KR20180073254A - Systel, terminal and method for providing financial system - Google Patents

Abstract

According to the present invention, a financial service system includes a registration unit for registering at least one of a registration image file and a registration image hash value to be used for user authentication in response to a request from a user terminal, a request unit for receiving a financial transaction processing request from the user terminal, and an authentication processing unit for performing the user authentication based on the registration image file and the registration image hash value. Accordingly, the present invention can prevent the forgery of a user authentication means.

Description

TECHNICAL FIELD [0001] The present invention relates to a financial service system, a terminal for financial service,

The present invention relates to a financial service system, a terminal for financial services, and a method for providing financial services thereof.

In the past, customers visited financial institutions and handled financial affairs. In recent years, it has been possible to handle financial transactions without visiting financial institutions through networks. Typical examples are telebanking or internet banking. Recently, as smart devices have become widespread, the use of mobile banking, which handles financial transactions using mobile devices, is becoming common.

Such telecom banking, Internet banking and mobile banking are non-face-to-face financial transactions that do not face the employees of the financial institution. The non-face-to-face financial transaction processing method allows a customer to request financial transaction processing through his / her terminal such as a wired telephone, a computer, or a smart phone, and confirms the financial transaction processing result through his / her terminal.

As described, the processing of non-face-to-face financial transactions is performed using electronic financial instruments. As a result, financial accidents are diversifying and increasing compared to face-to-face financial transactions. For example, there are frequent frauds such as fraud and voice phishing, which are performed by hacking information related to Internet banking. In order to prevent such financial accidents, identity verification procedures are being strengthened.

In recent years, a so-called two-channel authentication method using ARS authentication has been widely used, in which a financial institution makes a call to a telephone set in the user's name to request authentication. However, this method is mainly incurred because a charge is generated when a wireless telephone is used, and when a financial transaction is made at the same time, the time is delayed in the confirmation process.

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and it is an object of the present invention to provide an image processing apparatus and method that can select an image stored in a telephone set of a user himself or herself, Or to verify the identity of the user without delay.

A financial service system according to an exemplary embodiment of the present invention includes a registration unit for registering at least one of a registered image file and a registered image hash value to be used for user authentication in response to a request from a user terminal, And an authentication processor for performing the user authentication based on the registered image file and the registered image hash value.

The authentication processing unit may perform the user authentication by receiving at least one of the authentication image file and the authentication image hash value from the user terminal and checking whether the registration image file and the registered image hash value match with each other.

The registration unit receives at least one of an international mobile equipment identifier (IMEI) and a universal subscriber identity module (USIM) information of the user terminal and registers the registered IMEI and registered USIM information .

The authentication processing unit may perform the user authentication by receiving at least one of the authentication IMEI and the authentication USIM information from the user terminal and checking whether the registered IMEI and the registered USIM information match with each other.

And a financial transaction processing unit for performing the financial transaction processing request when the user authentication is successful.

The registered image file may be captured by the user terminal and stored in the user terminal.

A terminal according to another exemplary embodiment of the present invention includes a memory for storing an application for providing a user interface for financial transactions, a general area for calling and executing the application from the memory, And a security area storing a registered image hash value of the registered image file as information, and a display unit outputting a screen according to the operation of the processing unit.

The registered image file and the registered image hash value may be registered in the financial service system as the user authentication information.

Wherein the communication unit transmits at least one of an authentication image file and an authentication image hash value to the financial service system, and checks whether the registration image file and the registered image hash value match with the financial service system, Lt; / RTI >

The communication unit receives at least one of the international mobile equipment identifier (IMEI) and the universal subscriber identity module (USIM) information of the user terminal and registers the registered IMEI and registered USIM information To the financial service system.

The communication unit may receive the user authentication result performed by transmitting at least one of the authentication IMEI and the authentication USIM information to the financial service system and checking whether the registration IMEI and the registration USIM information match with the financial service system .

The memory stores the registered image file, and the registered image file can be photographed by the terminal.

According to another aspect of the present invention, there is provided a method of providing a financial service to a user terminal, the method comprising: receiving at least one of a registered image file and a registered image hash value to be used for user authentication from a user terminal, Receiving a financial transaction processing request from the user terminal, and performing the user authentication based on the registered image file and the registered image hash value.

Wherein the performing the user authentication comprises receiving at least one of an authentication image file and an authentication image hash value from the user terminal and storing the authentication image file and the authentication image hash value in the registration image file and the registration image And checking whether the hash value matches the hash value.

