KR20090000646A - Voice one time password authentic apparatus and its method on the internet banking service system - Google Patents

Abstract

An HSM for OTP output used in an Internet electronic payment service system is provided to perform voice OTP authentication with an OTP electronic payment device connected through a telephone, even when a client terminal is not directly connected through the HSM, thereby contributing to future Internet banking and phone banking services considerably. A voice OTP generating device(100) comprises as follows. An interface unit(110) performs data transceiving with a client terminal. A smart card chip is equipped. An HSM unit(120) enables a client terminal user to perform secured Internet electronic payment. An OTP generator(130) generates an OTP according to an OTP generation event occurring by an OTP request. An encoder encodes the OTP. A voice converter(181) converts the encoded OTP into a voice signal. An output unit(190) outputs an OTP of the voice signal.

Description

One-time password authentication device using voice signal in internet electronic payment service system and method thereof {VOICE ONE TIME PASSWORD AUTHENTIC APPARATUS AND ITS METHOD ON THE INTERNET BANKING SERVICE SYSTEM}

1 is a block diagram showing a voice OTP generating apparatus according to an embodiment of the present invention.

2 is a block diagram showing an Internet electronic payment service system using the voice OTP generating apparatus according to an embodiment of the present invention.

3 is a block diagram showing an Internet electronic payment service system using a voice OTP generating apparatus according to another embodiment of the present invention.

4 is a signal flow diagram illustrating a voice OTP generation method of the voice OTP generation device according to an embodiment of the present invention.

* Description of the symbols for the main parts of the drawings *

100: voice OTP generating device 110: interface unit

120: HSM unit 130: OTP generation unit

140: input unit 150: OTP event counter / RTC

160: display unit 170: encryption unit

181: voice conversion unit 182: sound source DB

190: output unit 200: client terminal

300: OTP 400: telephone

The present invention relates to a one-time password authentication device using a voice signal in the Internet electronic payment service system and a method thereof, and in particular to implement a one-time password authentication device using a voice signal in the Internet electronic payment service system combined with the HSM. .

Recently, due to the rapid development of the Internet, various kinds of Internet accidents are increasing rapidly. Therefore, in order to prevent such an Internet accident, security measures for the Internet and important resources are urgently needed.

As such a security measure, an authentication service using a security card, a public certificate, or the like is generally used.

However, even if you want to use information when using e-commerce as well as Internet banking through such authentication services, due to keyboard hacking program, the security through the Internet is not 100% completely blocked and is always exposed to the risk of financial accident.

In addition, the short message service (SMS) used in the existing Internet banking service deceives users by disguising the absence of an accident prevention function for financial transactions, a problem vulnerable to social engineering attacks, and a caller number in terms of security. (Provision of false information) There was a problem of personal information leakage due to difficulty in transmitting what could be done and in case of wrong transmission, by providing other information to the receiver.

And, in terms of stability, there is no backup measure when not receiving a transfer transaction result notification, and SMS verification is not accurate in acknowledgment. However, the bank only manages the unreceived list through its own or agency, and if there is a lot of transmission traffic, there are a lot of unprocessed cases, and it is required to prepare countermeasures for overloading caused by mass texting. There is a possibility that the reception is not possible due to the limitation of the bank. In fact, there is a problem that there is a gap between the transfer or remittance time and the reception time by the banking service.

In addition, there is a possibility of causing user complaints with spam information by using the text messaging function of the mobile phone, and there is a limitation of the media using only the SMS function on the mobile phone. There is a problem in that the processing cost is high, and when it is not received, resending and managing costs are required.

In addition, the security measures through the general authentication service as described above has to be registered in advance of the user's personal information has been limited in the scope of application for use other than e-commerce as well as Internet banking.

On the other hand, due to the above problems, security authentication technology using OTP or HSM has been proposed as security first grade.

However, the current HSM has a problem that the user who wants to perform the Internet electronic payment must connect the HSM to the Internet electronic payment proxy client terminal.

In other words, if a user with an HSM cannot access the Internet electronic payment agency client and needs to perform the Internet electronic payment, the second user may not be able to perform the Internet electronic payment through the second user because of the smile of the HSM. You will not be able to make the payment through.

