KR20170099341A - System for proving financial transaction service - Google Patents

Abstract

The present invention relates to a system for providing a financial transaction service. The purpose of the present invention is to provide faster and more convenient financial transactions using Internet banking and automatic teller machine (ATM) and to improve security of financial transactions. According to an embodiment of the present invention, provided is a system for providing an Internet financial transaction service by using an application installed on a user terminal and a financial transaction approval server. The application is configured to acquire Q-link information by scanning an identification code through the user terminal when the Q-link information including financial transaction information input by a user is converted to the identification code and output through a bank website system, and to transmit the acquired Q-link information to the financial transaction approval server. The financial transaction approval server is configured to generate the Q-link information, based on the financial transaction information received from the bank website system, so as to transmit the same to the bank website system, and to receive a transaction approval message with respect to the financial transaction information from the application depending on whether the Q-link information generated in the financial transaction approval server matches the Q-link information received from the application, so as to transmit the same to the bank website system.

Description

SYSTEM FOR PROVING FINANCIAL TRANSACTION SERVICE [0001]

An embodiment of the present invention relates to a financial transaction service providing system for using Internet banking and ATM (Automatic Teller Machine), respectively.

Due to the development of network and data communication technologies, online services such as issuance of public documents through the Internet, banking, shopping, and securities trading are being provided.

User authentication technology is being applied to provide such online services. A certificate is electronic information generated by a Certificate Authority (CA) to identify a user online.

Such authorized certificates are generally stored in a hard disk or a removable disk of a computer or a smart device, which may cause a password to be exposed or hacked. In addition, the user can perform user authentication together with the authorized certificate by inputting the number recorded in the financial security card issued offline from the financial institution in the financial transaction.

However, this method requires checking the financial security card at each financial transaction, and when the financial security card is lost, it is not possible to perform the financial transaction, and it is troublesome to visit the financial institution and reissue it.

Accordingly, recently, OTP (One Time Password) using a one-time password has been proposed. An OTP is a one-time password that is generated for user identification of an authorized certificate.

However, since OTP is issued by a financial institution and the issuance cost is incurred and it is necessary to carry it for financial transactions, there is a fear of loss, and there is a possibility of being used for crime.

Embodiments of the present invention provide a financial transaction service providing system that improves security for financial transactions more quickly and conveniently in financial transactions using Internet banking and ATM (Automatic Teller Machine).

A financial transaction service providing system according to an embodiment of the present invention is a system for providing an Internet financial transaction service using an application installed in a user terminal and a financial transaction approval server, Link information including the financial transaction information input by the user is converted into an identification code and is output, the terminal acquires the cue-link information by scanning the identification code through the user terminal, Link information to the financial transaction approval server, the financial transaction approval server generates the cue-link information based on the financial transaction information received from the bank website system and transmits the cue-link information to the bank website system, And the queue-link information generated by the financial transaction approval server and the application The queue received from the illustrations - depending on whether or not the link information by matching the received transaction approval message to the financial transaction information from the application will be transferred to the bank's Web site system.

In addition, the identification code may be output in the form of at least one of a QR code, a bar code, and NFC tag information.

Also, the financial transaction information may include at least one of a deposit / withdrawal account and a transfer amount.

In addition, the application, upon receiving a user approval request from the financial transaction approval server, receives user authentication information through the user terminal, performs user authentication, and when the user authentication is completed, And the authentication information of the user may include at least one of a password and biometric information.

Also, the financial transaction approval server includes a sub black box and a main black box, the sub black box receives the financial transaction information from the bank website system to generate the cue-link information, Link information from the application to the banking website system and the main black box, the main black box receives the cue-link information from the application, and receives the cue-link information from the sub- Link information, and if there is matching cue-link information, receives the transaction approval message from the application by requesting a user approval from the application, and transmits the transaction approval message to the bank website system through the sub- An acknowledgment message can be transmitted.

A financial transaction service providing system according to another embodiment of the present invention is a system for using an ATM (Automatic Teller Machine) financial service using an application installed in a user terminal and a financial transaction approval server, Link information including financial service information selected by the user through the ATM is converted into an identification code and is output, the terminal acquires the cue-link information by scanning the identification code through the user terminal, Link information and user identification information to the financial transaction approval server, selects the transaction account information from the user, and transmits the transaction information to the financial transaction approval server, and the financial transaction approval server transmits the financial service information Link information, and transmits the generated cue-link information to the ATM, Requesting the application to select the transaction account information based on the cue-link information generated by the transaction acceptance server, the cue-link information received from the application, and the user identification information, And transmits the received transaction account information to the ATM.

