KR20130084651A - System and method for authenticating payment occurred abroad - Google Patents

Abstract

PURPOSE: An overseas payment authentication system and a method thereof are provided to strengthen the authentication of a rightful account holder. CONSTITUTION: An overseas payment authentication system receives a financial transaction request signal corresponding to a rightful account holder from a banking terminal located overseas (S100). The overseas payment authentication system verifies the location of a mobile phone of the rightful account holder (S110). If the mobile phone is determined to be located overseas according to the result of the verification (S120), the overseas payment authentication system determines whether to allow a financial transaction (S150) based on whether the location of the banking terminal and the location of the mobile phone correspond to each other (S140). [Reference numerals] (AA) Corresponding foreign country; (BB) Not identified; (CC) Domestic location; (S100) Receive a financial transaction request signal; (S110) Verify the location of a mobile phone; (S120) Location?; (S130) Check permission?; (S140) Correspond to the location?; (S150) Permit; (S160) Not permit

Description

System and method for authenticating payment occurred abroad}

The present invention relates to an overseas payment authentication system and a method thereof, and more particularly, when a financial transaction under a predetermined user's name is requested overseas, whether the financial transaction is actually performed by the user or is permitted by the user. The present invention relates to a system and a method for authenticating the financial transaction by determining whether the information is recognized.

Due to the development of the network, many people access the network system and use various services or functions. Among these various services, a particularly important service may be a financial service.

Current financial services such as credit card payment, contactless payment using a mobile terminal, etc., payment or transfer using mobile identification information (eg mobile number), financial transactions (eg withdrawal, transfer, etc.) using an ATM (Automatic Teller Machine) The back is mostly done through the network. Therefore, it is no exaggeration to say that most of the financial services that have a great influence on people's real life are made and performed through the network.

However, it is true that many side effects occur due to the characteristics of financial services through the network. For example, in the case of a financial transaction such as a credit card payment or a transfer, since the subject (for example, a financial institution) approving the financial transaction and the subject requesting the financial transaction are not faced with each other and are approved through the network, the payment means (for example, If you have a credit card, mobile terminal, etc.), financial transactions are often approved even if you are not actually a legitimate entity (i.e. credit card owner, owner of a particular account, etc.) .

In order to solve this problem, various security or authentication procedures have been known. The location-based authentication procedure of the authentication process may be performed by comparing the location of the financial terminal requesting the financial transaction and the location of the user to determine whether the transaction is a normal transaction. Therefore, in case of stealing or acquiring payment method (eg, credit card, mobile terminal, etc.) and using it maliciously, financial transactions such as payment may not be allowed because the location of the actual user and the location of the financial terminal are different. Can be.

However, this location-based authentication procedure has a problem that can be performed only in the country, that is, a specific country. This is because it was not easy to determine the location of a financial terminal requesting a financial transaction from a foreign country or a foreign country. Therefore, the location-based authentication procedure is not used at all for a financial transaction requested from a foreign country. It was.

In practice, however, fraudulent financial transaction requests are frequent in foreign countries. For example, a credit card information of a credit card that has been used in a foreign country is stolen to generate a duplicate card, and illegal financial transactions frequently occur in a foreign country by using the generated duplicate card. In addition, a lot of personal information has been leaked due to hacking of portal sites, etc., which are frequently occurring recently, and payment methods or financial transactions are illegally created in foreign countries by using the leaked personal information.

As such, there are more frequent unfair financial transactions in Korea than in Korea.

Therefore, there is an urgent need for technical ideas that can effectively perform location-based authentication for financial transactions requested in foreign countries.

Accordingly, the technical problem to be achieved by the present invention is to obtain a financial transaction performed by a user who grasps a location of a financial terminal and a party name of a political party that exist abroad, even when a financial transaction is requested from abroad. It is to provide a system and method that can perform a location-based authentication process.

In addition, when a financial transaction is requested from abroad, if the location of the party's mobile phone exists in the foreign country, if it is located in Korea, or if the location cannot be identified, the effective authentication for each classified case is performed. It is to provide a system and method that can be.

In addition, when a request for a financial transaction is due to a party nominee but the party nominee does not have his or her mobile phone, it is to provide a system and a method for authenticating the requested financial transaction.

In the overseas payment authentication method according to an embodiment of the present invention for solving the technical problem, step a) wherein the overseas payment authentication system receives a financial transaction request signal corresponding to a party nominee from a financial terminal located in a foreign country, the overseas payment authentication B) the system confirming the location of the mobile phone of the party nominee, and if it is determined that the location of the mobile phone exists in the country, the overseas payment authentication system does not allow the financial transaction request or the mobile Transmits a confirmation signal for accepting the financial transaction to a phone, and determines to allow the financial transaction corresponding to the financial transaction request when the permission signal for the financial transaction is received from the mobile phone; Is determined to exist in the foreign country, the overseas payment authentication system is the And c) determining whether to allow the financial transaction based on whether the location of the terminal and the location of the mobile phone correspond to each other.

