer authentication information received by the information receiving means, and the customer authentication means 250 Customer authentication through the authentication result transmission means 300 for transmitting the authentication result of the information to the information receiving means (1) 210 and the internet banking means 270 provided in the server side (1) (200-1). And an internet banking transaction approval means (290) for approving a financial transaction corresponding to the internet banking service provided to the first terminal (105), wherein the server side (1) 200-1 and the server are provided. Side (2) 200-2 is connected via a predetermined inter-server interface 205 including a network interface and / or a communication interface.

According to a preferred embodiment of the present invention, the internet banking transaction approval means 290 provided on the server side (2) (200-2) is the Internet banking means 270 of the server side (1) (200-1) In order to perform a financial transaction corresponding to the customer authentication information received from the second customer terminal 150 through the information receiving means (2) 230, or corresponds to a predetermined payment means or available as a payment means It is preferable to include the case. For example, the customer second terminal 150 is a wireless terminal in which a predetermined IC chip is mounted or detached, and the customer authentication information is provided with the authentication certificate information, payment means information, customer account information, and the like provided with the IC chip. Information (or data) included in the IC chip provided in the customer second terminal 150, authorized certificate information included in the IC chip provided in the customer second terminal 150, and the customer second terminal 150. Including at least one IC chip unique information provided, when the financial transaction using the wireless terminal is performed in the server side (1) (200-1), provided in the server side (2) (200-2) In the internet banking transaction approval means 290, a financial transaction corresponding to the internet banking service provided to the first client terminal 105 through the internet banking means 270 provided on the server side (1) 200-1. Perform.

According to a preferred embodiment of the present invention, the server side (1) 200-1 and the server side (2) 200-2 are each provided with a single server having respective means or at least two or more means respectively. Preferably, a combination of a plurality of servers (or terminals) is used. The server side (1) 200-1 preferably includes an Internet website server, and the server side (2) 200-2 includes Internet banking server, communication company server, financial company server, VAN company server, PG company server, preferably comprises at least one server on the network associated with the server.

5 is a diagram illustrating the types of the customer first terminal 105 and / or the customer second terminal 150 according to the present invention.

Referring to FIG. 5, a customer first terminal 105 and / or a customer second terminal 150 may include a predetermined wired terminal including at least one or more a personal computer (PC) or a notebook, and And / or a Personal Communication System (PCS) or Global System for Mobile communications (GSM) terminal or Personal Digital Cellular (PDC) or Personal Handyphone System (PHS) terminal or Personal Digital Assistant A PDA or a smart phone or a wireless data communication terminal or a mobile terminal including at least one or more telematics, and / or based on an ARS (Automatic Response Service) or Call Center A call terminal including at least one wired or wireless voice call device, and / or a credit inquiry terminal for providing an electronic payment service (Credit Authoriz) a payment terminal including at least one or more ation terminals or contact (or contactless) IC card terminals, and / or at least one or more Automatic Teller Machine (ATM) or Cash Dispenser (CD). A financial terminal, and / or an information terminal including a kiosk, and / or a home appliance terminal including a digital television (DTV), a refrigerator, a microwave, audio, etc., connected to a home network, and / or a communication function. And an RFID terminal equipped with an exercise device (eg, a treadmill connected to a network), and / or an RFID reader complying with a predetermined RFID standard.

Referring to FIG. 5 according to a preferred embodiment of the present invention, it is preferred that the wired terminal accesses (or transmits information to) the server side 200 through the Internet based on Transmission Control Protocol / Internet Protocol (TCP / IP). Preferably, and / or the wireless terminal accesses (or transmits information to) the server side 200 via at least one of a mobile communication network and / or a wireless data communication network and / or a portable internet network and / or a local area network. And / or the call terminal is connected to (or transmits information to) the server side 200 via a public switched telephone network (PSTN), and / or the The payment terminal is preferably connected (or transmits information) to the server side 200 via a Value Added Network (VAN), and / or the financial terminal is a financial common network It is preferable to connect (or transmit information) to the server side 200 through, and / or the information terminal or exercise equipment RFID terminal is connected to the server side 200 through a predetermined communication network connected to each terminal. It is preferable to connect (or transmit information), and / or the home appliance terminal preferably connects (or transmits information) to the server side 200 through a predetermined communication network including a home network.

According to a preferred embodiment of the present invention, the wired terminal and / or wireless terminal and / or call terminal and / or payment terminal and / or financial terminal and / or information terminal and / or home appliance terminal and / or shown in FIG. Among the terminals including the exercise equipment and / or the RFID terminal is provided with a predetermined server connection means 110, thereby connecting to the server side 200 via the server connection means 110 through a predetermined network and / or communication network The terminal receiving the Internet banking service through the predetermined Internet banking means 270 provided at the server side 200 is characterized in that it includes the functional configuration of the customer first terminal 105.

In addition, at least one of the information input means 155 and / or the information extraction means 160 and / or the information generating means 165 among the terminal shown in FIG. The terminal equipped with the information transmitting means 170 for inputting / extracting / generating authentication information and transmitting the customer authentication information to the server side 200 through a predetermined network and / or a communication network is a customer second terminal ( It is preferable to include the functional configuration of 150).

That is, the customer first terminal 105 and the customer second terminal 150 are not classified according to the terminal type, and among the terminals shown in FIG. Information input means 155 and / or information extraction means 160 and / or information generation among the remaining terminals excluding the terminal performing the function of the first terminal 105 and performing the function of the customer first terminal 105. Among the means 165, the terminal equipped with at least one customer authentication information related means and the information transmitting means 170 performs the function of the second customer terminal 150.

According to a preferred embodiment of the present invention, the first customer terminal 105 and the second customer terminal 150 is a different terminal, the type of the terminal device is different, the server side through different networks and / or communication networks It is preferable to connect to 200 or transmit predetermined information. Alternatively, the first client terminal 105 and the second client terminal 150 may be connected to the server 200 or transmit predetermined information through the same network and / or communication network. However, the same terminal device is excluded to maintain device independence.

Hereinafter, the wired terminal is defined as the customer first terminal 105 and the wireless terminal is defined as the customer second terminal 150, and then the Internet banking described in FIGS. 1, 2, 3, and 4 is used. The preferred functional configuration of the customer authentication system will be described.

6 is a diagram showing a preferred functional configuration of an Internet banking user authentication system configured as a single server side 200 according to an embodiment of the present invention.

In more detail, Figure 6 is for the preferred functional configuration of the Internet banking user authentication system consisting of a single server side 200 shown in Figure 1, if one of ordinary skill in the art In a terminal other than the customer first terminal 105 (for example, a wired terminal connected to the Internet) and the customer second terminal 150 (for example, a wireless terminal connected to a wireless network) shown in FIG. In accordance with the protocol provided in the network 180 and / or the communication means 180 connecting the server side 200 is a method of implementing a variety of modifications to the Internet banking use customer authentication system consisting of a single server side 200 It can be easily inferred.

Referring to FIG. 6, the information receiving means (1) 210 of FIG. 1 includes an interface part (1) 215 and an information receiving part (1) 220, and the information receiving means (2) 230. Is composed of an interface unit (2) 235 and information receiving unit (2) 240, customer authentication means 250 is a customer authentication unit 255 and a storage medium 260 for storing predetermined customer authentication information It is composed.

The interface unit (1) 215 is a wired terminal corresponding to the customer first terminal 105 is connected to the server side 200 through the TCP / IP-based Internet, the Internet from the server side 200 A protocol (eg, HyperText Transfer Protocol (HTTP)) for receiving a banking service is defined, and a communication channel between the wired terminal and the server side 200 is connected through the protocol. do.

According to a preferred method of the present invention, the interface unit (1) 215 is a predetermined customer identifier information input interface (e.g., HyperText Markup Language (HTML)) and the wired terminal through the communication channel; And / or a web page including an extensible markup language (XML) and a script for implementing information input and transmission functions), and predetermined customer identifier information from the wired terminal through the customer identifier information input interface. It is desirable to be provided with.

In addition, when the interface unit (1) 215 is provided with predetermined customer identifier information from the wired terminal, and the customer identifier information is normally received by the information receiving unit (1) 220, the customer to the wired terminal Preferably, the method further includes transmitting and outputting a customer authentication information request message requesting to provide predetermined customer authentication information through the owned wireless terminal (customer second terminal 150).

According to another exemplary embodiment of the present invention, the interface unit (1) 215 may transmit and output the customer authentication request message to the wireless terminal (customer second terminal 150) owned by the customer. In the case of the customer authentication request message, the wireless terminal inputs / extracts / generates predetermined customer authentication information to the information receiving means (2) 230 or transmits the customer authentication information to the server side ( It is possible to further include a predetermined callback URL (CallbackURL) for connecting to (200).

