KR20110029039A - System and method for managing public certificate of attestation with complex password and recording medium - Google Patents

Abstract

PURPOSE: A system and a method for managing a plurality of public key certificate passwords are provided to enable a user register passwords by the purposes, and use the registered password by the situations. CONSTITUTION: An information registration server(100) comprises followings. An electronic document generator(130) receives image content transmitted to the information registration terminal(180) through the image receiver(120). If the validity is confirmed through a validity confirmer(125), the electronic document generator generates predetermined biometric information registration electronic document in which the received image content is included.

Description

System and Method for Managing Public Certificate of Attestation with Complex Password and Recording Medium}

1 is a diagram illustrating a face-to-face biometric information registration system for identification using biometric information according to an embodiment of the present invention.

2A and 2B illustrate a process of registering biometric information registration application information in a face-to-face manner according to an exemplary embodiment of the present invention.

3A and 3B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

4A and 4B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

5 is a diagram illustrating a non-face-to-face biometric information registration system for identification using biometric information according to another exemplary embodiment of the present invention.

6A and 6B are views illustrating a process of registering biometric information registration application information in a non-face-to-face manner to identify an identity using biometric information according to one embodiment of the present invention.

7 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate to which a plurality of passwords are assigned according to an exemplary embodiment of the present invention.

8 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate to which a plurality of passwords are assigned according to one embodiment of the present invention.

9 is a diagram illustrating a functional configuration of a certificate issuing terminal 715 for issuing and processing a public certificate to which a plurality of passwords are assigned according to an embodiment of the present invention.

10A and 10B are diagrams illustrating a process of issuing and processing a public certificate to which a plurality of passwords are assigned according to an exemplary embodiment of the present invention.

11A and 11B illustrate a process of issuing and processing a public certificate to which a plurality of passwords are assigned according to another exemplary embodiment of the present invention.

12 is a diagram illustrating a financial transaction system for providing a financial transaction service according to an embodiment of the present invention.

FIG. 13 is a diagram illustrating a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to one embodiment of the present invention.

14A and 14B illustrate a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to another exemplary embodiment of the present invention.

<Description of main parts of drawing>

700: certificate authority server 705: certificate server

710: financial institution server 1200: interface unit

1205: interface providing unit 1210: information receiving unit

1215: information transmission unit 1220: information confirmation unit

1225: certificate processing unit 1230: validation unit

1235: financial transaction processing unit 1240: financial system

1245: financial transaction terminal

The present invention is to pre-register a plurality of situations using a public certificate and a password corresponding to each situation in order to use the public certificate to customers using financial transaction services through public certificates, and the password corresponding to the pre-registered situation is It is to prevent hacking damage by enabling the use of financial transaction services through an accredited certificate only when it is correct.

With the development of information and communication technology, financial transactions, which were only performed on the offline, have been made through a network called the Internet, thereby providing convenience to many customers.

However, Internet banking provided through a network called the Internet is always exposed to the problem of hacking due to the fact that the network is available and accessible to anyone, and thus various problems occur.

In order to solve this situation, by providing a public certificate as an authentication means and providing an internet banking service through a public certificate, it solves a weak security problem, but if a single password is continuously operated, it avoids the problem of hacking. There is a difficult problem to go.

An object of the present invention for solving the above problems, the situation of using a public certificate to the customer using the financial transaction service through the public certificate, and pre-register a password for each situation, and use the pre-registered password according to the situation The present invention provides a method and system for naturally changing / operating a password and a recording medium therefor.

The method for providing a financial transaction service through a public certificate issued to a customer according to the present invention includes connecting a plurality of situations using a new public certificate issue request or a previously issued public certificate with a password corresponding to the above situation. Storing in a storage medium, and when the customer requests to use a financial transaction service through an authorized certificate, receiving a situation in which the authorized certificate is used in connection with the storage medium and a password input by the customer, and receiving the received password. And confirming whether or not a password corresponding to the situation is appropriate, and if the password corresponding to the situation is determined to be appropriate, processing to provide a financial transaction service through the authorized certificate. The situation above, at least one of the date, region using a public certificate It is characterized by comprising.

In the method of operating a plurality of authorized certificate passwords according to the present invention, when issuing an authorized certificate in which the plurality of passwords are set, the payment amount for activation of the authorized certificate is characterized in that the payment amount including the premium.

On the other hand, it includes a computer-readable recording medium, characterized in that for recording a program for executing the above-described method for operating a plurality of authorized certificate password.

On the other hand, the system for providing a financial transaction service through a public certificate issued to a customer, a plurality of situations using a request for issuing a new public certificate or a previously issued public certificate and a storage for connecting and storing a password corresponding to the situation When the customer requests the use of the financial transaction service through an authorized certificate, the media and the storage medium receive the situation of using the authorized certificate and the password entered by the customer, and correspond to the received situation. Means for confirming whether or not the password is appropriate, and means for processing to provide a financial transaction service through the authorized certificate if it is determined that the password corresponding to the situation is appropriate. Include at least one date and region that use a public certificate It characterized by that.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or a system that is commonly provided in the art to which the present invention belongs The functional configuration is omitted as much as possible, and will be mainly described for the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a face-to-face biometric information registration system for identity verification using biometric information according to an embodiment of the present invention.

In more detail, in FIG. 1, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, a predetermined image acquisition device is used by an employee terminal. Obtaining predetermined image contents corresponding to the biometric information registration application, and from the biometric information registration application information and the biometric information registration application corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface; When the acquired image content is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information and biometric information included in the biometric information registration request information are stored. System configuration for storing in a predetermined storage medium 145 by linkage processing As for, but for the embodiment method that specifically the electronic document repository is provided on the external system associated with the biometric information registering system via a predetermined communication means.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 1 to infer various implementation methods for the configuration of a biometric information registration system for identification using biometric information. The present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing to infer an implementation method provided in the DBMS in which the electronic document repository is located in the biometric information registration system. As will be appreciated, the invention includes all implementations inferred, and are not limited to the implementation method illustrated in FIG.

In addition, according to the implementation method shown in FIG. 1, the biometric information registration electronic document corresponding to the biometric information registration application is described as being generated on the server side on the biometric information registration system, but the present invention is limited thereto. The biometric information registration electronic document may be generated at a terminal that has obtained image content corresponding to the biometric information registration application through a predetermined image acquisition device (for example, generating an electronic document provided at the server side). Function is provided on the terminal side to generate the biometric information registration electronic document), by which the present invention is not limited.

In addition, according to the implementation method illustrated in FIG. 1, the biometric information included in the biometric information registration application includes only selection information for selecting the type of biometric information (eg, fingerprint, iris, etc.), and the biometric information registration application. At the time, it is possible to receive biometric information about the user, whereby the present invention is not limited.

Hereinafter, the biometric information registration application and the biometric information registration application corresponding to the biometric information registration application created by the customer through the predetermined biometric information registration interface on the biometric information registration system shown in FIG. Receiving a registration application and storing the biometric information newly stored biometric information newly stored and stored in the storage medium 145 of the predetermined biometric information at least one means and / or components corresponding to the functional configuration "information registration server 100 for convenience "

Referring to FIG. 1 according to an embodiment of the present invention, a biometric information registration system for identifying an identity using the biometric information includes an information registration terminal including an employee terminal provided at at least one branch of a certification authority (or a branch). Characterized in that it comprises a 180, the information registration terminal 180 is connected to the communication channel and the information registration server 100 provided on the biometric information registration system through a predetermined communication network.

According to an exemplary embodiment of the present invention, the customer visits the certification authority branch (business office) for identification using the biometric information, and visits a window staff (or counter staff) through a window provided at the certification authority office (business office). Through a biometric information registration application (for example, a document provided with a form for filling in at least one information item for identifying the identity using the biometric information) Preferably, the customer seals the seal of the customer's seal for the legal basis for the biometric information registration application.

Then, when the customer submits the completed biometric information registration application to the teller staff, the teller staff scans the biometric information registration application through a predetermined image acquisition device to obtain a predetermined image content, and a predetermined employee terminal Input (or select) biometric information registration application information including at least one of image content obtained in response to the biometric information registration application, customer information written in the biometric information registration application, and biometric information, and correspondingly The employee terminal preferably transmits the image content and the biometric information registration application information to the information registration server 100 provided on the biometric information registration system through the communication network.

Here, the employee terminal preferably comprises a terminal used by the employee of the branch (or branch) of the certification authority, the information registration server 100 connected to the employee terminal is provided on the predetermined certification authority system It is preferable to include a server.

In the biometric information registration system as described above, an image acquisition device for obtaining image content corresponding to the biometric information registration application prepared by the customer, the employee terminal used by the employee and the employee terminal and the information registration server 100 The communication network connecting to perform a function of the biometric information registration interface for registering the biometric information registration application information for the customer to identify the identity using the biometric information.

The storage medium 145 provided on the biometric information registration system according to the present invention performs a predetermined process by linking the customer information and the biometric information included in the biometric information registration information provided from the information registration terminal 180. The storage medium 145 is characterized in that the storage.

The customer information includes personal information (eg, name, resident registration number, address, phone number, mobile phone number, e-mail address, etc.) of the customer who filled out the biometric information registration application, and member information of the customer (eg, the customer And at least one member ID information, etc. included in the customer D / B provided on the certification authority system associated with the biometric information registration system in response to the customer. desirable.

The biometric information may be provided by a customer who filled out the biometric information registration application (or scanned by scanning a body part of the customer (eg, fingerprint, iris, face, etc.)) and / or features on the image data (eg, among fingerprints). Characteristic of the pattern that is differentiated from the general pattern) It is preferable to include at least one data.

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system, and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

The information registration server 100 provided on the biometric information registration system according to the present invention is a generic term for the components of the biometric information registration system side connected to the information registration terminal 180 through a predetermined communication network. It may be implemented by including a server (or device), and / or implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), by which the present invention is not limited.

According to an embodiment of the present invention, the information registration server 100 is provided with an interface unit 105 (or interface means) for managing connection between the information registration terminal 180 and a predetermined communication channel through the communication network. Characterized in that made.

When the information registration terminal 180 is an employee terminal connected to a predetermined communication network according to an embodiment of the present invention, the interface unit 105 communicates with the employee terminal based on a protocol stack defined in the communication network. It is preferable to provide a communication interface for transmitting and receiving at least one or more information (or data) by connecting a channel and using a communication protocol defined in the biometric information registration program provided in the employee terminal.

Referring to FIG. 1, when the predetermined information registration terminal 180 connects a predetermined communication channel with the information registration server 100 through the interface unit 105, the information registration server 100 is connected to the living body. Acquiring image contents corresponding to the biometric information registration application prepared by the customer through a predetermined image acquisition device provided in the information registration terminal 180 to confirm the identity using the information, and the biometric information corresponding to the biometric information registration application Generate (or extract) at least one user interface for inputting (or selecting) information registration request information to be transmitted to the information registration server 100, and generating (or extracting) in connection with the interface unit 105. In the interface providing unit 110 (or interface providing means) for providing a user interface to the information registration terminal 180, the information registration terminal 180 When the biometric information registration application information corresponding to the biometric information registration application is input (or selected) through a user interface, the biometric information transmitted from the information registration terminal 180 in association with the interface unit 105 is transmitted. The information receiving unit 115 (or information receiving means) for receiving registration application information and the biometric information registration application prepared by the customer through the predetermined image acquisition device based on the user interface in the information registration terminal 180 Acquire and transmit the image content, characterized in that it comprises an image receiving unit 120 (or image receiving means) for receiving the image content corresponding to the biometric information registration application in connection with the interface unit 105. .

The interface providing unit 110 connects a predetermined communication channel with the information registration server 100 through the interface registration unit 105, and then the information registration server 100 to the information registration server 100. When requesting a user interface for identification using biometric information, an image content corresponding to the biometric information registration application prepared by the customer is obtained through a predetermined image acquisition device provided in the information registration terminal 180, and the biometric information is obtained. Generate at least one user interface for inputting (or selecting) biometric information registration application information corresponding to the information registration application to be transmitted to the information registration server 100 through the communication network, and / or a predetermined database (not shown) Omit the extracted user interface in conjunction with the interface unit 105. To the information characterized in that it provides to the registered terminal 180. The

According to another embodiment of the present invention, the information registration terminal 180 acquires the image content corresponding to the biometric information registration application written by the customer through a predetermined image acquisition device, and the biometric information corresponding to the biometric information registration application. If a predetermined information registration program having at least one user interface for inputting (or selecting) registration application information and transmitting the information to the information registration server 100 through the communication network is provided, obtaining a predetermined image as described above. Acquire image contents corresponding to the biometric information registration application prepared by the customer through the device, input (or select) biometric information registration application information corresponding to the biometric information registration application, and transmit it to the information registration server 100. Create (or extract) a user interface to the information registration terminal 180 Interface providing unit 110 may be omitted mubang to, and which the present invention is not limited.

Thereafter, the information registration terminal 180 inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface, and registers the input (or selected) biometric information. The application information is transmitted to the information registration server 100 through the communication network. In response thereto, the information receiving unit 115 is connected to the interface unit 105 to transmit the biometric information transmitted from the information registration terminal 180. Characterized in that the registration application information is received.

In addition, the information registration terminal 180 obtains the image content corresponding to the biometric information registration application written by the customer through a predetermined image acquisition device based on the user interface, and the obtained image content through the communication network The image receiving unit 120 receives the image content corresponding to the biometric information registration application in association with the interface unit 105.

According to another exemplary embodiment of the present invention, the information registration terminal 180 acquires image content corresponding to the biometric information registration application prepared by the customer through a predetermined image acquisition device and is provided to the information registration terminal 180. In the case of pre-stored in a predetermined (or associated) storage device, the information registration terminal 180 to the biometric information registration application created by the customer of the at least one or more image content previously stored in the storage device through the user interface A corresponding image content is selected and transmitted to the information registration server 100 through the communication network. In response, the image receiving unit 120 is connected to the interface unit 105 to correspond to the biometric information registration application. It is desirable to receive content.

According to another exemplary embodiment of the present invention, the biometric information registration application information corresponding to the biometric information registration application and the image content corresponding to the biometric information registration application created by the customer through the user interface in the information registration terminal 180. When transmitting together, the information receiving unit 115 may receive the image content corresponding to the biometric information registration application and the biometric information registration application information together with the interface unit 105 (for example, the image receiving unit 120 is integrated into the information receiving unit 115, and the present invention is not limited thereto.

Referring to FIG. 1, when the biometric information registration request information transmitted from the information registration terminal 180 is received through the information receiving unit 115, the information registration server 100 receives the biometric information registration request information. It is characterized in that it comprises a validity verification unit 125 (or validity confirming means) for confirming whether the validity for identity verification using the biometric information.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

Referring to FIG. 1, the information registration server 100 receives the image content transmitted from the information registration terminal 180 through the image receiving unit 120, and receives the biometric information through the validity checking unit 125. When the validity of the information registration application information is authenticated, the electronic document generating unit 130 (or electronic document generating means) for generating a predetermined biometric information registration electronic document including the received image content, and the generated biometrics And an electronic document transmission unit 135 (or an electronic document transmission means) for transmitting the information registration electronic document to the electronic document repository associated with the biometric information registration system.

The electronic document generating unit 130 may generate a biometric information registration electronic document including the image content received from the information registration terminal 180 through the image receiving unit 120.

According to the exemplary embodiment of the present invention, the electronic document generation unit 130 stores the biometric information intact as an image file including the image content received from the information registration terminal 180 through the image receiving unit 120. It is preferable to process the biometric information registration electronic document for identity verification.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. It is preferable to generate a biometric information registration electronic document for identification using the biometric information to an image file corresponding to the image content including at least one or more of the customer information and biometric information in a watermarking manner.

According to another embodiment of the present invention, the electronic document generating unit 130 is a predetermined document file (eg, including the image content received from the information registration terminal 180 through the image receiving unit 120) Generating a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one of HWP / DOC, or a web document file including MHT) It is preferable to generate a biometric information registration electronic document for identity verification.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. Generating an image content including at least one or more of the stored customer information and biometric information by a watermarking method, and including a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content, Or EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, etc., or a web document file including the MHT)) to register the biometric information for identification using the biometric information It is desirable to create an electronic document.

According to another exemplary embodiment of the present invention, the electronic document generating unit 130 receives the image contents and the information receiving unit 115 received from the information registration terminal 180 through the image receiving unit 120. A predetermined document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, etc.) including at least one document file including the received biometric information registration request information, or By generating a web document file including the MHT), it is preferable to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the electronic document generating unit 130 includes the image content received from the information registration terminal 180 through the image receiving unit 120 in the biometric information registration request information received through the information receiving unit 115. Generate image content including at least one or more of the stored customer information and biometric information in a watermarking manner, and include a predetermined document file (eg, PDF) including the generated image content and the biometric information registration information. (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT). It is preferable to generate a biometric information registration electronic document for identification.

Those skilled in the art to which the present invention pertains, the electronic document generation unit 130, the technical features of generating a biometric information registration electronic document of the image file format and / or a predetermined document file format, and Since the technical features of the file format for the image file and / or the document file corresponding to the information registration electronic document will be familiar, detailed description thereof will be omitted for convenience.

The electronic document transmission unit 135 transmits and stores the biometric information registration electronic document generated by the electronic document generation unit 130 to a predetermined electronic document repository associated with the biometric information registration system. .

As shown in FIG. 1, the electronic document repository is connected to the information registration server 100 on the biometric information registration system through a predetermined communication means and the electronic document server 150 and the electronic document D / B 170 When provided externally, the electronic document transmission unit 135 is the electronic document server 150 via the communication means for the biometric information registration electronic document generated by the electronic document generation unit 130 It characterized in that the transmission to.

Here, when the electronic document server 150 and the electronic document D / B 170 is provided outside the biometric information registration system, the electronic document server 150 and the electronic document D / B 170 is It is advisable to manage them in accredited bodies.

According to another embodiment of the present invention, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the electronic document transmission unit 135 is generated by the electronic document generation unit 130. It is possible to store the biometric information registration electronic document in the electronic document D / B (170) corresponding to the electronic document storage on the DBMS provided in the biometric information registration system, by which the present invention is not limited.

According to an embodiment of the present invention, the electronic document transmission unit 135 may include electronic document-related information (eg, biometric information corresponding to the image content) for generating predetermined electronic document management information in the electronic document server 150. The electronic document further including the customer information that created the registration application, and / or the certification authority information for transmitting the biometric information registration electronic document, and / or the electronic document file format information, and / or the biometric information registration application information, and the like. It is possible to transmit to the storage, by which the present invention is not limited.

Referring to FIG. 1, the information registration server 100 has a validity for identifying an identity using the biometric information through the validity confirming unit 125 through the biometric information registration application information received through the information receiving unit 115. If the authentication, the information storage unit 140 (or information storage means) is stored in a predetermined storage medium 145 by linking the customer information and the biometric information included in the biometric information registration application information of the validity is verified; Characterized in that made.

When the validity of the biometric information registration application information is confirmed by the validity confirming unit 125, the information storage unit 140 stores the data by linking and processing the customer information and biometric information included in the biometric information registration application information. The storage medium 145, the storage medium 145 is provided in the information registration server 100, or when provided on the network associated with the information registration server 100, the information storage The unit 140 preferably processes the customer information and the biometric information included in the received biometric registration request information in association with the storage medium 145, and stores the stored information on the certification authority system. When provided in the provided DBMS, the information storage unit 140 is preferably stored in the DBMS provided on the certification authority system, the customer information, biometric information included in the received biometric information registration application information It is right.

Referring to FIG. 1, an electronic document that receives a predetermined biometric information registration electronic document from the information registration server 100 provided on the biometric information registration system and stores and manages the predetermined biometric information D / B 170 in a predetermined electronic document D / B 170. The server 150 includes an electronic document receiving unit 155 (or electronic document receiving means) for receiving a predetermined biometric information registration electronic document from the information registration server 100 through predetermined communication means, and the received biometric information. An information generating unit 160 (or information generating means) for generating predetermined electronic document management information for storing and managing a registered electronic document in the electronic document D / B 170; and the electronic document management information and the And an electronic document storage unit 165 (or electronic document storage means) for linking and processing the biometric information registration electronic document to a predetermined electronic document D / B 170.

The electronic document receiving unit 155 may receive the biometric information registration electronic document in the form of an image file and / or a document file from the information registration server 100 through the communication means.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is the image content received by the information registration server 100 from the information registration terminal 180. It is preferable that the image file including the same as it is made.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is the biometric information registration request to the image content received by the information registration server 100 from the information registration terminal 180. It is preferable to include an image file corresponding to the image content including at least one or more information of the customer information, biometric information included in the information in a watermarking (Watermarking) method.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is an image received by the information registration server 100 from the information registration terminal 180. A predetermined document file including contents (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means may include the biometric information registration request information on the image content received by the information registration server 100 from the information registration terminal 180. A predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange)) containing image content including at least one of customer information and biometric information included in a watermarking method. File, or a word processor file including at least one or more HWP / DOC, or a web document file including MHT).

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means is received by the information registration server 100 from the information registration terminal 180. A word processor including at least one predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, an HWP / DOC, etc.) including the image content and the biometric information registration request information. File, or a web document file including MHT).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 155 through the communication means may include the biometric information registration request information on the image content received by the information registration server 100 from the information registration terminal 180. Image content including at least one or more of the customer information and biometric information included in the watermarking method and a predetermined document file (eg, a Portable Document Format (PDF) file) including the biometric information registration information; Or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT).

The information generating unit 160 is a predetermined electronic document unique number (or unique information) to be assigned to the biometric information registration electronic document received through the electronic document receiving unit 155, and through the electronic document receiving unit 155 And generating electronic document management information including electronic document storage date and time information including a date and time at which the biometric information registration electronic document is received (or a date and time at which the biometric information registration electronic document is stored).

According to an exemplary embodiment of the present invention, the information generating unit 160 refers to the biometric information registration electronic document received through the electronic document receiving unit 155 and refers to the biometric information with reference to the information registration server 100. It is preferable to confirm the certification authority that sent the registration electronic document and to generate the electronic document management information further including the verified certification authority information.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 100 through the electronic document receiving unit 155, the information generating unit 160 receives the received information. Electronic document-related information (e.g., customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or electronic document file format information, and / or It is preferable to generate the electronic document management information further comprising the biometric information registration application information).

