KR20090132165A - One-touch trade system and one-touch trade method - Google Patents

Abstract

PURPOSE: One touch trade system and one touch trade method are provided to quickly process direct transaction through e-commerce and internet set up by internet phone. CONSTITUTION: A user creates a transactional offer signal(110). A transaction server generates the personal authentication request signal in response to the transactional offer signal(120). The user generates a first password, a second password and a third password in response to the personal authentication request signal(130). An authentication server performs the authentication process(140). The authentication enabling signal is transmitted to the transaction server(155). The verification end signal is transmitted to the user.

Description

One-touch trade system and One-touch trade method}

The present invention relates to a one-touch transaction method and one-touch transaction system, in particular, by simply pressing a button on the Internet phone, it is possible to directly access the corresponding commerce system to facilitate the desired transaction, wherein the one-time password generation algorithm mounted on the Internet phone ( An authentication algorithm) relates to a one-touch transaction method and one-touch transaction system that can facilitate user authentication.

With the development of the Internet, electronic commerce is being used to perform desired transactions using the Internet without going to the field. In particular, in the case of banks, transactions such as account transfer and inquiry can be made using the Internet without visiting the bank directly, or transactions such as account transfer and inquiry can be made by using the telephone.

However, this is the case of the general public who can easily use the Internet or telephone, and disabled people who have weak eyesight or hearing or who have lost sight or hearing cannot use the internet or telephone, so they can visit the bank or visit their family. The reality is that you need help.

On the other hand, as a means of replacing the existing landline telephones (Voice Over Internet Protocol) using the Internet protocol (Voice Over Internet Protocol) has been developed a lot. Unlike the existing technology of moving only data using the Internet, it converts voice into digital data and transmits it, which combines the convenience of the telephone with the convenience of the Internet.

However, even if you still use the Internet phone, if you use the Internet e-commerce, there is a problem that can be as vulnerable to security as the existing Internet transactions or telephone transactions, and furthermore, blind or deaf people without the help of others Electronic commerce using the Internet is a very difficult problem.

The technical problem to be achieved by the present invention is to provide a one-touch transaction method using the Internet phone having an improved structure to improve the security by using the built-in authentication algorithm directly and share it with the corresponding commerce system, convenient for persons with disabilities. .

Another technical problem to be achieved by the present invention is to provide a one-touch transaction system using an Internet phone having an improved structure for improving security by easily embedding an authentication algorithm and sharing it with a corresponding commerce system. have.

One-touch transaction method with a commerce system having a transaction server and a certificate server according to an embodiment of the present invention for achieving the technical problem, the user generating a transaction request signal, the transaction server in response to the transaction request signal In response to generating an identity authentication request signal, wherein the user generates a first password, a second password, and a third password in response to the identity authentication request signal, wherein the authentication server generates the first, second, and third passwords. Receiving a password to perform the authentication process, and if the authentication transmits an authentication permission signal to the transaction server, and in response to the authentication permission signal the transaction server sends a confirmation completion signal to the user to start a transaction It is provided.

The first password is a user ID, the second password is a password corresponding to the user ID, and the third password is a random number generated by a one time password generation algorithm.

The authentication server stores the same algorithm as the one-time password generation algorithm, and stores the first and second passwords corresponding to the one-time password generation algorithm together with the first and second passwords transmitted from the user. Authentication is performed by comparing the one-time password with the random number generated by the stored one-time password generation algorithm.

One first and second passwords correspond to one third password. The transaction request signal is preset to be directly connected to the transaction server of the commerce system via the Internet. The user transacts with the commerce system using an Internet telephone embedded with the Uniform Resource Locator (URL) of the commerce system and the one-time password algorithm to enable direct connection with the commerce system.

The commerce system is a bank's telebanking or internet banking system.

One-touch transaction system according to an embodiment of the present invention for achieving the above another technical problem uses an internet phone connected to the corresponding commerce system and the Internet.

The Internet telephone stores at least one pair of a transaction request signal output unit for outputting a transaction request signal to the commerce system in response to a first user command, a pair of first and second passwords, and in response to the second user command. A password storage unit for outputting corresponding first and second passwords, a one time password generation algorithm corresponding to each of the pair of first and second passwords, and a third in response to a third user command; A token unit for outputting a password, a control unit for receiving the user authentication request signal and confirmation completion signal input from the outside, generating the first user command to the third user command, and outputs the transaction control signals and the user authentication request And a display for displaying a signal for the signal and the confirmation completion signal, and a guide for the transaction control signals.