The information receiving unit (1) 220 is connected to a predetermined communication channel between the wired terminal and the server side 200 through the interface unit (1) (215), the interface unit (1) (215) Characterized by receiving predetermined customer identifier information from the information received from the wired terminal through.

According to a preferred embodiment of the present invention, the information receiving unit (1) 220 corresponds to the customer second terminal 150 through the information receiving means (2) 230, the customer identifier information received from the wired terminal It is preferable to store in predetermined information storage means (not shown) until the validity of the predetermined customer authentication information received corresponding to the customer identifier information from the wireless terminal is confirmed. Alternatively, it is preferable to set a predetermined flag that can determine that the customer has connected to the server side 200 in member information corresponding to the customer identifier information among the member information provided on the server side 200. As a result, the information receiving unit (2) (240) is any of the at least one customer first terminal 105, the customer authentication information received from a predetermined customer second terminal 150 connected to the server side (200). It is checked whether it corresponds to the customer first terminal 105.

The interface unit (2) 235 is a wireless terminal corresponding to the customer second terminal 150 is connected to at least one or more of the mobile communication network and / or wireless data communication network and / or portable Internet network and / or local area network In this case, a data transmission / reception protocol corresponding to each wireless network is defined, and the predetermined information or data is transmitted and received between the wireless terminal and the server side 200 through the protocol.

According to a preferred embodiment of the present invention, the interface unit (2) 235 is a predetermined message transmission protocol (for example, when the wireless terminal is a personal communication terminal (PCS) connected to a mobile communication network) in the wireless terminal, the personal The wireless communication based on a data communication protocol defined in a WIPI-based communication program provided in a communication terminal, a short message service (SMS), an enhanced message service (EMS), or a multimedia messaging service (MMS) based message transmission / reception protocol). It is preferable to receive predetermined information or data from the terminal.

In addition, the interface unit (2) 235 is the server side 200 in the wireless terminal through at least one or more of the mobile communication network and / or wireless data communication network and / or portable Internet network and / or local area network network A predetermined protocol (e.g., Wireless Application Protocol (WAP) when the wireless terminal is a personal communication terminal connected to a mobile communication network) for accessing the network is defined, and the protocol is defined in the wireless terminal through the protocol. Receiving input / extracted / generated predetermined customer authentication information Assigning a communication session, inputting / extracting / generating customer authentication information for inputting / extracting / generating predetermined customer authentication information to the wireless terminal through the communication session Web pages that include an interface (e.g., Wireless Markup Language (WML)) and scripts to implement information input and transmission functions. It is desirable to receive predetermined customer authentication information from the wireless terminal through the customer authentication information input / extraction / generation interface.

The information receiving unit (2) 240 receives predetermined customer authentication information inputted / extracted / generated from the wireless terminal and transmitted from the information or data received from the wireless terminal through the interface unit (2) (235). Characterized in that.

According to a preferred embodiment of the present invention, the customer authentication information received through the information receiving unit (2) (240) includes information corresponding to the customer identifier information, or the interface unit (2) (235) It is possible to confirm the information corresponding to the customer identifier information from the communication session assigned by the information receiving unit (2) 240, the received customer authentication information through the information corresponding to the customer identifier information It is preferable to check the customer authentication information corresponding to any wired terminal among at least one or more wired terminals.

The customer authentication unit 255 is characterized in that for authenticating the customer connected through the wired terminal based on the customer authentication information received by the information receiving unit (2) (240), the reception for the customer authentication It is preferable to include a storage medium 260 for storing predetermined customer authentication information matching the customer authentication information.

According to a preferred embodiment of the present invention, the method for authenticating a customer connected through the wired terminal based on the customer authentication information in the customer authentication unit 255 includes a data structure characteristic of the received customer authentication information itself and And / or a method of authenticating the customer authentication information only by information validation, and a method of authenticating the customer authentication information by comparing the received customer authentication information with predetermined customer authentication information stored in the storage medium 260. In the latter case, the storage medium 260 may store predetermined customer authentication information matching the customer authentication information.

In addition, when the received customer authentication information is received after being encrypted according to a predetermined encryption process, the customer authentication unit 255 preferably decrypts the encrypted customer authentication information by a predetermined decryption process. To this end, the storage medium 260 preferably further stores information for decrypting the customer authentication information (eg, a decryption key for predetermined decryption of the encrypted customer authentication information).

Referring to FIG. 6 according to a preferred embodiment of the present invention, the internet banking means 270 of FIG. 1 includes an internet banking service unit 274 that provides a financial transaction service using the Internet to the wired terminal. The internet banking service unit 274 communicates with the wired terminal through the interface unit 1 and 215 and based on the banking information stored in the database management system (DBMS) 286. In connection with a financial system (not shown), a predetermined internet banking service is provided to the wired terminal.

7 is a view showing a preferred functional configuration of the Internet banking user authentication system composed of a plurality of server side 200 in accordance with one preferred embodiment of the present invention.

In more detail, Figure 7 is for the preferred functional configuration of the Internet banking user authentication system consisting of a plurality of server side 200 shown in Figure 2, if one of ordinary skill in the art In a terminal other than the customer first terminal 105 (for example, a wired terminal connected to the Internet) and the customer second terminal 150 (for example, a wireless terminal connected to a wireless network) shown in FIG. In accordance with the protocol provided in the network 180 and / or the communication means 180 connecting the server side 200 is a method of implementing a variety of modifications to the Internet banking use customer authentication system consisting of a plurality of server side 200 It can be easily inferred.

Referring to FIG. 7, the information receiving means (1) 210 provided on the server side (1) 200-1 of FIG. 2 includes an interface unit (1) 215 and an information receiving unit (1) 220. The Internet banking means 270 is configured to include an Internet banking service unit 274, DBMS 286 for storing the predetermined member information for the customer and the predetermined banking information for the Internet banking service. The Internet banking transaction approval means 290 is configured to include the customer authentication information when a predetermined financial transaction procedure is performed to the customer in the Internet banking service unit 274 included in the internet banking means 270. Internet banking transaction approval unit 298 that provides a financial transaction service based on the. In addition, the information receiving means (2) 230 provided in the server side (2) (200-2) of Figure 2 is composed of an interface unit (2) 235 and information receiving unit (2) 240, The customer authentication means 250 is composed of a customer authentication unit 255 and a storage medium 260 for storing predetermined customer authentication information, and the authentication result transmission means 300 includes a predetermined number of authentication result transmissions 305. It is configured by.

Among the basic functions of the respective functional configurations provided on the server side (1) 200-1 and the server side (2) (200-2) of FIG. 7, the functions and terms identical to those described in FIG. The basic function of the configuration is as described in FIG. However, in FIG. 7, the information receivers 1 and 220 provided at the server side 1 and 200-1 are provided with predetermined customer identifier information from the wired terminal through the interface unit 1 and 215. It is preferable to perform a first reception function for receiving a second reception function for receiving a predetermined customer authentication result data from the authentication result transmission number 305 of the server side (2) (200-2).

7 according to a preferred embodiment of the present invention, in a single server side 200 as shown in FIG. 6, a wireless network to which the wireless terminal connects and / or a predetermined network and / or communication network to interwork with the wireless network. At least one server side (1) (2) (200-2) provided in the above to act as a predetermined customer authentication server, the customer authentication server is affiliated to provide a customer authentication service ( A method for transmitting a customer authentication result, which is authenticated by the customer authentication means 250, to the server side (2) (200-2) for transmitting the customer authentication result as described above. The authentication result transmission number 305 is provided.

The authentication result transmission number 305 is at least one server side 1 when the predetermined customer authentication result is generated by the customer authentication means 250 provided on the server side (2) (200-2) ( 200-1) (eg, Internet banking operated by a predetermined financial institution).

According to a preferred embodiment of the present invention, the server side (2) (200-2) equipped with the information receiving means (2) 230, customer authentication means 250 and the authentication result transmission means 300 is the wireless It is preferable to perform a function of a customer authentication server or an authentication server of a public key infrastructure (PKI) or a wireless public key infrastructure (WPKI) provided in the wireless network to which the terminal is connected.

8 is a view showing a preferred functional configuration of the Internet banking use customer authentication system composed of a plurality of server side 200 in accordance with another preferred embodiment of the present invention.

In more detail, Figure 8 is for the preferred functional configuration of the Internet banking user authentication system consisting of a plurality of server side 200 shown in Figure 3, if one of ordinary skill in the art In a terminal other than the customer first terminal 105 (for example, a wired terminal connected to the Internet) and the customer second terminal 150 (for example, a wireless terminal connected to a wireless network) shown in FIG. In accordance with the protocol provided in the network 180 and / or the communication means 180 connecting the server side 200 is a method of implementing a variety of modifications to the Internet banking use customer authentication system consisting of a plurality of server side 200 It can be easily inferred.