In step b), requesting the location of the party's mobile phone by at least one of a domestic mobile communication company system corresponding to the party's mobile phone or a foreign location system capable of determining the location of the mobile phone existing in the foreign country. b1) and b2) receiving information on the location of the mobile phone from at least one of the domestic mobile communication company system or the foreign location system in response to the request.

The location of the financial terminal may be identified based on the location information DB for each identifier for storing location information for each identifier of the financial terminal.

The location information DB for each identifier stores location information for each identifier of the financial terminal based on the location of the mobile phone when a political party requests a financial transaction using a predetermined financial terminal while possessing his mobile phone. You can do

In step c), the overseas payment authentication system receives information on whether the location of the financial terminal and the location of the mobile phone correspond to each other from a predetermined location determination system, and performs the financial transaction based on the received information. C1) determining whether to permit or not; or, the overseas payment authentication system receives the position of the financial terminal from the position determination system, and determines whether the position of the financial terminal and the position of the mobile phone correspond to each other. And determining any one of the steps c2) to determine whether to allow the financial transaction.

The b2) step is the mobile from the foreign mobile carrier system that performs a roaming service in connection with the domestic mobile carrier system based on the information on the political party and the information on the foreign party included in the received financial transaction request signal Receiving the location of the phone.

Step b) is characterized by requesting the location of the mobile phone to the domestic mobile communication company system and the foreign location system, step c) is the mobile from any one of the domestic mobile communication company system or the foreign location system When the information on the location of the phone is first received, the overseas payment authentication system may determine whether to allow the financial transaction request using only the information on the location of the mobile phone received first.

In step c), if the location of the mobile phone existing in the foreign country does not correspond to the location of the financial terminal, the foreign payment authentication system does not allow the financial transaction corresponding to the financial transaction request or the mobile phone. C3) transmitting the permission confirmation signal of the financial transaction and determining to allow the financial transaction corresponding to the financial transaction request when the permission signal of the financial transaction is received from the mobile phone.

The overseas payment authentication method may further include e) selectively determining whether to allow or disallow the financial transaction corresponding to the financial transaction request when the location of the mobile phone cannot be confirmed. The overseas payment authentication method may be stored in a computer-readable recording medium recording a program.

The overseas payment authentication system for solving the technical problem is a receiving module for receiving a financial transaction request signal corresponding to a party nominee from a financial terminal located in a foreign country, a position determination module for checking the location of the mobile phone of the party nominee, and If it is determined by the position determination module that the location of the mobile phone exists in the country, the financial transaction request is not allowed or the mobile phone transmits a confirmation signal for accepting the financial transaction from the mobile phone. When a permission signal for a transaction is received, it is determined to allow a financial transaction corresponding to the financial transaction request, or when the location determination module determines that the location of the mobile phone exists in the foreign country, the location of the financial terminal. Based on whether the location of the and the mobile phone correspond to each other. And a control module that determines whether or not to allow financial transactions.

The control module may selectively determine to allow or disallow the financial transaction when the location of the mobile terminal is not confirmed as a result of the confirmation of the location determination module.

The control module may identify the location of the financial terminal based on the location information DB for each identifier that stores the location information for each identifier of the financial terminal.

The location information DB for each identifier stores location information for each identifier of the financial terminal based on the location of the mobile phone when a political party requests a financial transaction using a predetermined financial terminal while possessing his mobile phone. You can do

The control module receives information on whether the location of the financial terminal and the location of the mobile phone correspond to each other through the receiving module, and outputs the financial transaction based on the received information. Whether or not to allow the financial transaction by receiving the position of the financial terminal from the position determination system and determining whether the position of the received financial terminal and the position of the mobile phone correspond to each other. You can judge.

The location determination module requests the location of the party's mobile phone with at least one of a domestic mobile communication company system corresponding to the party's mobile phone or a foreign location system capable of determining the location of the mobile phone existing in the foreign country. In response to the request, information on the location of the mobile phone may be received from at least one of the domestic mobile communication company system or the foreign location system.

The location determining module requests the location of the mobile phone from the domestic mobile communication company system and the foreign location system, and the control module determines the location of the mobile phone from either the domestic mobile communication company system or the foreign location system. When the information is first received, it may be determined whether to accept the financial transaction request using only information on the location of the mobile phone received first.

If the location of the mobile phone existing in the foreign country does not correspond to the location of the financial terminal, the control module does not allow the financial transaction corresponding to the financial transaction request or confirms the permission of the financial transaction with the mobile phone. When the signal is transmitted and the permission signal for the financial transaction is received from the mobile phone, it may be determined to allow the financial transaction corresponding to the financial transaction request.

