KR20120123230A - Finance system and financial transaction data transmission method and data decryption system and method for securely delivering of financial transaction information - Google Patents

Abstract

PURPOSE: A financial system for safely transmitting financial transaction information, a financial transaction data transmitting method, a data decoding system, and a method thereof are provided to safely transmit data related to a financial transaction by using a public key, a private key, shared encoding/authenticating symmetry keys, and a multidimensional code of a user. CONSTITUTION: An encoding unit(212) encodes data and generates encoded data by using an encoding symmetry key which is previously shared with a portable device. The encoding unit generates a data authentication code about the data by using an authenticating symmetry key which is previously shared with the portable device. The encoding unit generates an encoded data authentication code. A multidimensional code generating unit(213) generates a multidimensional code including the encoded data, the data authentication code or the encoded data authentication code. A multidimensional code providing unit(214) provides the generated multidimensional code to a user. [Reference numerals] (211) Public key receiving unit; (212) Encoding unit; (213) Multidimensional code generating unit; (214) Multidimensional code providing unit; (221) Multidimensional code recognizing unit; (222) Data extracting unit; (223) Decoding unit

Description

FINANCE SYSTEM AND FINANCIAL TRANSACTION DATA TRANSMISSION METHOD AND DATA DECRYPTION SYSTEM AND METHOD FOR SECURELY DELIVERING OF FINANCIAL TRANSACTION INFORMATION}

Embodiments of the present invention relate to a financial system, a financial transaction data transmission method, and a data decryption system and method for securely transmitting financial transaction information.

Recently, a subscriber who wants to provide financial transaction service uses a personal computer connected to a financial server through the Internet, a mobile communication terminal connected through a mobile communication network, and a general telephone connected through a public telephone network. For example, it is possible to more conveniently select and use a financial transaction service, such as a credit card payment or a direct debit service such as utility bill payment, online. As such, various financial transactions are possible without directly visiting a financial institution, but a method for transmitting a financial transaction information to a user more securely is required.

In the present specification, a system and method for more securely transmitting financial transaction information are provided.

A system and method are provided for securely transmitting data related to a financial transaction to a mobile device using a multidimensional code such as a QR code.

Provided are a system and method for securely transmitting data related to a financial transaction using a public key and a secret key of a user or a symmetric key for encryption / authentication pre-shared between a user's mobile device and a financial server, and a multidimensional code.

A financial system for providing data related to a financial transaction to a user, comprising: a public key receiving unit for receiving and maintaining a user's public key, an encryption unit for encrypting data with the received user's public key, and a multidimensional code including the encrypted data A multi-dimensional code generator for generating and a multi-dimensional code providing unit for providing the generated multi-dimensional code to the user, the generated multi-dimensional code is provided to the user's terminal is displayed on the display, the multi-dimensional code is included in the user's mobile device A financial system is provided in which a data inputted through a camera and recognized, an encrypted data is extracted from a multidimensional code, and the encrypted data is decrypted by extracting the data through a user's secret key.

According to one side, if the size of the data to be provided to the user is more than the predetermined size, the encryption unit can encrypt the data with any symmetric key, the symmetric key with the user's public key, the multi-dimensional code generation unit is encrypted with the symmetric key A multidimensional code can be generated that includes data and a symmetric key encrypted with the user's public key. In this case, the multidimensional code may be input and recognized through a camera included in the user's mobile device, and the data encrypted with the symmetric key and the symmetric key encrypted with the user's public key may be extracted from the multidimensional code, and the user's secret key may be extracted. The symmetric key encrypted with the user's public key is decrypted to extract the symmetric key, and the data encrypted with the symmetric key can be decrypted through the extracted symmetric key to extract the data.

In a financial system for providing data related to a financial transaction to a user, a key generator for generating a public key and a private key, a public key provider for providing a generated public key to a user, and signing and signing data with the generated secret key A data signing unit for generating the generated data, a multi-dimensional code generating unit for generating the multi-dimensional code including the signed data, and a multi-dimensional code providing unit for providing the generated multi-dimensional code to the user, and the generated multi-dimensional code is provided to the user's terminal. Multi-dimensional code is input and recognized through a camera included in the user's mobile device, the signed data is extracted from the multi-dimensional code, and the signed data is signed and verified using the public key provided to the user. A financial system is provided.

In a financial system for providing data related to a financial transaction to a user, a key generation unit for generating a public key and a private key, a public key provider for providing the generated public key to a user, and a public key for receiving the user's public key A receiving unit, a data signing unit for generating signed data by signing data with the generated secret key, an encryption unit for encrypting data signed with the public key of the user, a multidimensional code generating unit for generating a multidimensional code including the encrypted data, and a generated It includes a multi-dimensional code providing unit for providing a multi-dimensional code to the user, the generated multi-dimensional code is provided to the user's terminal is displayed on the display, the multi-dimensional code is input and recognized through a camera included in the user's mobile device, multi-dimensional The encrypted data is extracted from the code and encrypted with the user's private key. A financial system is provided, in which data is decrypted to extract signed data, and signed data is verified through a public key provided to a user.

A data decryption system for decrypting data related to financial transactions, comprising: a multidimensional code recognition unit for recognizing a multidimensional code from an image input through a camera, a data extraction unit for extracting data encrypted with a user's public key from a multidimensional code, A decryption unit for extracting data by decrypting the data encrypted with the public key with the user's private key, and in a financial server providing data related to the financial transaction, the data is encrypted with the user's public key, and the multi-dimensional code including the encrypted data is A data decryption system is provided.