Accordingly, the present invention is to solve the above problems, to provide a one-time password authentication device and method using a voice signal in the Internet electronic payment service system to perform OTP authentication according to the voice signal through the HSM.

Voice OTP generating apparatus according to an embodiment of the present invention for achieving the above object of the present invention, the interface unit for performing data transmission and reception with a client terminal capable of performing Internet electronic payment; An HSM unit configured of a smart card chip to allow a client terminal user connected through the interface unit to perform secure Internet electronic payment; An OTP generation unit for generating an OTP in response to an OTP generation event generated according to an OTP request input from a user; An encryption unit for encrypting the OTP generated from the OTP generation unit; A voice converter for converting the encrypted OTP into a voice signal; And an output unit for outputting the OTP of the voice signal.

The OTP generation unit may include the random number generation information and the corresponding device information, and combines the information obtained from the random number generation information with reference to the time information and event information at which the OTP generation event occurs and combines the OTP with the device information. It is characterized by generating.

The voice OTP generating device may further include an OTP event counter / RTC configured of a counter and an RTC to provide time information and event information on which the OTP generation event occurs to the OTP generating unit.

The encryption unit may perform the encryption in at least one of unidirectional and bidirectional.

The voice converting unit combines the code string of the encrypted OTP with a transmission error check code included in the code and converts the code string of the encrypted OTP into an OTP of a transmission data code string. It is characterized by generating the OTP.

The voice OTP generating apparatus may further include a sound source DB for storing a plurality of sound sources, and the sound converting unit extracts a sound source corresponding to each code of a transmission data code string from the sound source DB, and extracts the extracted sound source and the code. It is characterized in that to further generate the OTP of the synthesized voice signal.

When the OTP generation unit receives an OTP generation event generated by the HSM unit in response to an OTP request of the client terminal user requesting OTP according to the Internet electronic payment, an OTP generated in response to the OTP generation event is generated. Characterized in that to be delivered to the client terminal through the HSM unit and the interface unit.

Client terminal to which a user to be connected to perform the Internet electronic payment according to another embodiment of the present invention for achieving the object of the present invention as described above; An OTP electronic payment device that performs OTP authentication through voice or HSM according to user selection when the internet electronic payment is requested from the client; The mobile terminal is connected to the client terminal to perform an HSM function so that the OTP corresponding to the Internet electronic payment is provided to the OTP electronic payment device, and generates a voice OTP according to a user's selection, so that the voice OTP is connected to the OTP electronic device through a telephone connection It includes an OTP generating device to be provided to the payment device.

On the other hand, voice OTP generation method of the voice OTP generating apparatus according to another embodiment of the present invention for achieving the above object of the present invention, the step of generating an OTP generation event according to the voice OTP request from the user;

Generating an OTP according to the OTP generation event; If it is determined that the OTP generation event is generated according to a connection with a client terminal, providing the OTP to a client terminal; Encrypting the OTP when it is determined that the OTP generation event is generated according to a user's switch operation; Converting the encrypted OTP into a voice signal, and outputting the voice signal through a speaker.

The OTP generating step may include randomly generating OTP information with reference to time information and event information at which the OTP generation event occurs; And combining the OTP information and the device information to generate an OTP of a code string.

In the encrypting step, the generated OTP is encrypted in one or two directions.

The converting the encrypted OTP into a voice signal may include: combining a code string of the encrypted OTP with a transmission error check code; Converting the combined OTP into an OTP of a transmission data code sequence; And synthesizing each converted code with a corresponding voice signal to generate an OTP of the voice signal.

The converting the encrypted OTP into a voice signal may include extracting a sound source corresponding to each code of the transmission data code string from a sound source DB storing a plurality of sound sources, and synthesizing the extracted sound source and the code by OTP. It characterized in that it further comprises the step of generating.