According to the technical idea of the present invention, there is an effect that the authentication process can be performed based on location also for financial transactions performed abroad. In particular, if a party's payment method (e.g., credit card, etc.) is duplicated and used abroad, or if a person's personal information is leaked and an illegal financial transaction is requested from abroad, it is effective to identify and block the financial transaction. have.

In addition, there is an effect that a normal location-based authentication service can be performed in a foreign country even when a party nominee carries his mobile phone to a foreign country. In other words, it is possible to check whether a financial transaction made in the name of a party nominee located in a foreign country is a party transaction or an illegal transaction, and also block an illegal financial transaction requested in the foreign country.

In addition, there is an effect that a party nominee may request a financial transaction from a foreign country without having his or her mobile terminal, or even if the party nominee is in Korea, a financial transaction request permitted by the party nominee may be normally permitted.

In addition, the location of financial terminals existing in foreign countries can be automatically collected and used to determine the location of financial terminals that are relatively accurate and have a small margin of error. There is an effect that can be significantly improved.

BRIEF DESCRIPTION OF THE DRAWINGS A brief description of each drawing is provided to more fully understand the drawings recited in the description of the invention.
1 is a schematic system configuration for an overseas payment authentication method according to an embodiment of the present invention.
2 is a schematic system configuration for an overseas payment authentication method according to another embodiment of the present invention.
3 shows a schematic configuration of an overseas payment authentication system according to an embodiment of the present invention.
4 is a schematic flowchart for explaining an overseas payment authentication method according to an embodiment of the present invention.

In order to fully understand the present invention, operational advantages of the present invention, and objects achieved by the practice of the present invention, reference should be made to the accompanying drawings and the accompanying drawings which illustrate preferred embodiments of the present invention.

Also, in this specification, when any one element 'transmits' data to another element, the element may transmit the data directly to the other element, or may be transmitted through at least one other element And may transmit the data to the other component.

Conversely, when one element 'directly transmits' data to another element, it means that the data is transmitted to the other element without passing through another element in the element.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the present invention will be described in detail with reference to the preferred embodiments of the present invention with reference to the accompanying drawings. Like reference symbols in the drawings denote like elements.

1 is a schematic system configuration for an overseas payment authentication method according to an embodiment of the present invention.

Referring to FIG. 1, an overseas payment authentication system 100 according to an exemplary embodiment of the present invention may include a predetermined financial institution system 200 and / or a domestic mobile communication company system 300 (and / or a foreign mobile communication company system 600-). 1)) and the technical spirit of the present invention can be implemented while transmitting and receiving predetermined information through the wired and wireless network.

The financial institution system 200 may process a financial transaction system or a financial institution requesting the financial transaction request when the party nominee requests a financial transaction using the financial terminal 400 existing in a foreign country. It may be a predetermined system (for example, a value added network (VAN) system, etc.) for intervening between the financial institution system and the financial terminal to mediate financial transactions.

The financial institution system 200 may use the financial terminal 400 to identify a user corresponding to a financial transaction request, that is, a party nominee requesting the financial transaction. The party nominee may mean, for example, a payment nominee included in payment information when the financial transaction request is payment. For example, the card holder may be the name holder of the card, the mobile payment holder may be the name holder of the mobile phone. Alternatively, when the financial transaction request is cash withdrawal, account transfer, etc., the financial transaction request may be a name holder of the account used for the financial transaction.

The financial institution system 200 may receive a predetermined signal for a financial transaction request from the financial terminal 400 existing in a foreign country or an overseas financial institution system (not shown) connected to the financial terminal 400. Then, the financial institution system 200 may allow or disallow the financial transaction request. In this case, the financial institution system 200 may determine whether to accept the financial transaction request based on a result of the determination of whether the overseas payment authentication system 100 permits the financial transaction request.

To this end, the overseas payment authentication system 100 may receive information about the location of the financial terminal 400 from a predetermined system, that is, the location determination system 700. The position determination system 700 may be defined as including all types of data processing systems capable of determining the position of the financial terminal 400. In FIG. 1, the location determination system 700 is present in the foreign country as an example, but the location determination system 700 may exist in the country. The location determination system 700 may be a system capable of determining the location of the financial terminal 400 wherever it exists. For example, the location determination system 700 may be a system installed in the foreign financial institution system (not shown) or the foreign financial institution system (not shown). Alternatively, the location determination system 700 may be a system implemented separately from the foreign financial institution system (not shown) and connected to the foreign financial institution system (not shown) through a wired or wireless network. As a result, the position determination system 700 may be any type of system capable of knowing the position value of the financial terminal 400 through any path or method.

In the following description, for example, the location determination system 700 is installed in the foreign financial institution system (not shown), but the location determination system 700 is the foreign financial institution system (not shown). The average expert in the technical field of the present invention can easily deduce that the technical idea of the present invention can be implemented while transmitting and receiving necessary information.

