KR20080113333A - Financial activity service providing method using smart card based electronic bankbook in mobile terminal - Google Patents

Abstract

A financial activity service providing method using a smart card based electronic bankbook in a mobile terminal is provided to store all the personal financial information that a person uses in a security area of a large capacity-USIM card, thereby removing inconvenience that each bank uses an application program separately. A financial activity service providing method using a smart card based electronic bankbook in a mobile terminal comprises the following steps. A user performs an authentication process in the mobile terminal. A detail of an electronic bankbook stored in a smart card is read and checked through a web browser in the mobile terminal by a program module of the smart card. If the user performs financial transaction through the mobile terminal, the mobile terminal connects to a financial server by using the application stored in the smart card to transmit the financial transaction information. The financial server transmits process result due to the financial transaction information to the smart card and stores the process result in a storage apparatus.

Description

Financial Activity Service Providing Method using SMART Card based Electronic Bankbook in Mobile Terminal}

The present invention relates to a method for providing a financial transaction service using a smart card-based electronic bank account in a mobile communication terminal, and a smart card for the service.

The smart card is equipped with an integrated circuit (IC) chip including a microprocessor, a security module, and a memory (storage device), and is used as a means of payment for recording or identifying various information, electronic money, credit card, or electronic bank account. It is widely used.

Therefore, recently, a SIM (USIM) card, which is a type of smart card, is attached to a mobile communication terminal such as a mobile phone, and a large amount of flash memory is used for the memory of the SIM card. In addition to the phone book (Phonebook) and SMS / MMS of a variety of contents and applications such as a large amount of multimedia data carriers / users can be stored and used.

On the other hand, online banking such as Internet banking and mobile banking are active, and many people are conveniently performing financial transactions such as account transfer and deposit and withdrawal without visiting financial institutions.

However, Internet banking is a financial transaction by accessing websites for each bank in an Internet-supported environment, and mobile banking cannot use all bank services on all mobile communication terminals. Due to the inconvenience of having to download and use, most customers are still using the bank account-based financial transactions. Accordingly, there is an inconvenience that the customer has to manage and store each bank account existing by bank and account.

In addition, since all mobile communication terminals do not support mobile banking, financial transactions cannot be made with a mobile communication terminal that does not support mobile banking, and a mobile banking capable terminal has a structure as shown in FIG. 1 for mobile banking. Using a smart card to perform a financial transaction service in the same manner as in Figure 2, in the prior art, as shown in Figure 2, because the smart card serves to store the security module and personal information for each bank, each user The bank-specific application must be downloaded and used, and each bank-specific application includes each user's personal financial information, provides a user interface for mobile banking, and connects a session after the mobile terminal and the financial server are connected. When processing a series of processes in a continuous state The user of the network load of the communication fee and the communication network is to be increased.

In addition, as shown in FIG. 2, in the existing mobile banking, only an authentication method using a PIN (Personal Identification Number) number between the mobile communication terminal and the smart card is possible, and thus a more secure authentication method is required. There are concerns about the inconvenience of carrying a security card and the leakage of security contents.

In addition, the existing Internet banking, mobile banking has a disadvantage in that it is difficult to check at any time by automatically updating the financial transaction information in real time or when the user wants.

SUMMARY OF THE INVENTION The present invention provides a method for providing a financial transaction service using a smart card based electronic bank account in a mobile communication terminal and a smart card for the method.

In order to achieve the above technical problem, this invention,

In the method for providing a financial transaction service using a smart card based electronic bankbook in the mobile communication terminal,

A user performing an authentication process in the mobile communication terminal and reading and confirming an electronic bank account in a storage device embedded in the smart card through a web browser in the mobile communication terminal using a program module embedded in the smart card;

When a user performs a financial transaction through the mobile communication terminal, transmitting the financial transaction information by accessing a financial server using an application embedded in a smart card;

And transmitting, by the financial server, the processing result according to the financial transaction information to the smart card and storing the processing result in the storage device.

In another aspect, the present invention,

In the method for providing a service for updating and confirming financial transaction information using a smart card-based electronic bankbook in the mobile communication terminal,

When a user makes a financial transaction using a bank teller, ATM device or Internet banking, the financial server sends the financial transaction information to the smart card using a management agent built in the smart card to finance the storage device in the smart card. Updating transaction information;

And a user performing an authentication process on the mobile communication terminal to check financial transaction information of the storage device through a web browser in the mobile communication terminal using a program module embedded in a smart card.

