KR20190023705A - Apparatus for Operation - Google Patents

Abstract

The present invention relates to an operation apparatus and, more specifically, to an authentication device which performs transaction authentication on an electronic finance transaction by using a text message and a method thereof. The present invention differs from conventional authentication using the text message, thereby being capable of a secure electronic finance transaction in which the risk of an accident by dispossession of the text message is blocked. To this end, the operation apparatus comprises: an authentication information generation unit generating authentication information; an authentication page generation unit generating a transaction authentication page; a message check unit checking transaction authentication information; a transaction authentication unit performing authentication; and a transaction command unit commanding process of an electronic finance transaction.

Description

[Apparatus for Operation]

The present invention relates to an operating apparatus and method, and more particularly, to an authentication apparatus and method for performing transaction authentication for an electronic financial transaction using a text message.

In recent years, e-financial transactions have become an issue not only in Korea but also in the world as a new service named "FinTech", which is a combination of financial and technology. The characteristics of the PINTECH service include the institution providing the electronic financial service and the electronic financial service Face environment that does not face the requestor.

According to this situation, one of the most important issues in the PINTECH service is the transaction authentication for the electronic financial service currently in use (that is, in the transaction) with the non-contact electronic financial service requester. Various attempts have been made to accomplish this. Representative methods include SMS (Short Message Service) authentication or ARS (Automatic Response Service) authentication. Here, the SMS authentication is a method in which an electronic financial service provider generates and transmits a disposable authentication number to an electronic financial service requester through SMS, and the electronic financial service requester inputs and uses the electronic financial transaction through a terminal in use. Although the service is not available in the current financial sector due to the increase of accidents caused by the sewing machine, ARS authentication is provided as a method for replacing the ARS. However, the cost is higher than that of the SMS authentication .

The present invention provides an operating apparatus and method for performing secure transaction authentication for an electronic financial transaction by improving the conventional SMS authentication method.

The present invention provides an operating apparatus and method for performing authentication by replacing SMS authentication in all cases where SMS authentication such as personal authentication other than electronic financial transaction can be utilized.

The objects of the present invention are not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood from the following description.

According to an aspect of the invention, an operating device is provided.

An operation apparatus according to an embodiment of the present invention includes an authentication information generation unit for generating authentication information to be provided to an electronic financial transaction terminal when authentication is required for an electronic financial transaction, a transaction authentication page including electronic financial transaction information requiring authentication, And providing the generated transaction authentication page to the electronic financial transaction terminal via the data network and verifying the transaction authentication information included in the transaction authentication message transmitted from the authentication request terminal via the telephone network A transaction authentication unit for authenticating the electronic financial transaction by determining whether the transaction authentication information includes the security code included in the generated authentication information, And a transaction instruction unit for instructing the continuation of the electronic financial transaction for the completed electronic financial transaction.

According to an embodiment of the present invention, a text message including transaction authentication information is received from an authentication request terminal of an electronic financial transaction request using an electronic financial transaction via a telephone network, thereby enabling secure authentication.

According to an embodiment of the present invention, a text message-based authentication system built in a conventional financial institution can be constructed as much as possible by being received as a text message via a telephone network from an authentication request terminal, It is possible to provide authentication service at low cost compared to ARS authentication, and it can be free from maintenance cost issue.

According to an embodiment of the present invention, more secure transaction authentication is possible by separately operating a transaction channel (i.e., a data network) in which electronic financial transactions are performed and an authentication channel (i.e., a telephone network) in which transaction authentication is performed.

1 is a diagram for explaining an authentication-based electronic financial service operating system using a text message according to an embodiment of the present invention.
2 is a view for explaining an operating device for providing an authentication-based electronic banking service using a text message according to an embodiment of the present invention.
3 and 4 are views for explaining a method of providing an authentication-based electronic financial service using a text message according to an embodiment of the present invention.

While the present invention has been described in connection with certain exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and similarities. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In order to facilitate a thorough understanding of the present invention, the same reference numerals are used for the same means regardless of the number of the drawings.

Furthermore, the functional components in the drawings accompanying the embodiments of the present invention may be included in a single device or included in a plurality of devices.

1 is a diagram for explaining an authentication-based electronic financial service operating system using a text message according to an embodiment of the present invention.