In addition, the identification code may be output in the form of at least one of a QR code, a bar code, and NFC tag information.

In addition, the transaction account information may include at least one of a transaction bank of the user, an account number of the transaction bank, a transaction amount, and an ID of the electronic wallet.

Also, the application may perform user authentication by receiving user authentication information through the user terminal, and when the user authentication is completed, transmitting the transaction account information selected by the user to the financial transaction approval server, Authentication information may include at least one of a password and biometric information.

The financial transaction approval server may include a first sub-black box, a main black box, and a second sub-black box, wherein the first sub-black box receives the financial service information from the ATM, And transmits the generated cue-link information to the ATM and the main black box, respectively, the main black box receives the cue-link information from the application, The method of claim 1, further comprising: requesting and receiving the transaction account information from the application if there is matching cue-link information by matching the received cue-link information with the application, The second sub-black box transmits a transaction approval message to the second sub-black box, - receiving link information requesting to provide the transaction account information, receiving a request for providing the transaction account information from the main black box using the cue-link information received from the application, To the application.

According to the embodiment of the present invention, it is possible to provide a financial transaction service providing system which is quicker and more convenient in financial transactions using Internet banking and ATM (Automatic Teller Machine) and improves security for financial transactions.

1 is a block diagram illustrating a system for providing a financial transaction service for using Internet banking according to an embodiment of the present invention.
2 is a diagram illustrating an operation procedure of a financial transaction service providing system for using Internet banking in a PC environment according to an embodiment of the present invention.
3 is a diagram illustrating an operation procedure of a financial transaction service providing system for using Internet banking in a mobile environment according to an embodiment of the present invention.
4 is a block diagram showing a configuration of a financial transaction service providing system for using an ATM (Automatic Teller Machine) according to another embodiment of the present invention.
FIG. 5 is a view for explaining an operation procedure of a financial transaction service providing system in using ATM cash deposits and withdrawals according to another embodiment of the present invention.
FIG. 6 is a diagram illustrating an operation procedure of a financial transaction service providing system when using an electronic wallet through ATM according to another embodiment of the present invention.
FIGS. 7, 8, and 11 are views for explaining functions and effects of a system for providing a financial transaction service through a QR code scan according to an embodiment of the present invention.
9 is a diagram illustrating a login process of a financial transaction service providing system through a QR code scan according to an embodiment of the present invention.
FIG. 10 is a diagram for comparing security authentication solutions of a financial transaction service providing system through a QR code scan according to an embodiment of the present invention.
12 is a flowchart illustrating a security authentication operation of a financial transaction service providing system through a QR code scan according to an embodiment of the present invention.
13 is a diagram illustrating a transaction authentication process of a financial transaction service providing system through a QR code scan according to an embodiment of the present invention.

The terms used in this specification will be briefly described and the present invention will be described in detail.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. Also, in certain cases, there may be a term selected arbitrarily by the applicant, in which case the meaning thereof will be described in detail in the description of the corresponding invention. Therefore, the term used in the present invention should be defined based on the meaning of the term, not on the name of a simple term, but on the entire contents of the present invention.

When an element is referred to as "including" an element throughout the specification, it is to be understood that the element may include other elements, without departing from the spirit or scope of the present invention. Also, the terms "part," " module, "and the like described in the specification mean units for processing at least one function or operation, which may be implemented in hardware or software or a combination of hardware and software .

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

1 is a block diagram illustrating a system for providing a financial transaction service for using Internet banking according to an embodiment of the present invention.

Referring to FIG. 1, a financial transaction service providing system 100 for using Internet banking according to an embodiment of the present invention may include at least one of an application 110 and a financial transaction approval server 120 , And can provide a financial transaction service in cooperation with the bank website system (10).

The bank website system 10 is a system for providing a web site for using an Internet banking service such as a money transfer, and is executed through a web browser or a mobile browser, and is available while the login is maintained for each user.

The bank website system 10 can receive financial transaction information through a specific web page while the user is logged in to the corresponding bank web site. The financial transaction information may include at least one of the account transfer information and the amount information. The account transfer information may include the name of the bank to deposit and withdraw and the bank account number of the corresponding bank. The amount information may include a transfer amount.

When the banking website system 10 receives the financial transaction information through the web page, the banking website system 10 can transmit the inputted financial transaction information to the financial transaction approval server to request the cue-link information. The cue-link information is information for generating an identification code. The cue-link information includes not only financial transaction information but also a timestamp, a session key, session information, a message authentication code, And may further include at least one of domain information of the site. The processing type information may include information on contents of a processing type of 'account transfer processing request'. Since such a web site is hosted through a web server, the web site includes a specific function of the web server for convenience of explanation.