A data decryption system for decrypting data related to a financial transaction, comprising: a public key receiver for receiving a public key of a financial server from a financial server providing data related to a financial transaction, and a multi-dimensional code for recognizing a multidimensional code from an image input through a camera A code recognizing unit, a data extracting unit for extracting data signed with a private key of a financial server from a multidimensional code, and a signature verification unit for verifying a signature signed with a public key of a financial server, wherein the data is transferred from the financial server to the private key of the financial server. A data decryption system is provided, in which a multidimensional code is generated that includes a signed private key.

A data decryption system for decrypting data related to a financial transaction, comprising: a public key receiver for receiving a public key of a financial server from a financial server providing data related to a financial transaction, and a multi-dimensional code for recognizing a multidimensional code from an image input through a camera A code recognition unit, a data extraction unit for extracting data signed with the private key of the financial server and encrypted with the public key of the user from the multidimensional code, and extracting the signed data by decrypting the extracted data with the user's private key, and finances the signed data. A data decryption system is provided, comprising an authentication unit for verifying a signature with a public key of a server, wherein a multidimensional code is generated in the financial server, the data being signed with the private key of the financial server and encrypted with the user's public key.

A financial system that provides data related to a financial transaction to a user, wherein the data is encrypted using a symmetric key for encryption, which is shared in advance with the mobile device, to generate encrypted data, or data authentication for the data with a symmetric key for authentication, which is shared in advance with the mobile device. An encryption unit, encrypted data, data authentication code or encrypted to generate an encrypted data authentication code by generating a code or generating a data authentication code for the data with a symmetric key for authentication and encrypting the data authentication code with a symmetric key for encryption. A multi-dimensional code generating unit for generating a multi-dimensional code including a data authentication code and a multi-dimensional code providing unit for providing the generated multi-dimensional code to the user, the generated multi-dimensional code is provided to the user's terminal is displayed on the display, multi-dimensional The code is on your mobile device Input and recognition through the included camera, the encrypted data, data authentication code or encrypted data authentication code from the multi-dimensional code is extracted from the multi-dimensional code, the data encrypted with the symmetric key for encryption is decrypted or the data authentication code with the symmetric key for authentication A financial system is provided in which the data authentication code is verified with the symmetric key for authentication after the data authentication code is verified or encrypted with the cryptographic symmetric key is decrypted.

A data decryption system for decrypting data related to financial transactions, comprising: a multidimensional code recognition unit for recognizing a multidimensional code from an image input through a camera, and extracting encrypted data, a data authentication code, or an encrypted data authentication code from the multidimensional code Decrypt the encrypted data with the symmetric key for encryption, which is shared in advance with the financial server that provides data extracting unit and data related to the financial transaction, or verify the data authentication code with the symmetric key for authentication, which is shared in advance with the financial server, or encrypt with the symmetric key for encryption. And a data processing unit for verifying the decrypted data authentication code with the symmetric key for authentication after decrypting the encrypted data authentication code, and the encrypted data is generated by encrypting the data with a symmetric key for encryption in the financial server, or Your data verification code will be generated The data decryption or authentication system or a symmetric key data after the authentication code to the data generated by the data authentication code encrypted with a symmetric key for encryption is the authorization code for generating the encrypted data is provided.

Data related to financial transactions can be safely transmitted to a mobile device using a multidimensional code such as a QR code.

Data related to financial transactions can be securely transferred using the user's public and private keys or cryptographic / authentication symmetric keys shared between the user's mobile device and the financial server, and multi-dimensional codes.

1 is a view showing an overall system structure for transmitting data related to financial transactions to a user in embodiments of the present invention.
2 to 5 are block diagrams illustrating internal structures of a financial system for transmitting data related to a financial transaction to a user and a data decryption system for decrypting data according to embodiments of the present invention.
6 to 10 are flowcharts illustrating a financial transaction data transmission method for transmitting data related to a financial transaction to a user and a data decryption method for decrypting data according to embodiments of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view showing an overall system structure for transmitting data related to financial transactions to a user in embodiments of the present invention. 1 illustrates a user 110, a terminal 120, a financial server 130, and a mobile device 140. Here, the terminal 120 may refer to a system in which the user 110 receives data related to a financial transaction from the financial server 130 and provides the data to the user 110, such as a PC or a laptop, and the financial server 130. May refer to a system of a financial institution that provides services for financial transactions. In addition, the portable device 140 may refer to a portable device including a camera.

In this case, it is assumed that the public / private key pair generated by the user 110 in the terminal 120 or the mobile device 140 is <pku, pru>. At this time, the public key is a key known to others.

In this case, the data related to the financial transaction may be transmitted to the user 110 in the financial server 130. In this case, the financial server 130 encrypts the data in order to prevent the data related to the financial transaction from being exposed to a third party or to ensure the integrity of the data, or generates a data authentication code for the data to the user 110. Can provide. In this case, a multidimensional code such as a QR code may be used to transmit encrypted data or a data authentication code.

In one embodiment, the financial server 130 may encrypt the data 'M' to be transmitted to the user 110 using the public key of the user 110. That is, when a public key / secret key pair <pku, pru> is generated by the user 110 or the mobile device 140, the public key generated by the terminal 120 or the mobile device 140 is generated. pku "may be transmitted to the financial server 130. The financial server 130 may generate the encrypted data “Enc _pku (M)” by encrypting the data “M” with the public key “pku”. In addition, the financial server 130 may generate a multi-dimensional code including the encrypted data "Enc _pku (M)" and provide it to the user 110. For example, the financial server 130 directly transmits the multi-dimensional code to the terminal 120 of the user 110 or sends an e-mail containing the multi-dimensional code to the user 110 by using the e-mail account of the user 110. Can provide.