Conventionally, an authentication service for an electronic financial transaction using a text message is widely used as a 2-channel authentication by providing an authentication number generated by a server to a mobile phone and inputting and authenticating the provided authentication number through a terminal using an electronic financial transaction However, due to the issue of electronic financial accidents due to text message takeover, there is a difficulty in utilization.

In the conventional authentication service for an electronic financial transaction based on a text message, the authentication number generated by the server is input on the screen of a transaction medium (that is, a PC or a smart phone) to loop back, If the third party can only take the text message, the third party can receive the text message as the authentication number authentication method that enables the third party to trade through his / her own medium, and can not know whether the mobile phone confirming the contents is the transaction person or the third person, It is a fact that it is difficult to know whether the authentication service is being used while the owner of the mobile phone occupies the electronic financial transaction.

In order to provide an authentication-based electronic banking service using a more secure text message through conventional problem solving, this figure provides an electronic banking service using a text message exchanged via a telephone network, The transaction authentication request information provided through the electronic financial transaction terminal 200 in use of the electronic financial service is transmitted through the telephone network using the text message function provided in the authentication request terminal 300 of the electronic financial service request, The present invention relates to a system configuration in which an electronic financial service is provided by confirming whether or not an owner of a mobile phone authenticating a calling number that has sent a message occupies the mobile phone, and, if a person skilled in the art is familiar with the present invention, Referring to the drawings, the authentication-based electronic It will be appreciated that various implementations (e.g., omissions, subdivisions, and methods of combining one or more of the components) may be deduced for the configuration of the service operating system, but the invention includes all conceivable implementations, The technical features thereof are not limited only by the method shown in the drawings.

The system of the present invention is connected to an electronic financial transaction terminal 200 using an electronic financial service connected via a data network and a telephone network during an electronic financial service use process through the electronic financial transaction terminal 200, The authentication request terminal 300 used for authentication for the electronic financial transaction terminal 200 and the electronic financial transaction terminal 200 connected via the data network and the authentication request terminal 300 connected via the telephone network And an operation device 100 for providing a transaction authentication service by a text message.

The electronic financial transaction terminal 200 communicates with the server to use the electronic financial transaction service, and transmits the inputted or selected information to the operating device 100. The electronic financial transaction terminal 200 receives the electronic financial service request And receives and outputs information corresponding to this input or selected information. The electronic financial transaction terminal 200 includes a wired terminal that can be connected to a wired communication network and a wireless terminal that can connect to a wireless communication network.

Here, the wired terminal that can be connected to the wired communication network is a collective term of all terminal devices connectable to a communication network based on TCP (Transmission Control Protocol) or UDP / IP (User Datagram Protocol), and includes a desktop computer, a notebook computer, A home network terminal (for example, a set-top box, an Internet Protocol Television (IPTV), a smart television or a kiosk (KIOSK) It is possible to further include various automatic devices installed in affiliate shops, etc., and it is also possible to further include an 802.11x based wireless communication network.

Also, a wireless terminal capable of connecting to a wireless communication network may be a wireless communication network operated by a separate communication company such as all terminal devices connected to a CDMA (Code Division Multiple Access) based mobile communication network, or all terminals capable of connecting to an IEEE 802.16x based portable Internet As a generic term for all connectable terminal devices, it is possible to include at least one mobile phone or smart phone capable of being connected to a CDMA based mobile communication network, or a portable internet terminal capable of connecting to a telematics or IEEE 802.16x based portable Internet, Or various automation devices installed at branch offices or branches or affiliated stores.

That is, the electronic financial transaction terminal 200 is a general term for all terminal devices connectable to the operating device 100 via a data network that can use electronic financial services.

The authentication request terminal 300 is connected to the operation device 100 via the telephone network during the process of using the electronic financial transaction service through the electronic financial transaction terminal 200 and can be connected to a wireless communication network And a wireless terminal.

A wireless terminal capable of connecting to a wireless communication network may include at least one terminal device or the like connected to a CDMA (Code Division Multiple Access) based mobile communication network.

That is, the authentication request terminal 300 is a generic term for all terminal devices capable of exchanging text messages with the operating device 100 via a telephone network that can use the electronic financial service, and is similar to the electronic transaction terminal 200 But it is described as a separate terminal for convenience of explanation.

