KR20080007782A - Method for protecting account information with emergency pin number and mobile terminal therefor - Google Patents

Abstract

A method for protecting account information with an emergency PIN(Personal ID Number) and a mobile terminal for the same are provided to protect a user account and prevent progress of a financial service by setting an ordinary and emergency PIN to a smart card, and generating/providing an abnormal process message representing unavailability of the financial service when the emergency PIN is inputted to a smart card authentication system. A key input part(206) receives the PIN for requesting the financial service and protecting the user account from a user of the mobile terminal. A program memory(202) stores a program for checking the inputted PIN, receiving the financial service, and generating/providing the abnormal process message. A display unit(208) displays a PIN authentication screen, an account information screen, and the abnormal process message for receiving the financial service as well as an operation state of the mobile terminal. A microprocessor(214) generates/provides the abnormal process message or provides an ordinary financial service by comparing the inputted PIN with the PIN set in the smart card(110).

Description

Method for Protecting Account Information with Emergency Pin Number and Mobile Terminal Therefor}

1 is a diagram schematically illustrating a smart card authentication system receiving a financial service using a mobile communication network;

2 is a flowchart illustrating a pin number authentication process for a mobile terminal to receive a financial service in a conventional smart card authentication system.

3 is a block diagram schematically illustrating an internal structure of a mobile terminal for protecting a user account by generating and providing an abnormal processing message according to an embodiment of the present invention;

4 is a block diagram showing an internal configuration of a microprocessor according to an embodiment of the present invention;

5 is a block diagram showing an internal configuration of a smart card according to an embodiment of the present invention;

 6 is a flowchart illustrating a user account protection method of generating and providing an abnormal processing message when an emergency pin is input according to an embodiment of the present invention;

7 is an exemplary screen of a mobile terminal receiving a financial service according to an embodiment of the present invention.

The present invention relates to a method for protecting account information using an emergency pin and a mobile terminal for the same. More specifically, if a personal identification number (PIN) and an emergency pin are set on the smart card, and an emergency pin is input as an authentication pin for providing a financial service, an abnormal processing message indicating that the financial service is not available is generated. The present invention relates to a method for protecting account information using an emergency pin for protecting a user account and preventing the progress of financial services, and a mobile terminal for the same.

As the mobile communication industry develops, various services such as content use and banking using a mobile terminal are provided, and the field of use thereof is increasing. However, for financial services such as banking, such as payment for the use of the content or bank transfer, withdrawal, payment, etc., a security payment method must be added, and a payment method using a smart card has been introduced for this purpose.

In order to receive a financial service using a mobile terminal, a smart card registered in the authentication management server is mounted, and a pin number for performing an authentication procedure is registered in the smart card.

The user inputs the registered pin number, authenticates with the smart card mounted in the mobile terminal, and connects to the financial service server, thereby providing financial services such as content use and banking.

1 is a diagram schematically illustrating a smart card authentication system receiving a financial service using a mobile communication network.

The smart card authentication system for providing a financial service includes a mobile terminal 120 including a smart card 110, a mobile communication network 130 performing wireless communication with the mobile terminal 120, and an automatic deposit withdrawal example for providing a financial service. Device (ATM: Automated-Teller Machine, hereinafter referred to as 'ATM') / cash dispenser (CD: Cash Dispenser, hereinafter referred to as 'CD') 140, mobile communication network 130 or ATM / CD 140 Authentication management server 150 and financial service server 160 connected to the.

In order to receive financial services using the smart card 110, the mobile terminal 120 should be provided with a slot into which the smart card 110 can be inserted. In addition, a financial settlement program for receiving a financial service using the smart card 110 should be mounted.

The authentication management server 140 stores the authentication information including the terminal information, the subscriber information and the smart card information and the information of the financial service server 150 in advance, and the authentication processing information and the financial information transmitted through the mobile communication network 130. In response to the service request signal, the mobile terminal 110 performs the authentication procedure of the smart card 120 and connects the mobile terminal 110 to the financial service server 150.