The foreign financial institution system (not shown) (or the location determination system 700) may identify the financial terminal 400 requesting the financial transaction. Identifying the financial terminal 400 may refer to identifying identification information of the financial terminal 400. Identification information of the financial terminal 400 may vary according to the type of the financial terminal 400. For example, when the financial terminal 400 is a card payment device connected to an overseas financial institution system (not shown) through a public switched telephone network (PSTN), a telephone number and a modem identification number assigned to the financial terminal 400 And the like may be the identification information. When the financial terminal 400 is a device connected to the foreign financial institution system (not shown) through an IP network, the identification information may be an IP address, a MAC address, or the like assigned to the financial terminal 400. The financial terminal 400 may be, for example, a payment device of various forms or methods, or a financial transaction device for performing a financial transaction such as an ATM. Then, the location determination system 700 may determine the location of the identified financial terminal 400.

The location of the financial terminal 400 may be stored in advance in the foreign financial institution system (not shown). For example, an overseas financial institution system (not shown) may store rough location information such as an address of a business place for each financial terminal 400 that provides financial services. Accordingly, the location determination system 700 may determine the location of the financial terminal 400 by receiving location information for each financial terminal 400 stored in the foreign financial institution system (not shown).

According to an embodiment, the location determination system 700 stores location information for each identifier for storing location information for each identifier (eg, a network number such as a phone number, modem identification number, IP address, MAC address) of the financial terminal 400. The information DB 800 may be separately constructed. As shown in FIG. 1, the location information DB 800 for each identifier may be implemented as a system separate from the location determination system 700, or may be included in the location determination system 700.

The location information DB 800 for each identifier indicates a location of the financial terminal 400 determined based on the location of the political party name when the political party name performs a financial transaction using the financial terminal 400. It may be a predetermined database that stores the location of each identifier of the financial terminal 400. As described above, the technical idea of automatically determining the position of the financial terminal 400 is described in Korean Patent Application (Application No. 10-2011-0111353, "Financial Terminal Position Determination Method and System") filed by the present applicant. '). The technical spirit and contents described in the specification of the previous application are included as a reference of the present specification, and may be treated as included in the description of the present specification. As a result, the location information DB 800 for each identifier may be constructed by implementing the technical idea disclosed in the previous application in the foreign country.

Then, the overseas payment authentication system 100 may receive information about the location of the financial terminal 400 from the location determination system 700. Of course, the location determination system 700 may transmit information on the location of the financial terminal 400 registered in advance in the foreign financial institution system (not shown) to the overseas payment authentication system 100, The location information stored in the location information DB 800 for each identifier may be transmitted to the overseas payment authentication system 100.

In addition, the overseas payment authentication system 100 may check the location of the mobile phone 500 of the party nominee when the financial transaction request signal is received. Information about the mobile phone 500 of the party nominee (eg, a phone number, a USIM number, etc.) may be registered in advance in the overseas payment authentication system 100 and / or the financial institution system 200.

Confirming the location of the mobile phone 500 by the overseas payment authentication system 100 may mean receiving information about a location of the mobile phone 500 from a predetermined system. In order for the overseas payment authentication system 100 to confirm the location of the mobile phone 500, the overseas payment authentication system 100 is a domestic mobile communication company system 300 corresponding to the mobile phone 500 and / or the The location of the mobile phone 500 may be requested by at least one of the foreign location systems 600 capable of determining the location of the mobile phone 500 existing in a foreign country.

The foreign location system 600 may refer to a system capable of determining the location of the mobile phone 500 located in the foreign country. The foreign location system 600 may be a foreign mobile communication company system 600-1, or may be implemented separately from the foreign mobile communication company system 600-1 and exist in the foreign country in a predetermined manner. It may be a system that can determine the location of).

According to an embodiment, the overseas payment authentication system 100 may request the location of the mobile phone 500 only from the domestic mobile communication company system 300. Then, when the mobile phone 500 is present in the country (also, when it is in a powered-on state), the domestic mobile communication company system 300 may know that the mobile phone 500 is present in the country. Alternatively, the location information of the mobile phone 500 may be transmitted to the overseas payment authentication system 100. If the mobile phone 500 exists in a foreign country and the mobile phone 500 is provided with a roaming service, the domestic mobile communication company system 300 may know that the mobile phone 500 is located in a foreign country. . In addition, the domestic mobile communication company system 300 is a foreign mobile phone 500 existing in the foreign country from the foreign mobile communication company system 600-1 that provides a roaming service in cooperation with the domestic mobile communication company system 300 in the foreign country ) Location information, and may transmit the received information to the overseas payment authentication system (100).