The operating device 100 receives an electronic financial transaction request from the electronic financial transaction terminal 200 at a time when transaction authentication for the electronic financial transaction is required during the electronic financial transaction using process through the electronic financial transaction terminal 200, Electronic transaction transaction information and authentication information are provided to the electronic financial transaction terminal 200 via the data network when the authentication request for the electronic financial transaction terminal 200 is received or when the authentication request for the electronic financial transaction is initiated by the operation device 100, Upon receipt of the transaction authentication request information from the financial transaction terminal 200 via the telephone network, the electronic transaction processing unit 220 authenticates the electronic financial transaction with the received transaction authentication request information and requests the electronic financial transaction to be processed or processes the electronic financial transaction .

In addition, the operating device 100 may include a text message receiving module in the operating device 100 for receiving transaction authentication request information via the telephone network, or may be provided with a message device (for example, a MO (Message Oriented) device, etc.) and receive transaction authentication request information.

Here, the transaction authentication information can be transmitted to the operating device 100 by sending a text message to the designated telephone number in the electronic financial transaction terminal 200.

Alternatively, the transaction authentication information can be received from the electronic financial transaction terminal 200 by using the disposable destination number assigned separately for the electronic financial transaction to send a text message from the electronic financial transaction terminal 200, The originating number for the terminal that has sent the text message to the disposable destination number is checked and further verified whether the confirmed originating number matches the mobile phone number of the electronic financial transaction requesting user who is using the electronic financial transaction.

To this end, the operating device 100 can directly or indirectly receive via a message device (for example, a message-oriented server (MO) for receiving a text message).

2 is a diagram for explaining an operation apparatus 100 for providing an authentication-based electronic banking service using a text message according to an embodiment of the present invention.

Referring to FIG. 2, an operating system 100 according to an embodiment of the present invention includes a financial transaction processing unit 110 that is connected via a data network and provides an electronic financial transaction service desired by an electronic financial transaction request, An authentication request confirmation unit 115 for checking whether a transaction authentication is required for the electronic financial transaction during the process of using the financial transaction service, An authentication page generation unit 125 for generating a transaction authentication page including the generated authentication information and the electronic financial transaction information for the electronic financial transaction in which the transaction authentication necessity is confirmed, , An authentication page providing unit (130) for providing the generated transaction authentication page to the electronic financial transaction terminal (200) and outputting the generated authentication authentication page, and an electronic financial transaction Security and authentication information, and a database 135 that stores authentication information required electronic financial transaction request is for an electronic financial transactions on the use of electronic financial transactions.

The financial transaction processing unit 110 communicates with the electronic financial transaction terminal 200 used by the electronic financial transaction requesting person via the data network and inputs or selects the requested electronic financial transaction service through the electronic financial transaction terminal 200 to provide.

The electronic financial transaction service provided through the financial transaction processing unit 110 can be indirectly provided through a financial system connected directly or via a communication network.

A request from an electronic financial transaction terminal 200 for communicating via a data network via a financial transaction processing unit 110 or a request for an electronic financial transaction service, The authentication request confirmation unit 115 confirms whether or not the authentication of the electronic financial transaction service is required.

That is, according to the type of the electronic financial transaction service during the process of using the electronic financial transaction service through the electronic financial transaction terminal 200, the requestor of the electronic financial transaction can accurately recognize (check) When the transaction authentication is required for the content of the electronic financial transaction, the authentication request confirmation unit 115 confirms the transaction authentication for the electronic financial transaction being offered to the electronic financial transaction request person, The request of the electronic financial transaction terminal 200 requests transaction authentication by confirming whether the transaction authentication is required for the electronic financial transaction based on the judgment of the institution providing the actual electronic financial transaction service, But may be initiated without a selection confirmation process as a single transaction authentication method designated according to the method of operation.

The request of the electronic financial transaction terminal 200 provided by the electronic financial transaction service by the authentication request confirmation unit 115 indicates that the transaction authentication is required for the electronic financial transaction determined by the institution providing the electronic financial transaction service The authentication information generating unit 120 generates authentication information including a security code to be used for transaction authentication.