Referring to FIG. 8, the information receiving means (1) 210 provided on the server side (1) 200-1 of FIG. 3 includes an interface unit (1) 215 and an information receiving unit (1) 220. The customer authentication means 250 is composed of a customer authentication unit 255 and a storage medium 260 for storing predetermined customer authentication information. The internet banking means 270 is connected to the Internet banking service unit 274. And a DBMS 286 for storing predetermined member information for the customer and predetermined banking information for the Internet banking service, and the internet banking transaction approval means 290 is connected to the internet banking means 270. When a predetermined financial transaction procedure is performed to the customer in the included internet banking service unit 274, the internet banking transaction approval unit 298 is configured to approve a financial transaction based on the customer authentication information. In addition, the information receiving means (2) 230 provided on the server side (2) (200-2) of Figure 3 is composed of an interface unit (2) 235 and information receiving unit (2) 240 The information checking means 400 includes an information checking unit 405 for checking the server side (1) 200-1 corresponding to the customer authentication information, and the information transmitting means 410 includes the checked information. And an information transmitter 415 for transmitting the received customer authentication information to the server side (1) 200-1.

Among the basic functions of each functional configuration provided in the server side (1) 200-1 and the server side (2) (200-2) of FIG. 8, a function coinciding with the terms described in FIG. The basic function of the configuration is as described in FIG. In FIG. 8, however, the information receiving unit 1, 220 provided at the server side 1, 200-1 is provided with predetermined customer identifier information from the wired terminal through the interface unit 1, 215. It is preferable to perform a first receiving function for receiving a second reception function for receiving predetermined customer authentication information from the information transmitting unit 415 of the server side (2) (200-2).

8 according to a preferred embodiment of the present invention, in a single server side 200 as shown in FIG. 6, a wireless network to which the wireless terminal connects and / or a predetermined network and / or communication network to interwork with the wireless network. In the server side (2) (200-2) provided on the relay method for transmitting the customer authentication information received from the wireless terminal to the at least one server side (1) (200-1), The server side (2) (200-2) is provided with a predetermined information confirmation unit 405 and the information transmission unit 415 for relay transmission of the customer authentication information, such as.

The information checking unit 405 is server connection information for the server side (1) 200-1 included in the customer authentication information received by the information receiving unit (2) 240, or the interface unit (1) ( On the basis of the communication session information assigned to the 215, characterized in that the server side (1) (200-1) to receive the customer authentication information is characterized in that the wireless authentication to relay the received customer authentication information as a result of the confirmation Predetermined server information about the server for receiving information is extracted.

The information transmitting unit 415 transmits the received customer authentication information to the server identified by the information checking unit 405, and the customer authentication information is stored in the server side 2 according to an implementation method. In the process of transmitting the customer authentication information to the server side (1) (200-1) when encrypted by a predetermined encryption process defined to be decrypted at 200-2), the relayed customer authentication information is transmitted. It is possible to further perform a procedure for decrypting or to further encrypt the customer authentication information according to a predetermined encryption process for reliable relay transmission of the customer authentication information.

According to a preferred embodiment of the present invention, the server side (2) (200-2) equipped with the information receiving means (2) 230, information checking means 400 and information transmitting means 410 is the wireless terminal It is preferable to perform a function of a communication company server provided in the connected wireless network. For example, when the wireless terminal is provided with a function of transmitting and receiving a problem message including SMS or EMS or MMS, and transmits the customer authentication information via the text message, the server side (2) (200-2) Corresponds to a message center provided in the wireless network.

9 is a view showing a preferred functional configuration of the Internet banking use customer authentication system composed of a plurality of server side 200 in accordance with another preferred embodiment of the present invention.

In more detail, Figure 9 is for the preferred functional configuration of the Internet banking user authentication system consisting of a plurality of server side 200 shown in Figure 4, if one of ordinary skill in the art In a terminal other than the customer first terminal 105 (for example, a wired terminal connected to the Internet) and the customer second terminal 150 (for example, a wireless terminal connected to a wireless network) shown in FIG. In accordance with the protocol provided in the network 180 and / or the communication means 180 connecting the server side 200 is a method of implementing a variety of modifications to the Internet banking use customer authentication system consisting of a plurality of server side 200 It can be easily inferred.

9 is a diagram showing the functional configuration of the internet banking transaction approval means 290 provided in the server side (1) 200-1 in FIG. 7 in the server side (2) 200-2. In this regard, the banking service unit 274 included in the internet banking means 270 provided at the server side (1) 200-1 performs a predetermined financial transaction procedure to the customer. That is, in FIG. 9, when the financial transaction procedure corresponding to the Internet banking means 270 of the server side (1) 200-1 is wireless payment based on the wireless terminal, the wireless terminal is connected to the wireless terminal. An embodiment of the present invention relates to a method of performing the wireless payment together at a server side (2) (200-2) on a network and / or a communication network interworking with the wireless network.

10 is a view showing a preferred functional configuration of the customer second terminal 150 according to an embodiment of the present invention.

In more detail, FIG. 10 shows the wired terminal and / or wireless terminal and / or call terminal and / or payment terminal and / or financial terminal and / or information terminal and / or home appliance terminal and / or exercise device shown in FIG. And / or a preferred functional configuration of the customer second terminal 150 through a wireless terminal accessing a CDMA based mobile communication network among terminals including an RFID terminal. Those skilled in the art to which the present invention pertains can easily infer the functional configuration of the customer second terminal 150 other than the wireless terminal with reference to the wireless terminal functional configuration shown in FIG. There will be.

In terms of hardware, the wireless terminal of FIG. 10 includes an external body, a speaker, a microphone, a keypad, a liquid crystal display (LCD), an antenna, a battery 1030, and the like. Division Multiple Access (CDMA), a predetermined modem chip (e.g., MSM series modem chip of Qualcomm, Inc.) that incorporates functions such as a modem, a CPU / MPU (Central Processing Unit / Micro Processing Unit), a vocoder, various memory devices, A duplexer filter that separates the transmission and reception signals from one antenna, a power amplifier that amplifies the transmission signal, a high power amplifier (HPA), an isolator that prevents the return of the high output transmission signal, and the desired band VCTCXO (Voltage Controlled) for RF / IF SAW filter to remove extraneous signals, frequency uplink circuit of transmit path, frequency downconverter circuit of receive path, and reference clock source Temperature Compensated X-tal Oscillator), a UHF frequency synthesizer used as a local signal of frequency up-down conversion, and a codec chip for converting an analog voice signal into a digital signal. In addition, the modem chip is being integrated in the modem chip, and various functions for various multimedia services and / or additional services are directly integrated in the modem chip in addition to the core components for the mobile communication service.

Referring to the hardware configuration of the wireless terminal with reference to the functional configuration of the wireless terminal for inputting / extracting / generating and transmitting predetermined customer authentication information for dual customer authentication, as shown in Figure 1 and the control unit 1005 Screen output unit 1010, key input unit 1015, biometric unit 1020, voice processor 1025, wireless processor 1035, near field communication unit 1040, IC chip reader unit 1045 and memory unit 1070 ) And a battery 1030 for power supply.

The controller 1005 includes a processor and an execution memory including a CPU / MPU provided in the modem chip in hardware, and includes a predetermined program routine for providing a function specific to a wireless terminal from a predetermined memory device. And / or a bus for inputting and outputting program data, and a predetermined electronic circuit (or integrated circuit) provided therefor, wherein the execution is performed by a predetermined memory device and / or chipset in software. Generic term of program routines and / or program data loaded into memory and processed by the processor to perform specific functions (hence, in the present invention, input / extract / generate predetermined customer authentication information for dual customer authentication). A predetermined program routine recorded on the recording medium of the wireless terminal for the function of transmitting is convenient. It will be described as being provided in the control unit 1005.), various functions to be implemented in the wireless terminal by the control unit 1005 are realized, and also wireless to realize certain functions provided in the wireless terminal. It is characterized in that to control and manage the overall operation of the terminal. In particular, in order for the control unit 1005 to control and manage the overall operation of the wireless terminal, the wireless terminal may include operating system routines, system management routines, and / or the like from the memory unit 1070 while a predetermined power is input and booted. Alternatively, the controller 1005 is configured by loading system variables into the execution memory and arithmetic processing by the processor, whereby each functional configuration is operated in the wireless terminal.

The screen output unit 1010 is a liquid crystal display (LCD) driver for outputting a screen and is a key input unit 1015 by the control unit 1005 (for example, a program routine for outputting predetermined information or data to the LCD). Key data generated through the &lt; RTI ID = 0.0 &gt;), various information, signals, and / or content (e. G., Text content, image content, and / or multimedia content) extracted and / or generated in the course of performing certain functions of the wireless terminal. ) Is output to the LCD, and through the screen output unit 1010 and the LCD is provided a screen output means provided in the wireless terminal.