The financial service server 160 is a server that provides various financial services such as content provision or banking.

2 is a flowchart illustrating a pin number authentication process for a mobile terminal to receive a financial service in a conventional smart card authentication system.

When the user operates the mobile terminal 120 to request financial services such as content use, shopping or banking, the authentication program mounted on the mobile terminal 120 displays a screen requesting input of a pin number for authentication. (S210).

When the user inputs a pin number using a key button, the microprocessor or the smart card 120 of the mobile terminal 110 checks whether the input pin number matches a pin number set for authentication in advance. (S220).

When it is confirmed that the pin number input by the user is the normal pin number stored in the smart card 120 (S230), the mobile terminal 110 transmits the authentication processing information and the financial service request signal to the authentication management server 140. In operation S240, the financial service server 160 is connected to the financial service server 160 through the authentication management server 140 to provide a financial service by performing a processor requested by the user (S240).

However, if it is confirmed that the input pin number is an abnormal pin number, the mobile terminal 110 displays an error message indicating that the pin number is incorrectly input and stops the processor in progress (S250).

As described above, the pin number authentication process in the mobile terminal for receiving a conventional financial service determines whether the input pin number is normal to provide a service according to a user's request, or displays an error message and stops the service. Only simple actions were taken.

However, when the user is in an emergency situation, for example, it is impossible to determine the situation such as the forced input of the pin number due to the threat of robbery or the like, and the payment is performed. There was no.

As such, the use of the financial service using the pin number of the smart card mounted in the mobile terminal is convenient in the simplicity of performing authentication using the pin number, the promptness of the instant financial service, and the mobility required only by the mobile terminal. The same feature is dangerous because it can be used compulsorily in an emergency situation, but there is a problem that there is no countermeasure.

In order to solve this problem, the present invention by setting the normal pin and the emergency pin to the smart card, and by inputting the emergency pin to the smart card authentication system, by generating and providing an abnormal processing message indicating that the financial service is impossible, Provided are a method for protecting account information using an emergency pin for protecting a user account and preventing the progress of a financial service, and a mobile terminal for the same.

In order to achieve the above technical problem, a method of protecting user account information according to the present invention is a method of protecting user account information through authentication of a pin number input from a mobile terminal equipped with a smart card. Receiving an input pin for a request and a financial service; (b) extracting a predetermined emergency pin from the smart card; And (c) comparing an input pin with an emergency pin to generate an abnormal processing message indicating that financial services are not available, or extracting and displaying a preset abnormal processing message.

In addition, the mobile terminal according to the present invention compares the pin number set on the inserted smart card with the pin number input from the user, and displays the abnormal processing message indicating that the financial service is not available, thereby protecting the user account information. A key input unit for receiving a request for providing a financial service from a user of the mobile terminal and an input pin for protecting a user account; A program memory for storing a program for checking an input pin, a program for receiving a financial service, and a program for generating and providing an abnormal processing message; A display unit which displays an operation state of the mobile terminal, an input pin authentication screen for providing a financial service, an account information screen, and an abnormal processing message; And a microprocessor that compares an input pin with a pin number set in a smart card and generates and provides an abnormal processing message or performs overall control of a mobile terminal connected to a server for providing a normal financial service.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

In addition, when a part is said to "include" a certain component, this means that it may further include other components, except to exclude other components unless otherwise stated.

In addition, the term module described herein refers to a unit for processing a specific function or operation, which may be implemented in hardware or software, or a combination of hardware and software.

3 is a block diagram schematically illustrating an internal structure of a mobile terminal for protecting a user account by generating and providing an abnormal processing message according to an embodiment of the present invention.

According to an exemplary embodiment of the present invention, a mobile terminal providing virtual account information when an emergency pin is input includes a program memory 202, a data storage unit 204, a key input unit 206, a display unit 280, and an external device connection unit. 210, smart card 110, subscriber information storage 212, microprocessor 214, baseband converter 216, RF signal processor 218, and antenna 220.