The electronic document storage unit 165 associates the biometric information registration electronic document received through the electronic document receiving unit 155 with the electronic document management information generated by the information generating unit 160 to process a predetermined electronic document D. / B (170) characterized in that the storage.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 is the information registration server 100 by the information registration terminal 180. It is preferable that the image file including the image content received from the) as it is included.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may include the image content received by the information registration server 100 from the information registration terminal 180. It is preferable to include an image file corresponding to the image content including at least one or more information of the customer information, the biometric information included in the biometric information registration application information in a watermarking (Watermarking) method.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may include the information registration server 100. A predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, etc.) including at least one document file including image content received from 180, or Web document file including MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may be stored in the image content received by the information registration server 100 from the information registration terminal 180. A predetermined document file (eg, a Portable Document Format (PDF) file) including image content including at least one of customer information and biometric information included in the biometric information registration request information by a watermarking method; Or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT).

According to another embodiment of the present invention, the biometric information registration electronic document that the electronic document storage unit 165 stores in the electronic document D / B (170) is the information registration server 100 is the information registration terminal At least one predetermined document file (e.g., a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, an HWP / DOC, etc.) including the image content received from the 180 and the biometric information registration request information. Or a web document file including the MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 170 by the electronic document storage unit 165 may be stored in the image content received by the information registration server 100 from the information registration terminal 180. Image content including at least one or more of customer information and biometric information included in the biometric information registration request information by a watermarking method and a predetermined document file including the biometric information registration request information (eg, PDF ( A Portable Document Format (EDI) file, an EDI (Electronic Data Interchange) file, or a word processor file including at least one or more HWP / DOC, or a web document file including an MHT.

According to the exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 170 by the electronic document storage unit 165 in association with the biological information registration electronic document is stored in the biological information registration electronic. Preferably, a predetermined electronic document unique number (or unique information) assigned to the document and the electronic document storage date and time information are included.

According to an exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 170 by the electronic document storage unit 165 in association with the biometric information registration electronic document is stored in the biometric information registration. It is preferable that the authentication information is sent to the information registration server 100 that sent the electronic document further comprises the certification authority information that sent the electronic document registration electronic document.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 100, the electronic document storage unit 165 processes the electronic document registration electronic document in association with the biometric information registration electronic document. The electronic document management information stored in the electronic document D / B 170 may include the received electronic document related information (for example, customer information in which a biometric information registration application corresponding to the image content is prepared, and / or the biometric information registration electronics). Certificate authority information for transmitting the document, and / or the electronic document file format information, and / or the biometric information registration application information).

2A and 2B illustrate a process of registering biometric information registration application information in a face-to-face manner according to an exemplary embodiment of the present invention.

In more detail, Figures 2a and 2b, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information for identification using biometric information, Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. The method relates to an embodiment of the present invention. Specifically, after obtaining a predetermined image content corresponding to the biometric information registration application from the employee terminal through a predetermined image acquisition device and transmitting it to the information registration server 100, the biometric information An implementation method of inputting (or selecting) biometric information registration application information corresponding to a registration application form and transmitting the same to the information registration server 100 is illustrated.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 2a and 2b to register the biometric information registration application information from the employee terminal to the information registration server 100. Various implementation methods may be inferred, but the present invention includes all the implementation methods inferred above and is not limited to the implementation methods shown in FIGS. 2A and 2B.

For example, in the implementation method shown in FIGS. 2A and 2B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

Hereinafter, in FIG. 2A and FIG. 2B, the employee terminal shown in FIG. 2 is referred to as "terminal" for convenience, and the information registration server 100 shown in FIG. The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 2A and 2B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal shown in the drawings s. When the server is connected to the server through a predetermined communication network and a predetermined communication channel is connected, the user interface request for identification using the biometric information corresponding to the biometric information registration application is requested (200). The terminal generates (or extracts) a user interface for acquiring and transmitting the predetermined image content corresponding to the biometric information registration application written by the customer through the predetermined image obtaining apparatus to the server (205), and the communication network. The generated (or extracted) user interface is transmitted to the terminal through the output (210).

Thereafter, the terminal acquires image content corresponding to the biometric information registration application through a predetermined image acquisition device based on the user interface (215).

If image content corresponding to the biometric information registration application is obtained through the image acquisition device (220), the terminal transmits the obtained image content to the server through the communication network (225).

Thereafter, the server inputs (or selects) biometric information registration request information including at least one of customer information and biometric information corresponding to the biometric information registration application matching the image content and transmits the user interface to the server. It generates (or extracts) 230 and transmits the generated (or extracted) user interface to the terminal through the communication network and outputs it (235).

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (240).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (245), the terminal inputs (or selects) the terminal to the server through the communication network. The biometric information registration application information is transmitted (250).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (255).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (260), the server generates predetermined information registration error information and transmits it to the terminal (265), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration request information is authenticated (260), the server generates a predetermined biometric information registration electronic document including the image content (270).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT), thereby generating a living body for identification using the biometric information. It is desirable to generate an information registration electronic document.

Alternatively, the server may include customer information and biometrics included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generate image content including at least one or more of the information in a watermarking manner, and include a predetermined document file (eg, a Portable Document Format (PDF) file or an EDI (Electronic Data) file including the generated image content). Interchange) file, or a word processor file including at least one of HWP / DOC, or a web document file including MHT), to generate a biometric information registration electronic document for identification using the biometric information. It is preferable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate biometric information for identification using the biometric information. It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (275).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (280), the server processes the customer information and the biometric information included in the biometric information registration request information in a predetermined storage medium 145 (285), predetermined information registration history information (e.g., the history of storing the biological information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145); ) Is generated (or extracted) and transmitted to the terminal (290).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system, and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

3A and 3B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

In more detail, Figures 3a and 3b, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. The method is an information method. Specifically, the staff terminal inputs (or selects) the biometric information registration application information corresponding to the biometric information registration application and transmits it to the information registration server 100, and then a predetermined image acquisition device. It illustrates a method of obtaining a predetermined image content corresponding to the biometric information registration application through the information registration server 100 to transmit.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 3a and 3b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIGS. 3A and 3B.

For example, in the implementation method shown in FIGS. 3A and 3B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

In the following Figures 3a and 3b, the employee terminal shown in the drawings is referred to as "terminal" for convenience, and the information registration server 100 shown in the drawing is referred to as "server" for convenience, and in the employee terminal The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 3A and 3B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal shown in the drawings s. When the server is connected to the server through a predetermined communication network and a predetermined communication channel is connected, the user interface request for identification using the biometric information corresponding to the biometric information registration application is requested (300). Generates (or extracts) a user interface for inputting (or selecting) biometric information registration application information including at least one of customer information and biometric information corresponding to the biometric information registration application created by the customer and transmitting the biometric information registration application information to the server; 305, by transmitting the generated (or extracted) user interface to the terminal through the communication network Output 310.

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (315).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (320), the terminal inputs (or selects) the server to the server through the communication network. The biometric information registration application information is transmitted (325).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (330).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (335), the server generates predetermined information registration error information and transmits it to the terminal (340), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration application information is authenticated (335), the server acquires the predetermined image content corresponding to the biometric information registration application created by the customer through a predetermined image acquisition device in the terminal to the server A user interface for transmitting to the terminal is generated (or extracted) (345), and the generated (or extracted) user interface is transmitted to the terminal through the communication network (350).

Thereafter, the terminal acquires image content corresponding to the biometric information registration application through a predetermined image acquisition device based on the user interface (355).

If image content corresponding to the biometric information registration application is obtained through the image acquisition device (360), the terminal transmits the obtained image content to the server through the communication network (365).

The server receiving the biometric information registration request information and the image content from the terminal generates a predetermined biometric information registration electronic document including the image content (370).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT), thereby generating a living body for identification using the biometric information. It is desirable to generate an information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generate image content including at least one of the information by a watermarking method, and a predetermined document file (for example, a PDF (Portable Document Format) file, or EDI (Electronic Data Interchange) including the generated image content. ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT). It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (375).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (380), the server processes the customer information and biometric information included in the biometric information registration request information in a predetermined storage medium 145 (385), predetermined information registration history information (e.g., the history of storing the biometric information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145); ) Is generated (or extracted) and transmitted to the terminal (390).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

4A and 4B illustrate a process of registering biometric information registration application information in a face-to-face manner according to another exemplary embodiment of the present invention.

In more detail, FIGS. 4A and 4B show that a predetermined customer prepares and submits a biometric information registration application including at least one of customer information and biometric information for identification using biometric information. Obtain predetermined image contents corresponding to the biometric information registration application through an image acquisition device, and biometric information registration application information and the biometric information corresponding to the biometric information registration application to a biometric information registration system through a predetermined biometric information registration interface. When the image content obtained from the information registration application is provided, a predetermined biometric information registration electronic document including the image content is generated and stored in a predetermined electronic document repository, and the customer information included in the biometric information registration application information. The biometric information is linked and stored in a predetermined storage medium 145. Is an implementation method, specifically, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and obtains biometric information registration application information corresponding to the biometric information registration application. It shows an implementation method of inputting (or selecting) and transmitting to the information registration server 100.

Persons having ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawings 4a and 4b to register the biometric information registration application information from the employee terminal to the information registration server 100. Although the implementation method may be inferred, the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIGS. 4A and 4B.

For example, in the implementation method shown in FIGS. 4A and 4B, the employee terminal acquires predetermined image contents corresponding to the biometric information registration application through a predetermined image acquisition device, and / or the biometric information registration application. Although a user interface for inputting (or selecting) corresponding biometric information registration application information is illustrated and provided from the information registration server 100, the user interface is provided with a predetermined information registration program in the employee terminal. Is not necessarily provided from the information registration server 100, whereby the present invention is not limited.

In the following Figures 4a and 4b, the employee terminal shown in the drawing s is referred to as "terminal" for convenience, and the information registration server 100 shown in the drawing s is referred to as "server" for convenience, and in the employee terminal The customer information and biometric information transmitted to the information registration server 100 are referred to as "biological information registration application information" for convenience.

Referring to FIGS. 4A and 4B, when a predetermined customer fills out and submits a biometric information registration application including at least one of customer information and biometric information to identify an identity using biometric information, the employee terminal illustrated in the drawings s. The server requests a user interface for identification using the biometric information corresponding to the biometric information registration application (400) while accessing the server through a predetermined communication network and connecting a predetermined communication channel (400). Inputs (or selects) biometric information registration application information corresponding to the biometric information registration application written by the customer in the terminal, and acquires predetermined image content corresponding to the biometric information registration application through a predetermined image obtaining device; Generate (or extract) a user interface for transmission to the server (405), and To the generated outputs to transmit the user interface (or extract) to the mobile station 410. The

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface (415).

If the biometric information registration request information including at least one of the customer information and the biometric information is input (or selected) through the user interface (420), the terminal uses a predetermined image acquisition apparatus based on the user interface. An image content corresponding to the biometric information registration application is acquired (425).

If the image content corresponding to the biometric information registration application is obtained through the image acquisition device (430), the terminal transmits the biometric information registration application information and the image content to the server through the communication network (435).

Thereafter, the server receives and reads biometric information registration request information including at least one of the customer information and biometric information through the communication network to confirm the validity of the biometric information registration request information (440).

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity confirming unit 125 may include the customer D on the certification authority system in which the customer information (customer personal information or member information, etc.) is linked to the biometric information registration system among the information included in the biometric information registration application information. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration request information is not authenticated (445), the server generates predetermined information registration error information and transmits it to the terminal (450), and registers the information corresponding to the biometric information registration request information. Do not perform the procedure.

On the other hand, if the validity of the biometric information registration request information is authenticated (445), the server generates a predetermined biometric information registration electronic document including the image content (455).

According to an exemplary embodiment of the present invention, the server may use an image file including the image content received from the information registration terminal 180 through the image receiving unit 120 as it is to identify a living body using the biometric information. It is preferable to process the information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. It is preferable to generate a biometric information registration electronic document for identification using the biometric information of an image file corresponding to the image content including at least one or more of the information by a watermarking method.

According to another exemplary embodiment of the present invention, the server may include a predetermined document file (eg, Portable Document Format (PDF)) including the image content received from the information registration terminal 180 through the image receiving unit 120. File, or an EDI (Electronic Data Interchange) file, a word processor file including at least one or more of HWP / DOC, or a web document file including MHT) It is desirable to generate an information registration electronic document.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one of the information in a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including the generated image content. ), A word processor file including at least one of HWP / DOC or the like, or a web document file including MHT). desirable.

According to another embodiment of the present invention, the server is the image content received from the information registration terminal 180 through the image receiving unit 120 and the biometric information registration request received through the information receiving unit 115. A predetermined document file including information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, etc.), or a web document including an MHT. File) to generate a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server may include the customer information and the biometric information included in the biometric information registration request information received through the information receiver 115 in the image content received from the information registration terminal 180 through the image receiver 120. Generates image content including at least one or more of the information by a watermarking method, and a predetermined document file (eg, a Portable Document Format (PDF) file) including the generated image content and the biometric information registration information. , Or an electronic data interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT), to generate biometric information for identification using the biometric information. It is desirable to create a registration electronic document.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (460).

As shown in the drawings, the electronic document repository includes an electronic document D / B 170 and an electronic document server 150 linked with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 150 through the communication means to store in the electronic document D / B (170).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. It is possible to store in the electronic document D / B (170), thereby the present invention is not limited.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document with predetermined electronic document management information. It is preferable to include storing in the document D / B (170).

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include certification authority information that transmits the biometric information registration electronic document.

Further, the electronic document management information may include predetermined electronic document-related information (for example, customer information for creating a biometric information registration application corresponding to the image content, and / or certification authority information for transmitting the biometric information electronic document, and / or Or electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document repository (465), the server processes the customer information and biometric information included in the biometric information registration request information in a predetermined storage medium 145 470, predetermined information registration history information (e.g., the history of storing the biometric information registration electronic document in the electronic document storage, and / or the history of storing the biometric information registration application information in the storage medium 145). ) Is generated (or extracted) and transmitted to the terminal (475).

According to an embodiment of the present invention, the storage medium 145 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 145 may be a customer D / B provided in the DBMS on the certification authority system, and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

5 is a diagram illustrating a non-face-to-face biometric information registration system for identity verification using biometric information according to another exemplary embodiment of the present invention.

In more detail, FIG. 5 illustrates biometric information registration application information including at least one of customer information and biometric information for a predetermined customer to identify an identity using the biometric information to a biometric information registration system through a predetermined biometric information registration interface. If so, the biometric information registration system generates a predetermined biometric information registration electronic document including the provided biometric information registration application information and stores it in a predetermined electronic document storage, and the customer information included in the biometric information registration application information. The present invention relates to a system configuration for cooperatively processing biometric information and storing it in a predetermined storage medium 540. Specifically, the electronic document repository is provided on an external system associated with the biometric information registration system through a predetermined communication means. It is about the implementation method.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 5 to infer various implementation methods for the configuration of a biometric information registration system for identification using biometric information. The present invention includes all the implementation methods inferred above, and is not limited to the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 5 to infer an implementation method provided in a DBMS in which the electronic document repository is located in the biometric information registration system. As will be appreciated, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In addition, according to the implementation method shown in FIG. 5, the biometric information registration electronic document is illustrated as being generated on the server side on the biometric information registration system, but the present invention is not limited thereto. The information registration electronic document may be generated on the terminal side that inputs (or selects) the biometric information registration application information and transmits the biometric information registration function (for example, the electronic document generation function provided on the server side is provided on the terminal side to register the biometric information). Generate an electronic document), by which the present invention is not limited.

In addition, according to the implementation method illustrated in FIG. 5, the biometric information included in the biometric information registration application includes only selection information for selecting a type of biometric information (eg, fingerprint, iris, etc.), and the biometric information registration application. At the time, it is possible to receive biometric information about the user, whereby the present invention is not limited.

Hereinafter, the biometric information registration application information is received from the customer through a predetermined biometric information registration interface on the biometric information registration system shown in FIG. 5 to generate a predetermined biometric information registration electronic document and store it in a predetermined electronic document repository. In addition, at least one means for storing the biometric information registration application information in a predetermined storage medium 540 and / or a component corresponding to a functional configuration is referred to as "information registration server 500" for convenience.

Referring to FIG. 5 according to an embodiment of the present invention, a biometric information registration system for identifying an identity using the biometric information includes at least a client terminal including at least one wired terminal and / or a wireless terminal used by a customer. And at least one information registration terminal 570, wherein the information registration terminal 570 communicates with the information registration server 500 provided on the biometric information registration system through a predetermined network means. The channel is connected.

According to an embodiment of the present invention, the customer accesses the information registration server 500 through at least one client terminal of a wired terminal connected to a predetermined wired communication network and / or a wireless terminal connected to a predetermined wireless communication network, When the biometric information registration application information for identifying the identity using the biometric information is input (or selected) through at least one user interface provided by the information registration server 500, the client terminal transmits the biometric information registration application information through a predetermined network means. It is preferable to transmit to the information registration server 500 provided on the biometric information registration system.

Here, the wired terminal connected to the wired communication network is a generic term for all terminal devices connected to a transmission control protocol / Internet protocol (TCP / IP) based communication network and includes a desktop computer and / or a laptop connected to the TCP / IP based communication network. (Notebook) or at least one home appliance terminal (for example, a refrigerator, a set-top-box, etc.) connected to the TCP / IP-based communication network, or a kiosk (KIOSK) connected to the TCP / IP-based communication network It is preferable to make it.

In addition, a wireless terminal connected to the wireless communication network is any terminal device connected to a mobile communication network based on Code Division Multiple Access (CDMA) (and / or High-Speed Downlink Packet Access (HSDPA)), and / or IEEE 802.16x based. A generic term for all terminal devices connected to the portable Internet and / or all terminal devices connected to an IEEE 802.11x based wireless LAN, and is connected to the CDMA based (and / or HSDPA based) mobile communication network (Personal Communication System; PCS). ) And / or Global System for Mobile communications (GSM) terminals and / or Personal Digital Cellular (PDC) and / or Personal Handyphone System (PHS) terminals and / or Personal Digital Assistants (PDAs) And / or a mobile Internet terminal connected to a smart phone and / or telematics, or the IEEE 802.16x based mobile internet, or the IEEE 802.11x based It is preferable to include at least one or more WLAN terminal connected to the WLAN.

In addition, the network means for connecting the client terminal and the information registration server 500 is a CDMA-based (and / or HSDPA-based) mobile communication network and / or IEEE 802.16x-based based on the type of wireless communication network connected to the client terminal It is preferable that any one of the portable Internet and / or IEEE 802.11x-based wireless LAN, and / or includes all kinds of wireless communication networks proposed in the future including a predetermined wireless interval.

In addition, the client terminal outputs at least one or more user interfaces provided by the information registration server 500, and inputs and / or selects at least one or more information through the user interface to the information registration server 500. It is preferable that a function configuration (for example, a browser program and a communication function or a predetermined communication program and communication function to communicate with the information registration server 500, etc.) is provided.

Those skilled in the art to which the present invention pertains will be able to easily infer the characteristics of the client terminal corresponding to at least one or more wired terminal and / or wireless terminal, detailed description thereof is omitted for convenience. do.

In the biometric information registration system as described above, a client terminal including at least one wired terminal and / or a wireless terminal used by the customer, and at least one wired communication network connecting the client terminal and the information registration server 500. And / or the wireless communication network performs a function of a biometric information registration interface for registering the biometric information registration application information for the customer to confirm the identity using the biometric information.

According to another exemplary embodiment of the present invention, the information registration terminal 570 further includes a terminal (and / or server) (not shown) provided in at least one or more institutions affiliated with the certification authority, in addition to the client terminal. In this regard, the present invention is not limited thereto.

The storage medium 540 provided on the biometric information registration system according to the present invention performs a predetermined process by linking the customer information and biometric information included in the biometric information registration information provided from the information registration terminal 570. The storage medium 540 is characterized in that the storage.

The customer information includes personal information of the customer (for example, the name, resident registration number, address, telephone number, mobile phone number, e-mail address, etc.) of the customer, member information of the customer (for example, the customer is the customer of the certification authority). And at least one or more member ID information, etc. included in the customer D / B provided on the certification authority system associated with the biometric information registration system in response to the customer.

The biometric information may be provided by a customer who filled out the biometric information registration application (or scanned by scanning a body part of the customer (eg, fingerprint, iris, face, etc.)) and / or features on the image data (eg, among fingerprints). Characteristic of the pattern that is differentiated from the general pattern) It is preferable to include at least one data.

According to an embodiment of the present invention, the storage medium 540 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 540 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

The information registration server 500 provided on the biometric information registration system according to the present invention is a generic term for components of the biometric information registration system side connected to the information registration terminal 570 through a predetermined network means. It may be implemented by including the above server (or device), and / or may be implemented by at least one or more programs recorded on a recording medium provided in a predetermined server (or device), whereby the present invention is not limited.

According to an embodiment of the present invention, the information registration server 500 includes an interface unit 505 (or interface means) for connecting and managing a predetermined communication channel with the information registration terminal 570 through the network means. Characterized in that made.

According to an exemplary embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface unit 505 is At least one or more information (or a predetermined communication channel) is connected to the client terminal based on a protocol stack defined in the wired communication network and / or a wireless communication network, and using a communication protocol defined in a communication program included in the client terminal. It is desirable to provide a communication interface for transmitting and receiving data.

For example, if the client terminal is equipped with a browser program corresponding to the Hyper-Text Transfer Protocol (HTTP) protocol, the interface unit 505 connects a communication channel with the client terminal based on the TCP / IP protocol, It provides a communication interface for transmitting and receiving web pages (eg, Hyper-Text Markup Language (HTML) compatible web pages) and / or information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program (eg, an information registration program) provided by the information registration server 500, the interface unit 505 communicates with the client terminal based on the TCP / IP protocol. It connects a channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface unit 505 uses a protocol stack defined in the wireless communication network. It is preferable to provide a communication interface for connecting at least one communication channel with the client terminal and transmitting and receiving at least one information (or data) using a communication protocol defined in a communication program provided in the client terminal.