Upon receipt of the cue-link information from the financial transaction approval server 120, the bank website system 10 can convert the received cue-link information into an identification code and output it. Here, the identification code may be output in the form of at least one of QR code, bar code and NFC tag information. For example, if the identification code is a QR code or a bar code, the identification code can be displayed by being displayed on a screen of a display device that displays the web site. If the identification code is NFC tag information, it can be output as an electrical signal having a specific frequency through the NFC module .

Meanwhile, the bank website system 10 can not only generate the cue-link information in the form of at least one of a QR code, a barcode and NFC tag information, but can also be used for a short distance wireless communication such as Bluetooth or a text message To be transmitted to the user terminal through the Internet.

The application 110 is software downloaded and installed in the user terminal. When the identification code is output from the bank website system 10, the application 110 scans the corresponding ID code through the user terminal to acquire the cue-link information, Link information to the financial transaction approval server 120 through the user terminal.

More specifically, when the identification code is output from the bank website system 10 in the form of a QR code or a barcode, the application 110 can scan through the camera function of the user terminal, , The NFC tag information can be received through the NFC reader of the user terminal to scan the corresponding identification code. Of course, the identification code may be transmitted to the user terminal through a short-range wireless communication such as Bluetooth or a text message as described above.

The application 110 transmits the cue-link information including the financial transaction information acquired from the bank website system 10 to the financial transaction approval server 120 and receives the cue-link information from the financial transaction approval server 120 For example. Here, receiving the approval for the cue-link information may mean that the cue-link information transmitted from the application 110 is registered in the financial transaction approval server 120 and that the corresponding information is valid information.

When the application 110 receives approval for the cue-link information from the financial transaction approval server 120, the application 110 can display the details of the financial transaction information and can perform user authentication for financial transaction approval. Here, the user authentication information is information for user authentication with respect to the application 110, and includes information on at least one of password and biometric information. The password means the password designated by the user, and the biometric information can be at least one of the fingerprint, the footstep, the iris, the blood vessel, and the facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login. The password means a password designated by the user, and the biometric information may be at least one of a fingerprint, a footstep, an iris, a blood vessel, and a facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login.

The financial transaction approval server 120 generates the cue-link information based on the financial transaction information received from the bank website system 10 and transmits the cue-link information to the bank website system 10, And receives the transaction approval message from the application 110 according to whether the cue-link information generated by the application 110 matches the cue-link information received from the application 110, .

For this, the financial transaction approval server 120 may include at least one of a sub black box 121 and a main black box 122. One main black box 122 may be connected to a plurality of sub black boxes 121 to form a unit group, and the financial transaction approval server 120 may include a plurality of unit groups.

The sub-black box 121 communicates with the bank website system 10 and can process or generate necessary information according to the request of the bank website system 10 and provide it. More specifically, when the sub-black box 121 receives financial transaction information from the bank website system 10, it may generate the cue-link information including financial transaction information. The financial transaction information may include at least one of the account transfer information and the amount information. The account transfer information may include the name of the bank to be transferred and the account number of the corresponding bank, and the amount information may include the transfer amount have. The cue-link information includes not only financial transaction information but also at least one of a timestamp, a session key, session information, a message authentication code, processing type information, . The processing type information may include information on contents of a processing type of 'account transfer processing request'.

The sub-black box 121 may transmit the generated cue-link information to the bank website system 10 and the main black box 122, respectively. At this time, the main black box 122 may be registered with the cue-link information received from the sub black box 121.

The main black box 122 may register the received cue-link information from the sub-black box 121 and may receive the cue-link information from the application 110 and register it with the sub- After confirming that the cue-link information is matched with the cue-link information received from the application 110, the application 110 can request the user's approval. At this time, information on at least one of a name of a bank to be inputted / withdrawn, a deposit / withdrawal account number of the corresponding bank, and a transfer amount can be displayed together with a user approval request together with the request for approval of the user through the application 110. Also, user authentication for financial transaction approval can be performed through the application 110. [ Here, the user authentication information is information for user authentication with respect to the application 110, and includes information on at least one of password and biometric information. The password means the password designated by the user, and the biometric information can be at least one of the fingerprint, the footstep, the iris, the blood vessel, and the facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login. The password means a password designated by the user, and the biometric information may be at least one of a fingerprint, a footstep, an iris, a blood vessel, and a facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login.