According to another embodiment, the overseas payment authentication system 100 may directly request the location of the mobile phone 500 to the foreign location system 600 capable of confirming the location of the mobile phone 500 in the foreign country. have. Then, the foreign location system 600 outputs whether the mobile phone 500 exists in the foreign country and / or the location information of the mobile phone 500 located in the foreign country to the overseas payment authentication system 100. You may.

In order for the overseas payment authentication system 100 to request the location of the mobile phone 500 to the foreign location system 600, information that can identify the foreign country included in the financial transaction request signal, that is, a financial transaction request The information may identify the identified country, and the request may be performed to the foreign location system 600 predetermined for each identified country.

Meanwhile, when the financial transaction request signal is received, the overseas payment authentication system 100 (substantially) simultaneously locates the mobile phone 500 to the domestic mobile communication company system 300 and the foreign location system 600. You can also request Because, in general, when the location of the mobile phone 500 can be grasped (for example, when it is in a power-on state and is located in the country), the domestic mobile carrier system 300 of the mobile phone 500 is relatively fast. Although the location of the mobile phone 500 is present in a foreign country and the location cannot be determined, the domestic mobile communication company system 300 may determine the location of the mobile phone 500 for a relatively long time. An attempt is made to determine the location of the mobile phone 500. That is, when the domestic mobile communication company system 300 can determine the location of the mobile phone 500, the location of the mobile phone 500 may be quickly determined, but the location of the mobile phone 500 may be determined. If not, it will take a relatively long time to find out that the location is unknown. This may also be the case in a foreign mobile telecommunication company system 600-1. Therefore, if the mobile phone company 500 requests the location of the mobile phone 500 only by the domestic mobile communication company system 300, and the domestic mobile communication company system 300 cannot determine the location of the mobile phone 500, the foreign location system again. When requesting the location of the mobile phone 500 to 600 (or vice versa), it may take a long time to determine the location of the mobile phone 500. And such long periods of time may not be suitable for certification of financial transactions. In other words, if a request for financial transaction is made and it is determined that the financial transaction is allowed due to the time of several tens of seconds, the usability is extremely low, which may cause a problem that is difficult to apply to the authentication of the financial transaction.

Therefore, the overseas payment authentication system 100 according to an embodiment of the present invention may request the location of the mobile phone 500 to both the domestic mobile communication company system 300 and the foreign location system 600. In addition, first, the position of the mobile phone 500 may be received from a system in which the position of the mobile phone 500 is determined. Therefore, when the location of the mobile phone 500 can be confirmed at any one of domestic or foreign countries where a financial transaction is requested, the location of the mobile phone 500 can be quickly determined. Of course, if neither of the two countries can determine the location of the mobile phone 500, it may take some time, but there may still be a time saving effect compared to requesting the location sequentially.

According to an embodiment, the overseas payment authentication system 100 may directly receive information on the location of the mobile phone 500 from the mobile phone 500. In order to transmit its location to the overseas payment authentication system 100, the mobile phone 500 must access the wireless network in the foreign country. The mobile terminal may be roaming in the foreign country.

After all, if the mobile phone 500 exists in the foreign country where a financial transaction is requested, the overseas payment authentication system 100 may provide information on the location of the mobile phone 500 from the domestic mobile communication company system 300. It may be received, or manually receive information about the location of the mobile phone 500 from the foreign location system 600. When receiving the location of the mobile phone 500 from the domestic mobile carrier system 300, the domestic mobile carrier system 300 is a foreign mobile carrier system that provides a wireless network service to the roaming mobile phone 500 Information about the location of the mobile phone 500 may be received from 600. Then, the domestic mobile communication company system 300 may transmit the location of the received mobile phone 500 to the overseas payment authentication system 100.

When the overseas payment authentication system 100 confirms the location of the mobile phone 500, three cases may exist as a result. That is, when the location of the mobile phone 500 is determined in Korea, the location of the mobile phone 500 may be determined in the foreign country where the financial transaction request is performed, and the location may not be confirmed. If the location is not confirmed, the mobile phone 500 may be in a power-off state or exist in another country other than the foreign country.

Accordingly, the technical idea of the present invention may be different in the manner of authenticating the requested financial transaction for each of these three cases.

First, when the location of the mobile phone 500 exists in the foreign country, the overseas payment authentication system 100 determines whether the location of the financial terminal 400 and the location of the mobile phone 500 correspond to each other. It is also possible to determine whether to allow financial transactions based on whether two locations exist within a certain distance of the same location or the same location. Of course, in this case, it may be assumed that the mobile phone 500 is possessed by the party name holder. Therefore, financial transactions may be allowed when they correspond to each other. If they do not correspond to each other, the financial transaction may not be allowed. Therefore, when the party nominee exists in a foreign country, it is possible to filter the case where an illegal financial transaction is requested in the foreign country.