Electronic payment service method of the Internet electronic payment service system according to another embodiment of the present invention for achieving the object of the present invention as described above, the user to perform the Internet electronic payment to the OTP electronic payment device through the client terminal Requesting an electronic payment; Performing, by the OTP electronic payment device, HSM OTP authentication to a voice OTP generating device connected to the client terminal according to a user selection; Dialing, by the OTP electronic payment device, a telephone number previously provided by the user according to the user selection, receiving the OTP of the voice signal generated from the voice OTP generating device, and performing the OTP authentication; Approving the Internet electronic payment of the user in accordance with the OTP authentication.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, in describing in detail the operating principle of the preferred embodiment of the present invention, if it is determined that the detailed description of the related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

In addition, the same reference numerals are used for parts having similar functions and functions throughout the drawings.

1 is a block diagram showing a voice OTP generating apparatus according to an embodiment of the present invention.

As shown in FIG. 1, the voice One Time Password (OTP) device 100 includes an interface unit 110, an HSM unit 120, an OTP generation unit 130, an input unit 140, and an OTP event counter / RTC ( Real time time information) 150, the display unit 160, the encryption unit 170, the voice converter 181, the sound source DB 182, and the output unit 190.

The voice OTP generating apparatus 100 having such a configuration is connected to a USB (Universal Serial Bus) port of a PC, a notebook, or the like through the interface unit 110, and through an HSM unit 120 configured as a smart card chip. Securely store accredited certificates from external security threats and perform security certification for security systems such as Internet banking and digital signatures.

Here, the HSM is a known technology, and detailed descriptions related to the HSM will be omitted.

On the other hand, the voice OTP generating apparatus 100 is connected to a PC, a laptop, etc. as a client terminal in the Internet electronic payment service system through the interface unit 110 to perform user authentication, or voice OTP request through the input unit 140 In this case, the OTP referenced to the OTP event counter / RTC 150 may be generated from the OTP generator 130.

Here, the input unit 140 may be configured as a switch.

The OTP generation unit 130 generates an OTP event when the OTP generation event for requesting the OTP generation is generated according to a client terminal connection and an operation of the input unit 140 of the user. The OTP is generated by combining information generated from the random number generator or the random number table, which is provided from the counter / RTC 150 and is referred to the received time information and event information, with the corresponding device information (eg, a unique number).

Accordingly, the voice OTP generating apparatus 100 may display the OTP generated from the OTP generating unit 130 through the display unit 160, and displays the generated OTP through the encryption unit 170 having unidirectional and bidirectional characteristics. The encrypted OTP is converted into a voice signal through the voice converter 181 and then output to the output unit 190.

Here, the voice converter 181 generates a transmission error check code for the encrypted OTP and converts it into a code string, and synthesizes a unique voice signal for each code or extracts it from the sound source DB 182 to generate a voice signal string. .

The output unit 190 may be configured as a general speaker.

On the other hand, the OTP generation unit 130 is the same as the OTP generation operation described above, if the OTP request generated from the user performing the Internet electronic payment through the client terminal is transmitted through the interface unit 110 and the HSM unit 120 The OTP event counter / RTC 150 receives the time information and the event information when the corresponding OTP generation event is generated, and the information generated from the random number generator or the random number table included in reference to the received time information and the event information. Combine with the information to create an OTP.

In addition, the OTP generation unit 130 allows the generated OTP to be delivered to the client terminal through the HSM unit 120 and the interface unit 110, so that the electronic payment of the user is performed.

Next, an embodiment of a system for performing an Internet electronic payment service using the voice OTP generating apparatus 100 will be described.

2 is a block diagram showing an Internet electronic payment service system using a voice OTP generating apparatus according to an embodiment of the present invention.

2, the Internet electronic payment service system according to an embodiment of the present invention is composed of a voice OTP generating device 100, a client terminal 200, OTP electronic payment device 300.

Referring to the configuration and operation of the Internet electronic payment service system, the user requests a transaction preparation (user ID, password), transaction history input and payment approval through the Internet electronic payment client terminal 200. Thereafter, the Internet electronic payment server 310 of the OTP electronic payment device 300 receives a transaction preparation and transaction history payment request through the Internet, and requests the transaction history confirmation and OTP authentication to the V-OTP recognition server 320. .