The transaction request signal output unit stores a URL (Uniform Resource Locator) of a corresponding commerce system.

The first user command is generated in the controller by a user pressing a transaction request button installed in the Internet phone once. When the first user command is generated, the Internet phone is changed to a transaction mode.

The first password is a user ID, the second password is a password corresponding to the user ID, and the third password is a random number generated by the one-time password generation algorithm.

The second user command is generated in the controller by the user confirming the identity authentication request signal by pressing an identification button installed in the Internet phone. The third user command is generated when the user is installed in the Internet phone. The control is generated by pressing the authentication button.

The commerce system receives the transaction request signal, receives a transaction server for generating a confirmation completion signal indicating that the user authentication request signal and the user authentication can be confirmed, and perform the authentication by receiving the first to third passwords. And an authentication server for transmitting an authentication permission signal to the transaction server, when the authentication server stores the same algorithm as the one-time password generation algorithm of the Internet telephone, and corresponds to the one-time password generation algorithm. The first, second, and third passwords are also stored, and authentication is performed by comparing the first and second passwords transmitted from the user with the random number generated by the stored one-time password generation algorithm.

The transaction control signals are signals transmitted to the commerce system for a transaction with the corresponding commerce system.

An integrated authentication server is further provided between the commerce system and the Internet telephone, and the integrated authentication server receives the transaction request signal, the first, second and third passwords, performs authentication, and when authenticated, the integrated authentication server. The signal is transmitted to the transaction server, wherein the transaction server checks both the authentication permission signal and the integrated authentication signal generated by the authentication server, and if the authentication permission signal and the integrated authentication signal are correct, the confirmation is completed. Output the signal.

The integrated authentication server stores all of the same algorithm as the one time password generation algorithm of the Internet telephone, the first and second passwords corresponding to the one time password generation algorithm, and information of the commerce system.

Authentication is performed by comparing the information of the commerce system contained in the transaction request signal with the random numbers generated by the stored first time password generation algorithm and the first, second and third passwords transmitted from the user; Generate the integrated authentication signal.

A computer-readable recording medium recording a one-touch transaction method with a commerce system having a transaction server and an authentication server according to another embodiment of the present invention, the user generating a transaction request signal, the transaction server the transaction Generating an identity authentication request signal in response to the request signal; transmitting, by the user, a first password, a second password, and a third password to the authentication server in response to the identity authentication request signal; Receiving a first, second and third password to perform an authentication procedure, and if authenticated, sending an authentication permission signal to the transaction server and in response to the authentication permission signal, the transaction server sends a confirmation completion signal to the user. And when transmitting, initiates a transaction.

As described above, the one-touch transaction method and the one-touch transaction system according to the embodiment of the present invention can quickly and easily perform a direct transaction using a preset electronic commerce system and the Internet by using an Internet telephone, and user authentication also by using a one-time password. In addition to the authentication using only the existing ID and password, there is an advantage that more reliable user authentication is possible.

In addition, disabled people with physical defects can easily help the Internet banking, etc. without the help of others can help families with disabilities.

DETAILED DESCRIPTION In order to fully understand the present invention, the operational advantages of the present invention, and the objects achieved by the practice of the present invention, reference should be made to the accompanying drawings which illustrate preferred embodiments of the present invention and the contents described in the drawings.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Like reference numerals in the drawings denote like elements.

1 is a flowchart illustrating a one-touch transaction method according to an embodiment of the present invention.

2 is a block diagram illustrating a one-touch transaction system in which the one-touch transaction method of FIG. 1 is performed.

Referring to Figure 1, the one-touch transaction method 100 with a transaction system having a transaction server and a certificate server according to an embodiment of the present invention, step 110, the user generates a transaction request signal, the transaction server is the transaction Step 120 of generating a personal authentication request signal in response to the request signal; step 130 of the user generating a first password, a second password, and a third password in response to the identity authentication request signal; When receiving the second and third passwords, the authentication process is performed (step 140). If authentication is performed (step 155), the authentication server transmits an authentication permission signal to the transaction server in step 160. The transaction server responds to the authentication permission signal. When the confirmation completion signal is transmitted to the user (step 160), a transaction 170 is started.

The one touch transaction method 100 of FIG. 1 is performed by the one touch transaction system 200 of FIG.