Wherein the registering step receives at least one of an international mobile equipment identifier (IMEI) and a universal subscriber identity module (USIM) information of the user terminal from the user terminal, And registering with the registered USIM information.

Wherein the performing the user authentication comprises receiving at least one of the authentication IMEI and the authentication USIM information from the user terminal and determining whether the authentication IMEI and the authentication USIM information match the registration IMEI and the registration USIM information, And a step of confirming.

And performing the financial transaction processing request when the user authentication is successful.

The registered image file may be captured by the user terminal and stored in the user terminal.

According to the present invention, at the time of requesting a financial service, an image stored in a telephone set of a user's name is selected and transmitted to the financial institution system. The financial institution authenticates the user based on the transmitted image, And modulation can not be made. This also enables accurate and efficient user identification without additional costs or time delays.

1 is a block diagram of an environment in which a financial services system operates in accordance with an embodiment of the present invention.
2 is a block diagram of a financial services system in accordance with an embodiment of the present invention.
3 is a block diagram of a user terminal in accordance with an embodiment of the present invention.
4 is a flowchart of a method of providing a financial service according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when an element is referred to as " comprising ", it means that it can include other elements as well, without excluding other elements unless specifically stated otherwise. Also, the terms " part, " " module, " and " module ", etc. in the specification mean a unit for processing at least one function or operation and may be implemented by hardware or software or a combination of hardware and software have.

A financial service system and a method for providing a financial service according to an embodiment of the present invention will be described in detail with reference to the drawings.

1 is a block diagram of an environment in which a financial services system operates in accordance with an embodiment of the present invention.

Referring to FIG. 1, the financial service system 100 is a server for providing a financial service to a customer, and may be operated by a financial institution that provides various financial services such as registration, transfer and settlement of a financial product. To this end, the financial service system 100 provides an Internet banking site, which is a web page for providing financial services online, and provides a mobile banking site suitable for the environment of the mobile device.

The user terminal 200 is a device for a customer of a financial institution to access and communicate with the financial service system 100 via a network. The user terminal 200 may be any of various communication devices such as, for example, various computers including a tab and a notebook, a personal digital assistant (PDA), a mobile communication terminal including a smart phone, and a television Can be used. The user terminal 200 may be installed with an application operating in conjunction with the financial service system 100.

The user terminal 200 may request a login procedure by user authentication and send a financial service request to use the financial service provided by the financial service system 100. [ At this time, the financial service system 100 may request the registered image stored in the user terminal 200 of the user name to confirm the transaction by the user himself / herself.

The financial service system will now be described in detail with reference to FIG.

2 is a block diagram of a financial services system in accordance with an embodiment of the present invention.

Referring to FIG. 2, the financial service system 100 includes a registration unit 110, a request unit 120, an authentication processing unit 130, and a financial service processing unit 140.

The registration unit 110 performs user registration according to a request from the user terminal 200

, An image to be used for user authentication can be registered. At this time, the image is an image captured using the user terminal 200 and stored in the user terminal 200. The registration unit 110 receives an image file, an image hash value, an international mobile equipment identifier (IMEI) of the user terminal 200 and a universal subscriber of the user terminal 200 from the user terminal 200 for image registration. A universal subscriber identity module (USIM) information. The image hash value is extracted from the image file by the user terminal 200 and transmitted to the financial service system 100 or when the user terminal 200 transmits the image file, And may be extracted and registered. The registration unit 110 stores a registration image file, a registration image hash value, a registration IMEI, and registration USIM information.

The request unit 120 receives a financial transaction processing request from the user terminal 200. [ The financial transaction processing request includes various financial services provided by the financial service system 100 such as, for example, the purchase, transfer and settlement of a financial product.

When the request unit 120 receives the financial transaction processing request, the authentication processing unit 130 performs user authentication on the corresponding user terminal 200. [ The authentication processing unit 130 receives the authentication image file, the authentication image hash value, the authentication IMEI, and the authentication USIM information for authentication from the user terminal 200 and stores the registration image file, the registration image hash value , Compares it with the registered IMEI and the registered USIM information, and performs user authentication as a match. That is, if the comparison results match, the user authentication is successful. Otherwise, the user authentication fails. As described above, the authentication image hash value may be omitted from the user terminal 200 and the authentication image hash value may be directly extracted from the authentication image file.

The financial service processing unit 140 processes the financial service requested by the user terminal 200 only when the authentication processing unit 130 succeeds in user authentication. That is, for example, when the user terminal 200 makes a transfer request, the financial transaction processing unit 140 executes the transfer when the user authentication is successful due to the matching of the image file, the image hash value, the IMEI, and the USIM.