In this case, the user 110 may obtain the multidimensional code directly transmitted through the terminal 120 or the multidimensional code sent to the e-mail account of the user 110. In this case, when the multi-dimensional code is received by the terminal 120, the terminal 120 may display the multi-dimensional code through the display of the terminal 120. The user 110 may capture an image including the multi-dimensional code on the display on which the multi-dimensional code is displayed by using the camera of the mobile device 140, so that the image including the multi-dimensional code is input to the mobile device. In this case, the mobile device 140 may extract the multidimensional code from the input image, recognize the multidimensional code, and extract the encrypted data "Enc _pku (M)" from the multidimensional code. In addition, the mobile device 140 may obtain the data 'M' by decrypting the encrypted data “Enc _pku (M)” using the secret key “pru” of the user 110. In this case, the mobile device 140 displays the decoded data 'M' (for example, the transfer system number, the name of the person to be transferred or the transfer amount, etc.) through the display of the mobile device 140 and provides it to the user 110. The user 110 may confirm whether the financial transaction information is clear through the displayed data 'M'.

If the size of the data 'M' is larger than the predetermined size, the financial server 130 generates the encrypted data 'Enc _k (M)' by encrypting the data 'M' through a random symmetric key 'k'. can do. Here, the predetermined size may include, for example, the size of data that may be included in the multidimensional code. In addition, the financial server 130 may generate the encrypted symmetric key 'Enc _pku (k)' by encrypting the symmetric key 'k' with the user's public key "pku". At this time, the financial server 130 may generate a multi-dimensional code including both the encrypted data 'Enc _k (M)' and the encrypted symmetric key 'Enc _pku (k)' and provide it to the user 110. For example, the financial server 130 directly transmits the multi-dimensional code to the terminal 120 of the user 110 or sends an e-mail containing the multi-dimensional code to the user 110 by using the e-mail account of the user 110. Can provide.

In this case, the user 110 may obtain the multidimensional code directly transmitted through the terminal 120 or the multidimensional code sent to the e-mail account of the user 110. When the multi-dimensional code is received at the terminal 120, the multi-dimensional code may be displayed on the display of the terminal 120. The user 110 may use the camera of the mobile device 140 to input an image including the multi-dimensional code into the mobile device. The mobile device 140 extracts the multi-dimensional code from the input image and extracts the multi-dimensional code. By recognizing and extracting the symmetric key 'Enc _k (M)' and the encrypted symmetric key 'Enc _pku (k)' from the multidimensional code. At this time, the mobile device 140 can obtain the symmetric key 'k' by decrypting the encrypted symmetric key 'Enc _pku (k)' using the secret key 'pru' of the user 110, and the encrypted data ' By decoding Enc _k (M) 'with a symmetric key' k ', data' M 'can be obtained.

In another embodiment, <pks, prs>, which is a public / private key pair of the financial server 130, may be used. First, the financial server 130 may generate the signed data 'Sign _prs (M)' by signing the data 'M' using the secret key 'prs' of the financial server 130. This signed data 'Sign _prs (M)' can be used as a data authentication code. In addition, the financial server 130 may generate a multi-dimensional code including the signed data 'Sign _prs (M)' and provide it to the user. For example, the financial server 130 directly transmits the multi-dimensional code to the terminal 120 of the user 110 or sends an e-mail containing the multi-dimensional code to the user 110 by using the e-mail account of the user 110. Can provide.

In this case, the user 110 may obtain the multidimensional code directly transmitted through the terminal 120 or the multidimensional code sent to the e-mail account of the user 110. When the multi-dimensional code is received at the terminal 120, the multi-dimensional code may be displayed on the display of the terminal 120. The user 110 may use the camera of the mobile device 140 to input an image including the multi-dimensional code into the mobile device. The mobile device 140 extracts the multi-dimensional code from the input image and extracts the multi-dimensional code. It can recognize and extract signed data 'Sign _prs (M)' from multidimensional code. In this case, the portable device 140 may secure the integrity of the data 'M' by signature verification of the signed data 'Sign _prs (M)' using the public key 'pks' of the financial server 130.

In another embodiment, both the public key / private pair <pku, pru> of the user 110 and the public key / private pair <pks, prs> of the financial server 130 may be used. First, the financial server 130 may generate the signed data 'Sign _prs (M)' by signing the data 'M' using the secret key 'prs' of the financial server 130. Such signed data At this time, the financial server 130 generates the encrypted data 'Enc _pku (M || S)' by encrypting the signed data 'Sign _prs (M)' using the user's public key 'pku'. can do. Here, 'S' may mean signed data 'Sign _prs (M)'. In this case, the financial server 130 may generate and provide the multi-dimensional code including the encrypted data 'Enc _pku (M || S)' to the user 110. For example, the financial server 130 directly transmits the multi-dimensional code to the terminal 120 of the user 110 or sends an e-mail containing the multi-dimensional code to the user 110 by using the e-mail account of the user 110. Can provide.

In this case, the user 110 may obtain the multidimensional code directly transmitted through the terminal 120 or the multidimensional code sent to the e-mail account of the user 110. When the multi-dimensional code is received at the terminal 120, the multi-dimensional code may be displayed on the display of the terminal 120. The user 110 may use the camera of the mobile device 140 to input an image including the multi-dimensional code into the mobile device. The mobile device 140 extracts the multi-dimensional code from the input image and extracts the multi-dimensional code. It can recognize and extract the encrypted data 'Enc _pku (M || S)' from the multidimensional code. At this time, the mobile device 140 extracts the signed data 'Sign _prs (M)' by decrypting the encrypted data 'Enc _pku (M || S)' using the public key 'pku' of the user 110. The signature 'Sign _prs (M)' may be signed using the public key 'pks' of the financial server 130 to secure the integrity of the data 'M'.