The one-touch transaction method 100 and the one-touch transaction system 200 of the present invention can be connected via the Internet to the commerce system 250 preset in the Internet phone 210 by pressing the button of the Internet phone 210 only once, When the authentication is easily performed for the person who uses the Internet phone 210 by the authentication program stored in the authentication server 240 of the Internet phone 210 and the commerce system 250, the transaction with the commerce system 250 will start immediately. Can be.

In particular, the Internet telephone 210 has a large display unit (LCD window), so if the commerce system 250 is a bank's Internet banking or telebanking system, the disabled, such as the visually impaired or the hearing impaired, are not allowed to use the bank's Internet banking or telephony. Banking is very easy to use.

That is, the visually impaired person can press the button a few times while listening to the announcements flowing through the handset of the Internet phone 210, and the Internet banking or telebanking is possible, and the hearing impaired person is guided as shown on the display of the Internet phone 210. Internet banking or telebanking can be easily seen while texting.

In more detail, when the user 220 presses a predetermined button once on the Internet phone 210, the Internet phone 210 generates a transaction request signal (BRS) to the corresponding commerce system 250 (step 110).

The transaction request signal BRS is preset to be directly connected to the transaction server 230 of the commerce system 250 via the Internet. That is, the Internet telephone 210 stores the URL (Uniform Resource Locator) of the commerce system 250 in advance so that the user 220 can directly access the commerce system 250, and the transaction request signal ( BRS) is transmitted to the URL.

The Internet phone 210 generating the transaction request signal BRS will be described in more detail with reference to FIG. 3. 3 is a block diagram illustrating the structure of the Internet telephone of FIG.

The internet telephone 210 includes a transaction request signal output unit 310, a password storage unit 320, a token unit 330, a control unit 340, and a display unit 350.

The transaction request signal output unit 310 outputs the transaction request signal BRS to the commerce system 250 in response to the first user command CR1. The transaction request signal output unit 310 stores a Uniform Resource Locator (URL) of the corresponding commerce system 250 and transmits a transaction request signal (BRS) to the URL. The transaction request signal output unit 310 may store and use a plurality of URLs of a corresponding commerce system.

Here, the first user command CR1 is generated by the controller 340 by pressing the user 220 once on the transaction request button (not shown) mounted on the Internet telephone 210. When the first user command CR1 is generated, the Internet telephone 210 is changed to the transaction mode.

The transaction server 230 of the commerce system 250 generates an identity authentication request signal CSS in response to the transaction request signal BRS (step 120), and the identity authentication request signal CSS is transmitted to the user 220. do. That is, in order to check whether the user 220 who sent the transaction request signal BRS is a person registered in advance in the commerce system 250, the transaction server 230 transmits the identity authentication request signal CSS. The identity authentication request signal (CSS) is displayed on the display unit of the Internet telephone 210 used by the user 220 and is transmitted to the user 220 by voice through the handset. The identity authentication request signal CSS is input to the control unit 340 of the Internet telephone 210.

The user 220 transmits the first password ID, the second password PW, and the third password OTP to the authentication server 240 in response to the authentication request signal CSS.

In detail, the password storage unit 320 of the Internet telephone 210 outputs a corresponding first password ID and a second password PW in response to the second user command CR2. The token unit 330 of the Internet telephone 210 includes a one time password generation algorithm and outputs a third password in response to a third user command.

Here, the first password ID is a user ID, the second password PW is a password corresponding to the user ID, and the third password OTP is a random number generated by a one time password generation algorithm. Number.

The password storage unit 320 stores at least one pair of first and second passwords ID and PW. In addition, the Internet telephone 210 according to the present invention may store a plurality of one-time password generation algorithms corresponding to the pair of stored first and second passwords ID and PW, respectively. Thus, one user can perform electronic commerce using one one-time password generation algorithm, and since the internet telephone 210 has a plurality of one-time password generation algorithms, a plurality of users can respond to their ID and password and the corresponding ones. The one-time password generation algorithm can be used to access the commerce system and conduct transactions. It is natural that authentication can be performed in multiple commerce systems using a single one-time password generation algorithm.

Internet phone 210 may be arranged one by one house, the family of each home registers their ID and password in the authentication server 240 of the corresponding commerce system 250 and at the same time Internet phone 210 The password is stored in the storage unit 320.