The authentication information including the security code to be used for the transaction authentication can be generated through the designated algorithm using the electronic financial transaction information including the information to be recognized for the contents of the electronic financial transaction. It is possible to generate the authentication information including the security code input rule information when only a part of the security code is used as the authentication information including the security code to be used for transaction authentication. In the case of receiving authentication information including a security code to be used for transaction authentication via a telephone network and including a disposable destination number in the case of receiving the disposable destination number, a device for managing the disposable number (for example, a text message Receiving message device, etc.) to generate authentication information.

Alternatively, the authentication information including the security code to be used for transaction authentication may be generated in the electronic financial transaction terminal 200 or the authentication request terminal 300 when the electronic financial transaction terminal 200 and the authentication request terminal 300 are the same It is possible to generate the authentication information including the security code input rule information when only a part of the security codes included in the authentication information is utilized.

After the security code included in the authentication information is generated, it is possible to recognize the electronic financial transaction request, and at the same time, be converted into an image so that it can not be recognized through a character recognition program or the like.

Alternatively, the security code included in the authentication information may be an automatic input method in which the electronic financial transaction terminal 200 using the electronic financial transaction requestor and the authentication request terminal 300 are the same The electronic financial transaction application using the electronic financial transaction terminal 200 or the authentication request terminal 300 sends a transaction authentication message including the security code) And generates the security code and provides it as an electronic financial transaction app of the electronic financial transaction terminal 200 or the authentication request terminal 300. The electronic financial transaction app provides a part of the authentication information including the security code received from the operating device 100 (That is, the electronic financial transaction terminal 200 or the authentication request terminal 300) transmits a transaction authentication message including the security code to the operation device 100 Contained authentication information received via the data network upon reception, and it is possible to transmit the received authentication information to the operating device 100 via the telephone network). In this case, the operation device 100 and the electronic financial transaction terminal 200 or the authentication request terminal 300 can apply the encryption / decryption process to securely receive the authentication information including the security code.

When the authentication information including the security code to be used for transaction authentication through the authentication information generation unit 120 is generated, the authentication page generation unit 125 generates a transaction authentication page including the authentication information.

The transaction authentication page including the authentication information includes electronic financial transaction information including information to be recognized about the contents of the electronic financial transaction for the electronic financial transaction being used by the electronic financial transaction request person and a security code to be used for the transaction authentication And the security code to be used for transaction authentication according to the method of implementation may be in the form of an image (for example, , Captcha, and the like).

According to an embodiment of the present invention, the transaction authentication page provides a transaction authentication page including authentication information to the electronic financial transaction terminal 200, and then, in order to receive transaction authentication information from the authentication request terminal 300 used by the electronic financial transaction requestor, The authentication request terminal 300 may further include an interface for designating the authentication request terminal 300. The designation of the authentication request terminal 300 may be performed by the terminal information (e.g., telephone number, etc.) It is possible to be limited.

If the authentication information includes the security code input rule information according to the execution method, it is possible to generate the transaction authentication page without the security code input rule information.

Alternatively, when the disposable destination number is included in the authentication information, it is possible to generate a transaction authentication page in which the disposable destination number is excluded.

Alternatively, when the authentication information includes the security code input rule information and the disposable destination number, it is possible to generate a transaction authentication page in which the security code input rule information and the disposable call number are excluded.

When the security code included in the authentication information uses an automatic input method rather than an input method based on an electronic financial transaction request, the transaction authentication page can be set such that the authentication information including the security code is not exposed, In this case, it is possible to set the electronic financial transaction information including the information to be recognized about the contents of the electronic financial transaction to be exposed.

The authentication information included in the transaction authentication page may be regenerated by using the electronic financial transaction information input or selected by the electronic financial transaction requestor.

Alternatively, the security code included in the authentication information may be an automatic input method in which the electronic financial transaction terminal 200 using the electronic financial transaction requestor and the authentication request terminal 300 are the same The electronic financial transaction application using the electronic financial transaction terminal 200 or the authentication request terminal 300 sends a transaction authentication message including the security code) And generates the security code and provides it as an electronic financial transaction app of the electronic financial transaction terminal 200 or the authentication request terminal 300. The electronic financial transaction app provides a part of the authentication information including the security code received from the operating device 100 (That is, the electronic financial transaction terminal 200 or the authentication request terminal 300) transmits a transaction authentication message including the security code to the operation device 100 Contained authentication information received via the data network upon reception, and it is possible to transmit the received authentication information to the operating device 100 via the telephone network). In this case, the operation device 100 and the electronic financial transaction terminal 200 or the authentication request terminal 300 can apply the encryption / decryption process to securely receive the authentication information including the security code.