In another aspect, the present invention,

In the smart card for electronic passbook of a mobile communication terminal,

A program module for calling a web browser of a mobile communication terminal to check an electronic bank statement or financial transaction information through a screen of the mobile communication terminal;

A USB interface for communication between the mobile communication terminal and the smart card;

A secure storage device for storing the electronic account history or financial transaction information;

Program modules for multithreading and multiprocessing;

And a program module for establishing a secure session with the smart card and the financial server.

By using the present invention as described above, the following effects can be achieved.

All personal financial information (bank name, account number, account type, transaction history, balance, subscription / cancellation information, certificate, etc.) used by an individual through authentication from all financial institutions registered in the management server. By storing in the security area of the card, it is possible to solve the inconvenience of having to use an application-specific program separately for each bank.

In addition, it is possible to check the personal financial information and financial transaction information stored in the security area by using the web browser of the large capacity-USIM card, so that users do not have to use each existing application-specific program and can use it universally. It is possible to provide a convenient web-based interface for mobile banking.

In addition, by performing a continuous update procedure on the security area of the large-USIM card in real time or at a user-specified time zone, all financial transaction information used by an individual can be checked by the user at a desired time.

In addition, by storing personal financial information and transaction details in the security area of the large-capacity USIM card and supporting PSK-TLS inside the large-capacity-USIM card, even if the mobile communication terminal is changed, the existing large-capacity USIM card is installed in the changed terminal. By using it, it is possible to use mobile banking in the changed terminal without additional work, and even in the mobile communication terminal that does not support PSK-TLS, it is possible to secure data transmission based on the large capacity-USIM card.

And before the mobile communication terminal and the financial server are connected, mobile banking related work is processed in the web browser of the mobile communication terminal and interworked with the financial server, thereby minimizing the connection time and minimizing the user's communication cost and network load. Will be.

In addition, the data stored in the security area of the user's large capacity-USIM card is strengthened by providing a large capacity-USIM based application for authentication between the user and the large capacity-USIM card so that it cannot be arbitrarily accessed through other mobile communication terminals.

In addition, if the fingerprint authentication method is used for user authentication between the mobile communication terminal and the large-capacity-USIM card, an effective authentication procedure without the need for SMS message transmission for PIN number authentication is possible and the mobile communication terminal is lost. It is more secure than the existing PIN authentication method.

And, if the built-in OTP generation application in a large-capacity USIM card, mobile banking does not need to have a conventional OTP generator, security is enhanced than the existing security card using method.

In addition, it is possible to provide a convenient interface to various types of users, such as the financial household account book, by processing the financial transaction information data stored in the security area using an application of a large-capacity-USIM card.

In the present invention, a smart card (for example, a large-capacity-USIM card) having the same structure as that of FIG. 3 different from the existing smart card structure shown in FIG. 1 is used.

The smart card according to the present invention is a USB interface for communicating with a mobile communication terminal, a mass flash memory that is a storage device that a user can use, and a smart card web server (SCWS) capable of checking the details stored in the mass storage device. Servlet-based service platform is formed in the smart card. In addition, SWP I / O is added for interworking with NFC card, transmission protocol for TCP / IP communication is installed, and Multi-Thread / based on Multi-Tasking Java Card platform and RTOS (Real-Time Operating System) Secure data can be transmitted over multi-processing and Pre-Shared Key-Transport Layer Security protocol (PSK-TLS) secure sessions.

Now, the overall system configuration and operation method for the financial transaction service using the smart card-based electronic bank account will be described.

4 is an overall configuration diagram of the present invention. In the present invention, each financial server interworks with a mobile communication terminal and a smart card directly or through an administration server (Administration) through the service gateway of the mobile communication network.

At this time, the mobile communication terminal has a web browser for checking financial transaction information, a SCWS gateway providing an interface with a smart card web server, and a W-modem for interworking with a mobile communication network. It also includes USB and TCP / IP, which communicate with smart cards. In addition, the smart card has a USB, TCP / IP and BIP (Bearer Independent Protocol), which communicates with a mobile communication terminal, ISO 7816, which manages communication with existing contact I / O and SWP I / O, and a management agent that interworks with a management server. It includes a servlet engine for running an application (Servlet). In the financial transaction service using the smart card-based electronic passbook of the present invention, the mobile communication terminal and the smart card communicate using the TCP / IP protocol through a USB interface.