If the size of the signed data 'Sign _prs (M)' is greater than or equal to the predetermined size, the financial server 130 encrypts the signed data 'Sign _prs (M)' through an arbitrary symmetric key 'k'. Encrypted data 'Enc _k (M || S)' can be generated. In addition, the financial server 130 may generate the encrypted symmetric key 'Enc _pku (k)' by encrypting the symmetric key 'k' with the user's public key "pku". In this case, the financial server 130 may generate a multi-dimensional code including both the encrypted data 'Enc _k (M || S)' and the encrypted symmetric key 'Enc _pku (k)' and provide the same to the user. For example, the financial server 130 directly transmits the multi-dimensional code to the terminal 120 of the user 110 or sends an e-mail containing the multi-dimensional code to the user 110 by using the e-mail account of the user 110. Can provide.

In this case, the user 110 may obtain the multidimensional code directly transmitted through the terminal 120 or the multidimensional code sent to the e-mail account of the user 110. When the multi-dimensional code is received at the terminal 120, the multi-dimensional code may be displayed on the display of the terminal 120. The user 110 may use the camera of the mobile device 140 to input an image including the multi-dimensional code into the mobile device. The mobile device 140 extracts the multi-dimensional code from the input image and extracts the multi-dimensional code. By recognizing and extracting the symmetric key 'Enc _k (M || S)' and the encrypted symmetric key 'Enc _pku (k)' from the multidimensional code. At this time, the mobile device 140 can obtain the symmetric key 'k' by decrypting the encrypted symmetric key 'Enc _pku (k)' using the secret key 'pru' of the user 110, and the encrypted data ' By decoding Enc _k (M || S) with the symmetric key 'k', the signed data 'Sign _prs (M)' can be obtained. In addition, the mobile device 140 may secure the integrity of the data 'M' by signing and verifying the signed data 'Sign _prs (M)' using the public key 'pks' of the financial server 130.

In another embodiment, a cryptographic / authentication symmetric key <ke, km> may be used that is shared between the financial server 130 and the mobile device 140 in advance. First, the financial server 130 generates the encrypted data 'Enc _ke (M)' by encrypting the data 'M' to be transmitted to the user with the symmetric key 'ke' for encryption or calculating the symmetric key 'km' for authentication. a data authentication code encrypted data by encryption as 'MAC _km (M)' to generate or authentication symmetric key data authentication code calculated in 'km' for 'MAC _km (M)' again encryption symmetric key 'ke' for Authentication code 'Enc _ke (M || S)' can be generated. Here, 'M || S' may mean a data authentication code 'MAC _km (M)'. At this time, the financial server 130 is a multi-dimensional code including the encrypted data 'Enc _ke (M)' or the data authentication code 'MAC _km (M)' or the encrypted data authentication code 'Enc _ke (M || S)' May be generated and provided to the user 110. For example, the financial server 130 directly transmits the multi-dimensional code to the terminal 120 of the user 110 or sends an e-mail containing the multi-dimensional code to the user 110 by using the e-mail account of the user 110. Can provide.

In this case, the user 110 may obtain the multidimensional code directly transmitted through the terminal 120 or the multidimensional code sent to the e-mail account of the user 110. When the multi-dimensional code is received at the terminal 120, the multi-dimensional code may be displayed on the display of the terminal 120. The user 110 may use the camera of the mobile device 140 to input an image including the multi-dimensional code into the mobile device. The mobile device 140 extracts the multi-dimensional code from the input image and extracts the multi-dimensional code. By recognizing, the encrypted data 'Enc _ke (M)', the data authentication code 'MAC _km (M)', or the encrypted data authentication code 'Enc _ke (M || S)' can be extracted.

At this time, when the encrypted data 'Enc _ke (M)' is extracted from the multi-dimensional code, the mobile device 140 decrypts the encrypted data 'Enc _ke (M)' with the encryption symmetric key 'ke' and the data 'M''Can be obtained.

In addition, when the data authentication code 'MAC _km (M)' is extracted from the multi-dimensional code, the mobile device 140 verifies the data authentication code 'MAC _km (M)' using the authentication symmetric key 'km', The integrity of data 'M' can be secured.

In addition, when the encrypted data authentication code 'Enc _ke (M || S)' is extracted from the multi-dimensional code, the mobile device 140 encrypts the data authentication code 'Enc _ke (M) encrypted with the encryption symmetric key' ke '. || S), decrypts the data authentication code 'MAC _km (M) "to be extracted, and the symmetric key for re-authentication" by verifying the MAC _km (M) "" data authentication code using the "km, the data Integrity of 'M' can be secured.

A method of generating a multidimensional code may be expressed as in Equation 1 below.

Here, 'QR code' may refer to the above-described multidimensional code, and 'encode (x)' may mean a function for generating a multidimensional code including 'x' using 'x'. In addition, in the first embodiment described above, 'M _QR ' refers to encrypted data “Encpku (M)” or encrypted data “Enck (M)” and encrypted symmetric key “Encpku (k)”. The signed data 'Signprs (M)' in the third embodiment, the encrypted data 'Encpku (M || S)' or the encrypted data 'Enck (M || S)' and the encrypted symmetric key 'Encpku (k)'. ) Can mean each. In a fourth embodiment, 'M _QR ' means encrypted data 'Enc _ke (M)' or data authentication code 'MAC _km (M)' or encrypted data authentication code 'Enc _ke (M || S)'. can do.