Now, a terminal according to an embodiment of the present invention will be described in detail with reference to FIG.

3 is a block diagram of a terminal according to an embodiment of the present invention.

3, the user terminal 200 includes a communication unit 210, a memory 220, a display unit 230, an input unit 240, and a processing unit 250.

The communication unit 210 is connected to the processing unit 250 to transmit data received through the network to the processing unit 250 and transmits data output from the processing unit 250 to the network. That is, the communication unit 210 transmits data on the financial transaction request to the financial service system 100 via the network, and transmits data on the financial transaction processing result received from the financial service system 100 to the processing unit 250 do.

The memory 220 is connected to the processing unit 250 and stores various information for driving the processing unit 250. The memory 220 may be a medium such as a dynamic random access memory (DRAM), a Rambus DRAM, a synchronous dynamic random access memory (SDRAM), a static random access memory (SRAM) Can be implemented.

In particular, the memory 220 may store a financial transaction application for performing a financial transaction in cooperation with the financial service system 100. At this time, the financial transaction application is a web application, which can be downloaded and installed from an application transaction server such as a Google Store. The financial transaction application is set up to provide a user screen for the financial transaction service provided by the financial service system 100 by the user.

The display unit 230 outputs information on the operation of the processing unit 250 to the screen. The display unit 230 outputs a financial transaction application screen. The display unit 230 may be a commercially available LCD (Liquid Crystal Display) or an OLED (Organic Light Emitting Diode).

The input unit 240 includes means for inputting information from a provider on a screen output by the display unit 230. [ The input unit 240 may include a pointing device including a light joystick, a touch pad, a hall sensor, a fingerprint recognition sensor, a pressure sensor, and the like, a keypad, and a touch screen. The input unit 240 is connected to the processing unit 250 and transmits the input information to the processing unit 250.

The processing unit 250 may be implemented by a central processing unit (CPU) or other chipset, a microprocessor, and the like. The layers of the air interface protocol may be implemented by the processing unit 250.

The processing unit 250 supports a trust zone including a normal world 251 and a secure world 255. [ The general area 251 and the security area 255 are each operated by a separate operating system and are hardware-isolated. Therefore, even if the general area 251 is attacked by a malicious code or the like, the data implemented in the security area 255 can be safely protected.

The general area 251 may include an application control unit for calling and executing a financial transaction application from the memory 220 according to a user request transmitted from the input unit 240.

The security zone 255 includes a storage unit. The storage area of the security area 255 stores a registration image and a registered image hash value for user authentication required in the process of performing a financial transaction. The security zone 255 can safely protect the user authentication information even if the user terminal 200 is damaged in an external environment.

Now, a method of providing a financial service according to an embodiment of the present invention will be described in detail with reference to FIG.

4 is a flowchart of a method of providing a financial service according to an embodiment of the present invention.

Referring to FIG. 4, the user terminal 200 transmits a registration application for a service according to an embodiment of the present invention to the financial service system 100 (S410). At this time, the user terminal 200 transmits a registration image file, a registered image hash value, a registered IMEI, and a registered USIM to be used for user authentication to the financial service system 100. At this time, the registration image file is captured by the user terminal 200 and stored in the user terminal 200, and the registration image hash value is stored in the security area of the user terminal 200 as a value extracted from the registration image file.

Then, the financial service system 100 registers a user and stores a registration image file, a registered image hash value, a registered IMEI, and registered USIM information to be used for user authentication (S420).

Subsequently, the user terminal 200 transmits a financial transaction processing request to the financial service system 100 (S430). Then, the financial service system 100 requests the user terminal 200 for user authentication information (S440). The user terminal 200 transmits the authentication image file, the authentication image hash value, the authentication IMEI, and the authentication USIM information to be used for user authentication to the financial service system 100 as user authentication information (S450).

The financial service system 100 includes an authentication image file, an authentication image hash value, an authentication IMEI, and authentication USIM information received from the user terminal 200, a registration image file registered in advance by the user terminal 200, , The registered IMEI and the registered USIM information, respectively (S460). Meanwhile, user authentication according to an exemplary embodiment of the present invention may be performed in addition to various other user authentication methods.

When the authentication image file, the authentication image hash value, the authentication IMEI, and the authentication USIM information match the registration image file, the registration image hash value, the registration IMEI, and the registration USIM information, the financial service system 100 sends A user authentication success notification is transmitted (S370). If the registered image and another image are transmitted as an authentication image but the image is the same as the registered image but the image content is changed or the image is the same as the registered image but is transmitted to another terminal,

The financial service system 100 processes the financial service requested by the user terminal 200 (S480). Then, the financial service system 100 transmits financial transaction completion information to the user terminal 200 (S490).