The key input unit 1015 may include at least one key input from a predetermined keypad including a plurality of number keys, character keys, and / or at least one function key. Read a predetermined information or signal corresponding to the data from the data (for example, from a table that stores the information or signal matching the key data) and delivers it to the control unit 1005, the key Key input means provided in the wireless terminal is provided through an input unit 1015 and a keypad.

The biometric unit 1020 recognizes at least one or more biometric information including a fingerprint, a hand, an iris, a voice, a face, a signature, a retina, a vein, and / or a DNA (Deoxyribo Nucleic Acid), and predetermined biometric data. It is preferable that the biometric recognition unit 1020 provided in the wireless terminal in FIG. 10 recognizes fingerprint information among the biometric information to read predetermined fingerprint data. Biometric input means provided in the radio terminal is provided through the 1020 and the biometric recognition module.

The voice processor 1025 encodes a predetermined sound signal input from a microphone provided in the wireless terminal and provides the same to the controller 1005 or extracts and / or generates the predetermined sound signal. A signal is decoded and output through a speaker. To this end, the voice processing unit 1025 includes a predetermined vocoder and a codec. Sound input means provided in the wireless terminal is provided through the voice processor 1025 and a microphone, or sound output means provided in the wireless terminal is provided through the voice processor 1025 and a speaker.

The wireless processing unit 1035 may register location and / or slot mode and / or power control in conjunction with the control unit 1005 (eg, a program routine for providing a mobile communication service). Or providing a mobile communication service including a hand-off and / or call processing procedure, wherein the mobile base station corresponding to the end of the mobile communication network in the process of providing the mobile communication service And an RF processing function (eg, performing antenna control, modulating, synthesizing, amplifying and / or filtering the radio frequency signal) for performing transmission and reception of the radio frequency signal. In particular, the wireless processing unit 1035 processes the information or signal transmitted from the wireless terminal to the mobile base station in the CDMA stack to provide the mobile communication service, or predetermined information or information from the CDMA stack received from the mobile base station. It is characterized by providing a function for reading out a signal.

According to a preferred embodiment of the present invention, the wireless terminal and the server side 200 provided on the mobile communication network and / or the server side 200 on the network interworking with the mobile communication network via the wireless processing unit 1035 It is preferred to be in communication connection.

The short range communication unit 1040 includes infrared ray communication, radio frequency (RF) communication, Bluetooth (BlueTooth), wireless LAN (Wireless LAN), Wi-Fi (Ui-Fi), and UWB (Ultra Wide Band system). Characterized in that to connect a predetermined terminal (or device) and a short-range wireless communication session through at least one or more short-range wireless communication means, the hardware includes the infrared communication, RF communication, Bluetooth, WLAN, WiFi, UWB And a predetermined short range wireless communication module for short range wireless communication, and includes a communication protocol and / or a driver for the short range wireless communication in software.

According to a preferred embodiment of the present invention, the wireless terminal connects a predetermined short range communication device and a short range wireless communication channel through the short range communication unit 1040, and connects the server side through a predetermined communication network to which the short range communication device is connected. It is preferred to be in communication with 200.

The memory unit 1070 is input and output when the operation by the predetermined program routine (or code) and / or program data (eg, program routine (or code) for controlling the overall operation of the wireless terminal and / or Or a general term for a memory device for storing data; read only memory (ROM) corresponding to read-only memory, flash memory (FM), and electrically erasable and programmable read only memory (EEPROM). And the like. In general, the ROM stores system information that should not be deleted, and the flash memory stores operating system routines, call processing program routines, and / or application program routines provided through the wireless terminal and information or data therefor. The EEPROM stores terminal registration related parameters, a telephone number (eg, an address book), or at least one information and / or data extracted and / or generated while executing an application provided in the wireless terminal.

The IC chip reader unit 1045 is provided between the processing unit and / or storage unit provided in the wireless terminal through the IC chip 1050 standard including ISO / IEC 7816 and / or ISO / IEC 14443. It provides information and / or data exchange of. For example, the IC chip reader unit 1045 provides information and / or data exchange between the IC chip 1050 agent program and the IC chip 1050 through an application protocol data unit (APDU).

Referring to the IC chip 1050 standard including ISO / IEC 7816 and / or ISO / IEC 14443, and the EMV standard, the IC chip 1050 mounted or detached from a wireless terminal may include the IC chip 1050. Communicating with the card terminal device through contact points such as power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), programming power supply (VPP), and / or input / output (I / O), etc. A processor unit 1060 including an input / output interface 1055, at least one computing element including a central process unit (CPU), a micro process unit (MPU), a coprocessor, and / or a read-only memory (ROM) And a memory unit 1065 including at least one memory element including only memory (RAM), random access memory (RAM), electrically erasable and programmable read only memory (EEPROM), flash memory (FM), and the like. At least one of the devices manages resources inside the smart card. A chip operating system (COS) is provided, and at least one of the remaining memory elements is provided with at least one IC chip 1050 storing information for providing a service using a smart card.

According to a preferred embodiment of the present invention, the memory unit 1070 provided in the wireless terminal and / or the memory unit 1065 provided in the IC chip 1050 includes at least one customer authentication information extracted from the wireless terminal. Preferably, the memory unit 1070 provided in the wireless terminal stores the customer terminal information including the wireless terminal telephone number and / or network information and / or the terminal serial number (). In the memory unit 1065 provided in the IC chip 1050, customer authentication information is provided in the authentication certificate information, payment means information, customer account information, and the customer second terminal provided in the IC chip 1050 (or IC card). Information (or data) included in the IC chip 1050 included in the 150, official certificate information included in the IC chip 1050 provided in the second client 150, and the second client 150. IC chip (1050) To be related information is stored IC chip 1050, which includes at least one or more information is preferred.

Referring to FIG. 10, the wireless terminal may include an information input unit 1080 for receiving predetermined customer authentication information, an information extractor 1085 for extracting predetermined customer authentication information, and / or predetermined customer authentication information. And an information transmitter 1090 for generating a data transmission unit 1090 for transmitting the customer authentication information to the server side 200, and the information input unit 1080 and / or The information extracting unit 1085 and / or the information generating unit 1090 and / or the information transmitting unit 1095 is a program for performing each defined operation in the WIPI platform provided in the wireless terminal, and the customer second terminal ( It is preferable to record on the recording medium provided at 150, and according to the method, the information transmitting means 170 may be a predetermined wireless message (e.g., Short Message Service (SMS), Enhanced Message Service (EMS), or MMS). (Multimedia Messaging Service) Song A program for reception or a program for wireless Internet access can be recorded on a recording medium provided in the second customer terminal 150.

The information input unit 1080 is linked to the key input unit 1015 customer authentication information (for example, the customer authentication information including ID data, password information, customer personal information, authentication certificate password information, etc.) The payment means password information, password information corresponding to the customer account, account transfer password information corresponding to the customer account) to perform the function of the information input means 155, and / or interworking with the biometric unit 1020 It is characterized in that to perform the function of the information input means 155 for receiving the customer authentication information including the biometric data.

The information extraction unit 1085 performs a function of the information extraction unit 160 for extracting customer authentication information including customer communication means information from the memory unit 1070 provided in the wireless terminal, and / or the IC chip. Customer authentication information based on the IC chip 1050 related information from the memory unit 1065 included in 1050 (eg, the authentication certificate information, the payment means information, the customer account information, and the customer second terminal 150 are provided). Information (or data) included in the integrated IC chip 1050, authorized certificate information included in the IC chip 1050 included in the second customer terminal 150, and the IC provided in the second customer terminal 150. And information extracting means 160 for extracting the unique information of the chip 1050).

The information generation unit 1090 processes and / or predetermined information before transmitting the customer authentication information input / extracted through the information input unit 1080 and / or the information extraction unit 1085 to the server side 200. When a data structure change process is required, the function of the information generating means 165 for generating the second customer authentication information through the input / extracted customer authentication information through a predetermined information processing procedure and / or data structure change procedure is performed. Characterized in that.

In addition, the wireless terminal is provided with an information transmitter 1095 for transmitting the input / extracted / generated customer authentication information to a predetermined server side 200, the information transmitter 1095 is the wireless processor 1035 And the information transmitting means 170 for transmitting the customer authentication information to the server side 200 in conjunction with the server, and / or the customer authentication information in connection with the local area communication unit 1040. Characterized in that it performs the function of the information transmitting means 170 for transmitting to (200).

As a preferred embodiment of the present invention, a predetermined internet banking service is provided to the wired terminal using the server side (1) 200-1 of FIG. 2 or 3 or 4 and / or 7 or 8 or 9. Considering the banking server to provide, the server side (2) (200-2) is described as a customer authentication server for authenticating the Internet banking use customer corresponding to the wired terminal by implementing a preferred Internet banking customer authentication method. .