When the mobile device 140 acquires the data 'M', the mobile device 140 may display the data 'M' on the display. When the mobile device 140 secures the integrity of the data 'M', the mobile device 140 may determine whether the data 'M' is successful. Information on the display can be displayed.

In this case, by visualizing and transmitting data related to a financial transaction in a multidimensional code, the user may visually confirm that the financial transaction history is transmitted from a financial institution such as a bank.

2 to 5 are block diagrams illustrating internal structures of a financial system for transmitting data related to a financial transaction to a user and a data decryption system for decrypting data according to embodiments of the present invention.

First, FIG. 2 illustrates a financial system 210 corresponding to the financial server 130 described through the first embodiment of FIG. 1 and a data decryption system 220 corresponding to the mobile device 140 described through the first embodiment. ). The financial system 210 includes a public key receiving unit 211, an encryption unit 212, a multidimensional code generator 213, and a multidimensional code provider 214, and the data decryption system 220 recognizes a multidimensional code. The unit 221 includes a data extractor 222 and a decoder 223.

The public key receiving unit 211 receives and maintains the public key of the user. For example, when the user subscribes to the site of the financial system 210 that provides the financial service, the financial system 210 receives the public key of the user in advance through the public key receiving unit 211, and the user's identifier and It can be maintained by associating and storing it.

The encryption unit 212 encrypts the data with the received public key of the user. For example, when the user wants to provide the user with data generated by generating a data such as a financial transaction history due to the financial transaction of the user, the encryption unit 212 is the data of the public key maintained by the public key receiving unit 211 Check the public key of the user to be transmitted, and can encrypt the data with the confirmed public key.

The multidimensional code generation unit 213 generates a multidimensional code including encrypted data. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

The multidimensional code provider 214 provides the generated multidimensional code to a user. In this case, the multi-dimensional code provider 214 may directly transmit the generated multi-dimensional code to the user's terminal or provide an e-mail including the multi-dimensional code to the user by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 220.

The multi-dimensional code recognition unit 221 recognizes the multi-dimensional code in the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

The data extractor 222 extracts data encrypted with the user's public key from the multidimensional code. In this case, the data encrypted with the public key of the user may mean data encrypted by the encryption unit 213 of the financial system 210 described above.

The decryption unit 223 extracts the data by decrypting the data encrypted with the user's public key with the user's private key. Accordingly, the data decryption system 220 may safely obtain data using the multidimensional code, and may display the corresponding data on a display as needed.

3 illustrates a financial system 310 corresponding to the financial server 130 described through the second embodiment of FIG. 1 and a data decryption system 320 corresponding to the mobile device 140 described through the second embodiment. It is shown. Here, the financial system 310 includes a key generator 311, a public key provider 312, a data signer 313, a multidimensional code generator 314, and a multidimensional code provider 315, and decrypt data. The system 320 includes a public key receiving unit 321, a multidimensional code recognition unit 322, a data extraction unit 323, and a signature verification unit 324.

The key generation unit 311 generates a public key and a private key. That is, the public key and the private key of the financial system 310 may be generated through the key generator 311.

The public key provider 312 provides the generated public key to the user. The public key provided to the user can then be used for signature verification of the data signed via the private key.

The data signing unit 313 signs the data with the generated secret key to generate the signed data. For example, if the user wants to provide the user with data generated by the user's financial transaction such as financial transaction details, the signed data may be used to secure the integrity of the data.

The multi-dimensional code generator 314 generates a multi-dimensional code including signed data. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

The multidimensional code provider 315 provides a generated multidimensional code to a user. In this case, the multi-dimensional code provider 315 may directly transmit the generated multi-dimensional code to the user's terminal or provide the user with an e-mail including the multi-dimensional code by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 320.

The public key receiving unit 321 receives a public key of the financial system 310 from a server that transmits data related to a financial transaction, that is, the financial system 310 illustrated in FIG. 3. The public key of the financial system 310 may correspond to the public key provided to the user by the public key provider 312 of the financial system 310.

The multi-dimensional code recognition unit 322 recognizes the multi-dimensional code from the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

The data extractor 323 extracts data signed by the secret key of the financial system 310 from the multidimensional code. In this case, the data signed by the secret key of the financial system 310 may refer to the data signed by the data signing unit 314 of the financial system 310 described above.

The signature verification unit 324 signature verification of the signed data with the public key of the financial system 310. That is, the data decryption system 320 may secure the integrity of the data according to the result of the signature verification described above. If necessary, the data decryption system 320 may indicate on the display whether the signature verification succeeded.

4 illustrates a financial system 410 corresponding to the financial server 130 described with reference to the third embodiment of FIG. 1 and a data decryption system 420 corresponding to the mobile device 140 described with reference to the third embodiment. It is shown. Herein, the financial system 410 includes a key generator 411, a public key provider 412, a public key receiver 413, a data signer 414, an encryption unit 415, a multi-dimensional code generator 416, and the like. The multi-dimensional code provider 417 is included, and the data decryption system 420 includes a public key receiver 421, a multi-dimensional code recognizer 422, a data extractor 423, and an authenticator 424.

The key generation unit 411 generates a public key and a private key. That is, the public and private keys of the financial system 410 may be generated through the key generator 411.

The public key provider 412 provides the generated public key to the user. The public key provided to the user can then be used for signature verification of the data signed via the private key.

The public key receiving unit 413 receives a user's public key. For example, when the user subscribes to a site of the financial system 410 that provides financial services, the financial system 410 receives the public key of the user in advance through the public key receiving unit 413, and the user's identifier and It can be maintained by associating and storing it.

The data signing unit 414 signs the data with the generated secret key to generate the signed data. The signed data can be used to ensure the integrity of the data.