Next, the V-OTP recognition server 320 notifies the transaction history by dialing a phone number registered in advance, confirms the transaction history from the user, and then the user operates the voice OTP generating apparatus 100 to operate the phone 400. Receives the voice signal input through the telephone network through the network, and restores the OTP from the received voice signal, and transmits to the OTP authentication server 330.

Accordingly, the OTP authentication server 330 confirms that the restored voice signal is information of the user, and then notifies the V-OTP recognition server 320 and the Internet electronic payment server 310 of the OTP authentication result. In this way, if the Internet electronic payment server 310 confirms that the information of the user from the OTP authentication server 330 matches, and accepts the payment information requested from the client terminal 200, the payment proceeds.

In this case, the Internet electronic payment client terminal 200, in addition to requesting the transaction preparation, transaction history input and payment request for the general Internet electronic payment is added means for selecting an OTP authentication method that can be used by the user from among various OTP authentication methods It is preferable to be configured. Currently applicable OTP authentication methods include authentication using a telephone to be applied in the present invention, a method using a keyboard, and a method using an input signal of a PC microphone. However, the present inventors have found a disadvantage in that the method of using the keyboard and the method of using the input signal of the PC microphone can be used, but the security is weak.

By doing so, a user using the Internet electronic payment service system directly approves his / her payment item through the voice OTP generation device 100 which can be checked by the user, thereby further enhancing security in payment using the Internet. have.

Here, the Internet electronic payment server 310 immediately before the payment, if the payment request is received from the Internet electronic payment client terminal 200 in addition to the means for checking the transaction preparation, transaction history and the possibility of transaction for the general Internet electronic payment, Of course, the V-OTP recognition server 320 may add a means for requesting transaction history confirmation and voice OTP authentication and performing final payment according to the result.

3 is a block diagram showing an Internet electronic payment service system using a voice OTP generating apparatus according to another embodiment of the present invention.

3, the Internet electronic payment service system according to an embodiment of the present invention is composed of a voice OTP generating apparatus 100, a client terminal 200 and the OTP electronic payment device 300.

Referring to the configuration and operation of the Internet electronic payment service system, the user requests a transaction preparation (user ID, password), transaction history input and payment approval through the Internet electronic payment client terminal 200. Thereafter, the Internet electronic payment server 310 of the OTP electronic payment device 300 receives a transaction preparation and transaction history payment request through the Internet, and requests the OTP certificate server 330 to confirm transaction details and OTP authentication.

Next, the OTP authentication server 330 notifies the transaction history to the client terminal 200 through the Internet electronic payment server 310, and confirms the transaction history from the user, then generated from the voice OTP generating device 100 of the user OTP is received through the Internet electronic payment server 310.

Accordingly, the OTP authentication server 330 confirms that the transmitted OTP is the user's information, and then notifies the Internet electronic payment server 310 of the OTP authentication result. In this way, if the Internet electronic payment server 310 confirms that the information of the user from the OTP authentication server 330 matches, and accepts the payment information requested from the client terminal 200, the payment proceeds.

On the other hand, the voice OTP generation device 100 connected to the client terminal 200, when the OTP is requested from the client terminal 200 in accordance with the OTP authentication of the OTP authentication server 330, to configure the OTP generation unit 130 In addition to providing the OTP generated through the client terminal 200, the generated OTP may be converted into a voice signal and output to the speaker according to user selection.

4 is a signal flow diagram illustrating a voice OTP generation method of the voice OTP generation device according to an embodiment of the present invention.

Referring to FIG. 4, when the switch operation configured by the user requesting the voice OTP is detected (S101), the voice OTP generating apparatus 100 randomly refers to the OTP event counter / RTC 150 and randomly OTP information. To generate (S102).

The voice OTP generating apparatus 100 combines the generated OTP information and the device information to generate an OTP of a code string (S103), and allows the OTP of the combined code string to be encrypted in one and two directions (S104).