11 is a diagram illustrating a dual customer authentication method according to an embodiment of the present invention.

In more detail, FIG. 11 illustrates a server side (1) 200-1 and a server included in the server side 200 of the customer authentication system using the Internet banking system of the multiple server side 200 as shown in FIG. 2 or FIG. 7. Preferred work of dual customer authentication processing of a customer connected to the server side (1) 200-1 through a predetermined customer first terminal 105 (wired terminal) by interworking with the side (2) 200-2. In particular, as shown in FIG. 11, in order to help those skilled in the art to understand the present invention, the customer first terminal 105 is regarded as a wired terminal, and the customer second terminal ( After considering 150 as a wireless terminal, the server side (1) 200-1 shown in the Internet banking user authentication system of the multiple server side 200 method as shown in FIG. 2 or FIG. 7 is connected to the wired terminal. Regarding a banking server that provides a predetermined internet banking service, the server side 2 (200-2) The following description will be regarded as a customer authentication server provided on a mobile communication network connected to a customer-owned wireless terminal and / or a communication network interworking with the mobile communication network.

Referring to FIG. 11, the wired terminal corresponding to the customer first terminal 105 accesses a banking server providing dual customer authentication service through the Internet (1100), and provides predetermined customer identifier information to the banking server. In operation 1110, the banking server provides the customer identifier information provided from the wired terminal to a predetermined customer authentication server.

According to another embodiment of the present invention, the banking server does not provide the customer identifier information provided from the wired terminal to the customer authentication server, but the customer identifier information (for example, from the wired terminal) associated with the provided customer identifier information. When receiving ID information and password information, providing the customer authentication means for the customer-owned wireless terminal included in the member information stored in association with the ID information and password information to the customer authentication server It is possible.

When the predetermined customer identifier information is provided as described above, the customer authentication server transmits the predetermined customer authentication information corresponding to the customer identifier information to the wired terminal to provide the wireless banking service more conveniently and reliably. A predetermined customer authentication information request message requesting to transmit through the terminal is output (1115).

According to another exemplary embodiment of the present invention, the customer authentication server corresponds to a wireless terminal (eg, the second client terminal 150) for transmitting / receiving / generating and generating the customer authentication information request message. Wireless terminal) directly to the customer authentication server, the customer authentication means information corresponding to the customer-owned wireless terminal from the banking server, or the customer communication means information is written to the customer authentication server If provided, the customer identifier information associated with the corresponding customer communication means information is provided.

According to another exemplary embodiment of the present invention, after the banking server provides the customer identifier information provided from the wired terminal to a predetermined customer authentication server, the banking server sends predetermined customer authentication information to the customer authentication server. It is possible to transmit and output the customer authentication information request message to be transmitted to the wired terminal and / or the wireless terminal.

After outputting the customer authentication information request message as described above, the customer authentication server waits for receiving customer authentication information corresponding to the customer identifier information from the wireless terminal corresponding to the second customer terminal 150 (1120). If predetermined customer authentication information is received from the wireless terminal (1125), the customer authentication server checks the validity of the received customer authentication information (1130).

According to the exemplary embodiment of the present invention, the validity checking method for the customer authentication information may be variously performed according to the type and characteristic of the received customer authentication information. For example, when the customer authentication information is customer authentication information based on key data input through predetermined information input means 155 provided in the customer terminal, the customer authentication server receives the received information on a predetermined storage medium 260. Validity of the customer authentication information by extracting predetermined customer authentication information stored by matching the customer authentication information, and comparing the customer authentication information received from the wireless terminal with the customer authentication information extracted from the storage medium 260. Check. In addition, when the customer authentication information is information related to the IC chip 1050 extracted from the IC chip 1050 mounted or detached from the wireless terminal through a predetermined information extraction means 160 provided in the customer terminal, The customer authentication server checks the validity of the received customer authentication information according to the IC chip 1050 related standards.

If the validity of the received customer authentication information is not authenticated (1135), the customer authentication server generates a validation error authentication result for the customer authentication information (1149), while the validity of the received customer authentication information If it is authenticated (1135), the customer authentication server generates a validation verification result for the customer authentication information (1145).

When the validity authentication result for the customer authentication information is generated as described above, the customer authentication server transmits the validity authentication result (or customer authentication result) for the customer authentication information generated corresponding to the customer authentication information to the banking server. The banking server reads the validity authentication result (or customer authentication result) to determine whether the customer is authenticated (1155).

According to a preferred embodiment of the present invention, the banking server determines whether the customer is authenticated by checking whether the validity authentication result (or customer authentication result) corresponds to TRUE or FALSE. It is preferable.

If the customer is not authenticated (eg, if the validity authentication result (or customer authentication result) corresponds to FALSE) (1160), the banking server generates a predetermined customer authentication error message to generate the wired message. Transmitting and outputting to the terminal (1165), the end of providing a predetermined banking service to the customer.

On the other hand, if the customer is authenticated (eg, if the validity authentication result (or customer authentication result) corresponds to TRUE) (1160), the banking server provides a predetermined banking service to the wired terminal ( 1170).

According to a preferred embodiment of the present invention, the banking server provides a banking service to the customer (1170). The communication channel between the wired terminal and the shopping mall server is preferably maintained until disconnected.

12 is a diagram showing a dual customer authentication method according to another embodiment of the present invention.

In more detail, FIG. 12 illustrates a server side (1) 200-1 and a server included in the server side 200 of the customer authentication system of the Internet banking system using the multiple server side 200 as shown in FIG. 2 or FIG. 7. Preferred work of dual customer authentication processing of a customer connected to the server side (1) 200-1 through a predetermined customer first terminal 105 (wired terminal) by interworking with the side (2) 200-2. In particular, as shown in FIG. 12, in order to help those of ordinary skill in the art to understand the present invention, the customer first terminal 105 is regarded as a wired terminal, and the customer second terminal ( After considering 150 as a wireless terminal, the server side (1) 200-1 shown in the Internet banking user authentication system of the multiple server side 200 method as shown in FIG. 2 or FIG. 7 is connected to the wired terminal. Regarding a banking server that provides a predetermined internet banking service, the server side 2 (200-2) The following description will be regarded as a customer authentication server provided on a mobile communication network connected to a customer-owned wireless terminal and / or a communication network interworking with the mobile communication network.

Referring to FIG. 12, the wired terminal corresponding to the customer first terminal 105 accesses a banking server providing dual customer authentication service through the Internet (1200), and provides predetermined banking identifier information to the banking server. The banking server provides the customer identifier information provided from the wired terminal to a predetermined customer authentication server (1210).

According to another exemplary embodiment of the present invention, the banking server does not provide the customer identifier information provided from the wired terminal to the customer authentication server, but the customer identifier information (for example, from the wired terminal) associated with the provided customer identifier information. When receiving ID information and password information, providing the customer authentication means for the customer-owned wireless terminal included in the member information stored in association with the ID information and password information to the customer authentication server It is possible.

After providing the predetermined customer identifier information to the customer authentication server as described above, the banking server owns the predetermined customer authentication information corresponding to the customer identifier information to the wired terminal to provide more convenient and reliable service. A predetermined customer authentication information request message requesting to transmit from the wireless terminal to the customer authentication server is output (1215).

According to another exemplary embodiment of the present invention, a process of transmitting and outputting a customer authentication information request message may be performed by the customer authentication server. The wireless terminal may input / extract / create and transmit the customer authentication information as well as the wired terminal. It can also be sent directly to the output.

After outputting the customer authentication information request message as described above, the banking server waits for receiving a validity authentication result (or customer authentication result) for the customer authentication information from the customer authentication server (1220).

According to a preferred embodiment of the present invention, the customer authentication server receives predetermined customer authentication information from the wireless terminal through the validation process (1120 ~ 1150) of the customer authentication information shown in Figure 11 and the customer authentication information Generate a validity authentication result (or customer authentication result) for and send it to the banking server.

If the validity authentication result (or customer authentication result) for the customer authentication information is received from the customer authentication server (1225), the banking server reads the received validity authentication result (or customer authentication result) to the wired terminal. It is determined whether the customer is connected to the authentication process (1230).

According to a preferred embodiment of the present invention, the banking server determines whether the customer is authenticated by checking whether the validity authentication result (or customer authentication result) corresponds to TRUE or FALSE. It is preferable.

If the customer is not authenticated (eg, if the validity authentication result (or customer authentication result) corresponds to FALSE) (1235), the banking server generates a predetermined customer authentication error message to generate the wired message. Transmitting and outputting to the terminal (1240), the end of providing a predetermined Internet banking service to the customer.