The transaction authentication page can be generated by a combination of at least one of a mobile web page form, an image form, and a data form according to the environment of the electronic financial transaction terminal 200.

When the transaction authentication page including the authentication information is generated, the authentication page providing unit 130 provides the transaction authentication page including the generated authentication information to the electronic financial transaction terminal 200 so as to be output.

Referring to FIG. 2, the operating device 100 according to an exemplary embodiment of the present invention transmits a security code inputting rule information for authentication information included in a transaction authentication page, a combination of one or both of disposable call destination numbers, And a message providing unit 145 for providing the generated authentication guidance message to the authentication request terminal 300 selected or requested by the electronic financial transaction requesting person And the message generating unit 140 and the message providing unit 145 may be omitted according to the method of operation.

The message generating unit 140 generates a message using the security code input rule information and the disposable call destination information when the authentication information includes the security code input rule information and the disposable call destination number, An authentication guidance message for providing the authentication request terminal 300 of the electronic financial transaction request in a manner other than the transaction authentication page is generated.

That is, the authentication guidance message includes contents for guiding one or both of the security code input rule information and the disposable call number in the authentication information, and general contents about the authentication guidance message transmission.

According to the method, the disposable number is not included in the authentication information message but may be set as a calling number for sending an authentication information message.

The authentication guidance message generated according to the method further includes a character string to be included in the transaction authentication message, so that it is possible to request confirmation of the electronic financial transaction request. Here, the string to be included in the transaction authentication message may be a string to be received through the transaction authentication message generated to authenticate the electronic financial transaction information.

When the authentication guidance message for providing the authentication request message to the authentication request terminal 300 of the electronic financial transaction request is generated, the message provider 145 provides the authentication request message to the authentication request terminal 300 via the telephone network.

When the authentication information includes the disposable destination number, it is possible to set the origination number as the disposable destination number, and to provide the authentication guidance message to the authentication request terminal 300 via the telephone network.

The database 135 maps and stores the electronic financial transaction information on the electronic financial transaction being offered to the electronic financial transaction request for the electronic financial transaction request and the generated authentication information. The database 135 may further store the terminal information of the authentication request terminal 300 to be used for the transaction authentication, which is the request for the electronic financial transaction using the electronic financial transaction, to the authentication information. Further, the generated authentication guidance message can be further mapped by mapping the electronic financial transaction information.

2, when the transaction authentication message including the transaction authentication information is received from the authentication request terminal 300 after the transaction authentication page is provided, the operation apparatus 100 according to an embodiment of the present invention transmits the received transaction A message authentication unit 150 for checking the origination number and the transaction authentication information for the authentication message, a terminal authentication unit 155 for performing authentication of the authentication request terminal 300 based on the origination number confirmed from the transaction authentication message, A transaction authentication unit 160 for performing authentication for an electronic financial transaction based on the transaction authentication information confirmed from the transaction authentication message, and an electronic financial transaction And a transaction instruction unit 165 for instructing the continuation of the transaction.

When a transaction authentication page including transaction authentication information is received via the telephone network through the authentication request terminal 300, which is an electronic financial transaction request, is provided to the electronic financial transaction terminal 200 via the data network , The message checking unit 150 checks the transaction authentication information included in the transaction authentication message and the transmission number for the transaction authentication message.

According to the method, when the transaction authentication message is received at the disposable destination number, it is possible to further identify the disposable destination number from which the transaction authentication message was received.

When the origination number of the transaction authentication message is confirmed, the terminal authentication unit 155 performs terminal information authentication (authentication of the authentication request terminal 300) stored in the database 135 based on the confirmed origination number.

When the transaction authentication message is received in the disposable destination number according to the method, the transaction authentication message performs the disposable number authentication stored in the database 135 based on the received telephone number.