For example, when a browser program corresponding to a WAP (Wireless Application Protocol) and / or a Mobile Explorer (ME) protocol is provided in the client terminal, the interface unit 505 communicates with the client terminal based on the CDMA protocol. And a communication interface for transmitting and receiving web pages (eg, WML (Wireless Markup Language) compatible web pages, or HTML compatible web pages) and / or information using the WAP / ME protocol defined in the browser program. .

Alternatively, when the client terminal is provided with a communication program (eg, IC chip-based information registration program) provided by the information registration server 500, the interface unit 505 is based on the CDMA protocol. And a communication channel and provide a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

Referring to FIG. 5, when the predetermined information registration terminal 570 connects a predetermined communication channel with the information registration server 500 through the interface unit 505, the information registration server 500 may be configured as the living body. Generate (or extract) at least one user interface for inputting (or selecting) predetermined biometric information registration request information from the information registration terminal 570 to transmit the information to the information registration server 500 for identity verification using information. And an interface providing unit 510 (or an interface providing unit) for providing the generated (or extracted) user interface to the information registration terminal 570 in association with the interface unit 505, and the information registration terminal. In operation 570, when the biometric information registration request information is input (or selected) through the user interface, the biometric information registration application information is transmitted in connection with the interface unit 505. And an information receiving unit 515 (or information receiving means) for receiving the biometric information registration request information transmitted from 0).

The interface providing unit 510 connects a predetermined communication channel with the information registration server 500 through the interface registration unit 505, and then the information registration server 500 sends the information registration server 500 to the information registration server 500. When requesting a user interface for identity verification using biometric information, the information registration terminal 570 inputs (or selects) predetermined biometric information registration request information and transmits the biometric information to the information registration server 500 through the network means. Generate at least one user interface, and / or extract from a predetermined database (not shown), and link the generated (or extracted) user interface with the interface unit 505 via the network means. It is characterized in that provided to the registration terminal 570.

According to an embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wired terminal connected to a predetermined wired communication network, the interface providing unit 510 may include a browser program provided in the client terminal and And / or generate (or extract) a predetermined user interface that can be provided by a communication program, and provide the generated (or extracted) user interface to the client terminal through the interface unit 505.

According to another exemplary embodiment of the present invention, when the information registration terminal 570 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface providing unit 510 is a browser provided in the client terminal. It is preferable to generate (or extract) a predetermined user interface that can be provided by a program and / or a communication program, and provide the generated (or extracted) user interface to the client terminal through the interface unit 505.

At least one user for inputting (or selecting) predetermined biometric information registration request information to the information registration terminal 570 according to another embodiment of the present invention and transmitting the biometric information registration request information to the information registration server 500 through the network means. When a predetermined information registration program having an interface is provided, a user interface is generated (or extracted) for inputting (or selecting) predetermined biometric information registration application information to the information registration server 500 as described above. The interface providing unit 510 provided to the information registration terminal 570 may be omitted, and the present invention is not limited thereto.

Thereafter, the information registration terminal 570 inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information through the user interface, and registers the input (or selected) biometric information. The application information is transmitted to the information registration server 500 through the network means. In response thereto, the information receiving unit 515 is connected to the interface unit 505 to transmit the biometric information transmitted from the information registration terminal 570. Characterized in that it receives the information registration application information.

According to the embodiment of the present invention, the information registration terminal 570 is the biometric information registration request information including at least one of the customer information, biometric information to the biometric information registration request information from the information registration server 500 At least one or more of a predetermined password and / or security card information for confirming the validity and / or OTP code generated through a predetermined one time password (OTP) generator, the information registration server through the network means ( 500).

According to an embodiment of the present invention, the information registration terminal 570 may include at least one encryption method (eg, a symmetric key based encryption method) and biometric information registration request information including at least one of the customer information and biometric information. Or a public key based encryption method, and / or an electronic envelope based encryption method, and / or a key exchange based encryption method), and / or attach a predetermined electronic signature to the biometric information registration information. It is preferable to transmit to the information registration server 500 through, for this purpose, the information registration terminal 570 is provided with at least one encryption key corresponding to the encryption scheme, and / or at least one encryption key When a predetermined official certificate is included, and / or when the official certificate is provided on a predetermined IC chip (or IC card). In this case, it is preferable that a card reader is provided for checking the official certificate provided in the IC chip (or IC card).

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the biometric information registration application information, and technical features of attaching a predetermined electronic signature to the biometric information registration application information. Since it will be familiar with, detailed description thereof will be omitted for convenience.

Referring to FIG. 5, when the biometric information registration request information transmitted from the information registration terminal 570 is received through the information receiving unit 515, the information registration server 500 receives the biometric information registration request information. It is characterized in that it comprises a validating unit 520 (or validating means) for confirming whether or not to satisfy the validity for identity verification using the biometric information.

According to an embodiment of the present invention, the biometric information registration information is at least one encryption method (eg, symmetric key based encryption method and / or public key based encryption method, and / or electronic envelope based encryption method, and / or When encrypted with a key exchange based encryption method, the validity confirming unit 520 may include the at least one decryption method (eg, a symmetric key based decryption method) corresponding to the encryption method. / Or public key based decryption scheme, and / or electronic envelope based decryption scheme, and / or key exchange based decryption scheme, etc.), it is preferable to authenticate the validity of the received biometric information registration application information.

Alternatively, when a predetermined electronic signature is attached to the biometric information registration application information, the validity verification unit 520 checks the electronic signature attached to the biometric information registration application information, thereby receiving the biometric information registration application information. It is desirable to authenticate validity.

Those skilled in the art to which the present invention pertains include technical features of various decryption methods for decrypting the encrypted biometric information registration application information, and technology for confirming an electronic signature attached to the biometric information registration application information. Since you will be familiar with the features, a detailed description thereof will be omitted.

According to an embodiment of the present invention, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined password for confirming the validity of the biometric information registration request information, the validity confirming unit 520 may compare and authenticate the password included in the biometric information registration request information with a password provided corresponding to the customer on the DBMS, thereby authenticating the validity of the received biometric information registration request information. Do.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes predetermined security card information for confirming the validity of the biometric information registration request information, the validity confirming unit 520 Compares and authenticates the received security card information included in the biometric information registration request information with the security card information provided corresponding to the customer on the DBMS, thereby authenticating the validity of the received biometric information registration request information. desirable.

Alternatively, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined OTP code for confirming the validity of the biometric information registration request information, the validity confirming unit 520 may include: By comparing and authenticating the received OTP code included in the biometric information registration application information and the OTP code generated based on predetermined OTP generation information provided corresponding to the customer on the DBMS, the received biometric information registration application information It is desirable to authenticate the validity of the.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity checker 520 is a customer D on the certification authority system of the customer information (customer personal information, member information, etc.) of the information included in the biometric information registration application information associated with the biometric information registration system. It is preferable to include checking whether it matches with the customer information stored in / B.

Referring to FIG. 5, when the validity of the biometric information registration request information is authenticated through the validity checker 520, the information registration server 500 includes a predetermined biometric information including the received biometric information registration request information. An electronic document generating unit 525 (or an electronic document generating means) for generating an information registration electronic document, and an electronic document transmission unit for transmitting the generated biometric information registration electronic document to an electronic document repository associated with the biometric information registration system. 530 (or electronic document transmission means) is characterized in that it comprises.

The electronic document generating unit 525 generates a biometric information registration electronic document including the biometric information registration application information received from the information registration terminal 570 through the information receiving unit 515.

According to an exemplary embodiment of the present invention, the electronic document generator 525 may include document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiver 515. A document file including the document content (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a HWP / DOC, or the like) including the document content; Web document files, etc.) is preferably processed as a biometric information registration electronic document for identification using the biometric information.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. After including at least one of the customer information and the biometric information included in the biometric information registration application information in a watermarking (Watermarking) method, a document file containing the document content containing the watermarking (for example, PDF (Portable Document) Format information, an EDI file, a word processor file including at least one of HWP / DOC, or a web document file including MHT). It is desirable to process the registration electronic document.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. It is preferable to process an image file including captured image content (eg, image content generated by capturing the document content on a memory) into a biometric information registration electronic document for identification using the biometric information.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) After the inclusion, the image file including the image content including the watermarking is preferably processed into a biometric information registration electronic document for identification using the biometric information.

According to another exemplary embodiment of the present invention, the electronic document generating unit 525 may include at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515. A predetermined document file (e.g., a Portable Document Format (PDF) file) including an image content (e.g., image content generated by capturing the document content on a memory) and generating the captured document content. Biometric information for electronic identification using the biometric information by generating an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT) It is preferable to process the document.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) At least one document file (for example, a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, or an HWP / DOC file) including an image content including the watermarking; Identity word using the biometric information by generating a word processor file or a web document file including MHT). It is preferable to process the biometric information registration electronic document for confirmation.

According to another exemplary embodiment of the present invention, the electronic document generating unit 525 may include at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515. A predetermined document file (e.g., PDF) including content, image content (e.g., image content generated by capturing the document content on a memory), and the biometric information registration request information. (Portable Document Format) file, an EDI (Electronic Data Interchange) file, a word processor file including at least one or more HWP / DOC, or a web document file including MHT). It is desirable to process the biometric information registration electronic document for identification purposes.

Alternatively, the electronic document generating unit 525 generates document content including at least one of customer information and biometric information included in the biometric information registration request information received through the information receiving unit 515, and generates the document content. The method of watermarking at least one of customer information and biometric information included in the biometric information registration request information to captured image contents (for example, image contents generated by capturing the document contents on a memory) Generating an image content including an image content, and including a watermarking image content and a biometric information registration information (eg, a PDF (Portable Document Format) file, an EDI (Electronic Data Interchange) file, or Creating a word processor file including at least one HWP / DOC, or a web document file including MHT) It is preferable to process in the biometric information registered electronic document for the identity using biometric information.

Those skilled in the art to which the present invention pertains, the electronic document generating unit 525 is a technical feature of generating a biometric information registration electronic document of the image file format and / or a predetermined document file format, and Since the technical features of the file format for the image file and / or the document file corresponding to the information registration electronic document will be familiar, detailed description thereof will be omitted for convenience.

The electronic document transmitting unit 530 transmits and stores the biometric information registration electronic document generated by the electronic document generating unit 525 to a predetermined electronic document repository associated with the biometric information registration system. .

As shown in FIG. 5, the electronic document repository is connected to the information registration server 500 on the biometric information registration system through a predetermined communication means and the electronic document D / B 565. When provided to the outside, the electronic document transmission unit 530 is the electronic document server 545 via the communication means for the biometric information registration electronic document generated by the electronic document generation unit 525 It characterized in that the transmission to.

Here, when the electronic document server 545 and the electronic document D / B 565 is provided outside the biometric information registration system, the electronic document server 545 and the electronic document D / B 565 is It is advisable to manage them in accredited bodies.

According to another embodiment of the present invention, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the electronic document transmission unit 530 is generated by the electronic document generation unit 525. It is possible to store the biometric information registration electronic document in the electronic document D / B 565 corresponding to the electronic document storage on the DBMS provided in the biometric information registration system, by which the present invention is not limited.

According to an embodiment of the present invention, the electronic document transmission unit 530 inputs electronic document related information (eg, the biometric information registration request information) for generating predetermined electronic document management information in the electronic document server 545. (Optional) customer information transmitted, and / or certification authority information for transmitting the biometric information registration electronic document, and / or electronic document file format information, and / or the biometric information registration application information, and the like. It is possible to transmit to an electronic document storage, by which the present invention is not limited.

Referring to FIG. 5, the information registration server 500 validates that the biometric information registration request information received through the information receiving unit 515 is used for identifying the identity using the biometric information through the validity checking unit 520. Upon authentication, the information storage unit 535 (or information storage means) for storing the data on the predetermined storage medium 540 by cooperatively processing the customer information and the biometric information included in the biometric information registration request information is validated. Characterized in that made.

When the validity of the biometric information registration request information is confirmed by the validity confirming unit 520, the information storage unit 535 stores the biometric information by linking and processing the customer information and biometric information included in the biometric information registration request information. And storing the information in the storage medium 540. When the storage medium 540 is provided in the information registration server 500 or on the network associated with the information registration server 500. The unit 535 preferably processes the customer information and the biometric information included in the received biometric information registration request information and stores them in the storage medium 540, wherein the storage medium 540 is located on the certification authority system. When provided in the provided DBMS, the information storage unit 535 provides the customer information, biometric information included in the received biometric information registration application information to the information system through the external system on the certification authority system Be stored in a DBMS provided on a certificate authority system is preferred.

Referring to FIG. 5, an electronic document which receives a predetermined biometric information registration electronic document from the information registration server 500 provided on the biometric information registration system and stores and manages the same in a predetermined electronic document D / B 565. The server 545 may include an electronic document receiving unit 550 (or an electronic document receiving unit) for receiving a predetermined biometric information registration electronic document from the information registration server 500 through a predetermined communication unit, and the received biometric information. An information generating unit 555 (or information generating means) for generating predetermined electronic document management information for storing and managing a registered electronic document in the electronic document D / B 565, and the electronic document management information and the living body; And an electronic document storage unit 560 (or electronic document storage means) for linking the information registration electronic document and storing it in a predetermined electronic document D / B 565.

The electronic document receiving unit 550 may receive a biometric information registration electronic document in the form of an image file and / or a document file from the information registration server 500 through the communication means.

According to one embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is the biometric information received by the information registration server 500 from the information registration terminal 570. Document files (eg, Portable Document Format (PDF) files, EDI (Electronic Data Interchange) files, HWP / DOC, etc.) containing document contents including at least one of customer information and biometric information included in the registration application information. And at least one word processor file or at least one web document file including the MHT.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. The document including the watermarking after including at least one of the customer information and the biometric information included in the biometric information registration application information in the document content including at least one information, biometric information in a watermarking method (Watermarking) Document files containing content (eg, Portable Document Format (PDF) files, Electronic Data Interchange (EDI) files, Word processor files including at least one or more such as HWP / DOC, Web document files including MHT, etc.) It is preferable to comprise).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Preferably, the image file includes an image file including image content (eg, image content generated by capturing the document content on a memory) that captures document content including at least one of information and biometric information.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information After including at least one or more information of the information in a watermarking (Watermarking) method, it is preferable to include an image file including the image content including the watermarking.

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is a biometric information received by the information registration server 500 from the information registration terminal 570. A predetermined document including image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the information registration application information. A file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including an MHT). It is preferable.

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information Generating image content including at least one or more information of the information by a watermarking method, and a document file (for example, a PDF (Portable Document Format) file or EDI (Electronic) file including the image content including the watermarking). Data Interchange) file, a word processor file including at least one of HWP / DOC, etc., or a web document including MHT. File).

According to another exemplary embodiment of the present invention, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is received by the information registration server 500 from the information registration terminal 570. Image content (eg, image content generated by capturing the document content on a memory) and the biometric information registered by capturing document information including at least one of customer information and biometric information included in the biometric information registration request information. A predetermined document file including application information (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one of HWP / DOC, etc.), or a web including an MHT. Document files).

Alternatively, the biometric information registration electronic document received by the electronic document receiving unit 550 through the communication means is included in the biometric information registration request information received by the information registration server 500 from the information registration terminal 570. Customer information included in the biometric information registration application information in image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of information and biometric information Create image content including at least one or more information of the information by a watermarking method, and a document file (for example, PDF (Portable Document Format) including the image content and the biometric information registration information including the watermarking; Word processor including at least one file, an electronic data interchange (EDI) file, or an HWP / DOC file. It comprises a web document files, etc.) comprising one, or MHT is preferred.

The information generating unit 555 is a predetermined electronic document unique number (or unique information) to be assigned to the biometric information registration electronic document received through the electronic document receiving unit 550, and through the electronic document receiving unit 550 And generating electronic document management information including electronic document storage date and time information including a date and time at which the biometric information registration electronic document is received (or a date and time at which the biometric information registration electronic document is stored).

According to the exemplary embodiment of the present invention, the information generating unit 555 registers the biometric information with reference to the information registration server 500 that transmits the biometric information registration electronic document received through the electronic document receiving unit 550. It is preferable to confirm the certification authority that sent the electronic document, and generate the electronic document management information further including the verified certification authority information.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 500 through the electronic document receiving unit 550, the information generating unit 555 receives the received information. Electronic document related information (e.g., customer information transmitted by inputting (selecting) the biometric information registration application information and / or certification authority information transmitting the biometric information electronic document, and / or electronic document file format information, and / Or the biological information registration application information, etc.) is preferably generated.

The electronic document storage unit 560 associates the biometric information registration electronic document received through the electronic document receiving unit 550 with the electronic document management information generated by the information generating unit 555 to process a predetermined electronic document D. / B (565) is characterized in that.

According to the exemplary embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500 by the information registration terminal 570. A document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file) containing document information including at least one of customer information and biometric information included in the biometric information registration request information received from Or a word processor file including at least one or more HWP / DOC, or a web document file including an MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. After the watermarking method includes at least one or more of the customer information and the biometric information included in the biometric information registration application information in the document content including at least one of customer information and biometric information included in the application information, A document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one HWP / DOC, etc.) containing document content including watermarking, or an MHT. Web document files, etc.) to be included.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. And an image file including image content (eg, image content generated by capturing the document content on a memory) which captures document content including at least one of customer information and biometric information included in the application information. It is preferable to make.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The image content (eg, image content generated by capturing the document content on a memory) of the document content including at least one of the customer information and the biometric information included in the application information. After including at least one or more information of the included customer information, biometric information in a watermarking (Watermarking) method, it is preferably made to include an image file including the image content including the watermarking.

According to another embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500 is the information registration terminal ( Image content (eg, image content generated by capturing the document content on a memory) by capturing document content including at least one of customer information and biometric information included in the biometric information registration request information received from 570. A predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more such as HWP / DOC, or a web document file including an MHT) Etc.) is preferable.

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The image content (eg, image content generated by capturing the document content on a memory) of the document content including at least one of the customer information and the biometric information included in the application information. Create image content including at least one or more of the included customer information and biometric information by a watermarking method, and a document file (eg, a Portable Document Format (PDF)) containing the image content including the watermarking. A web document including an MHT, a word processor file including at least one of an EDI file, an HWP / DOC file, or the like. It is preferred which comprises a file, and so on).

According to another embodiment of the present invention, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is the information registration server 500 is the information registration terminal Image content that captures document content including at least one of customer information and biometric information included in the biometric information registration request information received from 570 (eg, image content generated by capturing the document content on a memory). And a predetermined document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, or a HWP / DOC) including at least one document file including the biometric information registration request information. Or a web document file including the MHT).

Alternatively, the biometric information registration electronic document stored in the electronic document D / B 565 by the electronic document storage unit 560 is registered in the biometric information received by the information registration server 500 from the information registration terminal 570. The image content (eg, image content generated by capturing the document content on a memory) of the document content including at least one of the customer information and the biometric information included in the application information. A document file including image information including at least one or more of the included customer information and biometric information by a watermarking method, and containing the watermarking image content and the biometric information registration application information (eg, A word processor including at least one, a portable document format (PDF) file, an electronic data interchange (EDI) file, or an HWP / DOC. File, or a web document file including MHT).

According to an embodiment of the present invention, the electronic document management information stored in the electronic document D / B 565 by the electronic document storage unit 560 in association with the biometric information registration electronic document is stored in the biometric information registration electronic. Preferably, a predetermined electronic document unique number (or unique information) assigned to the document and the electronic document storage date and time information are included.

According to the exemplary embodiment of the present invention, the electronic document management information stored in the electronic document D / B 565 by the electronic document storage unit 560 in association with the biometric information registration electronic document is stored in the biometric information registration. The information registration server 500 which transmitted the electronic document may preferably further include certification authority information which has transmitted the biometric information registration electronic document.

According to another exemplary embodiment of the present invention, when predetermined electronic document related information is further received from the information registration server 500, the electronic document storage unit 560 processes the connection with the biometric information registration electronic document and performs the The electronic document management information stored in the electronic document D / B 565 may include the received electronic document related information (for example, customer information transmitted by inputting (selecting) the biometric information registration request information) and / or the biometric information. Certificate authority information for transmitting the registration electronic document, and / or electronic document file format information, and / or the biometric information registration application information).

6A and 6B illustrate a process of registering biometric information registration application information in a non-face-to-face manner to identify an identity using biometric information according to an exemplary embodiment of the present invention.

In more detail, FIGS. 6A and 6B illustrate that when a predetermined customer provides biometric information registration request information including at least one of customer information and biometric information through the client terminal to identify an identity using the biometric information, In the information registration system, a predetermined biometric information registration electronic document including the provided biometric information registration application information is generated and stored in a predetermined electronic document repository, and the customer information and biometric information included in the biometric information registration application information are linked. The present invention relates to an implementation method of processing and storing the data in a predetermined storage medium 540. Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 6a and 6b in the client terminal. It is possible to infer various implementation methods for registering the biometric information registration application information to the information registration server 500. As will be appreciated, the present invention includes all implementation methods inferred from the foregoing, and is not limited to the implementation methods shown in FIGS. 6A and 6B.

For example, in the method shown in FIGS. 6A and 6B, the client terminal inputs (or selects) the biometric information registration request information through a predetermined web page provided by the information registration server 500. Although illustrated as being provided, when a predetermined information registration program is provided in the client terminal, the user interface may not be provided from the information registration server 500, and the present invention is not limited thereto.

In the following FIGS. 6A and 6B, the client terminal shown in FIG. 6 is referred to as "terminal" for convenience, and the information registration server 500 shown in FIG. 6 is referred to as "server" for convenience, and in the client terminal The customer information and biometric information transmitted to the information registration server 500 are referred to as "biometric information registration application information" for convenience.

6A and 6B, when the client terminal illustrated in FIG. 6 is a predetermined network means (eg, when the client terminal is a wired terminal, a TCP / IP based wired communication network, and the client terminal is a wireless terminal, CDMA-based (and / or HSDPA-based) mobile communication network and / or IEEE 802.16x-based portable Internet, and / or IEEE 802.11x-based wireless LAN, etc.) to connect to the server to connect a predetermined communication channel, When a web page including a user interface for identifying an identity using information is requested (600), the server inputs (or selects) biometric information registration request information including at least one of the customer information and biometric information. Generate (or extract) a web page including a user interface for transmission to the server (605), and generate the And transmits the output to the web page containing the extracted) user interface to the mobile station 610. The

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page from the server to the terminal is preferably performed at least once according to the biometric information registration information registration procedure, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) biometric information registration request information including at least one or more customer information and biometric information through a user interface included in the web page (615).