On the other hand, if the customer is authenticated (eg, if the validity authentication result (or customer authentication result) corresponds to TRUE) (1235), the banking server provides the Internet banking service to the customer through the wired terminal. Provide (1245).

13 and 14 illustrate a method of transmitting customer authentication information based on an IC chip 1050 (IC card) according to another exemplary embodiment of the present invention.

13 and 14 illustrate the customer authentication by extracting and / or generating predetermined customer authentication information from a wireless terminal corresponding to the second customer terminal 150 corresponding to the dual customer authentication method of FIG. 11 or FIG. 12. As a process for transmitting to the server, in more detail the predetermined IC chip 1050 based on the customer authentication information stored in the IC chip 1050 mounted on or detached from the wireless terminal (for example, certificate information, payment means information, Customer account information, information (or data) included in the IC chip 1050 included in the second customer terminal 150, and an authorized certificate included in the IC chip 1050 provided in the second customer terminal 150 Information, the IC chip 1050 unique information provided in the second customer terminal 150) and / or a predetermined customer authentication information is generated and transmitted to the customer authentication server. However, FIG. 13 illustrates a preferred embodiment of transmitting predetermined customer authentication information from the IC chip 1050 by the wireless terminal to the customer authentication server after pre-extraction and / or generation, and FIG. 14 shows the wireless terminal. In accordance with the preferred embodiment of the method for extracting and transmitting the predetermined customer authentication information from the IC chip 1050 after connecting to the customer authentication server.

Those skilled in the art to which the present invention pertains, the wireless terminal in which the IC chip 1050 is mounted or detached in FIG. 13 and FIG. 14 is only one embodiment. It will be apparent that any terminal equipped with an interlocking IC card reader may be used.

Referring to FIG. 13, the wireless terminal changes the operation mode of the wireless terminal to the operation mode of the IC chip 1050 in response to the customer authentication information request message shown in FIG. 11 or 12 (1300).

According to an embodiment of the present invention, the wireless terminal includes a functional configuration (eg, the information extraction unit 1085 of FIG. 10) for providing the dual customer authentication service proposed by the present invention during manufacture and / or release. It is equipped with a virtual machine (virtual machine) and / or program for a wireless terminal, or includes a functional configuration for providing the dual customer authentication service by the IC chip 1050 issuer that is mounted on or detached from the wireless terminal It is possible to download and mount the virtual machine and / or program for the wireless terminal to the operation, the IC chip 1050 operation mode change process 1300 is the virtual machine and / or program for the wireless terminal mounted on the wireless terminal. To drive.

In addition, the memory unit 1070 of the memory unit 1065 in the IC chip 1050 and / or the virtual machine and / or program for the wireless terminal is mounted on the wireless terminal through a predetermined wireless network. Preferably, the predetermined customer authentication server connection information for communicating with the customer authentication server is stored.

When the IC chip 1050 is changed to an operation mode as described above, the wireless terminal changes to a mode for extracting and / or generating customer authentication information through the IC chip 1050 (1305). It is desirable to make it through a menu selection of a virtual machine and / or a program for a wireless terminal that includes a functional configuration for providing dual customer authentication services mounted on it.

When the operation mode of the wireless terminal is changed through the above process, the wireless terminal checks the validity of the IC chip 1050 (1310), and the validity checking process of the IC chip 1050 is performed by the wireless terminal. It is preferable to include a predetermined PIN (Personal Identification Number) through the key input means provided in the and to authenticate the PIN in the IC chip 1050, whereby the predetermined from the IC chip 1050 Confidentiality, Authentication, Integrity, and Nonrepudiation for customer authentication information extraction are obtained.

If the validity of the IC chip 1050 is not authenticated (1315), the wireless terminal extracts and / or generates predetermined customer authentication information from the IC chip 1050 and transmits it to the customer authentication server. Quit.

On the other hand, if the validity of the IC chip 1050 is authenticated (1315), the wireless terminal from the IC chip 1050, predetermined IC chip 1050 based customer authentication information (for example, authentication certificate information, payment means information, Customer account information, information (or data) included in the IC chip 1050 included in the second customer terminal 150, and an authorized certificate included in the IC chip 1050 provided in the second customer terminal 150 Information, the IC chip 1050 unique information provided in the second customer terminal 150) is extracted (1320), and it is checked whether the extracted IC chip 1050 based customer authentication information is encrypted (1325).

If the IC chip 1050 based customer authentication information is encrypted (1325), the wireless terminal encrypts a public key infrastructure using a predefined encryption process (eg, a public certificate provided in the IC chip 1050). In step 1330, the IC chip 1050 based on the customer authentication information is encrypted to generate predetermined customer authentication information that can be transmitted to the customer authentication server.

When the customer authentication information based on the IC chip 1050 is extracted and / or generated as described above, the wireless terminal receives the memory from the memory unit 1065 in the IC chip 1050 and / or the memory unit 1070 in the wireless terminal. Communication connection information for the customer first terminal 105 or the banking server that will receive the customer authentication information last is extracted (1335).

According to another embodiment of the present invention, when the communication connection information is not stored in the memory unit 1065 in the IC chip 1050 and / or the memory unit 1070 in the wireless terminal, the customer authentication information request message is sent. Based on the key input means provided in the wireless terminal based on the communication connection information for the customer first terminal 105 or the banking server that will receive the final customer authentication information may be received.

As described above, when the IC chip 1050 based customer authentication information is extracted and / or generated, and the customer authentication server access information is extracted (or input), the wireless terminal authenticates a customer on a network through the customer authentication server access information. The customer authentication information is transmitted to a server (1340), and the customer authentication server performs a process of checking validity of the customer authentication information (1120 to 1150) shown in FIG. Authenticate the customer who connected to.

Referring to FIG. 14, the wireless terminal changes the operation mode of the wireless terminal to the operation mode of the IC chip 1050 in response to the customer authentication information request message shown in FIG. 11 or 12 (1400). The wireless terminal checks the validity of the IC chip 1050 (1405).

If the validity of the IC chip 1050 is not authenticated (1410), the wireless terminal extracts and / or generates predetermined customer authentication information from the IC chip 1050 and transmits it to the customer authentication server. Quit.

On the other hand, if the validity of the IC chip 1050 is authenticated (1410), the wireless terminal receives the customer authentication information from the memory unit 1065 and / or the memory unit 1070 in the wireless terminal 1050. Extracting communication connection information about the customer authentication server to be received (or inputting via key input means provided in the wireless terminal) (1415) and connecting the customer authentication server access information to the customer authentication server on the network (1420). If the customer authentication server access information is not stored in the memory unit 1065 in the IC chip 1050 and / or the memory unit 1070 in the wireless terminal according to the embodiment of the present invention, the customer authentication information request is requested. Based on the message, predetermined customer authentication server access information may be input through a key input means provided in the wireless terminal.

After the wireless terminal accesses the customer authentication server as described above, the wireless terminal changes to a mode for extracting and / or generating customer authentication information through the IC chip 1050 (1425). It is desirable to make it through a menu selection of a virtual machine and / or program for a wireless terminal that includes a functional configuration for providing dual customer authentication services mounted on the terminal.

When the operation mode of the wireless terminal is changed through the above process, the wireless terminal uses the IC chip 1050 based on predetermined IC chip 1050 based on customer authentication information (eg, authentication certificate information, payment means information, and customer account). Information, information (or data) included in the IC chip 1050 included in the second customer terminal 150, official certificate information included in the IC chip 1050 provided in the second customer 150, The IC chip 1050 unique information included in the second customer terminal 150) is extracted (1330), and it is checked whether the extracted IC chip 1050 based customer authentication information is encrypted (1435).

If the IC chip 1050 encrypts the customer authentication information (1435), the wireless terminal encrypts the public key infrastructure using a predefined encryption process (eg, a public certificate provided in the IC chip 1050). In step 1440, the IC chip 1050 based on the customer authentication information is encrypted to generate predetermined customer authentication information that can be transmitted to the customer authentication server.

When the customer authentication information based on the IC chip 1050 is extracted and / or generated as described above, the wireless terminal transmits the customer authentication information to the customer authentication server on the network through the communication connection information (1445). The authentication server authenticates the customer accessing the predetermined server side 200 through the wired terminal through the process of checking the validity (1120 ~ 1150) of the customer authentication information shown in FIG.

FIG. 15 illustrates a method of transmitting customer authentication information based on an IC chip 1050 (IC card) according to another embodiment of the present invention.

In more detail, in FIG. 15, in the Internet banking user authentication system as shown in FIG. 3 or FIG. 8, as shown in FIG. 2) after receiving to 200-2, a preferred customer for the case that the object to be finally received the customer authentication information at the server side (2) (200-2) corresponds to the customer first terminal 105 The authentication information transmission method.