When the authentication of the authentication request terminal 300 that has provided the transaction authentication information included in the transaction authentication message and the transaction authentication message is confirmed, the transaction authentication unit 160 transmits the transaction authentication information to the database 135, < / RTI >

If the electronic trust transaction request information includes the security code input rule information for the security code included in the authentication information according to the method, the transaction authentication unit 160 transmits the transaction authentication information, And performs transaction authentication information authentication based on the security code input rule information included in the security information input unit 135.

The security code included in the authentication information according to the embodiment of the present invention includes an electronic financial transaction terminal 200 and an authentication request terminal 300 that are used by an electronic financial transaction requestor, A case in which the electronic financial transaction application in use through the electronic financial transaction terminal 200 or the authentication request terminal 300 sends a transaction authentication message including the security code) When the code is encrypted and transmitted, the transaction authentication unit 160 decrypts the encrypted security code included in the transaction authentication message and performs authentication.

When the security code included in the authentication information is regenerated by using the electronic financial transaction information inputted or selected by the electronic financial transaction requesting entity according to the method of operation, the transaction authenticating section 160 transmits the authentication code to the authentication information generating section 120 And then performs authentication using the electronic financial transaction information received from the electronic financial transaction terminal 200 based on the authentication information including the generated security code.

When a transaction authentication message including a part or all of a string included in an authentication guidance message is transmitted through a method of delivery of the provided authentication guidance message after providing an authentication guidance message according to the method, 160 further authenticates the character string other than the transaction authentication information included in the transaction authentication message.

When authentication of the authentication request terminal 300 and authentication of the transaction authentication information are confirmed, the transaction instructing unit 165 notifies the electronic financial transaction terminal 200 of an electronic financial transaction request And instructs the financial transaction processing unit 110 that the authentication is completed and the transaction can be proceeded.

3 and 4 are views for explaining a method of providing an authentication-based electronic financial service using a text message according to an embodiment of the present invention.

Referring to FIG. 3, in step S310, the operating device 100 confirms whether a transaction request for an electronic financial transaction is required in step S320 of an electronic financial transaction using process through the electronic financial transaction terminal 200 Repeat the process. Here, the process of using the electronic financial transaction may be replaced with a process of confirming whether or not the authentication is required when the authentication process is required in the electronic financial transaction.

In step S330, the operating device 100 generates authentication information to be provided to the electronic financial transaction terminal 200 in use by the electronic financial transaction requesting party for authentication of the electronic financial transaction being provided to the electronic financial transaction requesting party. Here, the authentication information including the security code to be used for the transaction authentication can be generated through the designated algorithm using the electronic financial transaction information including the information to be recognized by the electronic financial transaction requestor. Also, when transaction authentication is performed using only a part of the security codes to be included in the generated authentication information, the authentication information including the security code input rule information can be generated. In addition, when receiving a part or all of the generated authentication information in the case of receiving a disposable destination number, it is possible to further include a disposable destination number or to manage a disposable destination number (for example, a message device for receiving a text message) Request / receive and generate authentication information.

In step S340, the operating device 100 generates a transaction authentication page including the generated authentication information and the electronic financial transaction information for the electronic financial transaction in which the transaction authentication necessity is confirmed. Here, the transaction authentication page may further include electronic financial transaction information including information to be recognized by the electronic financial transaction request among electronic financial transaction contents. The transaction authentication page may further include an interface for designating the authentication request terminal 300 in order to receive transaction authentication information from the authentication request terminal 300 used by the electronic financial transaction requestor. The transaction authentication page may further include security code input rule information. The transaction authentication page may further include a disposable destination number for receiving the transaction authentication information. Also, the transaction authentication page can be generated by a combination of at least one of a mobile web page form, an image form, and a data form according to the environment of the electronic financial transaction terminal 200.

In step S350, the operating device 100 provides the generated transaction authentication page to the electronic financial transaction terminal 200 and processes it so as to be output.

If the authentication information generated by the operating device 100 includes one or both of the security code input rule information and the disposable call number in step S330, a security code for the authentication information included in the transaction authentication page Generates an authentication guidance message for guiding one or both of the rule information and the disposable call destination number to the electronic financial transaction request requester and transmits the generated authentication guidance message to the authentication request terminal 300). ≪ / RTI > If the authentication information generated by the operating device 100 includes the disposable call number at step S330, the originating number of the authentication information message is set as the disposable call number, and the authentication request message is transmitted to the authentication request terminal 300 via the telephone network It is possible to provide a guidance message. In addition, the authentication guidance message can be omitted according to the method of operation.