Then, when the identity authentication request signal (CSS) is received, the second user command by pressing the identity verification button (not shown) mounted on the Internet phone 210, the user 220 confirming the identity authentication request signal (CSS) CR2 is generated in the controller 340. That is, in the Internet phone 210 that has been switched to the transaction mode, a plurality of users may set in advance a user identification button that may generate their first password (ID) and second password (PW). The control unit 340 transmits the second user command CR2 to the password storage unit 320, and the password storage unit 320 transmits the corresponding first password ID and the second password PW to the authentication server 240. To send).

In addition, the third user command CR3 is generated from the controller 340 by the user 220 pressing an authentication button (not shown) mounted on the Internet telephone 210. The token unit 330 transmits the random number generated by the one-time password generation algorithm, that is, the third password OTP, to the authentication server 240 in response to the third user command CR3.

The authentication server 240 performs the authentication procedure by receiving the first, second and third passwords (ID, PW, OTP) (step 140).

That is, the authentication server 240 stores the same algorithm as the one-time password generation algorithm stored in the Internet telephone 210, and the first and second passwords ID and PW registered in advance to use the one-time password generation algorithm. ) Is also stored. In addition, authentication is performed by comparing the first and second passwords ID and PW transmitted from the user 220 with the random number generated by the stored one-time password generation algorithm with the input third password OTP.

FIG. 4 is a diagram illustrating a database structure for storing authentication algorithms and passwords included in the authentication server of FIG. 2.

Referring to FIG. 4, the database 240DB of the authentication server 240 stores a plurality (q) one-time password generation algorithms (OTPSRL1, OTPSRL2 to OTPSRLq). Each of these algorithms is stored in the corresponding Internet telephone. At least one one-time password generation algorithm may be stored in one Internet telephone.

Then, the Internet telephone 210 is placed in a home or office. The user 220 registers his / her ID and password in the authentication server 240 for the transaction with the commerce system 250 through the Internet telephone 210.

Since one one-time password generation algorithm can be used by one user, when one Internet telephone is placed in a home, one-time password generation algorithm can be stored in the Internet telephone as many as the number of families. In addition, the authentication server 240 may be registered with one user ID and password (ID11, PW11) in one one-time password generation algorithm (OTPSRL1).

When the authentication is performed, the authentication server 240 transmits an authentication permission signal (CAS) to the transaction server 230 (steps 150 and 155). If authentication fails, the authentication server 240 transactions that the authentication failed. The server 230 is notified, and the transaction server 230 again generates a personal authentication request signal (CSS).

The transaction server 230 transmits a confirmation completion signal CTS to the user 220 in response to the authentication permission signal CAS. The confirmation completion signal CTS is input to the controller 340 of the Internet telephone 210.

The controller 340 outputs the transaction control signals BCS in response to the confirmation completion signal CTS. The transaction control signals BCS are signals transmitted to the commerce system 250 for a transaction with the corresponding commerce system 250. For example, when the commerce system 250 is a bank's telebanking or internet banking system, the transaction control signals BCS may be signals for requesting money transfer or inquiry.

The display unit 350 displays the announcements (CSSM and CTSM) for the personal authentication request signal (CSS) and the confirmation completion signal (CTS) and the announcement (BCSM) for the transaction control signals (BCS).

The Internet telephone 210 used in the one-touch transaction system 200 according to the present invention includes a display unit using a liquid crystal display in preparation for use by the hearing impaired, and the display unit 350 includes various commerce systems 250. Corresponds to various user commands, personal authentication request signal (CSS), confirmation completion signal (CTS), and transaction control signals (BCS) to conduct a transaction. Display the functions. The display 350 is controlled by the controller 340.

The above-described commerce system 250 may be various site systems used for electronic commerce using the Internet, such as online shopping sites or various game sites, and may also include an internet banking or a telebanking system of a bank.

Buttons mounted on the Internet telephone 210 for generating the first user command CR1, the second user command CR2, and the third user command CR3 are general phone buttons since the first time the Internet phone 210 is manufactured. In addition, it can be made and mounted separately. Alternatively, when the Internet telephone 210 is switched to the transaction mode, a method of converting some of the general buttons into a number key for generating a user command may be used. This method will be understood by those skilled in the art, and thus a detailed description thereof will be omitted.

Referring back to Figure 2, the one-touch transaction system 200 according to an embodiment of the present invention

An integrated authentication server 260 may be further provided between the commerce system 250 and the Internet telephone 210. Integrated authentication server 260 receives the transaction request signal (BRS), the first, second and third password (ID, PW, OTP) to perform authentication, and if authenticated integrated authentication signal (TCAS) transaction server ( 230).