The program memory 202 generally includes a mobile terminal 120 such as a wired / wireless communication execution program, an additional service execution program such as a photo or video recording, a game, and a program for interworking with an external device connected through the external device connection unit 210. This is the part where the control program for controlling the data is stored.

In addition, according to an embodiment of the present invention, the normal pin and the emergency pin stored in the smart card 110 connected through the external device connection unit 210 is called, and compared with the pin number input through the key input unit 206 If the input pin check program, the input pin number and the normal pin match, the authentication management server connection program interworking with the authentication management server 140 through the mobile communication network 130 to receive financial services, and the input pin number If the emergency pins match, an abnormal processing message generating program for generating and displaying an abnormal processing message is stored.

The data storage unit 204 serves as a data buffer when executing various programs, and also temporarily stores pin numbers input by the key input unit 206 or externally received data.

The key input unit 206 is provided with a numeric key for inputting a telephone number and a pin number for the practice of the present invention, a key button for text input, and a menu selection button.

The display unit 208 displays the operation state of the mobile communication terminal, including the power supply state, the radio wave reception intensity, the date and time, and the like, when the financial service is provided through the mobile terminal according to the present invention, authentication is performed. Screen for the account, an account information screen transferred from the financial service server 150 according to an authentication procedure, or a financial service screen such as a preset abnormal processing message.

The external device connection unit 210 is a part for connecting external devices connected to or inserted into the mobile communication terminal 120 such as a camera, an earphone jack, a charger, a data cable, and a smart card to the microprocessor 214.

The smart card 110 stores a settlement pin for receiving a normal financial service and an emergency pin for providing an abnormal processing message for protecting a user account according to an embodiment of the present invention. Here, the internal structure and function of the smart card 110 will be described in detail with reference to FIG. 5.

The subscriber information storage unit 212 is a part that stores subscriber registration information. The subscriber registration information includes a unique number assigned to each mobile terminal in the mobile communication network, and is inserted into the mobile terminal 110 in the form of a card or stored therein in a chip form. In this case, when the subscriber information storage unit 212 is implemented in the form of a subscriber identity module (SIM) card, the subscriber information storage unit 212 may be implemented as a part of the smart card 110 that stores the normal pin and the emergency pin.

The microprocessor 214 performs voice and data calls through the mobile communication network 130, and when a financial service provision request is input through the key input unit 206, the microprocessor 214 receives a pin number to determine whether it is a normal pin or an emergency pin. If the normal pin is connected to the financial service server 150 through the mobile communication network 130 and the authentication management server 140 through the RF signal processing unit 218, and receives a financial service, if the emergency pin is an abnormal processing message It generates the overall control such as generated and transferred to the display unit 208. Here, the detailed structure of the microprocessor 214 will be described in detail with reference to FIG. 4.

The baseband converter 216 converts signals transmitted and received through the RF signal processor 218 into baseband signals and performs functions such as digital-to-analog conversion and analog-digital conversion processing.

In addition, the baseband converter 216 transfers the financial service request signal transmitted from the microprocessor 214, which has been pin-checked, to the RF signal processor 218 according to the present invention, and the power of the RF signal processor 218 ( POWER) or control its gain automatically. Then, the financial service data received from the RF signal processor 218 is received.

The RF signal processor 218 is a part for demodulating and amplifying an RF signal received from the mobile communication network 130 to the antenna 220 and modulating and outputting a financial service request signal applied from the baseband converter 216. The antenna 220 is a part that performs transmission and reception with the mobile communication network 130.

4 is a block diagram illustrating an internal configuration of a microprocessor according to an embodiment of the present invention.

The microprocessor 214 according to the present invention includes a smart card information calling module 2160, an input pin checking module 2162, an authentication processing module 2164, an abnormal message generating / calling module 2166, and a smart card information changing module. (2168).