FIG. 5 is a diagram illustrating the operation of an administrative server, an administrative agent, and a financial server in the present invention having the configuration as shown in FIG. 4. The management server receives the authenticated user financial information from each financial server and uses the management agent in the smart card (large-USIM) to transfer the user financial information to the large-capacity USIM card security area (large-capacity flash memory) using a mobile communication network. Will be saved. The personal financial transaction information performed by the user using a bank visit, ATM device use, internet banking, etc. is also transmitted and stored in the secure area of the large-capacity USIM card through interworking with the management server and the management agent. Data stored in the security area of the high-capacity SIM card can be accessed through a web browser embedded in each user's mobile communication terminal. Data stored in the security area cannot be accessed. In addition, it provides a large-USIM-based application for authentication between the user and the large-USIM card so that data stored in the security area of the large-USIM card of the user cannot be arbitrarily accessed through another mobile communication terminal.

FIG. 6 is a flowchart illustrating an operation of a service for transmitting personal financial information of each financial server through an admin server with a large-USIM card of a user in the present invention having the configuration as shown in FIG. 4. The management server first calls the Admin Agent (Invoke Agent) to establish a connection with the management agent (Open connection), and then authenticates the encrypted personal financial information received from each financial server through the secure session. The PSK-TSL secure session is transmitted to the management agent of the large capacity USIM card (PSK TLS session), and the management agent stores this personal financial information in the secure area of the large capacity USIM card. After that, when the user passes the user's authentication process (eg, fingerprint authentication) to read the personal financial information, the stored details can be checked using the web browser of the mobile communication terminal. Through this delivery process, it is possible to solve the inconvenience of having to use an application-specific program separately for each bank, and to provide a user-friendly and convenient web-based interface to users who are using it universally.

FIG. 7 is a diagram illustrating an operation flowchart of a service for transmitting and storing information about a financial transaction performed by a user in the present invention having the configuration as shown in FIG. When a user visits a bank and makes a financial transaction using a window or an ATM, or performs a financial transaction using Internet banking, the financial transaction information is transmitted to a financial server, which is encrypted by the user through a secure session. The financial transaction information is transmitted to the management server in real time or at a time specified by the user. Upon receiving this information, financial transaction management server is called the management agent in the mass -USIM card to perform a connection with (Invoke Agent) Administration Agent and through the PSK-TLS secured session (PSK TLS session) of financial transactions and the management agent By transferring the information to the security area of the large-capacity USIM card, the user's financial transaction information is continuously updated and stored in the large-capacity-USIM card. The user may check the financial transaction information of the user by using the web browser of the mobile communication terminal at the desired time through the fingerprint authentication and the like.

8 is a flowchart illustrating an operation of a service for transmitting and storing information to a secure area of a large-capacity USIM card by notifying that financial transaction information is changed for a financial transaction performed by a user in the present invention having the configuration as shown in FIG. It is. When a user visits a bank and makes a financial transaction using a window or an ATM, or performs a financial transaction using Internet banking, the financial server sends a notification message to the management server that the user's financial transaction information has been changed, and the management server sends it to the management server. Send to management agent in the form of notification message such as SMS, MMS, etc. The management agent receiving the notification message requests the financial server to transmit the changed financial transaction information, and the financial server transmits the encrypted financial transaction information to the management server through a secure session. The management server calls the management agent in the large-USIM card to perform the connection with the management agent and uses the PSK-TLS secure session with the management agent to change the encrypted financial transaction information of the encrypted user into the secure area of the large-USIM card. Store in

FIG. 9 illustrates a Handshake procedure for a PSK-TLS session, which is used to transmit PSK-TLS-based secure data transmission in the present invention. In the PSK-TLS method, key exchange and authentication procedures can be omitted by using predefined values for the client and server as keys. Clients and servers can determine the PSK using ServerKeyExchange and ClientKeyExchange. However, in general, since mobile carriers use specific values in predefined fields as PSKs, ServerKeyExchange can be omitted from the handshake procedure. For this reason, the overall handshake time for PSK-TLS sessions between the client and server can be shortened, and the amount of computation of the client can be reduced, enabling secure data transmission.