If the terminal inputs (or selects) biometric information registration request information including the customer information and biometric information through the user interface (620), the terminal inputs (or selects) the customer through the communication channel. Information and biometric information are transmitted to the server (625).

According to an embodiment of the present invention, the terminal includes a predetermined password for confirming the validity of the biometric information registration request information in the server to the biometric information registration request information including at least one of the customer information and biometric information; Alternatively, at least one or more OTP codes generated through security card information and / or a predetermined one time password (OTP) generator may be transmitted to the server through the network means.

According to an embodiment of the present invention, the terminal may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key based encryption method) for registering biometric information registration information including at least one of the customer information and biometric information. Method, and / or an electronic envelope-based encryption method, and / or a key exchange-based encryption method), and / or attach a predetermined electronic signature to the biometric registration application information to the server through the network means. Preferably, the terminal has at least one encryption key corresponding to the encryption scheme, and / or has a predetermined certificate including at least one encryption key, and / or the certification. When the certificate is provided on a predetermined IC chip (or IC card), the certificate provided on the IC chip (or IC card) It is preferable that a card reader for verifying a certificate is provided.

According to an embodiment of the present invention, the terminal may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key based encryption method) for registering biometric information registration information including at least one of the customer information and biometric information. Scheme, and / or an electronic envelope-based encryption scheme, and / or a key exchange-based encryption scheme, and the like, and transmits the encrypted data to the server through the network means. The IC is provided with one or more encryption keys, and / or with a predetermined certificate containing at least one or more encryption keys, and / or when the certificate is provided with a predetermined IC chip (or IC card). It is preferable that a card reader is provided for confirming the public certificate provided in the chip (or IC card).

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the biometric information registration application information, and technical features of attaching a predetermined electronic signature to the biometric information registration application information. Since it will be familiar with, detailed description thereof will be omitted for convenience.

Thereafter, the server receives and reads the customer information and the biometric information through the communication channel to check the validity of the biometric information registration application information (630).

According to an embodiment of the present invention, the biometric information registration information is at least one encryption method (eg, symmetric key based encryption method and / or public key based encryption method, and / or electronic envelope based encryption method, and / or When encrypted with a key exchange-based encryption scheme, the server may include the at least one decryption scheme (eg, a symmetric key based decryption scheme and / or a public key based scheme) corresponding to the encryption scheme. Decryption method, and / or electronic envelope-based decryption method, and / or key exchange-based decryption method, etc.), it is preferable to authenticate the validity of the received biometric information.

Alternatively, when a predetermined electronic signature is attached to the biometric information registration request information, the server verifies the validity of the received biometric information registration request information by checking the electronic signature attached to the biometric information registration request information. It is preferable.

Those skilled in the art to which the present invention pertains include technical features of various decryption methods for decrypting the encrypted biometric information registration application information, and technology for confirming an electronic signature attached to the biometric information registration application information. Since you will be familiar with the features, a detailed description thereof will be omitted.

According to an embodiment of the present invention, when the biometric information registration request information received through the information receiving unit 515 further includes a predetermined password for checking the validity of the biometric information registration request information, the server may be configured as described above. It is preferable to authenticate the validity of the received biometric information registration application information by comparing and authenticating the password included in the biometric information registration application information and the password provided corresponding to the customer on the DBMS.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes predetermined security card information for confirming the validity of the biometric information registration request information, the server registers the biometric information. It is preferable to authenticate the validity of the received biometric information registration application information by comparing and authenticating the security card information included in the application information and the security card information provided corresponding to the customer on the DBMS.

Alternatively, when the biometric information registration request information received through the information receiver 515 further includes a predetermined OTP code for confirming the validity of the biometric information registration request information, the server requests the biometric information registration request. The validity of the received biometric information registration request information is verified by comparing and authenticating the received OTP code included in the information and the OTP code generated based on predetermined OTP generation information provided corresponding to the customer on the DBMS. It is desirable to.

According to an embodiment of the present invention, the validity confirmation of the biometric information registration request information may include at least one or more pieces of information matching the biometric information registration request information in a customer D / B on a certification authority system associated with the biometric information registration system. It is preferable to include checking whether it is registered.

In addition, the validity check of the biometric information registration request information, it is preferable to check whether the image quality of the biometric information included in the received biometric information registration application information is a certain quality or more.

For example, the validity checker 520 is a customer D on the certification authority system of the customer information (customer personal information, member information, etc.) of the information included in the biometric information registration application information associated with the biometric information registration system. It is preferable to include checking whether it matches with the customer information stored in / B.

If the validity of the biometric information registration application information is not authenticated (635), the server generates a web page including predetermined information registration error information and transmits it to the terminal (640), and the biometric information registration application information. Do not perform the corresponding information registration procedure.

On the contrary, if the validity of the biometric information registration request information is authenticated (635), the server generates at least one predetermined document content including biometric information and at least one customer information including the biometric information registration request information (645). In operation 650, a predetermined biometric information registration electronic document including the document content is generated.

According to an exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and includes a document file (eg, the document content). , A Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, a word processor file including at least one or more HWP / DOC, or a web document file including an MHT). It is preferable to process the biometric information registration electronic document for confirmation.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and the customer information and biometric information included in the biometric information registration request information in the document content. After including at least one of the information in a watermarking (Watermarking) method, a document file containing a document content including the watermarking (for example, a PDF (Portable Document Format) file, or an EDI (Electronic Data Interchange) file, Or a word processor file including at least one or more HWP / DOC, or a web document file including MHT), as a biometric information registration electronic document for identification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). It is preferable to process the image file including the image content generated by capturing on the memory as a biometric information registration electronic document for identity verification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). Image content generated by capturing the image on the memory) by including at least one of customer information and biometric information included in the biometric information registration application information in a watermarking manner, and then including the image content including the watermarking. It is preferable to process the image file including the biometric information registration electronic document for identity verification using the biometric information.

According to another exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the document content. A predetermined document file (eg, a Portable Document Format (PDF) file, an EDI (Electronic Data Interchange) file, HWP / DOC, etc.) containing image content (eg, image content generated by capturing the document content on a memory). By generating a word processor file including at least one or a web document file including the MHT, etc.), it is preferable to process the biometric information registration electronic document for identification using the biometric information.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). Image content generated by capturing the image content on a memory) to at least one of customer information and biometric information included in the biometric information registration request information by a watermarking method, and generating the watermarking. A document file (eg, a Portable Document Format (PDF) file, an Electronic Data Interchange (EDI) file, or a word processor file including at least one or more HWP / DOC, etc.) including an image content included therein, or an MHT. Biometric information registration electronic document for identification using the biometric information by generating a web document file) To treatment it is preferred.

According to another exemplary embodiment of the present invention, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the document content. A predetermined document file (eg, a Portable Document Format (PDF) file or EDI (Electronic Data Interchange) including an image content (eg, image content generated by capturing the document content on a memory) and the biometric information registration request information. ), A word processor file including at least one of HWP / DOC, or a web document file including MHT), and the like to process the biometric information registration electronic document for identification using the biometric information. desirable.

Alternatively, the server generates document content including at least one of customer information and biometric information included in the received biometric information registration request information, and captures the image content (eg, the document content). To the image content generated by capturing the image content on the memory), the image content including at least one or more of the customer information and the biometric information included in the biometric information registration application information by watermarking (Watermarking) method, Word processor file including at least one document file (eg, Portable Document Format (PDF) file, EDI (Electronic Data Interchange) file, HWP / DOC, etc.) containing the included image content and the biometric information registration application information , Or a web document file including MHT), thereby identifying an identity using the biometric information. It is treated with a biometric information registering electronic documents are preferred for.

Those skilled in the art to which the present invention pertains can provide a technical feature that the server generates a biometric information registration electronic document in an image file format and / or a predetermined document file format, and corresponds to the biometric information registration electronic document. The technical features of the file format for the image file and / or document file to be familiar with, so a detailed description thereof will be omitted for convenience.

Thereafter, the server stores the generated biometric information registration electronic document in a predetermined electronic document storage (655).

As shown in FIG. 6, the electronic document repository includes a predetermined electronic document server 545 and an electronic document D / B 565 associated with a server on the biometric information registration system through predetermined communication means. When provided in the, it is preferable that the server transmits the generated biometric information registration electronic document to the electronic document server 545 through the communication means to store in the electronic document D / B (565).

Alternatively, when the electronic document storage is provided on the DBMS provided in the biometric information registration system, the server corresponds to the generated electronic information storage electronic document on the DBMS provided in the biometric information registration system. The electronic document D / B 565 can be stored, and the present invention is not limited thereto.

According to an embodiment of the present invention, the storing of the biometric information registration electronic document in the electronic document storage is performed by linking the generated biometric information registration electronic document and predetermined electronic document management information to the electronic illustrated in FIG. It is preferable to include storing in the document D / B 565.

Here, the electronic document management information preferably includes a predetermined electronic document unique number (or unique information) assigned to the biometric information registration electronic document and the electronic document storage date and time information.

The electronic document management information may further include phosphorus steam pipe information that transmits the biometric information registration electronic document.

The electronic document management information may include predetermined electronic document related information (eg, customer information transmitted by inputting (selecting) the biometric information registration request information and / or certification authority information transmitting the biometric information electronic document); And / or the electronic document file format information, and / or the biometric information registration application information).

If the biometric information registration electronic document is stored in the electronic document storage (660), the server processes the customer information, biometric information included in the biometric information registration application information and stored in a predetermined storage medium 540 665, predetermined information registration history information (e.g., details of storing the biometric information registration electronic document in the electronic document storage, and / or details of storing the biometric information registration application information in the storage medium 540). ) Is generated (or extracted) and transmitted to the terminal (670).

According to an embodiment of the present invention, the storage medium 540 is preferably provided in a DBMS on a certification authority system provided on the biometric information registration system (or associated with the biometric information registration system). The storage medium 540 may be a customer D / B provided in the DBMS on the certification authority system and / or a predetermined database associated with the customer D / B, and the present invention is not limited thereto.

7 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate to which a plurality of passwords are assigned according to one embodiment of the present invention.

In more detail, FIG. 7 illustrates that when a predetermined customer receives and processes authentication request information including customer information and biometric information from an unattended certificate issuing terminal 715, in order to process a certificate issued by a plurality of passwords, The present invention relates to a system configuration for processing identity verification based on biometric information included in received authentication request information. Those skilled in the art to which the present invention pertains may refer to and / or modify the present invention. Various implementation methods for a certificate issuance system configuration for issuing and processing a password-certified public certificate may be inferred, but the present invention includes all the implementation methods inferred above and is limited to the implementation method shown in FIG. Not.

For example, those of ordinary skill in the art to which the present invention belongs, financial information (for example, card information or account information, etc.) replacing the biometric information provided by the customer by referring to and / or modifying the drawing 7 If received, it will be possible to infer an implementation method for a method for issuing and processing a public certificate through identification verification using the received financial information, thereby not limiting the present invention.

Hereinafter, when the customer information and the biometric information for the certificate issuance request are input through the certificate issuing request interface 715 output through a predetermined certificate issuing terminal 715 on the certificate issuing system shown in FIG. When the authentication request information is generated based on the information and the biometric information, and the generated authentication request information is transmitted through the certificate issuing terminal 715, after the identity verification process is performed based on the authentication request information, the authentication result is verified. Components corresponding to at least one or more means and / or functional configurations provided to the issuing terminal 715 are referred to as "certification authority server 700" for convenience.

Referring to FIG. 7 according to an embodiment of the present invention, a certificate issuing system for issuing and processing a certificate issued with a plurality of passwords may be provided with at least one certificate authority branch (or branch) or a public place. It characterized in that it comprises a terminal 715, the certificate issuing terminal 715 is a communication channel is connected to the certification authority server 700 provided on the certificate issuing system through a predetermined communication network.

The storage medium 740 provided on the certificate issuing system according to the present invention includes customer information, biometric information, and the certificate issuing terminal 715 registered through the biometric information registration system illustrated in FIG. 1 or 5. Based on the received authentication request information, the authentication history information that has been authenticated is stored in a predetermined storage medium 740 by cooperative processing.

The customer information includes personal information of the customer (for example, the name, resident registration number, address, telephone number, mobile phone number, e-mail address, etc.) of the customer who registered the biometric information through the biometric information registration system shown in FIG. 1 or 5. ) And a member provided in the customer D / B provided on the certification authority system associated with the certificate issuing system in response to the customer by the member information of the customer (for example, when the customer subscribes as a customer of the certification authority). ID information and the like).

The biometric information may include image data provided by a customer who registers the biometric information through the biometric information registration system illustrated in FIG. 1 or FIG. 5 (or a scan of a body part of the customer (eg, a fingerprint, an iris, a face, etc.) and And / or at least one feature data on the image data (e.g., a feature on a pattern that is differentiated from a general pattern of fingerprints).

When the authentication request information for the customer who registered the biometric information is received through the biometric information registration system illustrated in FIG. As a result of the authentication process, the authentication request terminal unique information, etc.) is preferably included.

The certification authority server 700 provided on the certificate issuing system according to the present invention is a generic term for the certificate issuing system side component connected to the certificate issuing terminal 715 through a predetermined communication network, and includes at least one server ( Or an apparatus) and / or at least one or more programs recorded on a recording medium provided in a predetermined server (or apparatus), and the present invention is not limited thereto.

Referring to FIG. 7, the certification authority server 700 generates authentication request information based on the customer information and the biometric information input from the certificate issuing terminal 715, and when the generated authentication request information is transmitted, On the basis of the information receiving unit 720 (or information receiving means) for receiving the authentication request information transmitted from the certificate issuing terminal 715 and the authentication request information received through the information receiving unit 720, An information confirmation unit 725 (or information confirmation means) for confirming processing, and an information providing unit 730 (or information providing means) for providing the certificate issuing terminal 715 with an identification result of the customer; Characterized in that made.

When the certificate issuing terminal 715 generates and transmits the authentication request information for the identity verification request for the process of issuing an authorized certificate, based on the customer information and the biometric information input (or selected) through the output user interface, The information receiving unit 720 is characterized in that for receiving the authentication request information transmitted from the certificate issuing terminal 715.

When the authentication request information transmitted from the certificate issuing terminal 715 is received through the information receiving unit 720, the information checking unit 725 is based on the authentication request information transmitted from the certificate issuing terminal 715. Perform identity verification on the customer.

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium 740, It is preferable to process identity verification for the authentication request information by checking whether the stored customer information and the customer information included in the authentication request information match.

According to another exemplary embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal 715, the biometric information matching the biometric information included in the received authentication request information is stored through the storage medium 740. It is preferable to process the identification information on the authentication request information by the certificate issuing terminal 715 by transmitting the stored customer information in connection with the confirmed biometric information to the certificate issuing terminal 715.

When a result corresponding to the received authentication request information is confirmed through the information checking unit 725, the information providing unit 730 transmits a result corresponding to the authentication request information to the certificate issuing terminal 715. Characterized in that.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal 715, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Referring to FIG. 7, the certification authority server 700 stores the authentication details of receiving the authentication request information in the storage medium 740 in response to the authentication request information transmitted from the certificate issuing terminal 715. An information storage section 735 (or information storage means) is provided.

The information storage unit 735 stores the authentication details in response to the authentication request information received in the storage medium 740 in response to the authentication request information transmitted from the certificate issuing terminal 715.

According to the embodiment of the present invention, the authentication details include date information on which authentication request information is received from the certificate issuing terminal 715, a part (or all) of customer information included in the received authentication request information, and At least one authentication result confirmed in response to the authentication request information is preferably included.

According to an embodiment of the present invention, the storage medium 740 may include a first storage medium 740 for storing customer information and biometric information registered by the customer through the biometric information registration system illustrated in FIG. 1 or 5. The first storage medium 740 and the second storage medium 740 may be connected / configured in a relational manner. Do.

8 is a diagram illustrating a certificate issuing system for issuing and processing a public certificate to which a plurality of passwords are assigned according to one embodiment of the present invention.

In more detail, in FIG. 8, a predetermined customer completes identification through the certification authority server 700 illustrated in FIG. 7 in order to process a predetermined certificate issued by a plurality of passwords. Receive a public key generated by the certificate issuing terminal 715 (or generated in a wired or wireless storage medium connected to the certificate issuing terminal 715), and generates the public certificate information based on the received public key. As a system configuration for processing to be stored in the wired and wireless storage medium through the certificate issuing terminal 715, those skilled in the art to which the present invention pertains, a plurality of passwords by referring to and / or modified in this figure 8 Will be able to infer various implementation methods for the certificate issuance system configuration for issuing and processing the authorized certificate is granted, the present invention is inferred Includes any method embodiment, it shall not be limited to the exemplary method shown in the figure 8.

Hereinafter, when the customer information and the biometric information for the request for issuing a certificate is input through the certificate issuing request interface 715 output through a predetermined certificate issuing terminal 715 on the certificate issuing system shown in FIG. After identity verification based on the information and biometric information, a component corresponding to at least one or more means and / or functional configurations for processing the issuance of a public certificate is referred to as "certificate server 705" for convenience.

Referring to FIG. 8 according to an embodiment of the present invention, a certificate issuing system for issuing a certificate issued by a plurality of passwords is provided with at least one certificate authority branch (or branch) or a public place. 715, characterized in that the certificate issuing terminal 715 is connected to the communication server and the certificate server 705 provided on the certificate issuing system through a predetermined communication network.

The certificate D / B 850 provided on the certificate issuing system according to the present invention issuing and processing the official certificate to the customer in accordance with the request for issuing a public certificate, the customer information and public certificate information according to the public certificate issuing process, and Characterizing and storing the validity period information and the password information associated with the public certificate.

When the customer information requests for issuance of a certificate through the certificate issuing system and processes a certificate issuance corresponding thereto, and provides an authorized certificate to the customer, personal information of the target customer who issued and processed the authorized certificate (for example, Name, resident registration number, address, telephone number, mobile phone number, e-mail address, etc.).

The public certificate information is used as version information for distinguishing the public certificate type for the public certificate provided to the customer, and as reference information for the suspension of revocation and revocation list of the public certificate provided to the public certificate provided to the customer. Signing algorithm information having serial number information, signature algorithm value used when creating a public certificate, issuer information for the organization that issued the public certificate, validity period information for the period guaranteeing the status of the public certificate, Issuer public key identifier information for identifying the owner information that owns the certificate, the public key information held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner. Key usage information, including the purpose for which the public key of It is preferable to include at least one or more information.

The validity period information is preferably made including a period / date and time that is available in the state that the authorized certificate issued to the customer is valid.

According to an embodiment of the present invention, the validity period information may include a specific period (eg, an expiration period available after the accredited certificate is issued) or specific date and time information, and the public certificate generated within the validity period It is desirable that only requests for use be processed effectively.

According to another exemplary embodiment of the present invention, the validity period information may include information about a specific number of times (or a specific number of days) (for example, the number of times (or the number of days) actually available after the accredited certificate is issued). If the number of times (or days) is exceeded, the issued certificate is preferably treated as invalid.

According to another exemplary embodiment of the present invention, it is preferable that the validity period information is a combination of a specific number and a specific period.

In other words, if the service is set to be available only within a certain number of times during a certain period, the remaining number of times will be destroyed if the specified time period is exceeded. It is preferred to be treated as not.

The password information is for each situation for a plurality of passwords, and a password corresponding to each situation in order to assign one or more passwords to the authorized certificate issued to the customer and to allow the one or more passwords to be used It is preferably made, including, it may be made of a code including the English / special characters, etc., not the password according to the intention and purpose of those skilled in the art.

According to the embodiment of the present invention, the password information may be set by the customer in response to the area (eg, separate operation of a password used at home and a password used at work) corresponding to the area used by the customer, and the area information. It is desirable to include a password.

According to another exemplary embodiment of the present invention, the password information may include a date used by the customer (eg, separate operation of a password used for even days and a password used for odd days) and a password set by the customer corresponding to the date. It is preferable to comprise.

Those of ordinary skill in the art to which the present invention pertains can infer various cases for various conditions that the customer wants to use when setting various conditions that the customer wants to use and a password corresponding to each of the various conditions. There will be, and the invention is not limited thereby.

The certificate server 705 provided on the certificate issuing system according to the present invention is a generic term of the certificate issuing system side component connected to the certificate issuing terminal 715 through a predetermined communication network, and includes at least one server (or Device) and / or at least one program recorded on a recording medium provided in a predetermined server (or device), and the present invention is not limited thereto.

According to an embodiment of the present invention, the certificate server 705 comprises an interface unit 800 (or interface means) for connecting and managing a predetermined communication channel with the certificate issuing terminal 715 through the communication network. It is characterized by.

According to an embodiment of the present invention, the certificate issuing terminal 715 is connected to a predetermined communication channel based on a protocol stack defined in the communication network, and the certificate issuance related program provided in the certificate issuing terminal 715 is provided. It is desirable to provide a communication interface for transmitting and receiving at least one or more information (or data) using a defined communication protocol.

Referring to Figure s, the certificate server 705 is a plurality of passwords when a predetermined certificate issuing terminal 715 connected a predetermined communication channel with the certificate server 705 through the interface unit 800 The certificate server 705 inputs (or selects) the customer information, the biometric information, the expiration date information, and the password information for a predetermined certificate issue request from the certificate issuing terminal 715 for the authorized certificate issue processing. Interface providing unit for generating (or extracting) at least one user interface for transmitting to the certificate issuing terminal 715 to generate (or extract) at least one user interface, and in connection with the interface unit 800 ( 805 (or interface providing means) and the certificate issuing terminal 715, the user interface is compared with the customer information, biometric information and validity period information. When the number information is input (or selected) and transmitted, an information receiver for receiving the customer information, biometric information, validity period information, and password information transmitted from the certificate issuing terminal 715 in association with the interface unit 800 ( 810 (or information receiving means), an information generating unit 815 (or information generating means) for generating authentication request information based on the received customer information, biometric information, expiration date information, and password information; Characterized in that it comprises an authentication verification unit 820 (or authentication confirmation means) for transmitting the authentication request information to the certification authority server 700 to confirm the authentication for the biometric information, the certificate server 705 Does not receive the biometric information and / or if the identification is not directly possible based on the biometric information, the information generation unit 815 and the authentication confirmation unit 820 may be omitted. It may be.