The main black box 122 may receive a transaction approval message for approving financial transaction information from the application 110 when the user authentication is completed through the application 110. [ Here, the transaction approval message can be read through the sub black box 121 as an encrypted authentication message for approving the financial transaction, and can be signed with the user's secret key.

The sub black box 121 receives the transaction approval message from the main black box 122 and transmits the transaction approval message to the bank website system 10 to approve the financial transaction and the bank website system 10 transfers the transaction approval message to the bank system 20 ) To transmit the financial transaction information so that the corresponding financial transaction is processed. Accordingly, the corresponding financial transaction can be processed and the corresponding web page can be updated.

2 is a diagram illustrating an operation procedure of a financial transaction service providing system for using Internet banking in a PC environment according to an embodiment of the present invention.

First, the user accesses the bank web site system 10 via the web browser of the PC, and accesses the bank web site system 10 via the web page, and obtains financial transaction information, for example, an account including at least one of a bank name, You can enter transfer information (①).

Next, the bank website system 10 may request the financial transaction approval server 120 to request the cue-link information when the user inputs the financial transaction information through the web browser and selects execution of transfer. At this time, the bank website system 10 not only transmits financial transaction information for requesting the cue-link information, but also includes a timestamp, a session key, session information, a message authentication code, Information and domain information of the corresponding web site to the financial transaction approval server 120. [

Next, the financial transaction approval server 120 may generate and transmit the cue-link information to the bank website system 10 using at least one of the information received from the bank website system 10 ( ②).

Next, the bank website system 10 can convert the cue-link information received from the financial transaction approval server 120 into an identification code and output it ((3)). Here, the identification code includes the cue-link information and may be output in the form of at least one of QR code, bar code and NFC tag information. For example, in the case of a QR code or a bar code, an identification code may be displayed by being displayed on the screen of the corresponding PC. In the case of NFC tag information, an NFC module mounted on the PC may output an electrical signal having a specific frequency have.

Next, the application 110 may scan the identification code output from the screen of the PC to obtain the cue-link information included in the identification code (step 4).

Next, the application 110 can perform user authentication (step 5). The user authentication information may include information on at least one of a password and biometric information. The password means the password designated by the user, and the biometric information can be at least one of the fingerprint, the footstep, the iris, the blood vessel, and the facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login. The password means a password designated by the user, and the biometric information may be at least one of a fingerprint, a footstep, an iris, a blood vessel, and a facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login.

Next, when the user authentication is completed through the application 110, a transaction approval message for the financial transaction can be transmitted from the application 110 to the financial transaction approval server 120, and the transaction approval message is transmitted to the bank website system 10 ), So that the banking system can proceed with the corresponding financial transaction, ie, account transfer (⑥).

Thereafter, the bank web site system 10 updates the corresponding web page to output the transfer result (7).

3 is a diagram illustrating an operation procedure of a financial transaction service providing system for using Internet banking in a mobile environment according to an embodiment of the present invention.

First, the user accesses the bank web site system 10 through his / her mobile browser of the user terminal and transmits at least one of financial transaction information, such as bank name, deposit account number, and transfer amount, You can enter your account transfer information (①).

Next, the bank website system 10 can request the financial transaction approval server 120 to request the cue-link information when the user inputs financial transaction information through the mobile browser and selects execution of transfer. At this time, the bank website system 10 not only transmits financial transaction information for requesting the cue-link information, but also includes a timestamp, a session key, session information, a message authentication code, Information and domain information of the corresponding web site to the financial transaction approval server 120. [

Next, the financial transaction approval server 120 may generate and transmit the cue-link information to the bank website system 10 using at least one of the information received from the bank website system 10 ( ②).

Next, the bank website system 10 can convert the cue-link information received from the financial transaction approval server 120 into an identification code and output it ((3)). Wherein the identification code can be output in the form of at least one of a QR code and a bar code. For example, in the case of a QR code or a bar code, the identification code may be displayed by being displayed on the screen of the user terminal.

Next, when the user selects or clicks the identification code output through the screen of the user terminal itself, the application 110 is automatically identified and can acquire the cue-link information included in the identification code (4).

Next, the application 110 can perform user authentication (step 5). The user authentication information may include information on at least one of a password and biometric information. The password means the password designated by the user, and the biometric information can be at least one of the fingerprint, the footstep, the iris, the blood vessel, and the facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login. The password means a password designated by the user, and the biometric information may be at least one of a fingerprint, a footstep, an iris, a blood vessel, and a facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login.