On the other hand, the determination of whether the position of the financial terminal 400 and the position of the mobile phone 500 may be performed by the foreign payment authentication system 100 directly compares the two positions. However, the overseas payment authentication system 100 receives result information on whether the location of the financial terminal 400 and the location of the mobile phone 500 correspond to the location determination system 700 and receives the received information. The result information may be used to determine whether the two locations correspond to each other. Therefore, in this case, the position determination system 700 is a system capable of determining the position of the financial terminal 400 and a system capable of comparing the position of the financial terminal 400 with the position of the mobile phone 500. Can be defined. For example, the location determination system 700 may be implemented by being included in a foreign financial institution system, or may be implemented by being included in a foreign mobile communication company system 600-1, and may be implemented as a separate system connected to the network. It may be implemented.

As described above, the location determination system 700 determines a location of the financial terminal 400 based on an overseas financial institution system (not shown) or the location information DB 800 for each identifier, and determines the foreign mobile communication company system ( The location of the mobile phone 500 may be determined from 600-1 to determine whether the two locations correspond to each other. Then, the determined result information may be transmitted to the overseas payment authentication system 100.

If it is determined that the location of the mobile phone 500 is located in Korea, it is not necessary to perform location comparison. Therefore, in such a case, the financial transaction can be unconditionally allowed. According to an embodiment, the financial transaction may be allowed only when the permission confirmation process passes through a predetermined permission confirmation process.

In case of passing the acceptance check process, even if the party nominee does not possess his mobile phone 500, he or she requests a financial transaction, or he or she possesses the mobile phone 500, It may be the case that the financial transaction of the name is allowed. Therefore, in the case of passing the acceptance confirmation process, the convenience of financial transactions can be enhanced by allowing the financial transactions. If a request for a fraudulent financial transaction is made, the fraudulent financial transaction may be blocked because the party nominee or acquaintance of the party nominee will not pass the acceptance confirmation process.

If the location of the mobile phone 500 cannot be determined, the financial transaction request may be disallowed.

On the other hand, although the location of the mobile phone 500 exists in the foreign country, even if the two locations do not correspond to each other as a result of the position comparison, the financial transaction may not be unconditionally disallowed, but may be subjected to the above-described permission confirmation process. That is, the party nominee existing in the foreign country may allow financial transactions to others existing in the foreign country or the party nominee may request the financial transaction without owning his mobile phone 500. Refusal of financial transactions can be restored through the verification process.

That is, according to the technical idea of the present invention, when the financial transaction request is performed in the foreign country, when the location of the mobile phone 500 exists in the country or exists in the foreign country but the locations do not correspond to each other, in principle, The financial transaction may be disallowed, that is, denied. However, in the case of passing a predetermined acceptance check process, the rejection of the approval may be restored, that is, approved without denial.

Whether or not the acceptance check passes is carried out by the subject possessing the mobile phone 500. The subject possessing the mobile phone 500 is the party nominee or the party nominee uses his or her mobile phone 500. It may be a person entrusted. Therefore, since the subject possessing the mobile phone 500 does not pass the permission confirmation process for the illegal financial transaction request, there is an effect that the illegal financial transaction can be blocked.

On the other hand, when the location of the mobile phone 500 is not confirmed, the acceptance confirmation process cannot be performed, and thus, the financial transaction may not be allowed. Of course, if the location of the mobile phone 500 is not confirmed, the financial transaction may be allowed for ease of use. However, in this case, the security is low. Therefore, when the location of the mobile phone 500 is not confirmed, whether to allow the financial transaction may be selectively applied, and in this case, ease of use and security have a trade off.

A schematic configuration of the overseas payment authentication system 100 for implementing such a technical idea is shown in FIG. 3.

3 shows a schematic configuration of an overseas payment authentication system according to an embodiment of the present invention.

Referring to FIG. 3, the overseas payment authentication system 100 according to an embodiment of the present invention may include a control module 110, a reception module 120, and a position determination module 130.

The overseas payment authentication system 100 may include hardware resources and / or software necessary for implementing the technical idea of the present invention, and may necessarily mean one physical component or one device. It is not. That is, the overseas payment authentication system 100 may mean a logical combination of hardware and / or software provided to implement the technical idea of the present invention. If necessary, the foreign payment authentication system 100 may be installed in devices spaced apart from each other. It may be implemented as a set of logical configurations for implementing the technical idea of the present invention. In addition, the overseas payment authentication system 100 may refer to a set of components separately implemented for each function or role for implementing the technical idea of the present invention.

For example, the overseas payment authentication system 100 may be included in the financial institution system 200 and implemented. Alternatively, a part of the overseas payment authentication system 100 may be included in the financial institution system 200 and installed. Of course, the overseas payment authentication system 100 may be implemented as a separate device from the financial institution system 200 to implement the technical idea of the present invention while communicating with the financial institution system 200 through a wired or wireless network. have.