The encryption unit 415 encrypts the data signed with the user's public key. That is, the encryption unit 415 may encrypt data signed with the public key received from the public key receiving unit 413.

The multi-dimensional code generator 416 generates a multi-dimensional code including encrypted data. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

The multidimensional code provider 417 provides the generated multidimensional code to a user. In this case, the multi-dimensional code provider 417 may directly transmit the generated multi-dimensional code to the user's terminal or provide the user with an e-mail including the multi-dimensional code by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 420.

The public key receiving unit 421 receives a public key of the financial system 410 from a server that transmits data related to a financial transaction, that is, the financial system 410 shown in FIG. 4. The public key of the financial system 410 may correspond to the public key provided to the user by the public key provider 412 of the financial system 410.

The multi-dimensional code recognition unit 422 recognizes the multi-dimensional code from the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

The data extractor 423 extracts data signed with the secret key of the financial system 410 and encrypted with the user's public key in the multidimensional code. In this case, the data signed with the private key of the financial system 410 and encrypted with the public key of the user may mean data signed and encrypted by the data signing unit 415 and the encryption unit 416 of the financial system 410 described above. have.

The authenticator 424 decrypts the extracted data with the user's private key, extracts the signed data, and verifies the signed data with the public key of the financial system 410. That is, the data decryption system 420 may ensure the integrity of the data according to the result of the signature verification described above. If necessary, the data decryption system 420 may indicate on the display whether the signature verification succeeded.

5 illustrates a financial system 510 corresponding to the financial server 130 described with reference to the fourth embodiment of FIG. 1 and a data decryption system 520 corresponding to the mobile device 140 described with reference to the fourth embodiment. It is shown. Here, the financial system 510 includes an encryption unit 511, a multidimensional code generator 512, and a multidimensional code provider 513, and the data decryption system 520 includes a multidimensional code recognition unit 521 and data extraction. A unit 522 and a data processing unit 523 are included.

The encryption unit 512 generates encrypted data by (1) encrypting the data with a symmetric key for encryption shared in advance with the mobile device, or (2) generating a data authentication code for the data with the symmetric key for authentication shared in advance with the mobile device. Or (3) generate a data authentication code for the data with the symmetric key for authentication, and then encrypt the data authentication code with the symmetric key for encryption to generate an encrypted data authentication code.

The multidimensional code generator 513 generates a multidimensional code including encrypted data, a data authentication code, or an encrypted data authentication code. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

The multidimensional code provider 514 provides the generated multidimensional code to a user. In this case, the multi-dimensional code provider 514 may directly transmit the generated multi-dimensional code to the user's terminal or provide an e-mail including the multi-dimensional code to the user by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 520.

The multi-dimensional code recognition unit 521 recognizes the multi-dimensional code in the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

The data extractor 522 extracts the encrypted data, the data authentication code, or the encrypted data authentication code from the multidimensional code. In this case, after the data is encrypted by the symmetric key for encryption in the financial system 510, the encrypted data is generated or the data authentication code for the data is generated with the symmetric key for authentication, or after the data authentication code for the data is generated with the symmetric key for authentication. The encrypted data authentication code is generated by encrypting the data authentication code with a symmetric key for encryption.

The data processing unit 523 may (1) decrypt data encrypted with a symmetric key for encryption that is shared in advance with a server providing data related to a financial transaction, that is, the financial system 510 shown in FIG. 5, or (2) a financial system ( Verify the data authentication code with the symmetric key for authentication shared in advance with the 510 or (3) decrypt the data authentication code encrypted with the symmetric key for encryption and then verify the data authentication code decrypted with the symmetric key for authentication. That is, the data decryption system 520 may secure the integrity of the data according to the above-described verification result. If necessary, the data decryption system 520 may indicate on the display whether the verification is successful.

6 to 10 are flowcharts illustrating a financial transaction data transmission method for transmitting data related to a financial transaction to a user and a data decryption method for decrypting data according to embodiments of the present invention.

Steps 611 to 614 illustrated in FIG. 6 illustrate a method for transmitting financial transaction data performed through the financial system 210 described with reference to FIG. 2, and steps 621 through 623 described through FIG. 2. Each data decryption method performed through the data decryption system 220 may be represented.

In step 611 the financial system 210 receives and maintains the user's public key. For example, when the user subscribes to the site of the financial system 210 that provides the financial service, the financial system 210 receives the public key of the user in advance through step 611 and associates with the identifier of the user. You can keep it by storing it.

In step 612 the financial system 210 encrypts the data with the received public key of the user. For example, the financial system 210 may check the public key of the user who wants to transmit data among the public keys received and maintained in step 611, and encrypt the data with the verified public key.

In step 613, the financial system 210 generates a multidimensional code that includes the encrypted data. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

In step 614, the financial system 210 provides the generated multidimensional code to the user. In this case, the financial system 210 may directly transmit the generated multi-dimensional code to the user's terminal or provide the user with an e-mail including the multi-dimensional code by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 220.

In operation 621, the data decoding system 220 recognizes the multidimensional code from the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

In step 622, data decryption system 220 extracts data encrypted with the user's public key from the multidimensional code. In this case, the data encrypted with the user's public key may mean data encrypted by the financial system 210 described above.

In operation 623, the data decryption system 220 decrypts the data encrypted with the user's public key with the user's private key to extract the data. Accordingly, the data decryption system 220 may safely obtain data using the multidimensional code, and may display the corresponding data on a display as needed.

Steps 711 to 716 illustrated in FIG. 7 illustrate a method for transmitting financial transaction data performed through the financial system 310 described with reference to FIG. 3, and steps 721 to 724 described through FIG. 3. Each of the data decryption methods performed through the data decryption system 320 may be represented.