Referring to FIG. 4, after the transaction authentication page is provided to the electronic financial transaction terminal 200 by the operation device 100 in step S350, the operation apparatus 100 transmits the transaction authentication page to the electronic financial transaction terminal 200 in step S410. Receives the transaction authentication message, and confirms the transaction authentication information including the received transaction authentication message and the origination number for the transaction authentication message. Here, when the transaction authentication message is received in the disposable destination number, it is possible to further check the disposable destination number from which the transaction authentication message was received.

In step S420, the operating device 100 authenticates the authentication requesting terminal 300 based on the origination number of the received transaction authentication message. Here, when the transaction authentication message is received in the one-time-use destination number, the originating number authentication for the transaction authentication message is further performed based on the received disposable call number and the mapped telephone number (= the telephone number of the authentication request terminal 300) It is possible to do.

In operation S430, when the originating number authentication fails for the received transaction authentication message as a result of the determination, the operating device 100 determines that the transaction authentication message is not transmitted by the authentication request terminal 300 and the electronic transaction terminal 200 The authentication request terminal 300 transmits an authentication request message according to the authentication failure.

In step S440, the operating device 100 authenticates the electronic financial transaction based on the transaction authentication information included in the received transaction authentication message. Here, when a transaction authentication message including a part or all of the strings included in the authentication guidance message other than the transaction authentication information included in the transaction authentication message is received, authentication for the character string other than the transaction authentication information included in the transaction authentication message is performed . Further, when the transaction authentication information included in the transaction authentication message is encrypted and transmitted, the process further performs a decryption process. In addition, when the transaction authentication information included in the transaction authentication message is regenerated and transmitted using the electronic financial transaction information input by the electronic financial transaction requesting entity, the electronic financial transaction terminal 200 using the received electronic financial transaction information.

If it is determined in step S450 that the authentication of the transaction authentication information included in the received transaction authentication message fails, the operating device 100 determines that there is an error in the transaction authentication information sent by the authentication request terminal 300 , And transmits a transaction authentication failure error message to the electronic financial transaction terminal (200).

If it is determined in step S460 that the authentication for the authentication request terminal 300 and the authentication for the transaction authentication information are confirmed as a result of the determination in step S460, the authentication for the electronic banking transaction being used by the electronic banking transaction request is completed Indicating that the process can proceed.

100: Operating device
200: Electronic financial transaction terminal
300: authentication request terminal

Claims (5)

In an operating device,
An authentication information generation unit for generating authentication information to be provided to the electronic financial transaction terminal when the authentication for the electronic financial transaction is required;
An authentication page generating unit for generating a transaction authentication page including electronic financial transaction information requiring authentication;
A message confirmation unit for providing the generated transaction authentication page to the electronic financial transaction terminal via a data network and confirming transaction authentication information included in a transaction authentication message transmitted from the authentication requesting terminal via the telephone network;
A transaction authentication unit for authenticating the electronic financial transaction by determining whether the verified transaction authentication information includes a security code included in the generated authentication information; And
And a transaction instructing unit for instructing the electronic financial transaction to be continued with respect to the electronic financial transaction in which the electronic financial transaction authentication is completed as a result of the determination.
The method according to claim 1,
The transaction authentication unit
When the security code included in the transaction authentication message is a security code re-generated using the electronic financial transaction information inputted or selected through the electronic financial transaction terminal, And the electronic financial transaction information received from the electronic financial transaction information.
The method according to claim 1,
The authentication page generating unit
Further comprising an interface for specifying an authentication request terminal when generating the transaction authentication page,
The message checking unit
And further confirms a calling number for the received transaction authentication message.
The method of claim 3,
And a terminal authentication unit for authenticating an authentication request terminal designated by an electronic financial transaction requesting user through the transaction authentication page based on the confirmed calling number.
5. The method of claim 4,
The transaction instruction unit
And instructs to continue the electronic financial transaction for the electronic financial transaction in which the authentication request terminal authentication is completed as a result of the determination.

Images