Next, when the user authentication is completed through the application 110, a transaction approval message for the financial transaction can be transmitted from the application 110 to the financial transaction approval server 120, and the transaction approval message is transmitted to the bank website system 10 ), So that the banking system can proceed with the corresponding financial transaction, ie, account transfer (⑥).

Thereafter, the bank web site system 10 updates the corresponding web page to output the transfer result (7).

4 is a block diagram showing a configuration of a financial transaction service providing system for using an ATM (Automatic Teller Machine) according to another embodiment of the present invention.

Referring to FIG. 4, the financial transaction service providing system 400 according to another embodiment of the present invention may include at least one of an application 410 and a financial transaction approval server 420.

The ATM (Automatic Teller Machine) 40 is an automatic teller machine or an automatic financial transaction terminal, and can be used as a cash transaction machine such as a cash transaction Payment, cash deposit, account transfer, and currency exchange.

When the user selects the service menu information provided by the ATM, such as the deposit, withdrawal, or transfer, the ATM 40 transmits at least the financial service information to the financial transaction approval server 420 And may request the cue-link information. At this time, the ATM 40 transmits at least one of the timestamp, the session key, the session information, the message authentication code, and the domain information of the ATM management server in addition to the financial service information And transmits it to the financial transaction approval server 420. Accordingly, the financial transaction approval server 420 can generate the cue-link information based on at least one of the information received from the ATM 40 and transmit the cue-link information to the ATM 40.

When the ATM 40 receives the cue-link information from the financial transaction approval server 420, it can convert the cue-link information into an identification code and output it. Here, the identification code may be output in the form of at least one of QR code, bar code and NFC tag information. For example, if the identification code is a QR code or a bar code, it can be displayed by being displayed on the screen of the ATM 40. If the identification code is NFC tag information, it can be outputted as an electrical signal having a specific frequency through a separate NFC module .

The application 410 may scan the identification code output from the ATM 40 through the user terminal to obtain the cue-link information. In addition, the application 410 may transmit the cue-link information and the user identification information to the financial transaction approval server 420 and check whether the cue-link information is registered in the financial transaction approval server 420 through a matching process . At this time, if it is confirmed that the cue-link information is registered through the financial transaction approval server 420, the application 410 transmits the transaction account information of the user from the financial transaction approval server 420 using the user identification information Can be provided.

The user identification information may include at least one of user information and hardware information of a user terminal. The user information may include a user's application login ID and the like, and the hardware information may include an ID of the user terminal or a serial number of the user terminal. The financial transaction approval server 420 stores bank related information registered by the user and can extract transaction account information using the user identification information and provide the transaction account information to the application 110. Where the transaction account information may include bank listing information and the bank listing information may include the bank name of the account the user is holding. For example, the bank list information can be expressed as 'Woori Bank', 'Shinhan Bank', or 'Kookmin Bank'. In addition, the transaction account information may include information on a bank account number held by the user. You can have one account number for one bank, or you can have multiple account numbers. Accordingly, the transaction account information may further include information on all the account numbers held for each bank in addition to the bank list information. In addition, when the deposit / withdrawal service is used from the ATM 40 using the electronic wallet, the transaction account information may further include ID information of the electronic wallet.

When the application 110 receives the bank list information from the financial transaction approval server 420, at least one bank name of the plurality of bank lists may be selected by the user. At this time, the application 110 may request the financial transaction approval server 420 for the account list information for the corresponding bank. In response to the request, the application 110 receives the account list information of the corresponding bank from the financial transaction approval server 420, Any one of the corresponding account lists can be selected. When requesting account list information to the financial transaction approval server 420, if the request is approved and confirmed in the financial transaction approval server 420, the account list information of the corresponding bank is transmitted to the application 110, As shown in FIG. A more detailed description thereof will be described later.

The financial transaction approval server 420 may include at least one of a first sub-black box 421, a main black box 422, and a second sub-black box 423.

The first sub-black box 421 may receive financial service information from the ATM 40 to generate and transmit the cue-link information to the ATM 40. At this time, the first sub-black box 421 receives not only the financial service information but also a timestamp, a session key, session information, a message authentication code, And may transmit at least one of the domain information of the server to the financial transaction approval server 420. Accordingly, the financial transaction approval server 420 can generate the cue-link information based on at least one of the information received from the ATM 40 and transmit the cue-link information to the ATM 40. In addition, the first sub-black box 421 may transmit the generated cue-link information to the main black box 422 to allow the main black box 422 to register the cue-link information.