At this time, the transaction server 230 checks both the authentication allowable signal (CAS) and the integrated authentication signal (TCAS) generated from the authentication server 240, and if the authentication allowable signal (CAS) and integrated authentication signal (TCAS) is correct Output the completion signal CTS.

The integrated authentication server 260 stores information of the first and second passwords (ID, PW) and the commerce system 250 corresponding to the one-time password generation algorithm and the one-time password generation algorithm of the Internet telephone 210. Save everything. And, the information of the commerce system contained in the transaction request signal (BRS), the first, second, third passwords (ID, PW, OTP) transmitted from the user and the random number generated by the stored one-time password generation algorithm In comparison, authentication is performed and an integrated authentication signal (TCAS) is generated.

The present invention may be performed between the commerce system 250 having the authentication server 240 and the internet phone 210, but is performed by integrating authentication between the internet phone 210 and the commerce system 250. Integrated authentication server 260 may be further provided.

 The integrated authentication server 260 may be used even when the commerce system 250 is provided with the authentication server 240, and may be used even when the authentication server 240 is not provided. If the commerce system 250 does not have the authentication server 240, authentication is performed only with the integrated authentication server 240, and if the authentication is performed, the commerce system 250 receives an integrated authentication signal (TCAS) from the integrated authentication server 260. ) To start a transaction with the Internet telephone 210.

Even when the commerce system 250 includes the authentication server 240, the Internet telephone 210 simultaneously sends a transaction request signal (BRS) to the commerce system 250 and the integrated authentication server 260, and the commerce system 250 ) And the same operation as described above is performed, the integrated authentication server 260 analyzes the information of the commerce system 250 corresponding to the transaction request signal (BRS), and the first, first from the Internet telephone 210 Authentication is performed by receiving the second and third passwords (ID, PW, OTP). The authentication process is the same as the authentication process of the authentication server 240 described above.

As such, when performing authentication using the integrated authentication server 260, even if the commerce system 250 does not have a separate authentication server 240, if only registered in the integrated authentication server 260 Internet telephone ( A transaction using 210 can be performed. Since the integrated authentication server 260 performs only authentication, a large amount of authentication can be performed at the same time.

Meanwhile, the above-described embodiments of the present invention can be written as a program that can be executed in a computer, and can be implemented in a general-purpose digital computer that operates the program using a computer-readable recording medium. In addition, the structure of the data used in the above-described embodiment of the present invention can be recorded on the computer-readable recording medium through various means.

The computer-readable recording medium may be a magnetic storage medium (for example, a ROM, a floppy disk, a hard disk, etc.), an optical reading medium (for example, a CD-ROM, DVD, etc.) and a carrier wave (for example, the Internet). Storage medium).

As described above, optimal embodiments have been disclosed in the drawings and the specification. Although specific terms have been used herein, they are used only for the purpose of describing the present invention and are not intended to limit the scope of the invention as defined in the claims or the claims. Therefore, those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

BRIEF DESCRIPTION OF THE DRAWINGS In order to better understand the drawings cited in the detailed description of the invention, a brief description of each drawing is provided.

1 is a flowchart illustrating a one-touch transaction method according to an embodiment of the present invention.

2 is a block diagram illustrating a one-touch transaction system in which the one-touch transaction method of FIG. 1 is performed.

3 is a block diagram illustrating the structure of the Internet telephone of FIG.

FIG. 4 is a diagram illustrating a database structure for storing authentication algorithms and passwords included in the authentication server of FIG. 2.

Claims (17)