When the smart card information call module 2160 receives the financial service provision request through the key input unit 206, the smart card information call module 2160 calls the data stored in the smart card 110 through the external device connection unit 210. That is, in order to check whether the input pin number according to the present invention is a normal pin for financial services or an emergency pin for protecting a user account, it performs a function of calling a normal pin or an emergency pin stored in the smart card 110.

The input pin checking module 2162 receives a pin number (hereinafter, referred to as an “input pin”) input by a user through the key input unit 206.

The authentication processing module 2164 is a part that authenticates the input pin by checking whether the input pin is a normal pin, an unused pin, or an incorrectly input pin. To this end, the authentication processing module 2164 receives an input pin from the input pin verification module 2162 and compares the normal pin and the unused pin from the smart card information calling module 2160.

The abnormality processing message generation / calling module 2166 is a part of the authentication processing module 2164 that generates an abnormality processing message to be provided as the input pin is confirmed to be an emergency pin, or calls a preset abnormality processing message.

At this time, when the abnormal processing message to be provided in advance according to the emergency pin input is stored in the program memory 202 or the data storage unit 204, the abnormal processing message generating / calling module 2166 sets the abnormal processing previously set. If a message is called and displayed through the display unit 208, and the microprocessor 214 is set to generate an abnormal processing message, the abnormal processing message is called from the program memory 202 to call the abnormal processing message generating program. It generates and displays through the display unit 208.

In addition, the program memory 202 or the data storage unit 204 includes an abnormal processing message storage unit 410 and a normal pin input screen storage unit 420 to store an abnormal processing message to be provided in advance.

Here, the abnormal processing message storage unit 410 is a part for storing the abnormal processing message to be provided to the abnormal processing message generation / calling module 2166 according to the input of the emergency pin.

In addition, the normal pin input screen storage unit 420 may not be connected to the authentication management server 140 and the financial service server 150 according to the input of the emergency pin. For the sake of guarantee, the normal pin is input to store a normal pin input screen for displaying a screen such as the one connected to the financial service server 150.

The smart card information changing module 2168 is a module for changing the details stored in the smart card 120. That is, the part for changing the normal pin, emergency pin, and the like stored in the smart card 120.

5 is a block diagram showing the internal configuration of a smart card according to an embodiment of the present invention.

Smart card 110 according to the present invention is a central processing unit (CPU: Central Processing Unit, hereinafter referred to as "CPU") 1102, ROM (ROM: Read Only Memory, hereinafter referred to as "ROM") (1104) ), Random access memory (RAM) 1106, and EEPROM (Electrically Erasable and Programmable ROM, hereinafter referred to as "EEPROM") 1108.

The CPU 1102 stores the data in the ROM 1104, the RAM 1106, and the EEPROM 1108 of the smart card 110, and controls the overall data input / output of the smart card 110 by calling or modifying the stored data. That's the part.

The ROM 1104 stores data that cannot be modified, and is a part that stores an operating system and a security algorithm of the smart card 110. Typically, the operating system of the smart card 110 uses a COS (Chip Operating System).

The RAM 1106 is a part in which temporary data is stored, and data can be stored only while power is supplied to the smart card 110, and data stored at the same time as power supply disappears.

The EEPROM 1108 is a part in which modifiable data is stored. Unlike the RAM 1106, the EEPROM 1108 can continuously store the stored data even when the smart card 110 is not supplied with power. Therefore, various programs, applications, and passwords can be stored. The normal pin and the emergency pin according to the present invention are stored. To this end, the EEPROM 1108 includes a normal pin storage unit 11082 and an emergency pin storage unit 11084.

 6 is a flowchart illustrating a user account protection method of generating and providing an abnormal processing message when an emergency pin is input according to an embodiment of the present invention.

First, a user who wants to receive a financial service sets a pin number to use for a financial service. According to the present invention, a user sets a normal pin for a normal financial transaction and an emergency pin to be used for protecting a user account in an emergency situation. At this time, the set normal pin and the emergency pin are stored in the EEPROM 1108 of the smart card 110.