The main black box 422 may register the cue-link information delivered from the first sub-black box 421 and receive the cue-link information from the application 410. Also, the main black box 421 matches the cue-link information received from the application 410 with the pre-registered cue-link information, and if there is matching cue-link information, - You can approve link information.

Meanwhile, the main black box 422 receives the user identification information together with the cue-link information from the application 410, searches or extracts the bank list information for the user using the user identification information, As shown in FIG. Where the bank listing information may include the name of the user's bank. For example, the bank list information can be expressed as 'Woori Bank', 'Shinhan Bank', or 'Kookmin Bank'.

The application 410 may select one of the bank lists from the user and request the second sub black box 423 for the account list information for the selected bank. At this time, when the application 410 requests the account list information to the second sub-black box 423, the application 410 can transmit the cue-link information and information for identifying the corresponding bank.

The second sub-black box 423 transmits the cue-link information received from the application 410 to the main black box 422 to determine whether the request of the account list information of the application 410 is a correct request . At this time, the main black box 422 confirms whether the cue-link information received from the second sub-black box 423 is pre-registered information, and if it is pre-registered information, It may acknowledge that the request is a valid request and notify the second sub-black box 423. Accordingly, the second sub-black box 423 can list the account number information held through the corresponding bank according to the approval of the main black box 422 and transmit the list to the application 410.

The application 410 receives the account list information from the second sub-black box 423, and can perform user authentication when any one of the account lists is selected by the user. Here, the user authentication information is information for user authentication to the application 410, and includes information on at least one of password and biometric information. The password means the password designated by the user, and the biometric information can be at least one of the fingerprint, the footstep, the iris, the blood vessel, and the facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login. The password means a password designated by the user, and the biometric information may be at least one of a fingerprint, a footstep, an iris, a blood vessel, and a facial image information. In addition, the authentication information can be used not only as a user authentication but also as information for automatic login.

When the user authentication is completed, the application 410 can encrypt and sign the corresponding bank identification information and the account number information, and transmit the sign to the main black box 422.

The main black box 422 transmits the bank identification information and account number information received from the application 410 to the first sub black box 421 and to the ATM 40 through the first sub black box 421 .

Based on the bank identification information and the account number information received from the first sub-black box 421, the ATM 40 can execute the service according to the financial service information input by the user, that is, withdrawal, deposit or account transfer have. At this time, the user can enter the account password in the ATM 40 to proceed with the subsequent procedure. For example, in the case of withdrawal, if the withdrawal amount is further inputted, the ATM 40 withdraws the corresponding amount according to the balance status of the account, operates in a state in which the user can receive cash or check in the case of the deposit, In the case of transfer, the account number of the recipient should be additionally entered.

The first sub-black box 421 is a means for interlocking with a bank belonging to the ATM 40. The second sub-black box 423 is a means for interlocking with a bank of an account held by the user. When the deposit and withdrawal of the account of the bank is carried out at the ATM of the bank, the first and second sub black boxes 421 and 423 may be assigned and operated as the same black box.

In the above description, the ATM transfer and account transfer have been described. However, when the user wants to use the account held by the user as the electronic wallet, the ATM can be utilized in the above-described configuration and method.

FIG. 5 is a view for explaining an operation procedure of a financial transaction service providing system in using ATM cash deposits and withdrawals according to another embodiment of the present invention.

First, the user can select one of the financial transaction information, for example, the deposit, withdrawal, and transfer of the financial transaction menu in the ATM 40 (1).

Next, the ATM 40 receives the queue-link information from the financial transaction approval server 420 (2), and generates and outputs an identification code using the received cue-link information (3). Here, the identification code may be output in the form of at least one of a QR code, a bar code, and NFC tag information. For example, in the case of a QR code or bar code, the identification code can be displayed by being displayed on the screen of the ATM 40. [ In the case of NFC tag information, the NFC tag information can be output as an electrical signal having a specific frequency through the NFC module mounted on the PC.

Next, the application 410 can acquire the cue-link information included in the identification code by scanning the identification code from the screen of the ATM 40 using the user terminal (4).

Next, the application 410 can perform an authentication process for receiving transaction account information from the financial transaction approval server 420 (step 5).

Next, the application 410 can fetch the transaction account information from the financial transaction approval server 420 and output the account list (6).

Next, the application 410 can select an account from the user, input the deposit or withdrawal amount, and enter the account number of the receiver in case of the account transfer (7).

Next, the application 410 can input the password of the corresponding account in the ATM 40 (8).