In step 711, the financial system 310 generates a public key and a private key. That is, the public and private keys of the financial system 310 may be generated through step 711.

In step 712, the financial system 310 provides the generated public key to the user. The public key provided to the user can then be used for signature verification of the data signed via the private key.

In step 713 the financial system 310 signs the data with the generated secret key to generate the signed data. The signed data can be used to ensure the integrity of the data.

In step 714, the financial system 310 generates a multidimensional code that includes the signed data. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

In step 715 the financial system 310 provides the generated multidimensional code to the user. In this case, the financial system 310 may directly transmit the generated multidimensional code to the user's terminal or provide the user with an e-mail including the multidimensional code by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 320.

In operation 721, the data decryption system 320 receives a public key of the financial system 310 from a server that provides data related to the financial transaction, that is, the financial system 310. The public key of the financial system 310 may correspond to the public key provided to the user in step 712 by the financial system 310.

In step 722 the data decryption system 320 recognizes the multidimensional code in the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

In step 723 the data decryption system 320 extracts the data signed with the secret key of the financial system 310 from the multidimensional code. In this case, the data signed by the secret key of the financial system 310 may refer to the data signed by the financial system 310 described above in step 713.

In step 724 the data decryption system 320 signature-verifies the signed data with the public key of the financial system 310. That is, the data decryption system 320 may secure the integrity of the data according to the result of the signature verification described above. If necessary, the data decryption system 320 may indicate on the display whether the signature verification succeeded.

The financial transaction data transmission method of FIG. 8 may be performed through the financial system 410 described with reference to FIG. 4, and the data decryption method of FIG. 9 may be performed through the data decryption system 420 described with reference to FIG. 4. .

First, the financial transaction data transmission method of FIG. 8 includes steps 810 to 880 as shown in FIG. 8.

In step 810, the financial system 410 generates a public key and a private key. That is, the public and private keys of the financial system 410 may be generated through step 810.

In step 820, the financial system 410 provides the generated public key to the user. The public key provided to the user can then be used for signature verification of the data signed via the private key.

In step 830, the financial system 410 receives the user's public key. For example, when the user subscribes to a site of the financial system 410 that provides financial services, the financial system 410 receives the public key of the user in advance through step 830, and associates with the identifier of the user. You can keep it by storing it.

In step 840, the financial system 410 signs the data with the generated secret key to generate the signed data. The signed data can be used to ensure the integrity of the data.

In step 850 the financial system 410 encrypts the data signed with the user's public key. That is, the financial system 410 may encrypt data signed with the public key of the user received in step 830.

In step 860, the financial system 410 generates a multidimensional code that includes the encrypted data. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

In step 870 the financial system 410 provides the generated multidimensional code to the user. In this case, the financial system 410 may directly transmit the generated multi-dimensional code to the user's terminal or provide the user with an e-mail including the multi-dimensional code by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 420.

The data decryption method of FIG. 9 includes steps 910 to 940 as shown in FIG.

In operation 910, the data decryption system 420 receives a public key of the financial system 410 from a server providing data related to the financial transaction, that is, the financial system 410 illustrated in FIG. 4. The public key of the financial system 410 may correspond to the public key provided to the user by the financial system 410 in step 820.

In step 920, the data decoding system 420 recognizes the multidimensional code in the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

In step 930, the data decryption system 420 extracts, in the multidimensional code, the data signed with the private key of the financial system 410 and encrypted with the user's public key. In this case, the data signed with the private key of the financial system 410 and encrypted with the public key of the user may refer to the data signed and encrypted by the financial system 410 in steps 840 and 850.

In step 940, the data decryption system 420 decrypts the extracted data with the user's private key to extract the signed data, and sign-signs the signed data with the public key of the financial system 410. That is, the data decryption system 420 may ensure the integrity of the data according to the result of the signature verification described above. If necessary, the data decryption system 420 may indicate on the display whether the signature verification succeeded.

The financial transaction data transmission method of FIG. 10 may be performed through the financial system 510 described with reference to FIG. 5, and the data decryption method may be performed through the data decryption system 520 described with reference to FIG. 5.

First, the financial transaction data transmission method of FIG. 10 includes steps 1011 to 1013 as shown in FIG. 10.

In step 1011, the financial system 510 generates encrypted data by (1) encrypting the data with a cryptographic symmetric key pre-shared with the mobile device, or (2) with a symmetric key for authentication shared with the mobile device in advance. Generate a data authentication code or (3) generate a data authentication code for the data with a symmetric key for authentication and then encrypt the data authentication code with a symmetric key for encryption to generate an encrypted data authentication code.

In step 1012, the financial system 510 generates a multidimensional code that includes encrypted data, a data authentication code, or an encrypted data authentication code. For the method of generating the multidimensional code, reference may be made to Equation 1 described above.

In step 1013, the financial system 510 provides the generated multidimensional code to the user. In this case, the financial system 510 may directly transmit the generated multidimensional code to the user's terminal or provide the user with an e-mail including the multidimensional code by using the user's e-mail account.

When the multi-dimensional code is received at the user's terminal, the terminal may display the multi-dimensional code through a display, and the user may capture an image including the multi-dimensional code through a camera included in the data decoding system 520.

In addition, the data decryption method of FIG. 10 includes steps 1021 to 1023 as shown in FIG.

In step 1021, the data decoding system 520 recognizes the multidimensional code in the image input through the camera. Since a method of recognizing a multidimensional code in an image including the multidimensional code is well known, a detailed description thereof will be omitted.