In addition, the user may preset an abnormal processing message to be provided to protect the user account when an emergency pin is input. At this time, the abnormal processing message to be set is stored in the program memory 202 or the data storage unit 204 of the mobile terminal 120.

When the setting for the financial service is completed through the above process, the user may be provided with the financial service such as content use, shopping or banking using the mobile terminal 120.

When the user selects a menu for a financial service from various program menus mounted on the mobile terminal 120 (S610), the program for calling a financial service is called from the program memory 202. When the security check step is reached while executing the program for providing the financial service, an input pin is received from the user through the key input unit 206 (S620).

When the input pin is confirmed through the input pin check module 2162, the normal pin and the emergency pin stored in the EEPROM 1108 of the smart card 110 are called using the smart card information call module 2160. Then, it is checked whether the input pin is a normal pin for a normal financial service or an emergency pin for protecting a user account through the authentication processing module 2164 (S630).

First, the authentication processing module 2164 compares the input pin with the normal pin (S640). If the input pin is a normal pin, the mobile terminal 110 is connected to the authentication management server 140 and the financial service server 150 through the mobile communication network 130 to receive the financial service requested by the user (S650). .

However, as a result of the determination in step S640, if the input pin is not the normal pin, the authentication processing module 2164 checks whether the input pin is an emergency pin (S660).

If the input pin is an emergency pin, the abnormality message generating / calling module 2166 generates or calls the same screen as the process of the normal pin and provides the same through the display unit 208 for the safety of the user. At this time, the normal pin input screen may be stored in the program memory 202 or the data storage unit 204 in advance (S670).

The abnormal process message generating / calling module 2166 calls the abnormal process message generating program from the program memory 202 to generate an abnormal process message, or is set in advance and stored in the program memory 202 or the data storage unit 204. Calls up an abnormal processing message. Then, the called abnormal processing message is displayed via the display unit 208 (S680).

However, as a result of the determination in step S660, if the input pin is not an emergency pin, that is, if the input pin number is neither a normal pin nor an emergency pin, it is simply determined as an input error of the pin number, and the pin number is incorrectly input. Display an error message indicating that the In this case, the screen for inputting the pin may be displayed again to perform the process after step S620, or the financial service process may be stopped (S690).

7 is an exemplary screen of a mobile terminal receiving a financial service according to an embodiment of the present invention.

The authentication management server 300 according to the present invention includes a program storage unit 310, a memory 320, a network interface card (NIC) 330, a controller 340, an abnormality. The account generator 350, the subscriber information database 360, the pin authentication processor 370, and the financial service server providing module 380 are included.

The program storage unit 310 is a program for storing and managing terminal information and smart card information transmitted through the mobile communication network 130, a program for issuing a unique pin number according to smart card information, and a user according to the present invention. A program for performing a pin authentication process input from the mobile terminal 120 and a financial service server 160 to provide a financial service is stored. Such a program may be implemented in various programming languages such as 'C' programming language or object-oriented 'C ++', 'JAVA' according to the operating system of the authentication management server 300.

The memory 320 temporarily stores data processed by the controller 340 or temporarily stores terminal information, smart card information, and input pin numbers, etc., which are transmitted to provide a financial service.

The NIC 330 is a communication module that provides a communication interface for communicating with the mobile communication network 130 and the ATM / CD 140.

The controller 340 controls the overall authentication management server, and compares the received terminal information and smart card information with the information stored in the subscriber information database 360 according to the present invention, and compares the received pin number with the pin authentication processor 370. After the transfer to the terminal, according to the pin authentication result transmitted from the pin authentication processing unit 370, an abnormal account is generated and provided to the financial service server 160, or the mobile terminal 120 and the financial service server to receive financial services. It connects the 160, and overall controls the authentication management server 300.