Referring to FIG. 17, when customer authentication information including predetermined communication connection information is transmitted from a customer owned wireless terminal as shown in FIG. 13, the customer authentication information may be a relay server provided in a wireless network to which the wireless terminal is connected. Received by a predetermined relay server provided on a network interworking with the wireless network (1500), the relay server reads the customer authentication information to communicate with a wired terminal or a customer authentication server that finally receives the customer authentication information Check the connection information (1505).

If the target to receive the customer authentication information is not a wired terminal corresponding to the customer first terminal 105 (for example, if the customer authentication server receives the customer authentication information) (1510), the relay server is The customer authentication information is relayed and transmitted to a predetermined customer authentication server corresponding to the communication connection information (1515), and the customer authentication server performs the validity checking process (1120 to 1150) of the customer authentication information shown in FIG. Validation (or customer authentication) on the customer authentication information is performed (1520).

On the other hand, if the target of receiving the customer authentication information is the wired terminal corresponding to the customer first terminal 105, the relay server relays the customer authentication information to the wired terminal corresponding to the communication connection information (1525). After the temporary storage of the customer authentication information (1530), the wired terminal authenticates the customer by interworking with a predetermined customer authentication server based on the temporarily stored customer authentication information (1535).

According to the present invention, when accessing an Internet banking through a predetermined first client terminal, the customer authentication procedure is performed through a predetermined second client terminal for inputting, generating, and extracting predetermined client authentication information. There is an advantage of providing better security than performing a customer authentication procedure through the customer first terminal connected to the server on the server.

According to the present invention, when the second terminal is a customer-owned portable terminal, when the Internet banking access through a predetermined customer first terminal used by a plurality of customers, the mobile terminal is not through the customer first terminal There is an advantage to secure access to the server.

According to the present invention, when a predetermined payment means, a financial means, or a billing system are provided in the second terminal of the head, the predetermined customer first terminal is based on the dual customer authentication information when the Internet banking connection and the Internet banking service are used. There is an advantage of conveniently handling the financial transaction.

Claims (62)