The interface providing unit 805 connects a predetermined communication channel with the certificate server 705 through the interface unit 800 through the certificate issuing terminal 715, and then connects the plurality of certificates to the certificate server 705. When requesting a user interface for a password-certified public certificate issuance process, the certificate issuing terminal 715 inputs (or selects) predetermined customer information, biometric information, expiration date information, and password information through the communication network. Generate at least one user interface for transmission to the certificate server 705, and / or extract from a predetermined database (not shown), and link the generated (or extracted) user interface with the interface to the communication network It is characterized in that to provide to the certificate issuing terminal 715 through.

According to an embodiment of the present invention, a predetermined user interface that can be provided to a certificate issuance related program included in the certificate issuing terminal 715 is generated (or extracted), and the generated (or extracted) through the interface unit 800. It is preferable to provide the user interface) to the certificate issuing terminal 715.

Here, at least one user for inputting (or selecting) predetermined customer information, biometric information, expiration date information, and password information on the certificate issuing terminal 715 to transmit to the certificate server 705 through the communication network. When a predetermined certificate issuance related program having an interface is provided, a user who inputs (or selects) predetermined customer information, biometric information, expiration date information, and password information to the certificate server 705 as described above. The interface providing unit 805 which generates (or extracts) an interface and provides the certificate issuing terminal 715 may be omitted, and the present invention is not limited thereto.

Thereafter, the certificate issuing terminal 715 inputs (or selects) the customer information, the biometric information, the expiration date information, and the password information through the user interface, and validates the entered (or selected) customer information and the biometric information. Period information and password information are transmitted to the certificate server 705 through the communication network. In response, the information receiving unit 810 is transmitted from the certificate issuing terminal 715 in association with the interface unit 800. And customer information, biometric information, expiration date information, and password information.

According to the embodiment of the present invention, the certificate issuing terminal 715 is the customer information, biometric information, validity information and password information in the certificate server 705 in the customer information, biometric information, validity information and password information At least one or more of a predetermined password and / or security card information and / or an OTP code generated through a predetermined one time password (OTP) generator for checking the validity of the certificate server through the network means. It is desirable to send to 705.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 715 may include at least one encryption method (eg, a symmetric key based encryption method and / or a public key based method) on the customer information, biometric information, validity period information, and password information. Encryption method, and / or electronic envelope-based encryption method, and / or key exchange-based encryption method, etc.) and / or attach a predetermined electronic signature to the customer information, biometric information, expiration date information, and password information. It is preferable to transmit to the certificate server 705 through the network means, for this purpose, the certificate issuing terminal 715 is provided with at least one encryption key corresponding to the encryption scheme, and / or at least one or more Have a predetermined certificate containing an encryption key, and / or the certificate has a predetermined IC chip (or IC) If provided in the de), preferably it provided with a card to verify the certificate provided in the IC chip (or IC card) reader.

Those skilled in the art to which the present invention pertains include technical features of various encryption methods for encrypting the customer information, the biometric information, the expiration date information, and the password information, and the customer information, the biometric information, and the expiration date information. And since you will be familiar with the technical features of attaching a predetermined digital signature to the password information, a detailed description thereof will be omitted for convenience.

When the customer information, the biometric information, the expiration date information and the password information are input (or selected) through the output user interface, the information generator 815 inputs (or selects) the customer information, the biometric information and the expiration date. Characterized in that the authentication request information is generated based on the information and password information.

When authentication request information is generated through the information generation unit 815, the authentication confirmation unit 820 transmits the generated authentication request information to the certification authority server 700 to transmit biometric information included in the authentication request information. Check and check whether the checked biometric information matches the biometric information registered by the user in the certification authority server 700 by comparing and checking whether the biometric information is registered by the user from the certification authority server 700. Characterized in that the check.

According to the implementation method of the present invention, the authentication whether the authentication request information is confirmed, the generated authentication request information is transmitted to the certification authority server 700, and the certification authority server 700 is included in the authentication request information. The biometric information and the biometric information stored in a database held by the certification authority server 700 (or accessible) and compare the biometric information, and the biometric information is included in the customer information and the authentication request information registered on the database. Checking whether the customer information is matched, by receiving and reading the authentication result information (that is, including only the authentication result for the authentication request information) transmitted by the certification authority server 700, the authentication request information It is advisable to check the authenticity for.

According to another embodiment of the present invention, the authentication whether the authentication information included in the authentication request information, and transmits the generated authentication request information to the certification authority server 700, the certification authority server 700 is the authentication request information Comparing / confirming the biometric information included in the biometric information stored in a database held (or accessible) by the certification authority server 700 and verifying authentication result information including customer information registered with the biometric information. By checking whether the customer information included in the received authentication result information and the customer information included in the authentication request information match, it is preferable to check whether the authentication request information is authenticated.

Referring to FIG. S, when the authentication of the customer is confirmed, the certificate server 705 requests and receives public key information from the certificate issuing terminal 715 to generate and provide the public certificate information to the customer. An information receiving unit 810 (or information receiving means), an information generating unit 815 (or information generating means) for generating public certificate information based on the received public key information, and the generated public certificate information. It is characterized in that it comprises a certificate issuing unit 825 (or certificate issuing means) to be transmitted to the certificate issuing terminal 715 and processed to be stored in the wired or wireless certificate D / B (850) for the customer.

After the identity verification process based on the biometric information of the customer through the authentication verification unit 820 (or after the identity verification process based on the biometric information about the customer in the certificate issuing terminal 715), the certificate issuing terminal 715 When the public key information and the customer information is transmitted, the information receiving unit 810 is characterized in that for receiving the customer information and public key information transmitted from the certificate issuing terminal 715.

When the customer information and the public key information transmitted from the certificate issuing terminal 715 are received through the information receiving unit 810, the information generating unit 815 is an authorized certificate based on the received customer information and the public key information. Characterized by generating the information, characterized in that the process of setting the validity period information and password information at the time of generating the authorized certificate information.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is made by also being preferred.

When the public certificate information is generated through the information generator 815, the certificate issuing unit 825 requests the wired / wireless wired / wireless certificate D / B requested by the customer through the certificate issuing terminal 715. It is characterized in that the processing to be stored in (850).

Referring to FIG. 8, the certificate server 705 issues and processes the public certificate through the certificate issuing unit 825 after issuing the public certificate or before providing the public certificate information to the customer. Characterized in that it comprises a payment processing unit 830 (or payment processing means) for processing so that payment for the activation process of the authorized certificate is made.

According to the implementation method of the present invention, the payment processing for the activation process of the authorized certificate to the customer, after generating the certificate information to be provided to the customer, the wired / wireless wired / wireless certificate D requested by the customer through the certificate issuing terminal 715 Before providing to / B 850, it is preferable to request a payment using a predetermined payment method by calculating a payment amount.

Herein, the payment amount is a payment amount corresponding to a basic validity period when no validity period is set when the authorized certificate is issued, and / or a schedule corresponding to the validity period when the customer sets a validity period. The amount of payment calculated based on the base rate for each unit period for each period (or the amount of payment with a certain discount rate according to the validity period), and / or the amount of payment calculated on the basis of a certain number of times (or according to a certain number of times or more) Payment amount calculated through a discount rate.

In addition, the payment amount, when the customer sets a plurality of passwords in accordance with the issuance of the certificate, it is possible to provide a premium (for example, additional discount benefits or additional charges, etc.) corresponding thereto, whereby the present invention It is not limited.

If payment for the payment amount is not made when the public certificate is issued, the public certificate provided to the customer is set as an invalid public certificate, and when the payment is made, the public certificate is set as a valid public certificate. desirable.

Referring to FIG. 8, the certificate server 705 processes the association of the certificate information provided to the certificate issuing terminal 715 with the customer information, the valid period information, and the password information for the target customer who issued the certificate. And an information storage unit 845 (or information storage means) stored in the certificate D / B 850.

According to the method of the present invention, the certificate D / B 850 is a database accessible from the certificate server 705, the customer information for one or more customers, and the public certificate information corresponding to the certificate provided to the customer And expiration date information and password information is preferably stored.

In addition, the certificate D / B 850 is preferably a database that can not be modified / generated by accessing from an external server other than the certificate server 705.

Referring to FIG. 8, the certificate server 705 enters the password set in the certificate when the customer who has issued the certificate requests to use the certificate as a transaction authentication means in the course of using the financial transaction service. And an information receiving unit 810 (or information receiving means) for receiving certificate authentication request information including at least one password input by a customer in response to the situation, and the authorized certificate based on the received certificate authentication request information. And an information checking unit 835 (or information checking means) for confirming the authentication of the authentication information, and an information providing unit 840 (or information providing means) for providing a result of authentication verification for the public certificate. do.

The information receiving unit 810 requests the customer who has issued the certificate to use the authorized certificate as a transaction authentication means in the course of using the financial transaction service, and the certificate information and the password information in the terminal used to use the financial transaction service. And transmitting the certificate authentication request information including at least one piece of context information corresponding to a situation of inputting the password, the certificate authentication request information is received, and the received certificate authentication request information is checked for the information. Provided to section 835.

The information checking unit 835 confirms whether or not authentication is possible for the authentication request based on the authorized certificate provided by the customer in response to the received certificate authentication request information, and the certificate authentication corresponding to the confirmed authentication availability. It is characterized by generating the result information.

According to the exemplary embodiment of the present invention, the authentication result of the received certificate authentication request information is checked, wherein the public certificate information among the information included in the received certificate authentication request information is stored in the certificate D / B 850. It is desirable to check whether or not it matches the public certificate information.

In addition, confirm whether the password information included in the received certificate authentication request information matches one or more passwords set in the public certificate, and checks whether the confirmed password matches the situation of the customer who entered the password. It is desirable to.

If the validity period for the accredited certificate is set or the validity period for the accredited certificate paid by the customer is set even if the validity period is not set, the accredited certificate corresponds to the validity period set above. It is desirable to check whether or not.

When the validity of the public certificate is confirmed according to the above process, it is preferable to generate the authentication result information including the verification result of confirming the certification of the public certificate.

If the authentication result information for the authorized certificate is generated, the information providing unit 840 provides the confirmed authentication result information to a user terminal (not shown) or a financial institution server 710 requesting authentication. It is preferable to store the authentication result information on a database that manages the authentication details.

9 is a diagram illustrating a functional configuration of a certificate issuing terminal 715 for issuing and processing a public certificate to which a plurality of passwords are assigned according to an embodiment of the present invention.

In more detail, Fig. 9 is a certificate issued by a plurality of passwords according to the present invention in an unmanned certificate issuing terminal 715 provided in a predetermined financial institution (eg, a commercial bank branch, a card company branch) and / or a public place. As a figure showing a preferred functional configuration for processing certificate issuance, those of ordinary skill in the art to which the present invention pertains, with reference to and / or modified this figure 9 is given a plurality of passwords in accordance with the present invention Various implementation methods for the certificate issuing terminal 715 for processing certificate issuance may be inferred, but the present invention includes all the implementation methods inferred above and is not limited by the implementation method shown in FIG.

For example, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify the drawing 9 and infer an implementation method of applying to a financial institution-specific certificate issued by a financial institution in addition to the authorized certificate. There will be, and the invention is not limited thereby.

Referring to FIG. 9, the certificate issuing terminal 715 may use a wireless terminal such as a USB memory and / or a mobile phone and / or a wired / wireless storage medium such as an SD / MMC memory card and / or a CF memory card and / or an XD memory card. Storage screen controller 900 for recognizing and storing the certificate information issued by using the biometric information, and the processing screen of each step for issuing a certificate issued a plurality of passwords provided through the certificate issuing terminal 715 A screen output unit 910 for outputting a key, a key input unit 920 for receiving predetermined information according to each step, and a request for issuing a public certificate issued with a plurality of passwords according to the present invention. A biometric unit 915 for recognizing information, a communication unit 970 for communicating with a certificate authority server 700 and / or a financial institution server 710 and / or a certificate server 705 via a predetermined communication network, remind The certificate issuing terminal 715, the memory unit for storing at least one certificate issuance processing information for the process of issuing a certificate issued by the plurality of passwords, predetermined certificate issuance information after the certificate issuing process, and the certificate issuing terminal It includes a power supply unit 980 for supplying power to the 715, at least one terminal function unit 975, and a control unit 925 for controlling each functional component provided in the certificate issuing terminal 715.

In addition, the certificate issuing terminal 715 recognizes the MS card and / or IC card and / or bankbook that stores the customer's financial information (for example, the card information and / or account information possessed by the customer) and predetermined information It comprises a card reader unit 905 to obtain a.

The control unit 925 controls the overall operation of the certificate issuing terminal 715 in the functional configuration, and manages the flow of information or data between each component, for issuing a plurality of password-certified official certificate according to the present invention Control at least one or more components provided in the certificate issuing terminal 715, at least one processor and execution memory (Central Processing Unit) / MPU (Micro Processing Unit) in hardware For example, it comprises a register) and a bus (BUS) for inputting and outputting predetermined data and at least one electronic circuit (or integrated circuit) therefor, and also for performing software-specific functions. Loading into the execution memory from a predetermined recording medium provided in the certificate issuing terminal 715 and the program Including a predetermined program routine (Routine) and / or the program data to be processed computed by the processor is characterized in that formed. In particular, the control unit 925 includes a predetermined operating system and / or a terminal control program routine for managing the certificate issuing terminal 715 after the certificate issuing terminal 715 is booted by software. .

9 illustrates at least one program component provided in the certificate issuing terminal 715 for issuing a plurality of passwords according to the present invention in the control unit 925 for convenience.

The storage medium control unit 900 is issued to the wired / wireless storage medium and the certificate for storing / reading the official certificate information in the wired / wireless storage medium after issuing and processing a plurality of password-certified certificate information according to the present invention It is characterized in that the interface between the terminal 715, and control according to the standard for reading and / or recording one or more information or data according to the type of wired or wireless storage medium (e.g., SPI protocol in the case of a memory card) It is desirable to.

The card reader unit 905 is characterized in that it provides an interface between the card and the certificate issuing terminal 715 to read at least one or more information or data provided in the card for issuing a public certificate, ISO / IEC MS reader interface to interface the MS (Magnetic Stripe) card based on the 7810 standard with the certificate issuing terminal 715, and / or contact type based on the ISO / IEC 7816 standard for the processing of issuing a plurality of password-certified public certificate A contact IC reader unit for interfacing an IC (Integrated Circuit) card with the certificate issuing terminal 715 and / or a contactless IC reader unit for interfacing a contactless IC card based on the ISO / IEC 14443 standard with the certificate issuing terminal 715. And the contact IC reader unit and / or the contactless IC reader unit correspond to the IC card reader provided in the certificate issuing terminal 715. desirable.

The MS reader unit is a card reader unit 905 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information or data (eg, magnetization). When the MS card on which the stored binary information or binary data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information or data is recorded), The predetermined information or data is interfaced to the certificate issuing terminal 715 from at least one or more tracks included in the MS of the MS card by using a predetermined electrical signal loaded.

The contact IC reader unit is a card reader unit 905 based on ISO / IEC 7816, and at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It comprises a, and supplies power to the IC chip of the IC card through the contact point, the predetermined information or from the IC chip through the half-duplex transaction using the APDU (Application Protocol Data Unit) The data is interfaced to the certificate issuing terminal 715.

The contactless IC reader part is a card reader part 905 based on ISO / IEC 14443. The contactless IC reader part may be at least in electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, the predetermined information or data from the IC chip through the half-duplex transaction using the APDU certificate It is characterized in that the interface to the issuing terminal 715.

The screen output unit 910 is predefined so that the certificate issuing terminal 715 is output by the control unit 925 to a predetermined screen output means including a liquid crystal display (LCD) and / or a cathode ray tube (CRT). Or at least one information or data that is defined in real time or is defined in real time, and the key data input through the key input unit 920 to predefined information or data to be output on the screen by the certificate issuing terminal 715. , Biometric information input through the biometric recognition unit 915, information stored or generated by a component included in the certificate issuing terminal 715, information transmitted / received through the communication unit 970, a certificate issuing terminal 715 It includes the data corresponding to the predetermined operation result to perform).

According to the exemplary embodiment of the present invention, the screen output unit 910 outputs a processing screen and / or an interface screen according to each authorized certificate issuing step to which a plurality of passwords are assigned according to the present invention to a predetermined screen output device. desirable.

The key input unit 920 includes at least one key button including at least one numeric key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or an operation mode of the certificate issuing terminal 715 controlled by the controller 925. When predetermined information (or signal) is inputted from the key button of, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 925. The controller 925 acquires predetermined key data corresponding to the key event in the current input mode and / or operation mode of the certificate issuing terminal 715, and / or is matched with the key event. Characterized by obtaining a command for executing a predetermined function, the key input unit 920 and the key input device having at least one or more key buttons are provided in the certificate issuing terminal 715 in cooperation with each other Serves as a key input means.

According to an embodiment of the present invention, a key input device interoperating with the key input unit 920 may include a keypad device having at least one numeric key and a function key, and / or at least one numeric key and a character key (eg, A keyboard device having English character keys and / or Korean character keys) and a function key, and / or at least one numeric key and a function key in conjunction with the screen output means, and / or at least one numeric key And at least one touch screen device having character keys and function keys.

According to the exemplary embodiment of the present invention, the key input unit 920 preferably receives at least one or more pieces of information from a predetermined key input device according to each of the steps of issuing a public certificate with a plurality of passwords according to the present invention.

The biometric recognition unit 915 detects information input from a biometric information recognition device having a function of reading at least one or more biometric information, and specifies the certificate issuing terminal 715 controlled by the control unit 925. When predetermined biometric information is input from the biometric information reader provided in the biometric information recognizing apparatus in the input mode and / or the operation mode, the input biometric information is provided to the controller 925. 925 is characterized in that to obtain the biometric information in the current input mode and / or operation mode of the certificate issuing terminal 715.

According to an embodiment of the present invention, a biometric information recognition device that interoperates with the biometric recognition unit 915 may include a keypad device having at least one or more function keys, and / or at least one fingerprint recognition device, and / or at least one. At least one biometric device equipped with a biometric information reader function such as the iris recognition device and / or the face recognition device is preferable.

The communication unit 970 provides communication means for performing a transaction function (for example, a transaction function interoperating with one or more servers connected to the certificate issuing terminal 715 through a communication network) provided in the certificate issuing terminal 715. And a network communication unit and / or a predetermined cable communication port (eg, RS-232c) that provides transactional communication with a server on the communication network through a communication network (eg, a party network or a CD / ATM network) in hardware. Cable communication unit and / or Infrared Ray communication, RF (Radio Frequency) communication, Bluetooth (BlueTooth), Wireless LAN (Wireless LAN) to provide transactional communication with external communication devices via USB (Universal Serial Bus). Local area communication unit for providing transactional communication with the local area communication device through at least one or more short-range wireless communication, including Wi-Fi, Ultra Wide Band system (UWB) It is made, including, comprises a communication protocol and a communication application for providing a communication transaction in software.

According to an embodiment of the present invention, the communication unit 970 connects a communication channel for issuing a plurality of passwords with a plurality of passwords and an authorized certificate on the communication network via a network through the network communication unit. desirable.

The memory unit is a storage medium that stores at least one or more information or data required for the control unit 925 to perform a predetermined control function. The memory unit includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and FM (Flash Memory). And at least one storage means including a hard disk drive (HDD) and a solid state drive (SSD), and a predetermined program required by the controller 925 to perform a predetermined control function in software. Routine and program data (e.g., data input or output for a program routine to perform a predetermined function).

According to an embodiment of the present invention, the memory unit preferably stores the at least one certificate issuance processing information used by the certificate issuing terminal 715 to process a financial transaction with a plurality of passwords according to the present invention. And / or after issuing the public certificate issuance process to which the plurality of passwords have been assigned, it is preferable to store certificate issuance history information corresponding to the public certificate issue.

The terminal functional unit 975 is a component provided in the certificate issuing terminal 715 in addition to the components shown in FIG. 9 and / or components provided in the certificate issuing terminal 715 for a predetermined purpose or role. As a security application module (SAM), a user device such as a scanner device capable of confirming customer information, such as a resident registration card / driver's license / passport that is put by the user is made of a variety of additional function configuration according to the intention of those skilled in the art.

Those skilled in the art to which the present invention pertains can easily understand each terminal function unit 975 provided according to the characteristics of the certificate issuing terminal 715, and thus a detailed description thereof will be omitted.

9, a mode checking unit 930 for checking whether the operation mode of the certificate issuing terminal 715 is a public certificate issuing mode with a plurality of passwords, and issuing a public certificate with a plurality of passwords. An interface output unit 935 for processing one or more user interfaces corresponding to a mode to be output through the screen output unit 910 and an operation mode input (or selected) through the output one or more user interfaces A biometric information input by the user requesting for issuance of the public certificate, an information generation unit 940 for generating authentication request information based on the customer information for the user, and the generated authentication request information by an authentication authority server ( It is characterized in that it is provided with an authentication confirmation unit 945 to confirm the authentication for the biological information by transmitting to 700.

The certificate issuing terminal 715 has a plurality of operation modes, such as an authorized certificate issuing mode for processing issuance of a certificate issued by a plurality of passwords according to the present invention, a public certificate issuing mode for processing issuance of a public certificate using financial information. The mode checking unit 930 may include an official certificate issuing mode in which an operation mode of the certificate issuing terminal 715 handles issuance of a public certificate with a plurality of passwords according to the present invention, or an official certificate using financial information. It is characterized by checking whether the issuance mode.

According to an exemplary embodiment of the present invention, the certificate issuing terminal 715 selects an authorized certificate issued with a plurality of passwords according to the present invention from among a plurality of operation modes on a basic screen, thereby providing the plurality of passwords. It is preferable to switch to the public certificate issuing mode which handles public certificate issuance.