Next, the bank system approves the financial transaction information, that is, withdrawal, deposit or account transfer (9), and the user can withdraw or deposit cash at the ATM 40 (10). In addition, when the user wants to transfer money, the account transfer is completed, and the transaction details can be outputted through the screen of the ATM 40. [

FIG. 6 is a diagram illustrating an operation procedure of a financial transaction service providing system when using an electronic wallet through ATM according to another embodiment of the present invention.

First, the user can select a deposit or withdrawal menu from the ATM 40 (1).

The next ATM 40 can fetch a cue-link from the financial transaction approval server 420 (2).

Next, the ATM 40 can output an identification code using the cue-link. Here, the identification code may be output in the form of at least one of QR code, bar code, and NFC tag information as described above (3).

Next, the ATM 40 can scan the identification code using the application 410 (4).

Next, the user completes the authentication (5).

Next, the ATM 40 can fetch the electronic wallet information of the user (6).

Next, the user can add cash to the ATM 40 in case of a deposit, or input the withdrawal amount into the ATM 40 in case of withdrawal, and input the authentication password (7).

Next, the banking system can approve the deposit and update the user's electronic wallet (8). In case of withdrawal, the banking system can approve the withdrawal and update the user's electronic wallet (⑧).

Thereafter, the ATM 40 can output the deposit result (9), and can receive cash from the ATM 40 in case of withdrawal (9).

FIGS. 7, 8 and 11 are views for explaining functions and effects of a system for providing a financial transaction service through a QR code scan according to an embodiment of the present invention. FIG. 9 is a flowchart illustrating a QR code scan 10 is a view for comparing security authentication solutions of a financial transaction service providing system through a QR code scan according to an embodiment of the present invention, FIG. 13 is a flowchart illustrating a flow of a security authentication service of a financial transaction service providing system through a QR code scan according to an embodiment of the present invention. FIG. 13 is a flowchart illustrating a transaction authentication process Fig.

As shown in FIGS. 7, 8, and 11, the financial transaction service providing system using the QR code scan according to the embodiment of the present invention does not require an active X and requires a PKI- Phones, and security authentication applications (ie, FASSKEY BANK apps).

That is, the system for providing the financial transaction service through the QR code scan according to the embodiment of the present invention provides the Internet banking flow through the QR code scan, blocks the logical hacking and the FAKE fundamentally, and realizes strong identity authentication. In addition, one embodiment of the present invention is a security authentication and security solution for all banks in the world. It is a solution for MITM hacking source, strong security identity authentication, substitution effect of public authentication, OTP substitution and concurrency, It is possible to provide effects such as security transfer, no need for Active X, non-hackable architecture, and convenience of the user.

That is, the embodiment of the present invention can make it impossible to hack Internet / App banking by managing all financial transactions and logins safely with a single APP.

As shown in FIG. 9, in the login protocol flow of the financial transaction service providing system through the QR code scan according to the embodiment of the present invention, the web site provided by the financial server is transmitted from the black box server (BB) The process of obtaining the QR code (qlink), the process of the user terminal receiving the QR code from the website, the process of the user terminal providing the QR code to the main black box server (MBB) for the check, The black box server receives the authentication key from the main black box server, the user terminal sends a TLE (TLE protocol) response, which is the signature of the user, to the website, the web site transmits the response to the black box server, , Transferring the user ID, log-in completed by the user, and updating the web site. In the figure, V denotes a VPN connection, T denotes a TLE protocol, and S denotes an optional SSL / TLS connection state.

Accordingly, as shown in FIG. 11, the security authentication solution of the financial transaction service providing system through the QR code scan according to the embodiment of the present invention provides all of the security active X, the public certificate, and the Internet banking without OTP .

Also, as shown in FIG. 12, the security authentication work of the financial transaction service providing system through the QR code scan according to the embodiment of the present invention uses a strong security algorithm and protocol Can be provided.

As shown in FIG. 13, the transaction authentication process of the financial transaction service providing system through the QR code scan according to the embodiment of the present invention includes a process in which a web site requests a QR code to a black box server, A process in which a black box server provides a QR code to a web site, a process in which a web site transmits a QR code to a user terminal, a process in which a user terminal transmits a QR code to a main black box server A process in which the user terminal receives approval and TD from the main black box server, a process in which the user terminal decrypts and displays the TD, a process in which the user terminal approves the transfer via the user terminal, , The process of passing the reply to the main black box server to the black box server, the process of passing the approval to the black box server, Site includes a process for updating the process, website pages that deliver on the bank transfer system in conjunction with the financial server. At this time, when the user terminal approves the transfer, fingerprint recognition or OTP can be used.