FIG. 10 is a schematic diagram of direct interworking between a financial server and a large capacity-USIM card without using the management server of FIG. 5 during mobile banking. The user checks the screen of the terminal for financial transaction information stored in the security area of the large-capacity USIM card for mobile banking, and finishes inputting the desired financial transaction through key input, and then stores the relevant data on the large-capacity-USIM card. PSK-TLS is used to deliver to the financial server through a secure session. Then, the financial server performs the financial transaction desired by the user and stores the result again in the secure area of the large-capacity USIM card to complete the financial transaction through mobile banking. As a result, in the present invention, when the user completes the input of the financial transaction through the terminal at the time of mobile banking, it is linked with the financial server, thereby minimizing the connection time with the financial server and minimizing the user's communication cost and network load. In addition, by using PSK-TLS on a large-capacity-USIM card, not a mobile communication terminal, secure financial transactions are possible even in a mobile communication terminal that does not support PSK-TLS.

FIG. 11 is a flowchart illustrating an operation of a financial transaction service using a large-capacity-USIM card-based electronic bank account in the present invention having the configuration as shown in FIG. The user performs the authentication process through fingerprint authentication to check the electronic bank account in the security area of the large-capacity USIM card, and performs necessary financial transactions through key input of the mobile communication terminal. Now, the application inside the mass-USIM card transmits the financial transaction information input by the user to the financial server in conjunction with the financial server using the PSK-TLS security session, and the financial server sends the processing result of the financial transaction to the mass-USIM card. Transfer it to the card security area and save it. At this time, if a transaction is made using an OTP (One Time Password) generating application inside a large-USIM card during a financial transaction, the user does not need to possess an OTP generator and security is enhanced compared to using an existing security card. do. After the financial server transmits the transaction result, the user may verify the financial transaction information by using a web browser of the mobile communication terminal after performing an authentication process such as fingerprint authentication.

Although the preferred embodiments of the present invention have been described above, the present invention is not limited to these embodiments, and various modifications and additions can be made without departing from the spirit of the present invention.

For example, by processing the financial transaction information data stored in the security area using a large-capacity USIM card application, various financial information interfaces, such as providing a financial account book to a user, may be provided.

And, in the past, PIN authentication was used without using an accredited certificate. However, in the present invention, if the accredited certificate is stored in the security area of the large-USIM, the large-USIM may be mounted on the changed terminal when the terminal is changed. It is also possible to copy the certificate if necessary using the USB interface.

In addition, even in the above-described fingerprint recognition, in order to enhance security, two fingerprints among ten fingers are registered in advance and one fingerprint is used in a normal case, and the other fingerprint is in an emergency situation such as being forced by another person. In the case of accessing mobile banking with a fingerprint applied in an emergency, the financial server of the financial institution takes the form that is normally processed on the outside and informs the security agencies such as the police station to prevent the financial settlement due to the enforcement. Can help the arrest.

In the above description, it is described that a financial transaction is performed by a key input. However, since different button UIs are used for each terminal manufacturer and even each terminal, except for the number, a different input method must be used. In order to reduce the various button UI to store in a large-USIM, it is also possible for each user to select and use the button UI familiar to the user in the case of a touch phone.

1 shows a smart card according to the prior art.

2 is an operational flowchart of a financial transaction service using a smart card according to the prior art.

3 shows a smart card according to the present invention.

4 is an overall system configuration of the present invention.

Figure 5 illustrates the interworking of the financial server and the smart card using the management server in the present invention.

6 is a flowchart illustrating the operation of the personal financial information transmission service in the present invention.

7 is a flowchart illustrating the operation of the financial transaction information transmission service in the present invention.

8 is a flowchart illustrating an operation of a transmission service according to a financial transaction information change notification in the present invention.

Figure 9 illustrates the PSK TLS handshake procedure applied in the present invention.

Figure 10 illustrates the interworking of the financial server and the smart card in the present invention.

11 is a flowchart illustrating an operation of a financial transaction service using a smart card-based electronic bank account in the present invention.