The abnormal account generator 350 checks the pin number in the pin authentication processor 370, and when the input pin number is an emergency pin, the abnormal account generator 350 generates an abnormal account in which the financial service is impossible, and generates the abnormal account in the financial service server 160. ) Is the part to send. In this case, the generated abnormal account information may be provided to the mobile terminal 120 or the ATM / CD 140.

The subscriber information database 360 is a part that stores subscriber information. When the subscriber information database transmits the terminal information and the smart card information through the mobile communication network 130, the subscriber information database extracts the subscriber information and transmits the subscriber information to the pin authentication processor 370.

The pin authentication processing unit 370 stores the normal pin and the emergency pin set in each smart card 110, and the normal set in each smart card 110 using the subscriber information transmitted from the subscriber information database 360. Extract the pins and emergency pins. When the input pin is transmitted through the mobile terminal 120 or the ATM / CD 140, the controller determines whether the input pin is a normal pin, an emergency pin, or an incorrectly input pin number, and controls the pin authentication result. 340 is the portion provided. Here, the internal structure of the pin authentication processor 370 will be described in detail with reference to FIG. 4.

The financial service server providing module 380 finances the mobile terminal 120 or the ATM / CD 140 so that the financial service can be provided through the mobile terminal 120 or the ATM / CD 140 that has entered the normal pin. It serves to connect with the service server 160.

Here, in providing an abnormal account when an emergency pin is input, the authentication management server may set an abnormal account to be provided for each smart card in advance. In addition, the user may create an abnormal account in advance. Accordingly, the abnormal account information set in advance may be stored in the subscriber information database 360, and at this time, the abnormal account generator 350 may be omitted.

4 is a block diagram schematically illustrating an internal configuration of a pin authentication processing unit that processes an authentication procedure of an input pin number according to an embodiment of the present invention.

According to the present invention, the authentication management server 300 determines whether to generate abnormal account information according to the pin authentication result of the pin authentication processing unit 370, the mobile terminal 120 or the ATM / CD 140 and the financial service server ( It is determined whether to connect.

The pin authentication processor 370 that performs the pin authentication procedure includes a normal pin storage 3710, an emergency pin storage 3720, a pin extraction module 3730, and a pin information comparison module 3740.

The normal pin storage unit 3710 is a portion in which normal pin information allocated to the smart card 110 inserted into each mobile terminal 120 is stored for authentication. In this case, the normal pin storage unit 3710 stores a plurality of normal pin information allocated to each of the plurality of smart cards 110, and extracts the normal pin number set in the corresponding smart card 110 using the subscriber information. It is set up to do so.

The emergency pin storage unit 3720 is a part in which an emergency pin that a user inputs in order to receive a virtual information account is stored in an emergency situation. The emergency pin storage unit 3720 is also configured to extract the emergency normal pin number set in the smart card 110 using the terminal information and the subscriber information like the normal pin storage unit 3710.

Here, the normal pin storage 3710 and the emergency pin storage 3720 may be configured as one, or may be included in the subscriber information database 360.

The pin extracting module 3710 extracts the normal pin and the emergency pin from a specific location of the normal pin storage 3710 or the emergency pin storage 3720 by using the subscriber information transmitted from the subscriber information database 360. to be. Normal pins and emergency pins extracted by the pin extraction module 3710 are transferred to the pin information comparison module 3740.

The pin information comparison module 3740 compares the pin numbers input by the user through the mobile terminal 120 or the ATM / CD 140 with the normal pins and emergency pins extracted and transmitted from the pin extraction module 3710. It is a part of checking whether the input pin number is a normal pin for receiving financial services, an emergency pin for preventing financial transactions through an abnormal account, or an incorrectly input pin number. In addition, the pin information comparison module 3740 generates a pin authentication result according to the verification result and provides it to the controller 340.

5 is a flowchart illustrating a user account protection method of generating and providing abnormal account information when an emergency pin is input according to an embodiment of the present invention.