A customer identifier information receiving step of receiving predetermined customer identifier information from the customer first terminal in a predetermined information receiving means when a customer first terminal accesses the Internet banking; A customer authentication information receiving step of receiving, by the predetermined information receiving means, the predetermined customer authentication information from the second customer terminal; And And a customer authentication step of authenticating a customer accessing the internet banking through the customer first terminal on the basis of the received customer authentication information. In the customer authentication method for authenticating a customer at the time of internet banking access of the first terminal of the customer Customer authentication information receiving step of receiving predetermined customer authentication information from a customer second terminal; And And a customer authentication step of authenticating a customer accessing the internet banking through the customer first terminal on the basis of the received customer authentication information. The method according to claim 1 or 2, And a customer authentication result transmitting step of transmitting the authentication result through the customer authentication step to an internet banking server connected to the first terminal of the customer. The method according to claim 1 or 2, Identifying an internet banking server (server connected to the first client terminal) corresponding to the authentication result through the customer authentication information and / or the customer authentication step; And And transmitting the authentication result through the customer authentication step to the confirmed internet banking server. The method according to claim 1 or 2, On the basis of the authentication result through the customer authentication step, using the Internet banking transaction approval step for approving the Internet banking transaction through the first customer terminal in a predetermined Internet banking transaction approval means Customer Authentication Method. The method of claim 1 or 2, wherein the receiving customer authentication information comprises: And receiving the customer authentication information from a server or a relay server connected to a communication company server or a communication company server, transmitting the received customer authentication information to an internet banking server connected to the first customer terminal. Characterized by the customer authentication method using the Internet banking. The method of claim 1 or 2, wherein the receiving customer authentication information comprises: And transmitting the received customer authentication information to the customer first terminal so that the authentication information is temporarily stored in the customer first terminal. The method of claim 1 or 2, wherein the receiving customer authentication information comprises: When receiving the customer authentication information from a server or a relay server associated with a carrier server or a carrier server, Checking an internet banking server (server connected to the first client terminal) corresponding to the customer authentication information; And And transmitting the received customer authentication information to the confirmed internet banking server. The method of claim 1 or 2, wherein the customer authentication information receiving step or the customer authentication step, And if the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process, decrypting the encrypted customer authentication information. The method of claim 1 or 2, wherein the customer authentication step, Or to authenticate the customer by comparing the customer authentication information previously stored in a predetermined storage medium with the customer authentication information sent by the second terminal of the customer; or And comparing the predetermined customer identification information provided from the first client terminal with the customer identification information transmitted by the second client terminal to authenticate the customer. The method of claim 1, wherein the customer identifier information, An Internet banking customer authentication method comprising at least one of ID information, password information, customer personal information, customer biometric information, customer communication means information, and public certificate information. The method of claim 1 or 2, wherein the customer authentication information, ID information, password information, customer personal information, customer biometric information, customer communication means information, public certificate information, public certificate password information, payment method information, payment method password information, customer Account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, information (or data) included in the IC chip provided in the customer second terminal, and the customer second terminal. And at least one of the public certificate information included in the provided IC chip, the IC chip unique information provided in the second customer terminal, and at least one predetermined authentication key data provided in the second customer terminal. How to authenticate customers using internet banking. The method of claim 1 or 2, wherein the customer authentication information, Internet banking using the customer authentication method characterized in that the transmission is encrypted according to a predetermined encryption processing process. The method of claim 1 or 2, wherein the customer first terminal, A wired terminal including a computer, A terminal (or device) including at least one or more information processor (or kiosk), cash dispenser, cash dispenser, or payment terminal; Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, Internet banking using customer authentication method comprising at least one RFID terminal. The method according to claim 1 or 2, wherein the customer second terminal, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, A wired terminal including a computer, A terminal (or device) including at least one information processor (or kiosk), an ATM, a cash dispenser, a payment terminal, and Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Internet banking using customer authentication method comprising at least one RFID terminal. A recording medium comprising a program for executing the method of any one of claims 1 to 10. Information receiving means (1) for receiving predetermined customer identifier information from the first client terminal when the first bank terminal is connected to the Internet banking; Information receiving means (2) for receiving predetermined customer authentication information from a second customer terminal; And Customer authentication means for authenticating a customer accessing the Internet banking through the customer first terminal based on the customer authentication information received by the information receiving means (2); system. When accessing internet banking of customer's first terminal, Information receiving means for receiving predetermined customer authentication information from a second customer terminal; And And customer authentication means for authenticating a customer accessing the Internet banking through the customer first terminal based on the customer authentication information received by the information receiving means. Information receiving means (1) for receiving predetermined customer identifier information from the first client terminal when the first bank terminal is connected to the Internet banking; Information receiving means (2) for receiving predetermined customer authentication information from a second customer terminal; And And information transmitting means for transmitting the customer authentication information received by the information receiving means 2 to the customer first terminal so that the authentication information is temporarily stored in the customer first terminal. Banking customer authentication system. When accessing internet banking of customer's first terminal, Information receiving means for receiving predetermined customer authentication information from a second customer terminal; And And information transmitting means for transmitting the customer authentication information received by the information receiving means to the customer first terminal so that the authentication information is temporarily stored in the customer first terminal. Authentication system. The method of claim 17 or 18, wherein the customer authentication means, The customer authentication information associated with the customer identifier information transmitted by the customer first terminal is compared with the customer authentication information transmitted by the customer second terminal, and the customer who accesses the Internet banking through the customer first terminal is authenticated. Internet banking use customer authentication system, characterized in that. The method of claim 17 or 18, wherein the customer authentication means, Internet banking, characterized in that the customer authentication information stored in a predetermined storage medium and the customer authentication information transmitted by the second customer terminal to compare the customer access to the Internet banking through the first customer terminal authentication process Use customer authentication system. The method of claim 17 or 18, And an authentication result transmission means for transmitting the authentication result of the customer authentication means to the information receiving means. The method of claim 17 or 18, And a predetermined internet banking transaction approval means for approving the internet banking transaction through the first customer terminal based on the authentication result through the customer authentication end means. 18. The method according to claim 17, wherein the information receiving means (2) Internet banking use customer authentication system, characterized in that the same as or separately from the information receiving means (1). 18. The method according to claim 17, wherein the information receiving means (2) Characterized in that provided in the server or relay server associated with the communication company server or communication company server, Internet banking use customer authentication system characterized in that it further comprises information confirmation means for identifying the Internet banking server corresponding to the customer authentication information, and information transmission means for transmitting the customer authentication information to the confirmed Internet banking server . The method of claim 17 or 18, wherein the customer authentication means, It is provided in a communication server or a server associated with a communication server, or in a relay server on a network, or Internet banking use customer authentication system, characterized in that provided in the Internet banking server connected to the first client terminal. The method of claim 17 or 18, wherein the customer authentication means, And if the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process, decrypting the encrypted customer authentication information. The method of claim 17 or 18 or 19 or 20, wherein each of the means, On a single server, Customer authentication system, characterized in that provided in a plurality of servers (or terminals). The method of claim 17, wherein the customer identifier information, An Internet banking user authentication system comprising at least one of ID information, password information, customer personal information, customer biometric information, customer communication means information, and public certificate information. The method according to claim 17 or 18 or 19 or 20, wherein the customer authentication information, ID information, password information, customer personal information, customer biometric information, customer communication means information, public certificate information, public certificate password information, payment method information, payment method password information, customer Account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, information (or data) contained in the IC chip provided in the customer second terminal, and the customer second And at least one authorized certificate information included in the IC chip provided in the terminal, IC chip unique information provided in the second customer terminal, and predetermined authentication key data provided in the second customer terminal. Internet banking user authentication system. The method according to claim 17 or 18 or 19 or 20, wherein the customer authentication information, A customer authentication system characterized by being encrypted and transmitted according to a predetermined encryption processing process. The method according to claim 17 or 18 or 19 or 20, wherein the customer first terminal, A wired terminal including a computer, A terminal (or device) including at least one information processor (or kiosk), an ATM, a cash dispenser, a payment terminal, and Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, Internet banking use customer authentication system comprising at least one RFID terminal. The method according to claim 17 or 18 or 19 or 20, wherein the customer second terminal, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, A wired terminal including a computer, A terminal (or device) including at least one information processor (or kiosk), an ATM, a cash dispenser, a payment terminal, and Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Internet banking use customer authentication system comprising at least one RFID terminal. 29. A recording medium comprising a program for executing the means function of any one of claims 17 to 28. A customer first terminal accessing an internet banking server and providing predetermined customer identifier information; A second client terminal connected to the Internet banking server and transmitting predetermined customer authentication information; And And an internet banking server for authenticating a customer accessing the internet banking through the customer first terminal based on the customer authentication information transmitted by the second customer terminal. A first client terminal connecting to the Internet banking server; A second client terminal connected to the Internet banking server and transmitting predetermined customer authentication information; And And an internet banking server for authenticating a customer accessing the internet banking through the customer first terminal based on the customer authentication information transmitted by the second customer terminal. 38. The method of claim 36 or 37, wherein the customer first terminal, And receiving the customer authentication information transmitted by the second customer terminal and temporarily storing the customer authentication information in a predetermined memory. 38. The method of claim 36 or 37, wherein the customer first terminal, A wired terminal including a computer, A terminal (or device) including at least one information processor (or kiosk), an ATM, a cash dispenser, a payment terminal, and Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, Internet banking use customer authentication system comprising at least one RFID terminal. 38. The method of claim 36 or 37, wherein the customer second terminal, And the customer authentication information is encrypted and transmitted according to a predetermined encryption process. 38. The method of claim 36 or 37, wherein the customer second terminal, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, A wired terminal including a computer, A terminal (or device) including at least one information processor (or kiosk), an ATM, a cash dispenser, a payment terminal, and Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Internet banking use customer authentication system comprising at least one RFID terminal. 38. The method of claim 36 or 37, wherein the internet banking server, The customer authentication information associated with the customer identifier information transmitted by the customer first terminal is compared with the customer authentication information transmitted by the customer second terminal, and the customer who accesses the Internet banking through the customer first terminal is authenticated. Internet banking use customer authentication system, characterized in that. The method of claim 36 or 37, wherein the server, Internet banking, characterized in that the customer authentication information stored in a predetermined storage medium and the customer authentication information transmitted by the second customer terminal to compare the customer access to the Internet banking through the first customer terminal authentication process Use customer authentication system. The method of claim 36 or 37, wherein the server, And if the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process, decrypting the encrypted customer authentication information. 38. The method of claim 36 or 37, wherein the internet banking server, Internet banking using customer authentication system consisting of a single server or a combination of a plurality of servers (or terminals). The method of claim 36, wherein the customer identifier information, An Internet banking user authentication system comprising at least one of ID information, password information, customer personal information, customer biometric information, customer communication means information, and public certificate information. 38. The method of claim 36 or 37, wherein the customer authentication information, ID information, password information, customer personal information, customer biometric information, customer communication means information, public certificate information, public certificate password information, payment method information, payment method password information, customer Account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, information (or data) included in the IC chip provided in the customer second terminal, and the customer second terminal. And at least one of the public certificate information included in the provided IC chip, the IC chip unique information provided in the second customer terminal, and at least one predetermined authentication key data provided in the second customer terminal. Internet banking customer authentication system. 38. The method of claim 36 or 37, wherein the customer authentication information, Internet banking use customer authentication system, characterized in that the encrypted transmission process according to a predetermined encryption process. An information receiver (1) for receiving predetermined customer identifier information from a first client terminal connected to the Internet banking; When a second client of the customer transmits customer authentication information and / or authenticates the customer using the customer authentication information transmitted by the second client of the client from a predetermined server, and receives the data when the customer authentication result data is transmitted. An information receiving unit 2; And And a customer authentication unit configured to authenticate a customer accessing the Internet banking through the customer first terminal based on the customer authentication information and / or customer authentication result data received by the information receiver 2. Internet banking server. When accessing internet banking of customer's first terminal, When a second client of the customer transmits customer authentication information and / or authenticates the customer using the customer authentication information transmitted by the second client of the client from a predetermined server, and receives the data when the customer authentication result data is transmitted. An information receiving unit; And And a customer authentication unit configured to authenticate a customer accessing the internet banking through the customer first terminal based on the customer authentication information and / or customer authentication result data received by the information receiver. server. An information receiver (1) for receiving predetermined customer identifier information from a first client terminal connected to the Internet banking; An information receiving unit 2 receiving the customer authentication information when the second client terminal transmits the customer authentication information; And And a transmission unit for transmitting the customer authentication information received by the information receiving unit 2 to the customer first terminal so that the authentication information is temporarily stored in the customer first terminal. . When accessing internet banking of customer's first terminal, An information receiving unit which receives the second client terminal when the second client terminal transmits the customer authentication information; And And a transmission unit which transmits the customer authentication information received by the information receiver to the customer first terminal so that the authentication information is temporarily stored in the customer first terminal. The method of claim 49 or 50, wherein the customer authentication unit, The customer authentication information associated with the customer identifier information transmitted by the customer first terminal is compared with the customer authentication information transmitted by the customer second terminal, and the customer who accesses the Internet banking through the customer first terminal is authenticated. Internet banking server, characterized in that. The method of claim 49 or 50, wherein the customer authentication unit, Internet banking, characterized in that the customer authentication information stored in a predetermined storage medium and the customer authentication information transmitted by the second customer terminal to compare the customer access to the Internet banking through the first customer terminal authentication process server. The method of claim 49 or 50, And an internet banking transaction approval unit configured to approve the internet banking transaction through the first customer terminal based on the authentication result through the customer authentication unit. The method of claim 49 or 50, wherein the Internet banking server, And if the customer authentication information is encrypted and transmitted according to a predetermined encryption processing process, decrypting the encrypted customer authentication information. The method of claim 49, wherein the customer identifier information, An Internet banking server comprising at least one of ID information, password information, customer personal information, customer biometric information, customer communication means information, and public certificate information. 52. The method of claim 49 or 50 or 51 or 52, wherein the customer authentication information, ID information, password information, customer personal information, customer biometric information, customer communication means information, public certificate information, public certificate password information, payment method information, payment method password information, customer Account information, password information corresponding to the customer account, account transfer password information corresponding to the customer account, information (or data) contained in the IC chip provided in the customer second terminal, and the customer second And at least one authorized certificate information included in the IC chip provided in the terminal, IC chip unique information provided in the second customer terminal, and predetermined authentication key data provided in the second customer terminal. Internet banking server. 52. The method of claim 49 or 50 or 51 or 52, wherein the customer authentication information, An internet banking server, characterized in that the encrypted transmission process according to a predetermined encryption process. 53. The method of claim 49 or 50 or 51 or 52, wherein the customer first terminal, A wired terminal including a computer, A terminal (or device) including at least one information processor (or kiosk), an ATM, a cash dispenser, a payment terminal, and Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, Internet banking server comprising at least one RFID terminal. 53. The method of claim 49 or 50 or 51 or 52, wherein the customer second terminal, Wireless terminals such as mobile phones, PDAs, mobile Internet phones, telematics, Landline phone, A wired terminal including a computer, A terminal (or device) including at least one information processor (or kiosk), an ATM, a cash dispenser, a payment terminal, and Household appliances equipped with communication functions such as a television, a refrigerator, a microwave oven, and audio, Exercise equipment equipped with a communication function, Internet banking server comprising at least one RFID terminal. 57. A recording medium comprising a program for executing the server function of any one of claims 49 to 56.

Images