Accordingly, the system and method for providing financial transaction service through QR code scan according to the embodiment of the present invention can manage all the financial transactions and logins safely without worry of hacking through the Internet or app through application of smart phone . In addition, the embodiment of the present invention can provide an Internet banking service through QR code scanning that does not require an active X, a public certificate, or an OTP.

As described above, the present invention is not limited to the above-described embodiment, but can be applied to a system for providing financial transaction service according to the present invention, It will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention.

100: financial transaction service providing system
110: Application
120: financial transaction approval server
121: Sub black box
122: main black box
400: financial transaction service providing system
410: Application
420: financial transaction approval server
421: first sub-black box
422: Main black box
423: Second sub-black box
1: User
10: Bank Website System
20: Bank System
40: ATM

Claims (10)

The present invention relates to a system for providing an Internet financial transaction service using an application installed in a user terminal and a financial transaction approval server,
When the application converts the cue-link information including the financial transaction information inputted by the user through the bank website system into an identification code, the application scans the identification code through the user terminal and transmits the cue- And transmits the acquired cue-link information to the financial transaction approval server,
Wherein the financial transaction approval server generates the cue-link information based on the financial transaction information received from the bank website system and transmits the cue-link information to the bank website system, Link information and the cue-link information received from the application, and receives the transaction approval message for the financial transaction information from the application and delivers the transaction approval message to the banking website system. .
The method according to claim 1,
Wherein the identification code is output in the form of at least one of a QR code, a bar code, and NFC tag information.
The method according to claim 1,
Wherein the financial transaction information includes at least one of a deposit and withdrawal account and a transfer amount.
The method according to claim 1,
The application receives user authentication information from the financial transaction approval server and receives user authentication information through the user terminal. When the user authentication is completed, the application transmits the transaction approval message to the financial transaction approval server and,
Wherein the authentication information of the user includes at least one of a password and biometric information.
The method according to claim 1,
Wherein the financial transaction approval server includes a sub black box and a main black box,
The sub-black box receives the financial transaction information from the bank website system to generate the cue-link information, and transmits the generated cue-link information to the bank website system and the main black box, respectively ,
The main black box receives the cue-link information from the application, matches the cue-link information received from the sub-black box and the application with each other, and if there is matching cue-link information, Requesting a user approval, receiving the transaction approval message from the application, and transmitting the transaction approval message to the bank website system through the sub black box.
The present invention relates to a system for using an ATM (Automatic Teller Machine) financial service using an application installed in a user terminal and a financial transaction approval server,
Wherein the application scans the identification code through the user terminal to acquire the cue-link information when the cue-link information including the financial service information selected by the user is converted into an identification code and output through the ATM, Transmitting the acquired cue-link information and user identification information to the financial transaction approval server, selecting the transaction account information from the user and transmitting the selected cue-link information and the user identification information to the financial transaction approval server,
The financial transaction approval server generates the cue-link information based on the financial service information received from the ATM and transmits the cue-link information to the ATM. The cue-link information generated from the financial transaction approval server and the application Requesting the application to select the transaction account information on the basis of the received cue-link information and the user identification information, and transmitting the transaction account information received through the application to the ATM Financial transaction service delivery system.
The method according to claim 6,
Wherein the identification code is output in the form of at least one of a QR code, a bar code, and NFC tag information.
The method according to claim 6,
Wherein the transaction account information includes at least one of a user's transaction bank, an account number of the transaction bank, a transaction amount, and an ID of an electronic wallet.
The method according to claim 6,
The application receives user authentication information through the user terminal and performs user authentication. When the user authentication is completed, the application transmits the transaction account information selected by the user to the financial transaction approval server,
Wherein the authentication information of the user includes at least one of a password and biometric information.
The method according to claim 6,
The financial transaction approval server includes a first sub-black box, a main black box, and a second sub-black box,
The first sub-black box receives the financial service information from the ATM to generate the cue-link information, transmits the generated cue-link information to the ATM and the main black box,
Wherein the main black box receives the cue-link information from the application, matches the cue-link information received from the first sub-black box and the application with each other, Requesting and receiving the transaction account information from an application, transmitting a transaction approval message for the financial service information to the ATM through the first sub-black box,
Wherein the second sub-black box receives the cue-link information from the application and is requested to provide the transaction account information and receives the cue-link information from the main black box using the cue- And provides the transaction account information to the application in response to a request for information provision.

Images