When the user reaches a security check step to use a financial service such as content use, shopping or banking using the mobile terminal 120 or the ATM / CD 140, the user inputs a pin number. A user for receiving a normal financial service inputs a pin number of a smart card registered with the authentication management server 150 in advance, and inputs an emergency pin when a pin number is forcibly input due to threats due to strength or the like.

The pin number input to the mobile terminal 120 or the ATM / CD 140 and the terminal information and the smart card information form a dedicated line between the mobile communication network 130 or the ATM / CD 140 and the authentication management server 300. Through, it is transmitted to the authentication management server 300 (S510).

The authentication management server 300 extracts subscriber information from the subscriber information database 360 by using the received terminal information and smart card information, and stores the normal pin of the pin authentication processor 370 using the extracted subscriber information. The normal pin and the emergency pin are extracted from the unit 3710 and the emergency pin storage unit 3720 (S520).

When the normal pin and the emergency pin are extracted, the pin authentication processor 370 checks whether the input pin is a normal pin number (S530) by comparing with the input pin number.

If the input pin is a normal pin number, the mobile terminal 110 or the ATM / CD 140 and the financial service server 160 are connected to each other so as to receive the financial service requested by the user (S540).

However, as a result of the determination in step S530, if the input pin is not a normal pin number, the pin authentication processor 370 checks whether the input pin number is an emergency pin (S550).

If the input pin is an emergency pin number, the authentication management server 300 provides the same screen as the normal pin number processing process for the user's personal safety (S560).

Then, using the abnormal account generation unit 350 generates an abnormal account that can not receive financial services. At this time, the abnormal account set in advance may be called. Then, the generated abnormal account information is transmitted to the financial service server 160. At this time, the mobile terminal 110 or the ATM / CD 140 may be sent and displayed (S570).

The abnormal account received from the financial service server 160 cannot perform financial services such as bank transfer, withdrawal, and payment, and accordingly, the financial service server 160 generates an error message indicating that the financial service is impossible. At this time, for your safety, the error message is 'Unavailable account.' 'Not enough balance' It is preferable to use phrases such as these.

The error message generated by the financial service server 160 is transmitted to the mobile terminal 110 or the ATM / CD 140 via the authentication management server 300 and displayed (S580).

However, as a result of the determination in step S550, if the input pin is not an emergency pin, that is, if the input pin number is not a normal pin number or an emergency pin number, it is simply determined as an input error of the pin number, and the pin number. Transmits an error message indicating that an incorrect input is made to the mobile terminal 120 or the ATM / CD 140 and stops the processor in progress (S590).

In the above description, in implementing the authentication management server 300 according to the present invention, a communication module for contacting the police station, security company, etc. may be added to the authentication management server 300. Accordingly, when performing the step S560 in Figure 5, when the emergency pin number is input, it is determined that there is a risk of the user's personality, while providing a normal PIN input screen and at the same time emergency message, location to the police station or security company, etc. It can be set to transmit information.

The embodiments of the present invention described above are not implemented only through the apparatus and the method, but may be implemented through a program for realizing a function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded. Implementation may be easily implemented by those skilled in the art from the description of the above-described embodiments.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

As described above, according to the present invention, when an emergency pin number is input by a user in an emergency situation, a screen such as performing a normal procedure may be provided to ensure safety of the user's body, and an abnormal processing message may be provided. By creating and providing, the user's account information can be prevented from being leaked and property damage can be reduced as a normal transaction is prevented. Therefore, it is expected to provide stability and trust to users performing financial transactions using mobile terminals. Can be.