According to another exemplary embodiment of the present invention, the certificate issuing terminal 715 has a predetermined IC card inserted into the IC card reader, and is provided with a plurality of passwords according to the present invention. By selecting the issuing, it is preferable to switch to the public certificate issuing mode that processes the public certificate issuance issued with the plurality of passwords.

When the mode checking unit 930 is set to the public certificate issuing mode with a plurality of passwords, the interface output unit 935 inputs (or selects) customer information and biometric information for processing the public certificate issuance. It characterized in that it comprises at least one user interface for.

According to an embodiment of the present invention, customer information for processing the issued certificate and at least one user interface for inputting (or selecting) biometric information may include customer information such as a customer name, social security number, address, and telephone number. And at least one region for inputting (or selecting) and at least one button (or icon) for processing the biometric information of the user through the biometric recognition unit 915.

When the customer information and the biometric information are input (or selected) through the output user interface, the information generator 940 generates the authentication request information based on the input (or the selected) customer information and the biometric information. It features.

Here, the generated 'authentication request information' is directly referred to as 'certificate issue request information' when directly transmitted to the certificate server 705.

When the authentication request information is generated through the information generating unit 940, the authentication confirming unit 945 transmits the generated authentication request information to the certification authority server 700 to transmit the biometric information included in the authentication request information. Check and check whether the checked biometric information matches the biometric information registered by the user in the certification authority server 700 by comparing and checking whether the biometric information is registered by the user from the certification authority server 700. Characterized in that the check.

According to the implementation method of the present invention, the authentication whether the authentication request information is confirmed, the generated authentication request information is transmitted to the certification authority server 700, and the certification authority server 700 is included in the authentication request information. The biometric information and the biometric information stored in a database held by the certification authority server 700 (or accessible) and compare the biometric information, and the biometric information is included in the customer information and the authentication request information registered on the database. Checking whether the customer information is matched, by receiving and reading the authentication result information (that is, including only the authentication result for the authentication request information) transmitted by the certification authority server 700, the authentication request information It is advisable to check the authenticity for.

According to another embodiment of the present invention, the authentication whether the authentication request information included in the authentication request information is sent to the authentication authority server 700, the steam pipe server 700 is the authentication request information Compare / confirm biometric information included in the biometric information stored in a database held by the certification authority server 700 (or accessible), and verify authentication information including customer information registered with the biometric information. By checking whether the customer information included in the received authentication result information and the customer information included in the authentication request information match, it is preferable to check whether the authentication request information is authenticated.

9, the certificate issuing terminal 715, based on a result of confirming the authentication of the authentication request information, if the authentication of the authentication request information is confirmed, issuing a certificate issued by the plurality of passwords An authentication key generation unit 950 for generating an authentication key for processing, and transmits the generated authentication key to the certificate server 705 to request issuance of a public certificate, and the authentication key transmitted from the certificate server 705. The certificate processing unit 955 for receiving the public certificate information generated based on the public certificate information received from the certificate server 705 and the generated authentication key information through the storage medium controller 900 via the wired / wireless storage medium. And an information storage unit 960 for processing to be stored in the storage device.

Based on a result of confirming the authentication of the authentication request information, when the authentication of the authentication request information is confirmed, the authentication key generator 950 may generate a public key and a private key.

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

When a public key and a private key are generated through the authentication key generation unit 950, the certificate processing unit 955 transmits the generated public key to a certificate server 705, and transmits the certificate from the certificate server 705. Characterized in that the public certificate information generated based on the public key.

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

When the public certificate information is received from the certificate server 705, the information storage unit 960 processes the received public certificate information to be stored in the wired / wireless storage medium based on a protocol corresponding to the type of wired / wireless storage medium. It is characterized by.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawing 9 and / or any wired / wireless storage medium capable of storing authorized certificate information in addition to the USB storage medium or the mobile phone storage medium (eg, smart). Card storage media, etc.), whereby the present invention is not limited thereto.

10A and 10B illustrate a process of issuing and processing a public certificate to which a plurality of passwords are assigned according to an exemplary embodiment of the present invention.

In more detail, Figures 10a and 10b are based on the drawings 7 and 8 and 9 for the processing of issuing a certificate through the identification verification using biometric information, from the certificate issuing terminal to the customer information, biometric information and validity period When the information is input (or selected), the authentication authority server and the certificate issuing terminal process identity verification based on the customer information and the biometric information among one or more of the input (or selected) information, and the public key is issued by the certificate issuing terminal. And a process of generating a private key and requesting for issuance of a public certificate through a certificate server, and processing the received public certificate information to be stored in a wired / wireless storage medium, having a general knowledge in the technical field to which the present invention pertains. If issued, refer to and / or modify the drawings 10a and 10b to issue a public certificate to which a plurality of passwords are assigned. Various implementation methods for the process may be inferred, but the present invention includes all the implementation methods inferred above, and is not limited to the implementation methods shown in FIGS. 10A and 10B.

For example, those skilled in the art to which the present invention pertains may modify the order of the process of issuing and issuing a plurality of password-certified public certificates by referring to and / or modifying the drawings 10a and 10b, and It will be possible to infer some omitted implementations, and the invention is not limited thereby.

Referring to FIGS. 10A and 10B, the certificate issuing terminal illustrated in FIG. 9 inputs (or selects) customer information, biometric information, and validity period information for a request for issuance of an authorized certificate through identity verification using biometric information. Request a user interface output (1000), generate (or extract) a user interface corresponding to the output request, process the output (1005), and output the customer information, biometric information, and expiration date information through the output user interface; Enter (or select) 1010.

If customer information, biometric information, and validity information are input (or selected) through the output user interface (1015), the certificate issuing terminal receives the input (or selected) customer information, biometric information, and validity information. Generate (or extract) the authentication request information based on (1020), and transmit the generated (or extracted) authentication request information to the certification authority server shown in FIG. 7 through a communication network to request authentication (1025). In response, the certification authority server checks the authentication result based on the received authentication request information (1030).

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium, and may be stored in connection with the confirmed biometric information. It is preferable to process identity verification for the authentication request information by checking whether the customer information and the customer information included in the authentication request information match.

According to another embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, the biometric information and the biometric information matched in the received authentication request information are confirmed through the storage medium, and the confirmation is performed. It is preferable that the identification information for the authentication request information is processed by the certificate issuing terminal by transmitting the stored customer information connected to the biometric information to the certificate issuing terminal.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Thereafter, the certification authority server transmits the verified authentication result to the certificate issuing terminal (1040), and correspondingly, the certificate issuing terminal checks the received authentication result (1045).

If the authentication result received from the certification authority server is confirmed as an authentication failure (1050), the certificate issuing terminal generates (or extracts) error information on the authentication failure based on the received authentication result and processes it to be output. (1055).

On the other hand, if the authentication result received from the certification authority server is confirmed as successful authentication (1050), the certificate issuing terminal generates a public key and a private key (1060), and transmits the generated public key to the certificate server to authenticate Request the certificate information (1065).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (1070), and transmits the generated public certificate information to the certificate issuing terminal (1075), and correspondingly the certificate issuing terminal is The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected to a certificate issuing terminal (1080).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, the online request form for the wireless certification certificate should follow the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is made by also being preferred.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains, all wired and wireless storage media capable of storing the authorized certificate information, in addition to the USB storage medium or mobile phone storage medium by referring to and / or modified with reference to the drawings 10a and 10b ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

11A and 11B illustrate a process of issuing and processing a public certificate to which a plurality of passwords are assigned according to another exemplary embodiment of the present invention.

In more detail, FIGS. 11A and 11B illustrate the customer information, the biometric information, and the expiration date from the certificate issuing terminal for processing of issuance of a certificate through identification verification using biometric information based on FIGS. 7, 8, and 9. When the information is input (or selected), the customer information and biometric information among the one or more input (or selected) information is transmitted to the certificate server, the certificate server processes the identity verification with the certificate authority server, the certificate issuing terminal It is a process for generating a public key and a private key from the request to receive a certificate issued through a certificate server, and receiving the received certificate information stored in a wired or wireless storage medium, which is common in the art. If you are knowledgeable, refer to and / or modify this drawing 11a and 11b, and a certificate which has been given a plurality of passwords. Would be able to infer a variety of exemplary methods for the process of issuing processing, the present invention includes all embodiments in which the inference method, shall not be limited to the exemplary method shown in the figure 11a and figure 11b.

For example, those skilled in the art to which the present invention pertains may modify the order of the process of issuing and processing a plurality of password-approved public certificates by referring to and / or modifying the drawings 11a and 11b, and It will be possible to infer some omitted implementations, and the invention is not limited thereby.

11A and 11B, the certificate issuing terminal illustrated in FIG. 9 inputs (or selects) customer information, biometric information, and expiration date information for a request for issuance of a certificate through identification verification using biometric information. Request a user interface output (1100), generate (or extract) a user interface corresponding to the output request and process the output (1105), and output the customer information, the biometric information, and the expiration date information through the output user interface. Enter (or select) 1110.

If the customer information, the biometric information, and the expiration date information are input (or selected) through the output user interface (1115), the certificate issuing terminal receives the input (or selected) customer information, biometric information, and expiration date information. Generate (or extract) the certificate issuing request information based on (1120), and transmit the generated (or extracted) certificate issuing request information to the certification authority server shown in FIG. 1125, in response, the certificate server receives the certificate issuing request information transmitted from the certificate issuing terminal, requests an identity verification through a certification authority server based on the received certificate issuing information (1130). In response, the certification authority server verifies the customer identity in response to the received identity verification request (1135).

According to an embodiment of the present invention, identification of the customer may include biometric information matching the biometric information included in the received authentication request information through the storage medium, and may be stored in connection with the confirmed biometric information. It is preferable to process identity verification for the authentication request information by checking whether the customer information and the customer information included in the authentication request information match.

According to another embodiment of the present invention, when the identification of the customer is performed in the certificate issuing terminal, the biometric information matching the biometric information included in the received authentication request information is confirmed through the storage medium, and the confirmed It is preferable to process the identification information for the authentication request information is performed in the certificate issuing terminal by transmitting the stored customer information in connection with the biometric information to the certificate issuing terminal.

Here, the result corresponding to the authentication request information transmitted to the certificate issuing terminal, it is preferable to provide only the identity verification results corresponding to the authentication request information, or provide the confirmed customer information.

Thereafter, the certification authority server transmits the verified authentication result to the certificate server (1140), and correspondingly, the certificate server confirms the received authentication result (1145).

If the authentication result received from the certification authority server is confirmed as an authentication failure (1150), the certificate server generates (or extracts) error information on the authentication failure based on the received identity verification result through a communication network. The process of transmitting the certificate issuing terminal to be output (1155).

On the other hand, if the authentication result received from the certification authority server is confirmed as successful authentication (1150), the certificate server requests a public key for issuing a public certificate to the certificate issuing terminal (1160), and correspondingly the certificate issuing terminal After generating the public key and the private key according to the public key request, and transmits the generated public key to the certificate server (1165).

Those skilled in the art will be familiar with the method and / or process for generating the public and private keys, and the technical features of the public and private keys. Detailed description is omitted for convenience.

Thereafter, the certificate server generates public certificate information based on the received public key (1170), and transmits the generated public certificate information to a certificate issuing terminal (1175). The received public certificate information and the generated private key information are processed to be stored in a wired / wireless storage medium connected to a certificate issuing terminal (1180).

According to the exemplary embodiment of the present invention, it is preferable that the authorized certificate information generated based on the transmitted public key is encrypted using the transmitted public key.

According to the implementation method of the present invention, the online request form for the wired public certificate is preferably composed of certificate request information, private key ownership verification information, and additional registration information. It is preferred, and may be changed according to the intention and purpose of those skilled in the art.

In addition, it is preferable that the online request form for the wireless certification certificate conforms to the WAPWPKI international standard.

CertReqMsg :: = SEQUENCE {

certReq CertRequest,

pop ProofOfPossession OPTIONAL,

regInfo SEQUENCE SIZE (1..MAX) of AttributeTypeAndValue OPTIONAL}

Here, certReq is the certificate request information, and includes only the contents to be included in the certificate. Pop is the verification information of the user's private key ownership. Is information used when additional registration information is required for the authentication request, and may include user identification information, user access information, and payment information.

The structure of the certificate request information is preferably the following structure.

CertRequest :: = SEQUENCE {

certReqId INTEGER,

certTemplate CertTemplate,

controls Controls OPTIONAL}

Here, the CertReqID is information used for confirming a certificate request message and a response message corresponding thereto. Preferably, the CertReqID value is the same between the corresponding messages.

In addition, the certTemplate includes respective information according to a user's request for certificate issuance according to the RFC2510 standard, and preferably has the following structure.

CertTemplate :: = SEQUENCE {

version [0] version OPTIONAL,

serialNumber [1] INTEGER OPTIONAL,

signingAlg [2] AlgorithmIdentifier OPTIONAL,

issuer [3] Name OPTIONAL,

validity [4] OptionalValidity OPTIONAL,

subject [5] Name OPTIONAL,

publicKey [6] SubjectPublicKeyInfo OPTIONAL,

issuerUID [7] UniqueIdentifier OPTIONAL,

subjectUID [8] UniqueIdentifier OPTIONAL,

extensions [9] Extensions OPTIONAL}

In addition, the control includes information affecting certificate issuance, and controls of regToken, authenticator, pkiPublicationInfo, and oldCertID may be used.

Here, the regToken control has one-time information for verifying the identity of the user, and this information may be generated by a certification authority (CA) or provided to the user from outside, only for a new user, UTF8 Is preferably encoded as.

In addition, the authenticator control may include a part of the subscriber information shared between the CA and the user to verify the identity of the user, this control can be used to request certificates of existing users in addition to the new user.

In addition, the pkiPublicationInfo control includes a certificate notification method and notification location information, and it is preferable to comply with the RFC2511 standard.

According to an embodiment of the present invention, the public certificate information generated based on the customer information and the public key information is preferably generated according to the ITU-T Recommendation X.50x standard.

Here, the public certificate information is the version information for distinguishing the official certificate format, the serial number information used as reference information for the suspension and revocation list of the official certificate given to the public certificate provided to the customer; Signature algorithm information having a signature algorithm value used when creating a public certificate, issuer information for the authority that issued the public certificate, validity period information for the period that guarantees the status of the public certificate, and owner information of the public certificate holder. And the issuer public key identifier information for identifying the public key held by the owner, the public key corresponding to the certificate authority private key used to sign the certificate, the owner public key identifier information, and the owner's public key. At least one key usage purpose information including the purpose and certificate policy information It is preferable to comprise.

According to the exemplary embodiment of the present invention, when the wired / wireless storage medium is a USB storage medium, the authorized certificate information storage is supplied with power for the operation of the USB storage medium, and the USB storage medium is operated through the applied power. Preferably, the public certificate is processed to be transmitted to and stored in the USB storage medium.

According to another exemplary embodiment of the present invention, when the wired / wireless storage medium is a mobile phone storage medium, the authorized certificate information storage drives a VM (Virtual Machine) provided in the mobile phone to operate the mobile phone storage medium. It is preferable to process the data to be stored in a Universal Subscriber Identifier Module (USIM) chip or IC chip or SD / MMC / CF / XD memory card provided in the mobile phone.

Those skilled in the art to which the present invention pertains, all wired and wireless storage media capable of storing authorized certificate information, in addition to the USB storage medium or mobile phone storage medium by referring to and / or modified with reference to the drawings 11a and 11b ( For example, a smart card storage medium, etc.) may be included, and the present invention is not limited thereto.

12 illustrates a financial transaction system for providing a financial transaction service according to an embodiment of the present invention.

More specifically, FIG. 12 illustrates financial transaction request information including at least one customer account information, transaction amount information, and transaction authentication information for a predetermined customer to provide the financial transaction service to a financial transaction system through a predetermined financial transaction interface. If provided, the system for providing a financial transaction for providing the financial transaction service using the customer account information, transaction amount information and transaction authentication information included in the provided financial transaction request information in the financial transaction system However, one of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 12 to infer various implementation methods for constructing a financial transaction system for providing a financial transaction service. Includes all the implementation methods inferred, and the seal shown in FIG. It shall be limited to methods.

Hereinafter, at least one means for providing a financial transaction for providing the financial transaction service using financial transaction request information provided from the customer through a predetermined financial transaction interface on the financial transaction system shown in FIG. 12 and / or A component corresponding to the functional configuration is referred to as a "financial institution server 710" for convenience, and the financial institution server 710 in the present FIG. 12 providing the non-face-to-face financial transaction service is an internet banking server or a wireless banking server. It is preferable to include all kinds of non-face-to-face banking server, including at least one home banking server.

Referring to FIG. 12 according to an embodiment of the present invention, the financial transaction system for providing a financial transaction service includes at least one client terminal including at least one wired terminal and / or a wireless terminal used by a customer. The financial transaction terminal 1245, a communication network corresponding to a wired communication network and / or a wireless communication network to which the financial transaction terminal 1245 is connected, and the financial transaction service connected to the financial transaction terminal 1245 through the communication network. It comprises a financial institution server 710 for processing a financial transaction for provision and the financial system 1240 opened the customer account.

The financial system 1240 for processing at least one financial transaction service through the customer account in connection with the financial institution server 710 may include at least one window terminal provided at a branch (and / or a branch) of the financial institution. And a predetermined financial network (for example, a party network), and provides a face-to-face financial transaction service for at least one financial transaction customer through the counter terminal.

Further, the financial system 1240 may include at least one financial terminal including a cash dispenser / automatic teller machine (CD / ATM) provided at a branch (and / or branch) of the financial institution, and / or the financial institution. At least one financial terminal provided in at least one affiliated financial institution (and / or another financial institution branch) and / or at least one financial terminal provided in a public place and a predetermined financial network (eg, CD Network), and provides a non-face-to-face financial transaction service to at least one financial transaction customer through the financial terminal.

In addition, the financial system 1240 is characterized in that associated with a predetermined Internet banking server, a network connected to a TCP / IP-based backbone network through the Internet banking server (eg, wired Internet, and / or IEEE 802.11x-based At least one client terminal (e.g., a personal computer equipped with the wired Internet access and browsing function) connected to a wireless LAN, and / or an HSDPA based wireless communication network, and / or an IEEE 802.16x based portable Internet. And / or provide a non-face-to-face financial transaction service to at least one or more financial transaction customers through a laptop, the wireless LAN / portable internet connection and browsing function, and / or the like.

In addition, the financial system 1240 is characterized in that associated with a predetermined wireless banking server, a predetermined wireless network (for example, code division multiple access (CDMA) based mobile communication network, and / or through the wireless banking server) PCS equipped with at least one wireless terminal (e.g., access and browsing function connected to the mobile communication network) connected to an HSDPA based wireless communication network, and / or an IEEE 802.16x based portable Internet, and / or a DataTAC / Mobitex-based wireless data communication network. At least one financial transaction through a Personal Communication System and / or Global System for Mobile (GSM) terminal and / or a Personal Digital Assistant (PDA) and / or a Smart Phone and / or Telematics) Provide non-face-to-face financial transaction services to customers.

In addition, the financial system 1240 is characterized in that it is associated with a predetermined IC chip-based wireless banking server, a predetermined wireless network (for example, code division multiple access (CDMA) based on the IC chip-based wireless banking server) Equipped with at least one wireless terminal (e.g., a financial IC chip) connected to a mobile communication network, and / or an HSDPA-based wireless communication network, and / or an IEEE 802.16x-based portable Internet, and / or a DataTAC / Mobitex-based wireless data communication network. The wireless terminal provides an IC chip-based non-face-to-face financial transaction service to at least one financial transaction customer.

In addition, the financial system 1240 is characterized in that associated with a predetermined telebanking server, and is connected to a predetermined wired voice call network (eg, Public Switched Telephone Network (PSTN)) through the telebanking server. At least one wired communication terminal (e.g., a telephone) and / or at least one wireless communication terminal (e.g., a PCS and / or a mobile communication network based on a code division multiple access (CDMA)). Or a non-face-to-face financial transaction service to at least one or more financial transaction customers through a GSM terminal and / or a smart phone.

In addition, the financial system 1240 is characterized in that associated with a predetermined home banking server, at least one or more home appliances connected to a predetermined home network through the home banking server (eg, digital TV connected to the home network and / Or a non-face-to-face financial transaction service to at least one financial transaction customer through a refrigerator or the like.

In addition, the financial system 1240 is characterized in that associated with a predetermined TV banking server, at least one digital TV (for example, two-way digital TV, connected to a predetermined return channel (Return Channel) through the TV banking server) The non-face-to-face financial transaction service is provided to at least one financial transaction customer through a satellite DMB terminal or a terrestrial DMB terminal.

Referring to FIG. 12, the financial system 1240 is provided to a financial institution to open at least one financial account to at least one financial transaction customer and provide at least one financial transaction service based on the financial account. A computer system, comprising: an accounting system for processing a window service such as a credit or a reception or trust or a foreign exchange occurring in at least one branch (or a window), an information system for processing a headquarters business, support for store information, and customer information management Interconnection between the financial system 1240 and at least one other financial system 1240 (and / or payment system), and / or at least one non-face-to-face financial transaction means (e.g., provided in at least one external communication network) Internet banking, wireless banking, IC chip-based wireless banking, tele banking, TV banking, etc.) System 1240, and / or an external system that provides various financial transaction interfaces through at least one or more common networks (eg, CD common network, financial common network). 1240 is an interface module corresponding to a middleware platform that provides inter-component interfacing between the components of the financial system 1240, and predetermined functions required for performing respective functions in the components of the financial system 1240. And a DBMS (DataBase Management System) including at least one database for storing and managing information (eg, ledger information, and / or customer information, and / or management information, etc.).

In addition, the financial system 1240 is intended by those skilled in the art and / or types of financial institutions (eg, commercial banks, savings banks, trust banks) provided with the financial system 1240 and the purpose of the financial system 1240. And according to the features, it is possible to further include at least one or more components, such as foreign exchange module (not shown), investment finance module (not shown), international module (not shown), in the technical field to which the present invention belongs Those skilled in the art will be familiar with the detailed technical details of the financial system 1240, and thus the detailed description thereof will be omitted for convenience, and the present invention is not limited thereto.