Next, the voice OTP generating apparatus 100 generates a transmission data code string by combining the OTP of the encrypted code string and the transmission error check code (S105), and synthesizes a voice signal corresponding to each code of the transmission data or generates a sound source DB. Extracting from step 182 to perform OTP-negative conversion (S106).

Accordingly, the voice OTP generating apparatus 100 allows the generated OTP voice signal to be output through the output unit 190 such as a speaker (S107).

In this way, the voice OTP generating apparatus 100 achieves a processor in which the OTP randomly generated from this method is voice-converted and transmitted to the V-OTP recognition server side.

5 is a flowchart illustrating a method for internet electronic payment service using a voice OTP generating device according to an embodiment of the present invention.

Referring to FIG. 5, first, in the Internet electronic payment service system, when the client terminal 200 requests an internet payment from a user who wants to make an Internet payment (S201), the client terminal 200 transmits it to the OTP electronic payment device 300 (S202). ).

Accordingly, the OTP electronic payment device 300 requests the client terminal 200 to select the voice or HSM authentication (S203), and after grasping the response information corresponding thereto (S204), the client terminal user selects voice authentication. If it is determined (S205), the corresponding user automatically dials a phone number registered in advance (S206), and performs a transaction history confirmation request by voice guidance by voice synthesis (S207).

When the OTP electronic payment device 300 transmits a response corresponding to the transaction confirmation request from the dialed telephone 400 (S208), the OTP electronic payment apparatus requests a voice OTP input for final payment to the telephone 400 (S209).

Here, the user who has been requested to confirm the transaction history through the phone 400 may terminate the service through the guided phone button 400 if the corresponding transaction history is incorrect.

The voice OTP generating apparatus 100 generates and outputs an OTP of a voice signal according to a corresponding input when a voice OTP request is input according to a user's operation for which a final payment is requested through the phone 400 (S210). ).

The phone 400 transmits the OTP of the voice signal input according to the voice signal output of the voice OTP generating device 100 to the OTP electronic payment device 300 (S212), and the OTP electronic payment device 300 is transmitted. After restoring the OTP of the voice signal (S213), the restored OTP is compared with the server-side OTP to authenticate whether or not the OTPs match (S214).

The OTP electronic payment device 300 performs a voice guidance for successful authentication to the phone according to the authentication result (S215), and notifies the client terminal 200 that the final payment for the transaction history is completed (S216).

On the other hand, if the OTP electronic payment device 300 determines that the HSM authentication is requested from the client terminal user (S217), and requests the HSM OTP to the client terminal 200 (S218), the client terminal 200 voice OTP The generation apparatus 100 requests this again (S219) and obtains an OTP corresponding thereto (S220).

The client terminal 200 transmits the OTP obtained from the voice OTP generating device 100 to the OTP electronic payment device 300 (S221), and the OTP electronic payment device 300 transmits the transmitted OTP and server-side OTP. By comparison, it is authenticated whether or not the OTP matches (S222).

The OTP electronic payment device 300 transmits authentication success information to the client terminal 200 according to the authentication result (S223), and notifies that the final payment for the user transaction history is completed.

In addition, the Internet electronic payment service system according to the present invention may allow the OTP electronic payment device 300 to receive OTP for both voice and HSM to perform dual security authentication for the electronic payment target.

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and it is common in the art that various substitutions, modifications, and changes can be made without departing from the technical spirit of the present invention. It will be apparent to those skilled in the art.

The multicast service charging method and apparatus of the portable Internet system according to the present invention as described above, the present invention improves the vulnerability of the HSM notification service of security level 1 specified in the Electronic Financial Transactions Act, and accesses the client terminal directly through the HSM. Even if it is not, by performing voice OTP authentication with the telephone connection OTP electronic payment device, there is an effect that can significantly contribute to the development of the future Internet banking and phone banking.