In this specification, a module may mean a functional and structural combination of hardware for carrying out the technical idea of the present invention and software for driving the hardware. For example, the module may refer to a logical unit of a predetermined code and a hardware resource for executing the predetermined code, and does not necessarily mean a physically connected code or a kind of hardware. Can be easily deduced to the average expert in the field of the present invention.

The control module 110 may control resources and / or functions of other components (for example, the receiving module 120 and / or the position determining module 130, etc.) to implement the technical idea of the present invention. .

The receiving module 120 may receive a financial transaction request signal corresponding to a party nominee from a financial terminal 400 located in a foreign country. The financial transaction request signal may be output to the receiving module 120 through the financial institution system 200. A party nominee and the foreign country can be identified through the financial transaction request signal.

In addition, the receiving module 120 may receive information on the location of the mobile phone 500 from the domestic mobile communication company system 300 and / or the foreign location system 600. In addition, the receiving module 120 may receive information about the location of the financial terminal 400 from the location determination system 700. Alternatively, the receiving module 120 may receive result information on whether the position of the financial terminal 400 and the position of the mobile phone 500 correspond to each other from the position determining system 700.

The location determination module 130 may receive information about the location of the mobile phone 500. To this end, the location determination module 130 may request the location of the mobile phone 500 to the domestic mobile communication company system 300 and / or the foreign mobile communication company system 600-1. The position determination module 130 may sequentially request positions. In addition, as described above, a location may be requested to both the domestic mobile communication company system 300 and the foreign mobile communication company system 600-1. In addition, by using the location of the mobile phone 500 which is first received from the domestic mobile communication company system 300 or the foreign mobile communication company system 600-1, different authentication processes may be performed as described above. . That is, the authentication time can be reduced by immediately performing the authentication process without waiting for the other response.

Then, the control module 110 may determine whether to allow the financial transaction based on the information on the position of the mobile phone 500 received by the receiving module 120. That is, as described above, when the location of the mobile phone 500 is known in Korea, when it is found in the foreign country, or when it is not known, an authentication process for determining whether to allow financial transactions may be performed according to each. .

The control module 110 may determine whether to allow the financial transaction corresponding to the financial transaction based on the determination result of the position determination module 130. When the control module 110 determines that the financial transaction is allowed, the control module 110 may transmit the determination result to the financial institution system 200 to finally approve the financial transaction.

An authentication process performed by the control module 110 according to the position of the mobile phone 500 is shown in FIG. 4.

4 is a schematic flowchart for explaining an overseas payment authentication method according to an embodiment of the present invention.

3 and 4, the receiving module 120 may receive the financial transaction request signal (S100). Then, the position determination module 130 may identify the party nominee by using the financial transaction request signal, and determine the location of the identified mobile party 500 of the party nominee (S110).

When the location of the mobile phone 500 identified by the location determination module 130 is a country in which the financial transaction request signal is output, the control module 110 determines the location of the mobile phone 500 and the financial terminal. A location comparison authentication process of determining whether the locations of the 400 correspond to each other may be performed (S140). If the positions correspond to each other, the control module 110 may determine to allow the financial transaction (S150). If they do not correspond to each other in principle it can be determined that the financial transaction is not allowed (S160). However, as described above, the acceptance confirmation process may be further processed.

The permission confirmation process may refer to a series of processes in which the control module 110 transmits a predetermined permission confirmation signal to the mobile phone 500 and a permission signal is received within a predetermined time in response to the transmission. If the permission signal is not received within a certain time, the permission confirmation process may not pass.

Accordingly, the control module 110 may perform the permission check process (S130) and determine whether to allow or disallow the financial transaction according to whether the permission check process is passed (S150 and S160).

On the other hand, if the location of the mobile phone 500 identified in the location determination module 130 is domestic, the control module 110 may in principle determine to disallow the financial transaction (S160). However, even in such a case, the control module 110 may perform a permission check process (S13). This is because a party nominee who leaves a foreign country can leave his mobile phone 500 in Korea. Therefore, in order to carry out financial transactions in a foreign country, the party nominee may ask his or her family or acquaintance to pass a confirmation process. Therefore, even when the location of the mobile phone 500 is determined to be domestic, the control module 110 performs the acceptance check process (S130), and permits the financial transaction depending on whether the acceptance check process is passed. Alternatively, it may be determined to be disallowed (S150 and S160).

On the other hand, when the location of the mobile phone 500 that is determined by the location determination module 130 is not known, that is, the mobile phone 500 is powered off or located in other countries other than domestic and foreign The financial transaction may not be allowed (S160). Alternatively, financial transactions may be allowed (S150). Optional policies are possible, in which case ease of use and security are traded off. Of course, when the power is off, the acceptance confirmation process may not be performed, and when it is located in another station, the acceptance confirmation process may be performed according to roaming in the other station.