According to the present invention, the DBMS provided in the financial system 1240, the financial institution opens at least one financial account to at least one financial transaction customer, at least one financial transaction service based on the financial account And at least one ledger D / B for storing at least one ledger for providing, wherein the ledger D / B is at least one for processing at least one financial transaction to be provided to the financial transaction customer by the financial institution. The above ledger information (e.g., customer ledger, reception ledger, collateral ledger, etc.) and at least one ledger additional information corresponding to each ledger information (e.g., more specifically and / or supplementing the attributes / functions of each ledger) are relational (Relationship) is stored in association with the ledger information is stored in the customer account It characterized in that it comprises a corresponding predetermined ledger.

Those skilled in the art to which the present invention pertains include at least one ledger information provided in the ledger D / B and each ledger according to the type of each financial institution and the purpose and characteristic of the financial system 1240. In addition to being familiar with at least one ledger additional information corresponding to the information, each ledger information is linked and stored in a relational relation, and / or predetermined ledger information and at least one ledger additional information are linked in a relational manner. Since it will be understood that the stored information, detailed description thereof will be omitted for convenience.

According to an embodiment of the present invention, the customer connects to the financial institution server 710 through at least one client terminal of a wired terminal connected to a predetermined wired communication network and / or a wireless terminal connected to a predetermined wireless communication network, When the financial transaction request information for providing the financial transaction service is input (or selected) through at least one user interface provided by the financial institution server 710, the client terminal receives a financial transaction request information on the financial transaction system through a predetermined communication network. It is preferable to transmit to the financial institution server 710 provided in.

Here, the wired terminal connected to the wired communication network is a generic term for all terminal devices connected to a transmission control protocol / Internet protocol (TCP / IP) based communication network and includes a desktop computer and / or a laptop connected to the TCP / IP based communication network. (Notebook) or a home appliance terminal (eg, Set-Top-Box) connected to the TCP / IP based communication network, or a kiosk (KIOSK) connected to the TCP / IP based communication network, etc. It is preferable.

In addition, the wireless terminal connected to the wireless communication network is all terminal devices connected to a code division multiple access (CDMA) based mobile communication network, and / or all terminal devices connected to a high-speed downlink packet access (HSDPA) based wireless communication network, and / Or all terminal devices connected to the IEEE 802.16x based mobile Internet, and / or all terminal devices connected to Motorola's DataTAC method and / or Erricson's Mobitex type wireless data communication network, and are personal communications connected to the CDMA based mobile communication network. Terminal (Personal Communication System; PCS) and / or Global System for Mobile communications (GSM) terminals and / or Personal Digital Cellular (PDC) and / or Personal Handyphone System (PHS) terminals and / or personal information terminals (Personal Digital Assistant; PDA) and / or Smart Phone and / or Telematics, or HSDPA based wireless It comprises a wireless communication terminal connected to a trust, or the IEEE 802.16x based portable Internet connected to a portable subscriber terminal, or at least one of the DataTAC / Mobitex based wireless data communication terminal connected to a wireless data communication network and the like.

In addition, the financial institution server 710 connected to the client terminal may be any one of an internet banking server and / or a wireless banking server and / or a telebanking server and / or a TV banking server according to a characteristic of the client terminal and a communication network. And / or a separate web server for registering the information.

In addition, the communication network connecting the client terminal and the financial institution server 710 may be a CDMA based mobile communication network and / or an HSDPA based wireless communication network and / or IEEE 802.16x based on the type of wireless communication network to which the client terminal is connected. It is preferable that either the portable Internet and / or DataTAC / Mobitex-based wireless data communication network is included, and / or includes all types of wireless communication networks proposed in the future including a predetermined wireless interval.

In addition, the client terminal outputs at least one user interface provided by the financial institution server 710, and inputs and / or selects at least one or more information through the user interface to the financial institution server 710. It is preferable that a function configuration (for example, a browser program and a communication function or a predetermined communication program and communication function to communicate with the financial institution server 710, etc.) is provided.

Those skilled in the art to which the present invention pertains can easily infer the characteristics of the client terminal corresponding to at least one or more wired terminals and / or wireless terminals, and thus the detailed description thereof is omitted for convenience. .

In the financial transaction system as described above, a client terminal including at least one or more wired terminal and / or wireless terminal used by the customer, at least one wired communication network connecting the client terminal and the financial institution server 710 and And / or the wireless communication network performs a function of a financial transaction interface for the customer to register financial transaction request information for providing the financial transaction service.

According to another exemplary embodiment of the present invention, the financial transaction terminal 1245 may include an automatic teller machine (ATM) and a cash dispenser connected to a predetermined financial network (for example, a financial common network) in addition to the client terminal. A wired telephone network such as a financial automatic device (not shown) further including a cash dispenser (CD), and / or a public switched telephone network (PSTN) or a voice over IP (VoIP) network. Or further comprises a predetermined call terminal (not shown) connected to the mobile telephone network, and / or a predetermined call terminal (not shown) connected to a mobile telephone network, such as a wireless VoIP network, and / or Terminals (and / or servers) (not shown) provided in at least one or more institutions affiliated with the financial institution may be further included, whereby the present invention is not limited.

In the financial transaction system as described above, when the financial transaction terminal 1245 is the financial automatic device (not shown), the financial automatic device (not shown), the financial automatic device (not shown), and the financial institution server A financial network connecting 710 performs a function of a financial transaction interface for the customer to register financial transaction request information for providing the financial transaction service, and / or the financial transaction terminal 1245 is connected to the call terminal. (Not shown), a wired telephone network and / or a wireless telephone network connecting the call terminal (not shown) and the call terminal (not shown) and the financial institution server 710 may provide the financial transaction service to the customer. A financial transaction interface for registering financial transaction request information, and / or provided to an institution affiliated with the financial institution that is the financial transaction terminal 1245. If the terminal (and / or server) (not shown), the terminal (and / or server) (not shown) and the terminal (and / or server) (not shown) connecting the financial institution server 710 The network performs a function of a financial transaction interface for registering the financial transaction request information for the customer to provide the financial transaction service.

The financial institution server 710 provided on the financial transaction system according to the present invention is a generic term for the financial transaction system side components connected to the financial transaction terminal 1245 through a predetermined communication network, and includes at least one server ( Or an apparatus) and / or at least one or more programs recorded on a recording medium provided in a predetermined server (or apparatus), and the present invention is not limited thereto.

According to an embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wired terminal and / or a wireless terminal connectable to an internet banking server on a predetermined internet banking system, the financial institution server 710 Is a predetermined Internet banking server provided on the Internet banking system, and / or a program provided on the Internet banking server, and / or accessible to the external system of the financial system 1240 through the Internet banking system. A server (or device), a program included in the server (or device), and / or on the financial system 1240 accessible through the Internet banking server (and / or the server (or device)). It may be a server (or device) provided in the external system, and / or a program provided in the external system on the financial system 1240, The present invention is not limited by this.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wireless terminal connectable to a wireless banking server on a predetermined wireless banking system, the financial institution server 710 is the wireless banking. A predetermined server provided on the system, and / or a program provided in the wireless banking server, and / or a predetermined server accessible to the external system of the financial system 1240 through the wireless banking system ( Or a device), a program included in the server (or device), and / or external to the financial system 1240 accessible through the wireless banking server (and / or the server (or device)). Server or device and / or a program provided in the external world on the financial system 1240, whereby the present invention is not limited thereto. do.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a call terminal (not shown) connectable to a telebanking server on a predetermined telebanking system, the financial institution server 710 may be configured for the telebanking. A predetermined telebanking server (eg, an Automatic Response Service (ARS) server) provided on the system, and / or a program provided in the telebanking server, and / or the financial system 1240 through the telebanking system. A server (or device) that is accessible to the outside world, a program included in the server (or device), and / or accessible through the telebanking server (and / or the server (or device)). It may be a server (or device) provided in the external system on the financial system 1240, and / or a program provided in the external system on the financial system 1240, The invention is not limited.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a wired terminal (or two-way digital TV) that can be connected to a TV banking server on a predetermined TV banking system, the financial institution server 710 may be configured as described above. A predetermined TV banking server provided on the TV banking system, and / or a program provided on the TV banking server, and / or a predetermined access to the external system of the financial system 1240 through the TV banking system. A foreign system on the financial system 1240 that is a server (or device), a program included in the server (or device), and / or accessible through the TV banking server (and / or the server (or device)). It may be a server (or device) provided in, and / or a program provided in the external world on the financial system 1240, whereby the present invention is not limited.

The financial transaction request information transmitted from the financial transaction terminal 1245 to the financial institution server 710 for providing the financial transaction service includes at least one predetermined customer account information, transaction amount information, and transaction authentication information. Characterized in that made.

The customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account in the name of the customer, according to the intention of the skilled person corresponding to the customer information (for example, the name of the account holder, or the customer account) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name, or bank code), branch information (e.g., branch code), contact information (e.g., the person who opened and in charge of the customer account) Name, contact person code, etc.) may be further included.

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an One Tome Password (OTP) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1245 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1245, or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

According to an embodiment of the present invention, the financial institution server 710 includes an interface unit 1200 (or interface means) for connecting and managing a predetermined communication channel with the financial transaction terminal 1245 through the communication network. Characterized in that made.

According to an embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface unit 1200 At least one or more information (or a predetermined communication channel) is connected to the client terminal based on a protocol stack defined in the wired communication network and / or a wireless communication network, and using a communication protocol defined in a communication program included in the client terminal. It is desirable to provide a communication interface for transmitting and receiving data.

For example, when a browser program corresponding to a Hyper-Text Transfer Protocol (HTTP) protocol is provided in the client terminal, the interface unit 1200 connects a communication channel with the client terminal based on the TCP / IP protocol. It provides a communication interface for transmitting and receiving web pages (eg, Hyper-Text Markup Language (HTML) compatible web pages) and / or information using the HTPP protocol defined in the browser program.

Alternatively, when the client terminal is provided with a communication program (eg, an internet banking program) provided by the financial institution server 710, the interface unit 1200 communicates with the client terminal based on the TCP / IP protocol. It connects a channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a financial automation device connected to a predetermined financial network, the interface unit 1200 may perform the financial based on a protocol stack defined in the financial network. It is desirable to provide a communication interface for connecting at least one communication channel with an automation device and for transmitting and receiving at least one information (or data) using a communication protocol defined in a financial transaction related program included in the automated teller machine.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface unit 1200 may include a protocol stack defined in the wireless communication network. It is preferable to provide a communication interface for transmitting and receiving at least one information (or data) using a communication protocol defined in a communication program provided in the client terminal and connecting a predetermined communication channel with the client terminal. .

For example, when a browser program corresponding to a WAP (Wireless Application Protocol) and / or a Mobile Explorer (ME) protocol is provided in the client terminal, the interface unit 1200 communicates with the client terminal based on the CDMA protocol. And a communication interface for transmitting and receiving web pages (e.g., WML (Wireless Markup Language) compatible web pages, or HTML compatible web pages) and / or information using the WAP / ME protocol defined in the browser program. .

Alternatively, when the client terminal is provided with a communication program (eg, an IC chip-based banking program) provided by the financial institution server 710, the interface unit 1200 may be connected to the client terminal based on the CDMA protocol. It connects a communication channel and provides a communication interface for transmitting and receiving information (or data) using a communication protocol defined in the communication program.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface unit 1200 may connect the wired telephone network and / or It is preferable to connect a communication terminal (not shown) with a predetermined call path based on a voice call protocol defined in a wireless telephone network, and to provide a communication interface for transmitting and receiving the voice call-based information (or data).

For example, the interface unit 1200 provides a communication interface for transmitting and receiving information based on Dual Tone MultiFrequency (DTMF) based on the call terminal and the communication path, and / or provides a communication interface for transmitting and receiving information based on voice recognition. to provide.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a wired terminal (or two-way digital TV) connected to a TV banking system, the interface unit 1200 may define a protocol defined in the TV banking system. Connect a predetermined communication channel with the wired terminal (or bidirectional digital TV) based on the stack, and use the communication protocol defined in the communication program included in the wired terminal (or bidirectional digital TV) at least one or more information (or It is desirable to provide a communication interface for transmitting and receiving data.

Referring to FIG. 12, the financial institution server 710 connects a predetermined financial transaction terminal 1245 with a communication channel with the financial institution server 710 through the interface unit 1200, and / or the communication. When a financial transaction for providing the financial transaction service is requested through a channel, the financial transaction terminal 1245 interoperates with the interface unit 1200 to input (or select) predetermined financial transaction request information to be transmitted. And an interface providing unit 1205 (or interface providing means) for generating (or extracting) a user interface and providing the same to the financial transaction terminal 1245. When a predetermined terminal-side banking program including a user interface is provided, the interface providing unit 1205 may be omitted.

The interface provider 1205 is provided in the financial transaction terminal 1245 after a predetermined financial transaction terminal 1245 connects a communication channel with the financial institution server 710 through the interface unit 1200. Corresponding to the functional configuration to generate (or select) the financial transaction request information to generate a predetermined user interface that can be transmitted to the financial institution server 710 via the communication network, and / or a predetermined database (not shown) And extract the generated (or extracted) user interface in cooperation with the interface unit 1200 to the financial transaction terminal 1245 through the communication network.

According to an embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wired terminal and / or a wireless terminal connected to a predetermined wired communication network and / or a wireless communication network, the interface providing unit 1205 Generates (or extracts) a predetermined user interface that can be provided to a browser program and / or a communication program provided in the client terminal, and generates the generated (or extracted) user interface through the interface unit 1200. It is preferable to provide.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a financial automatic device connected to a predetermined financial network, the interface providing unit 1205 may be a financial transaction related program provided in the financial automatic device. It is preferable to generate (or extract) a predetermined user interface that can be provided, and provide the generated (or extracted) user interface to the ATM using the interface unit 1200.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a client terminal including a wireless terminal connected to a predetermined wireless communication network, the interface providing unit 1205 is a browser provided in the client terminal. It is preferable to generate (or extract) a predetermined user interface that can be provided by a program and / or a communication program, and to provide the client terminal with the generated (or extracted) user interface through the interface unit 1200.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a call terminal (not shown) connected to a wired telephone network and / or a wireless telephone network, the interface providing unit 1205 may include the call terminal (not shown). Generates (or extracts) a predetermined user interface that can be provided, and the user terminal (eg, ARS based user interface) generated (or extracted) through the interface unit 1200 to the call terminal (not shown). Is preferably provided.

According to another exemplary embodiment of the present invention, when the financial transaction terminal 1245 is a wired terminal (or two-way digital TV) connected to a TV banking system, the interface providing unit 1205 may include the wired terminal (or two-way digital). It is preferable to generate (or extract) a predetermined user interface that can be provided to a TV) and to provide the generated (or extracted) user interface to the wired terminal (or interactive digital TV) through the interface unit 1200. Do.

In accordance with another embodiment of the present invention having at least one user interface for inputting (or selecting) the financial transaction request information to the financial transaction terminal (1245) to the financial institution server 710 via the communication network When a predetermined terminal-side banking program is provided, the interface providing unit 1205 for providing the user interface to the financial transaction terminal 1245 may be omitted, and the present invention is not limited thereto.

According to an embodiment of the present invention, the user interface may input (or select) financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information to transmit to the financial institution server 710. It is preferable to include the interface function.

Here, when providing a user interface for inputting (or selecting) the financial transaction request information, when using an authentication certificate as a transaction authentication means for a financial transaction request input (or selecting) through the user interface, the official possessed by the customer It is preferable to check the validity period (e.g., the number of available times / day of availability / certificate expiration date, etc.) for the certificate, and to process the output to further include the confirmed validity period.

Referring to FIG. 12, the financial institution server 710 inputs financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information through the user interface at the financial transaction terminal 1245. (Or the selection), the information receiving unit 1210 (or the receiving unit) receiving the financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information in association with the interface unit 1200 (or Information receiving means), a validity checking unit 1230 (or validating means) for checking the validity of the customer account information, the transaction amount information, and the transaction authentication information included in the received financial transaction request information; In connection with the system 1240, the financial transaction for providing the financial transaction service is processed based on the financial transaction request information that has been validated. In connection with the financial transaction processing unit 1235 (or financial transaction processing means) and the financial transaction processing unit 1235 to generate predetermined financial transaction result information for the financial transaction for providing the financial transaction service, and the interface unit ( And an information transmission unit 1215 (or information transmission means) for transmitting the financial transaction result information to the financial transaction terminal 1245 in connection with 1200.

In addition, the financial institution server 710 is an information verification unit 1220 (or information verification means) for confirming whether or not the customer is using the official certificate as the transaction authentication information, and as a result of the verification the customer is the transaction authentication information If it is confirmed that the public certificate is used, the certificate processing unit 1225 (or certificate processing means) for checking whether the certification of the public certificate is characterized in that it is made.

The financial transaction terminal 1245 inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface, and through the communication network, the financial institution server. It characterized in that the transmission to (710).

The information receiving unit 1210 inputs (or selects) the financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information through the user interface at the financial transaction terminal 1245, and thereby the communication network. When transmitting through, it is characterized in that for receiving the financial transaction request information in conjunction with the interface unit 1200, and provides the received financial transaction request information to the validity verification unit 1230.

The customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account in the name of the customer, according to the intention of the skilled person corresponding to the customer information (for example, the name of the account holder, or the customer account) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name, or bank code), branch information (e.g., branch code), contact information (e.g., the person who opened and in charge of the customer account) Name, contact person code, etc.) may be further included.

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security The card further includes at least one or more security code information (eg, one or more security codes, or a combination of two or more security codes) included in the card, and / or is generated through an One Tome Password (OTP) generator provided to the customer. It is preferred to further comprise an OTP code.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1245 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1245, or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

In addition, in the case of performing transaction authentication through a public certificate using a plurality of passwords according to an embodiment of the present invention, a situation of inputting a password set for use of the public certificate, and the password information input by the customer further includes It is preferable to make.

The information confirming unit 1220 reads the transaction authentication information and first checks whether the transaction authentication request is made using a public certificate, and if it is confirmed as a transaction authentication request using a public certificate, the public certificate information included in the transaction authentication information. It provides to the certificate processing unit 1225.

The certificate processing unit 1225 is characterized by checking whether or not the validity of the authorized certificate used as the transaction authentication information through the certificate server.

According to an embodiment of the present invention, the validity verification of the public certificate information, it is preferable to request the confirmation of the validity of the public certificate by transmitting the verified public certificate information to the certificate server.

According to another exemplary embodiment of the present invention, the validity verification of the public certificate information may be performed by retrieving the certificate D / B from the certificate D / B that matches the verified certificate information. It is preferable to check the stored password information and / or validity period and / or activation / deactivation conditions in connection with the authorized certificate information request to confirm the validity of the authorized certificate.

In the case where the official certificate is used as the transaction authentication request, the validity of the official certificate is confirmed, or when the public certificate is not used as the transaction authentication request, the validity confirming unit 1230 is the financial transaction. The financial transaction request information received from the terminal 1245 is characterized by checking whether the validity for providing a financial transaction service.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for a financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1240. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity check of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1240 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is an account provided in the ledger D / B on the financial system 1240 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is desirable to verify the validity of the financial transaction request information.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1240 in response to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (for example, an encryption key provided in the financial transaction terminal 1245, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and before encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, when a public certificate is used to use the financial transaction service, the customer inputs a password for the public certificate to use the financial transaction service. First, it checks the situation (that is, the situation information contained in the transaction authentication information), and whether the password entered according to the situation is a valid password, and then the electronic signature of the customer through a predetermined private key in the financial transaction request information Attachment is possible.

That is, when using the financial transaction service, it is preferable that the customer first inputs and authenticates the password for the public certificate, and when the authentication is completed, the electronic signature using the private key provided in the public certificate is processed. The process of authenticating by inputting a password may be performed at the terminal, or may be performed at the financial institution server 710 (that is, the server of the requesting authentication).

When the validity of the financial transaction request information is confirmed, the financial transaction processing unit 1235 is linked to the financial system 1240 provided with an account ledger corresponding to the customer account, the customer account information included in the financial transaction request information. And processing the financial transaction for providing the financial transaction service based on the transaction amount information and the transaction authentication information.

According to the method of the present invention, the financial transaction processing unit 1235 is linked to the financial system 1240, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

When the financial transaction for providing the financial transaction service is processed by the financial transaction processor 1235, the information transmission unit 1215 is connected to the financial transaction processor 1235 for the financial transaction for the financial transaction service. Generate a financial transaction processing history including any one of a financial transaction approval history or a financial transaction error history, and connect the financial transaction result information including the financial transaction processing history to the interface unit 1200 through the communication network. It is characterized in that the transmission to the financial transaction terminal (1245).

Here, the financial transaction processing history is characterized in that it comprises the customer account information and the transaction amount information, characterized in that it further comprises an authorization code (or error code) for the financial transaction.

The financial transaction result information may include a protocol structure for transmitting the generated financial transaction processing details to the financial transaction terminal 1245 through the communication network. The financial transaction result information may include the financial transaction request. Similar to the information is encrypted, or is attached to the electronic signature of the financial institution is preferably transmitted to the financial transaction terminal (1245).

13 is a diagram illustrating a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to an embodiment of the present invention.

In more detail, FIG. 13 illustrates a case where a financial institution server 710 on the financial transaction system illustrated in FIG. 12 includes a non-face-to-face banking server function to which a client terminal can be connected through a predetermined communication network. After connecting to the financial institution server 710 to connect the communication channel for the financial transaction, and includes the customer account information, transaction amount information and transaction authentication information to the financial institution server 710 via the communication channel When the financial transaction request information is transmitted, the financial institution server 710 uses the client account information, transaction amount information, and transaction authentication information included in the received financial transaction request information to provide the financial transaction service. As an embodiment for providing the present invention, those skilled in the art to which the present invention pertains, see FIG. And / or may be modified to infer various implementation methods for the process of processing a financial transaction for providing a financial transaction service in the non-face-to-face manner, but the present invention includes all the implementation methods inferred, FIG. 13 It is not limited to the implementation method shown by.

Hereinafter, in FIG. 13, the client terminal shown in FIG. 12 is referred to as "terminal" for convenience, and the financial institution server 710 shown in FIG. 12 is called "server" for convenience.