Claims (21)

In the method for providing a financial transaction service using a smart card based electronic bankbook in the mobile communication terminal, A user performing an authentication process in the mobile communication terminal and reading and confirming an electronic bank account in a storage device embedded in the smart card through a web browser in the mobile communication terminal using a program module embedded in the smart card; When a user performs a financial transaction through the mobile communication terminal, transmitting the financial transaction information by accessing a financial server using an application embedded in a smart card; The financial server provides a financial transaction service using a smart card-based electronic bank account in the mobile communication terminal comprising the step of transmitting the processing result according to the financial transaction information to the smart card and storing in the storage device. How to. The method of claim 1, A method for providing a financial transaction service using a smart card-based electronic bank account in a mobile communication terminal, further comprising the step of verifying the stored financial transaction information through the web browser by a user performing an authentication process. The method of claim 1, A method of providing a financial transaction service using a smart card-based electronic bank account in a mobile communication terminal, characterized in that the transmission between the financial server and the smart card uses a PSK-TLS secure session. The method of claim 1, The financial transaction is a method of providing a financial transaction service using a smart card-based electronic account in the mobile communication terminal, characterized in that proceeding using the OPT generation application built in the smart card. The method of claim 1, The authentication process is a method for providing a financial transaction service using a smart card-based electronic bank account in a mobile communication terminal, characterized in that using a fingerprint recognition method. The method of claim 1, Processing the financial transaction information and providing the same to the user; providing a financial transaction service using a smart card-based electronic bank account in a mobile communication terminal. The method of claim 1, The smart card is a high-capacity USIM card, characterized in that for providing a financial transaction service using a smart card-based electronic bank account in a mobile communication terminal. The method of claim 5, The fingerprint recognition method is a method for providing a financial transaction service using a smart card-based electronic bank account in a mobile communication terminal, characterized in that the use of a fingerprint authentication fingerprint in the normal state and a fingerprint authentication in an emergency. In the method for providing a service for updating and confirming financial transaction information using a smart card-based electronic bankbook in the mobile communication terminal, When a user makes a financial transaction using a bank teller, an ATM device or an internet banking, a financial server transmits the financial transaction information to a smart card using a management agent built in the smart card to perform a financial transaction of a storage device in the smart card. Updating the information; And a user performing an authentication process in the mobile communication terminal to verify financial transaction information of the storage device through a web browser in the mobile communication terminal using a program module embedded in a smart card. Method of providing a service for updating and verifying financial transaction information using a smart card-based electronic bank account in the terminal. The method of claim 9, The transmission of the financial transaction information to the smart card is performed after the financial server notifies the management agent of the financial transaction information change notification from the financial server side and the management agent requests the financial transaction information changes. A method of providing a service for updating and verifying financial transaction information using a smart card-based electronic bank account in a mobile communication terminal. The method of claim 9, The method of providing a service for updating and confirming financial transaction information using a smart card based electronic account in a mobile communication terminal, characterized in that the transmission of the financial transaction information by the financial server is performed via a management server. The method of claim 9, The method of providing a service for updating and verifying financial transaction information using a smart card based electronic bank account in a mobile communication terminal, characterized in that the transmission of the financial transaction information by the financial server is performed via a service gateway. The method of claim 9, The method of providing a service for updating and verifying financial transaction information using a smart card-based electronic bank account in a mobile communication terminal, characterized in that the transmission between the financial server and the smart card uses a PSK-TLS secure session. The method of claim 9, The authentication process is a method for providing a service for updating and verifying financial transaction information using a smart card-based electronic bank account in a mobile communication terminal, characterized in that using a fingerprint recognition method. The method of claim 9, The smart card is a high capacity-USIM card, characterized in that for providing a service for updating and verifying financial transaction information using a smart card-based electronic bank account in a mobile communication terminal. In the smart card for electronic passbook of a mobile communication terminal, A program module for calling a web browser of a mobile communication terminal to check an electronic bank statement or financial transaction information through a screen of the mobile communication terminal; A transmission protocol and a USB interface for communicating between the mobile communication terminal and the smart card; A secure storage device for storing the electronic account history or financial transaction information; Program modules for multithreading and multiprocessing; And a program module for establishing a secure session with the smart card and the financial server. The method of claim 16, Smart card for electronic bank account of the mobile communication terminal further comprises the OPT generation application program module for the financial transaction. The method of claim 16, The secure session establishment program is an electronic passbook smart card of a mobile communication terminal, characterized in that using a PSK-TLS secure session. The method of claim 16, Smart card for electronic passbook of a mobile communication terminal, characterized in that the stored certificate is stored in the storage device. The method of claim 16, Smart card for electronic passbook of a mobile communication terminal, characterized in that a plurality of button UI is stored in the storage device. The method of claim 16, An electronic bankbook smart card of a mobile communication terminal, characterized in that an application program module for authentication between a user and the smart card is stored in the storage device.

Images