According to an embodiment of the present invention, when a financial transaction is requested, the user himself / herself is authenticated himself / herself by using the image captured by the terminal of the user's name and stored in the terminal of the user's name, And it is possible to prevent forgery and alteration of the user authentication means. Also, by using the information of the terminal together with the user authentication, it can be confirmed that the user directly uses the terminal in the user name. This enables accurate and efficient user identification without additional cost or time delay.

The embodiments of the present invention described above are not implemented only by the apparatus and method, but may be implemented through a program for realizing the function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded. Such a recording medium can be executed not only on a server but also on a user terminal.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It belongs to the scope of right.

Claims (18)

A registration unit for registering at least one of a registered image file to be used for user authentication and a registered image hash value at the request of the user terminal,
A request unit for receiving a financial transaction processing request from the user terminal, and
An authentication processing unit for performing the user authentication based on the registered image file and the registered image hash value,
A financial service system. The method of claim 1,
The authentication processing unit,
Receiving at least one of the authentication image file and the authentication image hash value from the user terminal and performing the user authentication by checking whether the registration image file and the registered image hash value match with each other
Financial service system. The method of claim 1,
Wherein the registration unit comprises:
(IMEI) and universal subscriber identity module (USIM) information of the user terminal and registers the registered IMEI and registered USIM information
Financial service system. 4. The method of claim 3,
The authentication processing unit,
Receiving at least one of the authentication IMEI and the authentication USIM information from the user terminal and performing the user authentication by checking whether the registered IMEI and the registered USIM information match
Financial service system. The method of claim 1,
If the user authentication is successful, the financial transaction processing unit
The financial service system further comprising: The method of claim 1,
Wherein the registered image file is photographed by the user terminal and stored in the user terminal
Financial service system. A memory for storing an application providing a user interface for financial transactions,
A processing unit including a general area for calling and executing the application from the memory and a security area that is hardware-isolated from the general area and stores a registered image hash value for the registered image file as user authentication information;
And a display unit for outputting a screen according to the operation of the processing unit
. 8. The method of claim 7,
Wherein the registered image file and the registered image hash value are registered in the financial service system as the user authentication information
Terminal. 9. The method of claim 8,
Wherein,
Transmitting at least one of an authentication image file and an authentication image hash value to the financial service system,
Receiving a user authentication result performed by checking whether the registered image file and the registered image hash value match with the financial service system
Terminal. 9. The method of claim 8,
Wherein,
Receiving at least one of an international mobile equipment identifier (IMEI) and universal subscriber identity module (USIM) information of the user terminal and registering the registered IMEI and registered USIM information, To send to the system
Terminal. 11. The method of claim 10,
Wherein,
Transmitting at least one of an authentication IMEI and authentication USIM information to the financial service system,
Receiving a user authentication result performed by checking whether the registered IMEI and the registered USIM information match with the financial service system
Terminal. 9. The method of claim 8,
The memory stores the registered image file, and the registered image file is stored in the memory
Terminal. A method for a financial services system to provide a financial service to a user terminal,
Receiving at least one of a registered image file and a registered image hash value to be used for user authentication from a user terminal,
Receiving a financial transaction processing request from the user terminal, and
Performing the user authentication based on the registered image file and the registered image hash value
≪ / RTI > The method of claim 13,
Wherein the performing the user authentication comprises:
Receiving at least one of an authentication image file and an authentication image hash value from the user terminal; and
Checking whether the authentication image file and the authentication image hash value match the registered image file and the registered image hash value, respectively
≪ / RTI > The method of claim 13,
Wherein the registering step comprises:
At least one of an international mobile equipment identifier (IMEI) and universal subscriber identity module (USIM) information of the user terminal is received from the user terminal and registered as registered IMEI and registered USIM information step
≪ / RTI > 16. The method of claim 15,
Wherein the performing the user authentication comprises:
Receiving at least one of an authentication IMEI and authentication USIM information from the user terminal, and
Checking whether the authentication IMEI and the authentication USIM information match the registered IMEI and the registered USIM information, respectively
≪ / RTI > The method of claim 13,
Performing the financial transaction processing request when the user authentication is successful
Further comprising the steps of: The method of claim 13,
Wherein the registered image file is photographed by the user terminal and stored in the user terminal
Financial service method.

Images