Claims (14)

In the voice OTP generating device, An interface unit for performing data transmission and reception with a client terminal capable of performing Internet electronic payment; An HSM unit configured of a smart card chip to allow a client terminal user connected through the interface unit to perform secure Internet electronic payment; An OTP generation unit for generating an OTP in response to an OTP generation event generated according to an OTP request input from a user; An encryption unit for encrypting the OTP generated from the OTP generation unit; A voice converter for converting the encrypted OTP into a voice signal; And Voice OTP generating device including an output unit for outputting the OTP of the voice signal. The method of claim 1, wherein the OTP generating unit, The OTP is generated by combining the device information with information obtained from the random number generation information by referring to time information and event information at which the OTP generation event is generated, including random number generation information and corresponding device information. Voice OTP generation device. The method of claim 1, Voice OTP generating device further comprises an OTP event counter / RTC consisting of a counter and RTC, to provide the time information and event information when the OTP generation event occurred to the OTP generation unit. The method of claim 1, wherein the encryption unit, Voice OTP generation apparatus, characterized in that for performing the encryption in at least one of one-way and two-way. The method of claim 1, wherein the voice conversion unit, The code string of the encrypted OTP is combined with a transmission error check code included therein so as to be converted into an OTP of a transmission data code string, and the OTP of the voice signal is generated by synthesizing each converted code with a corresponding voice signal. A voice OTP generating device. The apparatus of claim 5, wherein the voice OTP generating device is And a sound source DB for storing a plurality of sound sources, wherein the sound converting unit extracts a sound source corresponding to each code of a transmission data code sequence from the sound source DB, and synthesizes the extracted sound source and the audio signal by combining the codes. Voice OTP generation device, characterized in that further generation. The method of claim 1, wherein the OTP generating unit, When receiving the OTP generation event generated by the HSM unit in response to the OTP request of the client terminal user requesting the OTP according to the Internet electronic payment, the OTP generated in response to the OTP generation event is the HSM unit and the interface. Voice OTP generation apparatus, characterized in that to be delivered to the client terminal via a unit. A client terminal to which a user who wants to perform Internet electronic payment is connected; An OTP electronic payment device that performs OTP authentication through voice or HSM according to user selection when the internet electronic payment is requested from the client; And The mobile terminal is connected to the client terminal to perform an HSM function so that the OTP corresponding to the Internet electronic payment is provided to the OTP electronic payment device, and generates a voice OTP according to a user's selection, so that the voice OTP is connected to the OTP electronic device through a telephone connection. Internet electronic payment service system comprising an OTP generating device to be provided as a payment device. In the voice OTP generation method of the voice OTP generation device, Generating an OTP generation event according to a voice OTP request from a user; Generating an OTP according to the OTP generation event; If it is determined that the OTP generation event is generated according to a connection with a client terminal, providing the OTP to a client terminal; Encrypting the OTP when it is determined that the OTP generation event is generated according to a user's switch operation; And Converting the encrypted OTP to a voice signal, and outputting the voice signal through a speaker. The method of claim 9, wherein the OTP generation step, Randomly generating OTP information with reference to time information and event information at which the OTP generation event occurs; And And combining the OTP information and the device information to generate an OTP of a code string. The method of claim 9, wherein the encrypting step, Voice OTP generation method characterized in that for encrypting the generated OTP in one or two directions. The method of claim 9, wherein the converting the encrypted OTP into a voice signal comprises: Combining the code string of the encrypted OTP with a transmission error check code; Converting the combined OTP into an OTP of a transmission data code sequence; And And synthesizing each converted code with a corresponding voice signal to generate an OTP of the voice signal. The method of claim 12, wherein converting the encrypted OTP into a voice signal, And extracting a sound source corresponding to each code of the transmission data code string from a sound source DB storing a plurality of sound sources, and generating an OTP of a voice signal obtained by combining the extracted sound source and the code. How to generate OTP. In the electronic payment service method of the Internet electronic payment service system, Requesting an electronic payment to an OTP electronic payment device by a user who wants to perform Internet electronic payment; Performing, by the OTP electronic payment device, HSM OTP authentication to a voice OTP generating device connected to the client terminal according to a user selection; Dialing, by the OTP electronic payment device, a telephone number previously provided by the user according to the user selection, receiving the OTP of the voice signal generated from the voice OTP generating device, and performing the OTP authentication; And Approving the Internet electronic payment of the user in accordance with the OTP authentication.

Images