Referring to FIG. 13, a terminal shown in FIG. 12 is a predetermined communication network (for example, when the terminal is a wired terminal, a TCP / IP based wired communication network, when the terminal is a wireless terminal, a CDMA based mobile communication network, and / Or request a financial transaction for providing the financial transaction service by accessing the server through an HSDPA-based wireless communication network, and / or an IEEE 802.16x-based portable Internet, etc. (1300). Create (or extract) a web page including a user interface for inputting (or selecting) financial transaction request information including at least one of customer account information, transaction amount information, and transaction authentication information for provision, through the communication channel. The transmission is output to the terminal (1305).

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page to the terminal is preferably performed at least once according to the procedure of providing the user interface and transmitting and receiving the financial transaction request information, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1310).

If the terminal receives (or selects) financial transaction request information including the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1315), the terminal receives the input through the communication channel ( Or) the selected customer account information, transaction amount information, and transaction authentication information to the server (1320), and the user account information, transaction amount information, and transaction authentication input (or selected) through the communication channel at the terminal. The transmitting of the information to the server may include electronically signing and / or encrypting the financial transaction request information input (or selected) through the user interface through a security module (not shown) provided in the terminal and transmitting the information to the server. It is preferable that it further comprises.

Here, the customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account of the customer name, customer information (for example, the name of the account holder, or the customer account according to the intention of the skilled person) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name or bank code), branch information (e.g. branch code), contact information (e.g., opening and in charge of the customer account) A contact person name, a contact person code, etc.).

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an One Tome Password (OTP) generator provided to the customer.

In addition, the transaction authentication information is characterized in that the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal (1245) (or Based on the authorized certificate information provided in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the financial transaction terminal 1245, or based on at least one encryption key included in the authorized certificate Preferably, the method further includes encrypting the financial transaction request information or attaching the electronic signature of the customer to the financial transaction request information.

Thereafter, the server checks the validity of the financial transaction request information (1325), and checking the validity of the financial transaction request information includes a security module (not shown) provided with the financial transaction request information in the terminal. When the digital signature and / or encrypted through the, it is preferable that the financial transaction request information, and / or decryption further comprises the decryption of the financial transaction request information.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for a financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1240. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity check of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1240 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is an account provided in the ledger D / B on the financial system 1240 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1240 in response to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (for example, an encryption key provided in the financial transaction terminal 1245, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not the decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, when a public certificate is used to use the financial transaction service, the customer inputs a password for the public certificate to use the financial transaction service. First of all, the situation (that is, the situation information included in the transaction authentication information), and whether the password entered according to the situation is a valid password first, and then the electronic signature of the customer through a predetermined private key in the financial transaction request information. Attachment is possible.

That is, when using the financial transaction service, it is preferable that the customer first inputs and authenticates the password for the public certificate, and when the authentication is completed, the electronic signature using the private key provided in the public certificate is processed. The process of authenticating by inputting a password may be performed at the terminal, or may be performed at the financial institution server 710 (that is, the server of the requesting authentication).

If the validity of the financial transaction request information is not authenticated (1330), the server generates a financial transaction processing history including predetermined financial transaction error information corresponding to the validity error information (1335), and the communication channel. The financial transaction result information including the financial transaction processing history is transmitted to the terminal (1355), and the terminal outputs the financial transaction result including the financial transaction processing history (1360).

On the other hand, if the validity of the financial transaction request information is authenticated (1330), the server is linked to the financial system 1240 equipped with an account ledger corresponding to the customer account and the customer account information included in the financial transaction request information; The financial transaction for providing the financial transaction service is processed based on the transaction amount information and the transaction authentication information (1340).

According to the method of the present invention, the financial transaction processing unit 1235 is linked to the financial system 1240, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

If a financial transaction corresponding to the financial transaction request information is processed (1345), the server generates a financial transaction processing history including any one of predetermined financial transaction approval information or financial transaction error information according to the financial transaction processing result. In operation 1350, the financial transaction result information including the financial transaction processing history is transmitted to the terminal through the communication channel (1355). In response, the terminal transmits the financial transaction result including the financial transaction processing history. The screen is output (1360).

14A and 14B illustrate a process of processing a financial transaction for providing a financial transaction service in a non-face-to-face manner to provide a financial transaction service according to another exemplary embodiment of the present invention.

In more detail, FIGS. 14A and 14B illustrate a case in which the financial transaction system illustrated in FIG. 12 is realized through an Internet banking system among non-face-to-face channel-based banking systems. After accessing the Internet banking server and performing a predetermined customer authentication procedure through the Internet, etc., the client terminal transmits predetermined financial transaction request information for providing a financial transaction service to the Internet banking server. When the financial transaction request information including transaction amount information and transaction authentication information is transmitted, the financial institution server 710 uses customer account information, transaction amount information, and transaction authentication information included in the received financial transaction request information. To provide a financial transaction for providing the financial transaction service, Those skilled in the art to which the present invention pertains, refer to and / or modify the drawings 14a and 14b to process a financial transaction for providing a financial transaction service in a non-face-to-face manner other than the Internet banking. Various implementation methods may be inferred, but the present invention includes all implementation methods inferred from the above, and is not limited to the implementation method shown in FIG.

That is, when the Internet banking server is connected to the Internet banking server through a predetermined browser program (eg, Microsoft Internet Explorer, and / or Netscape's Netscape Navigator, etc.) provided in the client terminal in FIGS. Although the implementation method for connecting the Internet banking-based financial transaction channel for registering the financial transaction request information between the client terminal and the Internet banking server based on the present invention, those skilled in the art to which the present invention pertains, Refer to and / or modify an Internet banking-based financial transaction channel connection method using the browser program shown in FIGS. 14A and 14B and between the client terminal and the Internet banking server based on a predetermined Internet banking program mounted on the client terminal. In financial transactions Although it may be possible to infer an implementation method of connecting an internet banking-based financial transaction channel for request information registration, the present invention includes the provided internet banking-based financial transaction based on the internet banking program, whereby the present invention It is not limited.

Also, those skilled in the art may refer to and / or modify the Internet banking-based financial transaction channel connection method shown in FIGS. 14A and 14B, in addition to the Internet banking system, and a telebanking system. And / or a financial transaction channel corresponding to each non-face-to-face channel for financial transaction processing for providing the financial transaction service in all kinds of other non-face-to-face banking systems including at least one of a wireless banking system and / or a TV banking system. It would be possible to infer an implementation method of linking the present invention, but the present invention provides all kinds of non-face-to-face, including the telebanking system and / or wireless banking system and / or TV banking system and / or the non-face-to-face channel banking system proposed in the future. Channel-based financial transactions, and the technical configuration of the present invention is illustrated in FIGS. 14A and 14B. Limited to the case of Net Banking is never.

In the following figures 14a and 14b, the client terminal is referred to as " terminal " for convenience, and the Internet banking server corresponding to the financial institution server 710 is referred to as " server " for convenience.

14A and 14B, when the terminal executes a predetermined browser program and accesses the server through the TCP / IP based network (1400a), the server communicates between the terminal and the server through the browser. (1405a), wherein the communication channel is a web page generated (or extracted) by a request of a browser program provided in the terminal and transmitted to the terminal, and the browser provided in the terminal. It means that a predetermined communication session is allocated so that a program can receive at least one or more information (or data) input (or selected) based on a predetermined user interface included in the web page.

According to another embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the server is based on a predetermined communication protocol defined in the internet banking program and at least one or more information (or Communication channel for transmitting / receiving data) can be allocated.

Thereafter, the server is equipped with a predetermined security module for internet banking on the terminal in a predetermined web page (eg, an internet banking main page) generated (or extracted) for providing to the terminal, and / or the By providing a predetermined script for checking whether to update the security module to the terminal, whether the terminal is equipped with a predetermined security module for Internet banking, and / or update the security module Check (1410a).

According to another exemplary embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the server requests the version information and / or the last update date information from the internet banking program, thereby providing the Internet banking program (and / or Or a security module associated with an internet banking program).

If a predetermined security module is to be mounted and / or updated in the terminal (1415a), the server transmits the latest version of the security module for internet banking to the terminal according to a remote program installation procedure defined in the browser program. And mount and / or update (1420a).

If the terminal does not need to install and / or update the latest version of the internet banking security module (1425a), or if the terminal does not need to install and / or update the internet banking security module (1415a), the server may By activating the security module for Internet banking mounted on the terminal, to connect the security channel for Internet banking (or switch the communication channel between the terminal and the server to a secure channel) between the terminal and the server (1430a), where the security for Internet banking A channel is attached to a predetermined digital signature and / or at least one encryption method (or data) of information (or data) required for security among information (or data) included in a web page to be provided from the server to the terminal. And / or provided by encrypting with an encryption algorithm, the terminal to verify the digital signature and / or the encryption scheme (and / or encryption) Means a communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to the algorithm), and the information to be provided to the server for registering financial transaction request information in the terminal. (Or data) by attaching a predetermined digital signature and / or by encrypting and transmitting at least one or more encryption methods (and / or encryption algorithms), the server verifies the electronic signature and / or the encryption method (and A communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to an encryption algorithm).

According to another exemplary embodiment of the present invention, when the terminal is provided with a predetermined internet banking program, the Internet banking-based secure channel may be provided by the server to the terminal according to a communication protocol defined in the internet banking program (or When the electronic signature is attached to the data) and / or encrypted and provided by at least one or more encryption methods (and / or encryption algorithms), the terminal confirms the electronic signature and / or the encryption method (and / or Means a communication channel for decrypting the information (or data) by a predetermined decryption method (and / or decryption algorithm) corresponding to an encryption algorithm), and is provided to the server for registering financial transaction request information in the terminal. Attach certain electronic signatures to information (or data) and / or at least one or more When the encryption is transmitted using an encryption method (and / or an encryption algorithm), the server verifies the digital signature and / or a predetermined decryption method (and / or an encryption algorithm) corresponding to the encryption method (and / or encryption algorithm). Decoding algorithm) means a communication channel for decoding the information (or data).

According to the present invention, the security module is to perform an electronic signature attachment, and / or encryption, and / or protection function for the information (or data) using the authorized certificate of the customer mounted in the terminal It features.

When the secure channel for internet banking is connected, the server requests the terminal to perform an internet banking customer authentication procedure through the browser program (1435a).

According to an exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (eg, ID / PW, customer number, etc., registered by the customer during the internet banking application process) through the terminal. ) Is input (or generated) and transmitted to the server, wherein the server comprises authenticating a customer connected through the terminal as an internet banking customer based on the customer authentication data, wherein the customer authentication data It is preferable that the digital signature and / or encrypted is transmitted through the secure channel.

According to another exemplary embodiment of the present invention, the Internet banking customer authentication procedure may include predetermined Internet banking-based customer authentication data (for example, an ID / PW or customer number registered by the customer during the internet banking application process) through the terminal. And the like) are input (or generated) and transmitted to the authentication server, the authentication server authenticates the customer connected through the terminal as the Internet banking customer based on the customer authentication data, and provides the result to the server. In this case, it is preferable that the customer authentication data includes public certificate-based authentication data, and the authentication server is a server for authenticating the public certificate-based authentication data.

Thereafter, the terminal inputs (or generates) predetermined customer authentication data according to the request, transmits the electronic signature and / or encryption to the server (and / or authentication server) through the security module, and performs internet banking customer authentication. Request (1440a), the server (and / or authentication server) authenticates a customer connected through the terminal as an Internet banking customer for non-face-to-face financial transactions based on the customer authentication data received from the terminal. (1445a).

If the Internet banking customer authentication fails (1450a), the server blocks the Internet banking secure channel for the terminal (1455a), thereby preventing the Internet banking-based financial transaction through the terminal.

On the other hand, if the Internet banking customer authentication succeeds (1450a), the server converts the Internet banking security channel into an internet banking-based financial transaction channel in connection with the security module provided in the terminal (1460a), where Internet banking Based on the financial transaction channel is to transmit the financial transaction request information including at least one of the customer account information, transaction amount information and transaction authentication information from the terminal to the server to process the Internet banking-based financial transaction from the server. It means the communication channel.

Subsequently, the terminal requests an internet banking-based financial transaction for providing the financial transaction service to the server through the financial transaction channel (1400b), and correspondingly, the server requests the client account information for providing the financial transaction service. Generate (or extract) a web page including a user interface for inputting (or selecting) financial transaction request information including at least one transaction amount information and transaction authentication information, and transmitting the same to the terminal through the financial transaction channel. (1405b).

According to an embodiment of the present invention, the process of transmitting and / or outputting the web page to the terminal is preferably performed at least once according to the procedure of providing the user interface and transmitting and receiving the financial transaction request information, thereby limiting the present invention. Not.

Thereafter, the terminal inputs (or selects) financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the user interface (1410b).

If the financial transaction request information including the customer account information, the transaction amount information, and the transaction authentication information is input (or selected) through the user interface (1415b), the terminal receives the input through the financial transaction channel. And transmits the selected customer account information, the transaction amount information, and the transaction authentication information to the server (1420b), and the customer account information and the transaction amount information inputted (or selected) through the financial transaction channel in the terminal. Transmitting the transaction authentication information to the server, by digitally signing and / or encrypting the financial transaction request information input (or selected) through the user interface through a security module (not shown) provided in the terminal to the server. It is preferable to further comprise transmitting.

Here, the customer account information is characterized by including the account number (or financial account alias, etc.) for the financial account of the customer name, customer information (for example, the name of the account holder, or the customer account according to the intention of the skilled person) CIF (Customer Information File) number of the customer, financial institution information (e.g. bank name or bank code), branch information (e.g. branch code), contact information (e.g., opening and in charge of the customer account) A contact person name, a contact person code, etc.).

The transaction value information is characterized in that it comprises a financial transaction amount withdrawn from the customer account to provide the financial transaction service, the transaction amount is characterized in that it does not exceed the balance deposited in the customer account .

The transaction authentication information is information for securing the validity of at least one or more of confidentiality, authentication, integrity, and nonrepudiation of the financial transaction for providing the financial transaction service. And at least one password corresponding to a customer account, or a password corresponding to the financial transaction.

In addition, the financial transaction system for providing the financial transaction service is provided through a non-face-to-face channel, characterized in that the financial transaction system shown in Figure 12, the transaction authentication information is provided to the customer in the process of opening the customer account security Preferably, the card further includes at least one security code information provided on the card, and / or further includes an OTP code generated through an One Tome Password (OTP) generator provided to the customer.

In addition, in the characteristic of the financial transaction system shown in FIG. 12, wherein the financial transaction for providing the financial transaction service is performed through a non-face-to-face channel, the transaction authentication information is the financial transaction terminal 1245 (or the financial). The financial transaction based on the authentication certificate information included in the IC card of the customer linked through an integrated circuit (IC) card reader provided in the transaction terminal 1245, or at least one encryption key included in the authentication certificate. Preferably, the method further includes encrypting the request information or attaching the electronic signature of the customer to the financial transaction request information.

Thereafter, the server receives and reads financial transaction request information including at least one of the customer account information, the transaction amount information, and the transaction authentication information through the communication channel to confirm the validity of the financial transaction request information (1425b). The validity of the financial transaction request information may include decrypting the financial transaction request information when the financial transaction request information is electronically signed and / or encrypted through a security module (not shown) provided in the terminal. Or, and / or decrypting the financial transaction request information.

According to an embodiment of the present invention, the validity check of the financial transaction request information includes an account ledger for a financial account corresponding to the customer account information included in the financial transaction request information in the ledger D / B on the financial system 1240. (Or check whether the customer ledger corresponding to the customer account) is provided, and if the account ledger (or customer ledger corresponding to the customer account) is provided, It is desirable that the validity be authenticated.

In addition, the validity check of the financial transaction request information is the amount deposited in the customer account (for example, the account ledger provided in the ledger D / B on the financial system 1240 corresponding to the customer account) the financial transaction request It is preferable to include whether the amount is greater than the transaction amount included in the information, and when the customer account balance is greater than the transaction amount, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, the validity check of the financial transaction request information is an account provided in the ledger D / B on the financial system 1240 corresponding to the various passwords and the customer account corresponding to the transaction authentication information included in the financial transaction request information And comparing the various passwords (or linked) on the ledger, and confirming whether the various passwords corresponding to the transaction authentication information match. If the various passwords corresponding to the transaction authentication information match, It is preferable that the validity of the financial transaction request information is authenticated.

In addition, in the characteristic of the non-face-to-face financial transaction system shown in FIG. 12, when the transaction authentication information further includes predetermined security code information, the validity check on the financial transaction request information is performed by the security code information. Corresponding to the transaction authentication information in comparison with the security code information corresponding to the security card included on (or associated with) the account ledger provided in the ledger D / B on the financial system 1240 in response to the customer account. It is preferable to include whether the security code information is matched, and if the security code information corresponding to the transaction authentication information is matched, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, when the transaction authentication information further includes a predetermined OTP code, the validity of the financial transaction request information is determined by the OTP code and the customer. Generates a predetermined OTP authentication code based on the OTP generation information matched with the OTP generator, and compares the OTP code and the OTP authentication code, the OTP code corresponding to the transaction authentication information is the OTP authentication code It is preferable to include whether the match is made, and when the OTP code corresponding to the transaction authentication information is matched with the OTP authentication code, it is preferable that the validity of the financial transaction request information is authenticated.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the financial transaction request information is provided with a predetermined encryption key (for example, an encryption key provided in the financial transaction terminal 1245, or an authorization issued to a customer). When encrypted with a certificate included encryption key), the validation of the financial transaction request information decrypts the encrypted financial transaction request information (or at least one financial transaction information included in the financial transaction request information), It is preferable to include whether or not the decryption is normally performed, and if the decryption is normally performed, the validity of the financial transaction request information is preferably authenticated, and encrypting through an encryption key included in the authorized certificate. It is desirable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, the electronic signature of the customer through a predetermined private key (eg, an encryption key included in an authorized certificate issued to the customer) is included in the financial transaction request information. In this case, the validity check of the financial transaction request information confirms the electronic signature of the customer with respect to the financial transaction request information (or at least one financial transaction information included in the financial transaction request information) to which the electronic signature is attached. Preferably, the digital signature of the customer is verified, and when the digital signature of the customer is confirmed, the validity of the financial transaction request information is preferably authenticated, and before attaching the digital signature through an encryption key included in the public certificate. It is preferable to first check the validity of the public certificate.

In addition, due to the characteristics of the non-face-to-face financial transaction system shown in FIG. 12, when a public certificate is used to use the financial transaction service, the customer inputs a password for the public certificate to use the financial transaction service. First of all, the situation (that is, the situation information included in the transaction authentication information), and whether the password entered according to the situation is a valid password first, and then the electronic signature of the customer through a predetermined private key in the financial transaction request information. Attachment is possible.

That is, when using the financial transaction service, it is preferable that the customer first inputs and authenticates the password for the public certificate, and when the authentication is completed, the electronic signature using the private key provided in the public certificate is processed. The process of authenticating by inputting a password may be performed at the terminal, or may be performed at the financial institution server 710 (that is, the server of the requesting authentication).

If the validity of the financial transaction request information is not authenticated (1430b), the server generates a financial transaction processing history including predetermined financial transaction error information corresponding to the validity error information (1435b), and the financial transaction. The financial transaction result information including the financial transaction processing history is transmitted to the terminal through a channel (1455b). In response, the terminal outputs the financial transaction result including the financial transaction processing history (1460b).

On the other hand, if the validity of the financial transaction request information is authenticated (1430b), the server is linked with the financial system 1240 having an account ledger corresponding to the customer account and the customer account information included in the financial transaction request information; The financial transaction for providing the financial transaction service is processed based on the transaction amount information and the transaction authentication information (1440b).

According to the method of the present invention, the financial transaction processing unit 1235 is linked to the financial system 1240, the amount corresponding to the transaction value information from the account ledger corresponding to the customer account information included in the financial transaction request information It is preferable to process the withdrawal and to process the financial transaction (eg, bank transfer, payment, etc.) desired by the customer.

If a financial transaction corresponding to the financial transaction request information is processed (1445b), the server generates a financial transaction processing history including any one of predetermined financial transaction approval information or financial transaction error information according to the financial transaction processing result. (1450b), the financial transaction result information including the financial transaction processing history is transmitted to the terminal through the financial transaction channel (1455b), and the terminal corresponding to the financial transaction result including the financial transaction processing history; Screen is output (1460b).

The present invention is to pre-register a plurality of situations using a public certificate and a password corresponding to each situation in order to use the public certificate to customers using financial transaction services through public certificates, and the password corresponding to the pre-registered situation is Only if it is possible to use the financial transaction services through the public certificate, there is an advantage to prevent hacking damage.

Claims (4)

In the method of providing a financial transaction service through a public certificate issued to a customer, Connecting a plurality of situations using a request for issuing a new public certificate or a previously issued public certificate and a password corresponding to the situation and storing them in a storage medium; When the customer requests the use of the financial transaction service through the authorized certificate, the situation in which the authorized certificate is used in connection with the storage medium and the password input by the customer are received, and whether the password corresponding to the received situation is appropriate. Confirming whether or not; If it is determined that the password corresponding to the situation is appropriate, processing to provide a financial transaction service through the authorized certificate; characterized in that it comprises a, The situation is a plurality of authorized certificate password management method characterized in that it comprises at least one or more dates, regions using the public certificate. The method of claim 1, When issuing a public certificate set with the plurality of passwords, the payment amount for activating the public certificate is a plurality of authorized certificate password operating method, characterized in that the payment amount including a premium. A computer-readable recording medium having recorded thereon a program for executing the method of claim 1. In the system for providing financial transaction services through a certificate issued to the customer, A storage medium for storing a plurality of situations using a request for issuing a new public certificate or a previously issued public certificate and a password corresponding to the situation; When the customer requests the use of the financial transaction service through the authorized certificate, the situation in which the authorized certificate is used in connection with the storage medium and the password input by the customer are received, and whether the password corresponding to the received situation is appropriate. Means for confirming whether or not; And a means for processing a financial transaction service through the authorized certificate if it is determined that the password corresponding to the situation is appropriate. The situation is a plurality of authorized certificate password operating system, characterized in that it comprises at least one or more dates, regions using the public certificate.

Images