2 is a schematic system configuration for an overseas payment authentication method according to another embodiment of the present invention. That is, FIG. 2 conceptually illustrates a case in which the mobile phone 500 is located in Korea. As illustrated in FIG. 2, the overseas payment authentication system 100 may include a predetermined financial terminal 400 located in a foreign country. The financial transaction request signal may be received from the. At this time, the location of the mobile phone 500 may exist in the country as shown in FIG. Therefore, when it is confirmed that the mobile phone 500 exists in Korea, the party nominee may exist in the foreign country or the domestic where the financial transaction request signal is received, and the party nominee exists in the foreign country. In this case, the financial transaction request may be a just request by the party nominee or an unjust request by another party.

In addition, when the party nominee exists in Korea, it is highly likely that the party nominee possesses the mobile phone 500. In such a case, the financial transaction request may be made in the name of the political party's name that the political party's request was granted by the party's name holder (e.g., when his or her card was used by a family member or trusted person) and the party name was not allowed. It may be a fraudulent request for which a financial transaction is requested.

In any case, when it is confirmed that the mobile phone 500 exists in the country, the control module 110 of the overseas payment authentication system 100 according to an embodiment of the present invention sends a permission confirmation signal to the mobile phone 500. Can transmit The control module 110 may allow the financial transaction only when a permission signal for allowing the financial transaction request is received from the mobile phone 500 in response to the permission confirmation signal.

If it is confirmed that the mobile phone 500 exists in Korea and the party nominee exists in the foreign country, the permission signal is output to the overseas payment authentication system 100 by a trusted acquaintance such as the family of the party nominee. Can be. If it is determined that the trusted acquaintance is not a financial transaction request by the party nominee or in case of doubt, it may not output the permission signal. For example, the party nominee may inform his acquaintances in advance of his or her financial transaction plan or in which region. Alternatively, another foreign communication terminal (eg, telephone, e-mail, etc.) may be used to ask the acquaintance to input a permission signal because he or she plans to make a predetermined financial transaction request. Of course, at this time, the mobile phone 500 can be left to the acquaintance. Therefore, the acquaintance may output the permission signal to the overseas payment authentication system 100 only when it is determined that the request is a financial transaction by the party nominee. To this end, the permission confirmation signal output from the control module 110 to the mobile phone 500 may include information on the location of the financial terminal 400 performing the financial transaction request and / or information on the amount of money. have.

The admission signal may be transmitted on a messaging basis such as SMS or MMS, and the admission signal may be transmitted in a callback URL message of the messaging. According to an embodiment, a predetermined application is installed in the mobile phone 500 to implement the technical idea of the present invention. The permission confirmation signal is transmitted to the mobile phone 500 through the application. May be transmitted to the control module 110.

If the party nominee does not cause inconvenience to the acquaintance such as input of a permission signal, the mobile phone 500 may be roamed and carried as described above.

As a result, by allowing the financial transaction request only when an allowance signal is received from the mobile phone 500 by an acquaintance, it is possible to prevent the case where the illegal request is allowed. Of course, if the acquaintance does not output the permission signal may be inconvenient that the financial transaction request is not allowed, but in order to prevent this case can be solved by having the party nominee roaming own mobile phone (500). have.

On the other hand, if it is confirmed that the mobile phone 500 exists in Korea, and the party nominee also exists in the country, the financial transaction request received from a foreign country is the other person (eg, family or acquaintance) to whom the party nominee permits the financial transaction. Etc.) may be a financial transaction.

In this case, since the party nominee may have his mobile phone 500, the party nominee may output a permission signal for allowing the financial transaction. Alternatively, the party nominee does not output the permission signal because the financial transaction request that he or she does not know is performed in his own name. Therefore, it is possible to prevent a case where an illegal financial transaction request is allowed.

As a result, according to the overseas payment authentication method according to an embodiment of the present invention, since it is a big object and effect to prevent the case that the illegal financial transaction request is allowed, it may be acceptable that some inconvenience occurs in performing the financial transaction. It can be a side effect.

The overseas payment authentication method according to an embodiment of the present invention can be embodied as computer readable codes on a computer readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, hard disk, floppy disk, optical data storage, and the like, and also in the form of carrier waves (e.g., transmission over the Internet). It also includes implementations. The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers skilled in the art to which the present invention pertains.

Although the present invention has been described with reference to one embodiment shown in the drawings, this is merely exemplary, and those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

Claims (1)

A) the foreign payment authentication system receiving a financial transaction request signal corresponding to a party nominee from a financial terminal located in a foreign country;
B) confirming the location of the mobile phone of the party holder by the overseas payment authentication system;
If it is determined that the location of the mobile phone exists in the foreign country, the overseas payment authentication system determines whether to permit the financial transaction based on whether the location of the financial terminal and the location of the mobile phone correspond to each other. An overseas payment authentication method comprising the step c) of determining.

Images