In step 1022, the data decryption system 520 extracts the encrypted data, the data authentication code, or the encrypted data authentication code from the multidimensional code. In this case, after the data is encrypted by the symmetric key for encryption in the financial system 510, the encrypted data is generated or the data authentication code for the data is generated with the symmetric key for authentication, or after the data authentication code for the data is generated with the symmetric key for authentication. The encrypted data authentication code is generated by encrypting the data authentication code with a symmetric key for encryption.

In step 1023, the data decryption system 520 may (1) decrypt data encrypted with a symmetric key for cryptography previously shared with a server providing data related to the financial transaction, i.e., the financial system 510, or (2) the financial system. Verify the data authentication code with the symmetric key for authentication shared in advance with 510 or (3) the data authentication code decrypted with the symmetric key for authentication after decrypting the data authentication code encrypted with the symmetric key for encryption. That is, the data decryption system 520 may secure the integrity of the data according to the above-described verification result. If necessary, the data decryption system 520 may indicate on the display whether the verification is successful.

As such, using the system and method according to the embodiments of the present invention, data related to financial transactions can be safely transmitted to a mobile device using a multidimensional code such as a QR code. In addition, it is possible to securely transmit data related to financial transactions using a public key and a secret key of the user or a symmetric key for encryption / authentication shared between the user's mobile device and the financial server and a multidimensional code.

Methods according to an embodiment of the present invention may be implemented in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. In addition, the above-described file system can be recorded in a computer-readable recording medium.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined by the equivalents of the claims, as well as the claims.

110: user
120: terminal
130: financial server
140: Mobile device

Claims (5)

In a financial system that provides users with data related to financial transactions,
Encrypt the data with a cryptographic symmetric key shared in advance with the mobile device to generate encrypted data, or generate a data authentication code for the data with the authentication symmetric key preshared with the mobile device or the data with the symmetric key for authentication An encryption unit for generating an encrypted data authentication code by generating a data authentication code for the data authentication code by encrypting the data authentication code with the symmetric key for encryption;
A multi-dimensional code generator for generating a multi-dimensional code including the encrypted data, the data authentication code or the encrypted data authentication code; And
Multi-dimensional code providing unit for providing the generated multi-dimensional code to the user
Including,
The generated multi-dimensional code is provided to the user's terminal is displayed on the display,
The multi-dimensional code is input and recognized through a camera included in the mobile device of the user, the encrypted data, the data authentication code or the encrypted data authentication code is extracted from the multi-dimensional code from the multi-dimensional code, the encryption for The data authentication code is verified with the authentication symmetric key after the data encrypted with the symmetric key is decrypted or the data authentication code is verified with the authentication symmetric key or the data authentication code encrypted with the encryption symmetric key is decrypted. Financial system. In the data decryption system for decrypting data related to financial transactions,
A multidimensional code recognition unit recognizing a multidimensional code from an image input through a camera;
A data extraction unit for extracting encrypted data, data authentication code or encrypted data authentication code from the multi-dimensional code; And
Decrypt the encrypted data with a cryptographic symmetric key shared in advance with a financial server providing data related to the financial transaction, or verify the data authentication code with a symmetric key for authentication shared with the financial server in advance, or with the cryptographic symmetric key. A data processor which decrypts the encrypted data authentication code and then verifies the decrypted data authentication code with the authentication symmetric key
Including,
The data is encrypted with the cryptographic symmetric key in the financial server to generate the encrypted data, or a data authentication code for the data is generated with the authentication symmetric key, or a data authentication code for the data with the authentication symmetric key. And the encrypted data authentication code is generated by encrypting the data authentication code with the cryptographic symmetric key after it is generated. In the financial transaction data transmission method for providing data related to the financial transaction to the user,
Encrypt the data with a cryptographic symmetric key shared in advance with the mobile device to generate encrypted data, or generate a data authentication code for the data with the authentication symmetric key preshared with the mobile device or the data with the symmetric key for authentication Generating an encrypted data authentication code by generating a data authentication code for the data and encrypting the data authentication code with the cryptographic symmetric key;
Generating a multi-dimensional code comprising the encrypted data, the data authentication code or the encrypted data authentication code; And
Providing the generated multidimensional code to the user
Including,
The generated multi-dimensional code is provided to the user's terminal is displayed on the display,
The multi-dimensional code is input and recognized through a camera included in the mobile device of the user, the encrypted data, the data authentication code or the encrypted data authentication code is extracted from the multi-dimensional code from the multi-dimensional code, the encryption for The data authentication code is verified with the authentication symmetric key after the data encrypted with the symmetric key is decrypted or the data authentication code is verified with the authentication symmetric key or the data authentication code encrypted with the encryption symmetric key is decrypted. How to transfer financial transaction data. In the data decryption method for decrypting data related to financial transactions,
A multidimensional code recognition unit recognizing a multidimensional code from an image input through a camera;
Extracting encrypted data, data authentication code or encrypted data authentication code from the multidimensional code; And
Decrypt the encrypted data with a cryptographic symmetric key shared in advance with a financial server providing data related to the financial transaction, or verify the data authentication code with a symmetric key for authentication shared with the financial server in advance, or with the cryptographic symmetric key. Verifying the decrypted data authentication code with the authentication symmetric key after decrypting the encrypted data authentication code.
Including,
The data is encrypted with the cryptographic symmetric key in the financial server to generate the encrypted data, or a data authentication code for the data is generated with the authentication symmetric key, or a data authentication code for the data with the authentication symmetric key. And the encrypted data authentication code is generated by encrypting the data authentication code with the cryptographic symmetric key after it is generated. A computer-readable recording medium having recorded thereon a program for performing the method of claim 3.

Images