Claims (16)

In the method of protecting user account information by authenticating a PIN (Personal Identification Number) input from a mobile terminal equipped with a smart card, (a) receiving a financial service request and an input pin for the financial service from a user; (b) extracting a predetermined emergency pin from the smart card; And (c) comparing the input pin with the emergency pin to generate an abnormal processing message indicating that financial services are not available, or extracting and displaying a preset abnormal processing message; User account information protection method comprising a. The method of claim 1, Step (b) is, Extracting an emergency pin from the smart card, and extracting a normal pin set in advance in the smart card for authentication of the financial service. The method of claim 2, Before step (c) above, Comparing the input pin with the normal pin and connecting to the server providing the financial service through a mobile communication network, and if the input pin is different from the normal pin, proceeding to step (c) User account information protection method comprising the further. The method of claim 1, Step (c) is, If the input pin and the emergency pin is different, generating and displaying an error occurrence message indicating that the pin input is wrong. The method of claim 1, Prior to step (a) above, Inputting and storing a pin number to be used as the emergency pin in the smart card; And Receiving and storing an abnormal processing message to be displayed according to the emergency pin; And at least one step of the user account information protection method. The method of claim 1, Step (c) is, And displaying the abnormal processing message and transmitting a message indicating that a danger has occurred to the user's body to a police station or a security company. The method of claim 1, Step (c) is, Even if the input pin is an emergency pin number, the user account information protection method of generating or extracting and displaying the same screen as the normal financial transaction service screen. A mobile terminal for protecting user account information by displaying an abnormal processing message indicating that a financial service is impossible by comparing a PIN (Personal Identification Number) number set on an inserted smart card with a pin number input from a user, A key input unit for receiving a financial service provision request from a user of the mobile terminal and an input pin for protecting the user account; A program memory for storing a program for checking the input pin, a program for receiving the financial service, and a program for generating and providing the abnormal processing message; A display unit to display an operation state of the mobile terminal, an input pin authentication screen for providing the financial service, an account information screen, and the abnormal processing message; And A microprocessor for performing overall control of the mobile terminal for generating and providing the abnormal processing message or connecting to the server for providing the normal financial service by comparing the input pin and the pin number set in the smart card. Mobile terminal comprising a. The method of claim 8, A data storage unit for executing a program stored in the program memory or temporarily storing data input through the key input unit or data input externally; An external device connection unit connecting the mobile terminal and the smart card; And A baseband converter and an RF signal processor connected to a mobile communication network to connect the mobile terminal and a server for providing the financial service The mobile terminal further comprises one or more of. The method of claim 8, The smart card, A normal pin used as a pin for the normal financial service; And Emergency pin used as a pin for generating the abnormal processing message Mobile terminal, characterized in that for storing. The method of claim 10, The smart card, An EEPROM storing the normal pin and the emergency pin; A ROM containing an operating system and a security algorithm of the smart card; A RAM for storing temporary data generated during a period in which power is supplied to the smart card; And A central processing unit (CPU) that controls data storage, recall and modification of the smart card A mobile terminal comprising a. The method of claim 10, The microprocessor, And if the input pin and the normal pin are the same, connect to a server for providing the financial service, and if the input pin and the emergency pin are the same, generate and display the abnormal processing message. The method of claim 12, And when the input pin is different from both the normal pin and the emergency pin, generating and displaying an error message indicating that the input of the pin is wrong. The method of claim 10, The microprocessor, A smart card information calling module for calling the normal pin and the emergency pin from the smart card; An input pin check module for checking an input pin input through the key input unit; An authentication processing module configured to perform authentication of the input pin by comparing the input pin with the normal pin or the emergency pin; And An abnormal processing message generation / calling module for generating an abnormal processing message to be displayed when it is confirmed that the input pin is an emergency pin, or calling a preset abnormal processing message. A mobile terminal comprising a. The method of claim 14, The microprocessor, Smart card information changing module for changing the details stored in the smart card, including the normal pin and unused pin Mobile terminal, characterized in that it further comprises. The method of claim 14, The abnormal process message information generation / calling module, Calling the program generating the abnormal processing message from the program memory to generate the abnormal processing message, or calling the abnormal processing message preset in the program memory or the data storage unit and providing the abnormal processing message to the display unit. Mobile terminal.

Images