In the one-touch transaction method with a commerce system having a transaction server and a certificate server, Generating a transaction request signal by the user; Generating, by the transaction server, an identity authentication request signal in response to the transaction request signal; Generating, by the user, a first password, a second password, and a third password in response to the identity authentication request signal; Receiving, by the authentication server, the first, second, and third passwords, and performing an authentication procedure, and when authenticating, transmitting an authentication permission signal to the transaction server; And And initiating a transaction when the transaction server transmits a confirmation completion signal to the user in response to the authentication permission signal. The method of claim 1, Wherein the first password is a user ID, the second password is a password corresponding to the user ID, and the third password is a one-touch number generated by a one time password generation algorithm. How to trade. The method of claim 2, The authentication server stores the same algorithm as the one-time password generation algorithm, and also stores the first and second passwords corresponding to the one-time password generation algorithm and transmits the first and second, One-touch transaction method characterized in that the authentication is performed by comparing the third password and the random number generated by the stored one-time password generation algorithm. The method of claim 3, wherein One touch transaction method characterized in that the one and the first and second password correspond to one of the third password. The method of claim 1, wherein the transaction request signal, One-touch transaction method, characterized in that pre-set to be directly connected to the transaction server of the commerce system via the Internet. The method of claim 1, wherein the user makes a transaction with the commerce system using an Internet telephone embedded with a Uniform Resource Locator (URL) of the commerce system and the one-time password algorithm to enable direct connection with the commerce system. One touch trading method. The method of claim 1, wherein the commerce system, One-touch transaction method, characterized in that the bank's telebanking system or Internet banking system. In the one-touch transaction system using a corresponding commerce system and an Internet telephone connected to the Internet, The Internet telephone, A transaction request signal output unit for outputting a transaction request signal to the commerce system in response to a first user command; A password storage unit for storing at least one pair of first and second passwords and outputting corresponding first and second passwords in response to a second user command; A token unit for embedding a one time password generation algorithm corresponding to each of the first and second password pairs and outputting a third password in response to a third user command; A control unit which receives an external authentication request signal and a confirmation completion signal, generates the first to third user commands, and outputs transaction control signals; And And a display unit for displaying the guidance message for the identity verification request signal and the confirmation completion signal and the guidance message for the transaction control signals. The method of claim 8, wherein the transaction request signal output unit, One-touch transaction system, characterized in that for storing the Uniform Resource Locator (URL) of the corresponding commerce system. The method of claim 9, wherein the first user command, One-touch transaction system, characterized in that generated by the user by pressing the transaction request button mounted on the Internet phone once, the first user command is generated, the Internet phone is changed to the transaction mode. The method of claim 8, The first password is a user ID, the second password is a password corresponding to the user ID, and the third password is a random number generated by the one-time password generation algorithm. The method of claim 11, wherein the second user command, The user confirming the identity authentication request signal is generated by the control unit by pressing the identity verification button mounted on the Internet phone, The third user command is a one-touch transaction system, characterized in that generated by the control unit by the user pressing the authentication button mounted on the Internet phone. The method of claim 12, wherein the commerce system, A transaction server which receives the transaction request signal and generates the confirmation completion signal that the identity verification request signal and the identity verification are confirmed and can be transacted; And The authentication server receives the first to third passwords and performs authentication, and when the authentication is performed, transmits an authentication permission signal to the transaction server. The authentication server stores the same algorithm as the one-time password generation algorithm of the Internet telephone, and also stores the first and second passwords corresponding to the one-time password generation algorithm, and transmits the first and second passwords from the user. 2, the one-touch transaction system characterized in that the authentication is performed by comparing the third password and the random number generated by the stored one-time password generation algorithm. 15. The system of claim 13, further comprising an integrated authentication server between the commerce system and the Internet telephone. The integrated authentication server, Receives the transaction request signal, the first, second and third password to perform authentication, and if authenticated transmits an integrated authentication signal to the transaction server, At this time, the transaction server, And confirming both the authentication permission signal and the integrated authentication signal generated by the authentication server, and outputting the confirmation completion signal when the authentication permission signal and the integrated authentication signal are correct. The method of claim 14, wherein the integrated authentication server, The same algorithm as that of the one-time password generation algorithm of the Internet telephone, the first and second passwords corresponding to the one-time password generation algorithm, and information of the commerce system; The information of the commerce system contained in the transaction request signal is compared with the first, second and third passwords transmitted from the user, and the random number generated by the stored one-time password generation algorithm performs authentication and the integration is performed. One-touch transaction system, characterized in that for generating an authentication signal. The method of claim 8, wherein the transaction control signals, One-touch trading system, characterized in that the signals transmitted to the commerce system for the transaction with the corresponding commerce system. A computer-readable recording medium recording a one-touch transaction method with a commerce system having a transaction server and a certificate server, Generating a transaction request signal by the user; Generating, by the transaction server, an identity authentication request signal in response to the transaction request signal; Generating, by the user, a first password, a second password, and a third password in response to the identity authentication request signal; Receiving, by the authentication server, the first, second, and third passwords, and performing an authentication procedure, and when authenticating, transmitting an authentication permission signal to the transaction server; And Recording a program for executing a one-touch transaction method on a computer, comprising: starting a transaction when the transaction server transmits a confirmation completion signal to the user in response to the authentication permission signal. media.

Images