KR20190124062A - Method and server for providing financial service - Google Patents

Abstract

According to one embodiment of the present invention, a method for providing a financial service comprises the steps of: receiving third party name information inputted by a user from a user terminal; generating an UR address by encoding a unique number of financial service application information related to the user terminal and the third party name information; transmitting a third party information provision agreeing message including the URL address to the user terminal; and providing a webpage in which third party name is written in advance to a third party terminal accessing the URL address.

Description

METHOOD AND SERVER FOR PROVIDING FINANCIAL SERVICE}

The present disclosure relates to a method and a server for providing a financial service, and more particularly, to a method and a server for providing a financial service using third party authentication.

Recently, due to the development of information and communication technology, mobile terminals such as smartphones are widely used, so that individuals are mainly provided with financial services using their own mobile terminals.

An individual may use a financial service requiring personal authentication by performing personal identification through a mobile terminal and providing personal information necessary for using a financial service to a bank server.

However, some financial services use third-party information related to you in addition to your identity, so individuals who wish to use these financial services may visit bank branches, etc. with third parties associated with you, or third parties associated with you. Had to ask for consent to use the information.

It is an object of the present disclosure to provide a method and a server for providing a financial service that can conveniently obtain information of a third party related to a user who receives a financial service.

In one embodiment, a method for providing a financial service includes receiving third party name information input by a user from a user terminal, encoding a unique number of the financial service application information related to the user terminal and third party name information, and then applying a URL address. Generating a third party information providing consent message including a URL address to a user terminal, and providing a webpage in which a third party name is preliminarily provided to a third party terminal accessing the URL address; Include.

Providing a web page in which the third party name is pre-written to the third party terminal accessing the URL address includes decoding the unique number and the third party name information encoded in the URL address, and the decoded third party. The method may further include generating a web page in which the third party name of the name information is pre-recorded.

Before the step of receiving the third party name information, performing a login procedure with the user terminal; if the login procedure is completed, checking whether the financial service application information related to the user terminal is stored in a service application information database; Determining whether the third party authentication is completed using the application information, and if it is determined that the third party authentication is not completed, providing a screen for the third party authentication to the user terminal. .

After providing the web page with the third party's name in advance, receiving from the third party terminal a third party information provision consent complete message including the success value and the authentication value for the third party's identity authentication, and unique The method may further include including a success value and an authentication value for the third party's identity in the application information corresponding to the number and storing the same in the service application information database.

According to an embodiment, a financial service providing server includes a communication unit communicating with a user terminal and a third party terminal through a communication network, a service application information database storing financial service application information, and a communication unit input by the user from the user terminal. Upon receiving the third party name information, the financial service application information related to the user terminal is read from the service application information database to generate a URL address by encoding the unique number of the read financial service application information and the third party name information, and the URL address. And a control unit which transmits a third party information provision consent message including a to a user terminal through a communication unit, and provides a web page in which a third party name is pre-written to a third party terminal accessing a URL address.

The controller may decode the unique number and the third party name information encoded in the URL address, and generate a web page in which the third party name of the decoded third party name information is previously described.

The controller performs a login procedure with the user terminal, and when the login procedure is completed, confirms whether the financial service application information related to the user terminal is stored in the service application information database, and completes the third party authentication using the financial service application information. If it is determined that the third party authentication has not been completed, the user terminal may provide a screen for third party authentication.

The communication unit receives a third party information providing consent completion message including a success value for the third party's identity authentication and an authentication value from the third party terminal, and the control unit applies the third party's identity authentication to the application information corresponding to the unique number. The success value and the authentication value may be included in the service subscription information database.

A method of providing a financial service and an effect of a server according to the present disclosure will be described below.

According to at least one of the embodiments, there is an advantage that the user can conveniently request information necessary for using the financial service.

According to at least one of the embodiments, the bank has the effect of conveniently obtaining third party information related to the user.

According to at least one of the embodiments, since the user is conveniently provided with a financial service, there is an effect that can attract bank customers.

Further scope of the applicability of the present invention will become apparent from the following detailed description. However, various changes and modifications within the spirit and scope of the present invention can be clearly understood by those skilled in the art, and therefore, specific embodiments, such as the detailed description and the preferred embodiments of the present invention, should be understood to be given by way of example only.

1 is an exemplary view for explaining a financial service providing server and a financial service providing system including the same according to an exemplary embodiment.
2 is a block diagram illustrating a financial service providing server according to an exemplary embodiment.
3 is a flowchart illustrating a financial service providing method according to an exemplary embodiment.
4 is an exemplary view illustrating a screen displayed on a user terminal according to the financial service method of FIG. 3.
FIG. 5 is an exemplary view illustrating a screen displayed on a third party terminal according to the financial service method of FIG. 3.

Hereinafter, exemplary embodiments of the present disclosure will be described in detail with reference to the accompanying drawings, and the same or similar components will be given the same or similar reference numerals, and redundant description thereof will be omitted. The suffixes "module" and "unit" for components used in the following description are given or used in consideration of ease of specification, and do not have distinct meanings or roles from each other. In addition, in describing the disclosed embodiments, if it is determined that the detailed description of the related known technology may obscure the gist of the embodiments disclosed herein, the detailed description thereof will be omitted. In addition, the accompanying drawings are intended to facilitate understanding of the disclosed embodiments, and the technical spirit disclosed is not limited by the accompanying drawings, and includes all changes, equivalents, and substitutes included in the spirit and scope of the present invention. It should be understood to include.

Terms including ordinal numbers such as first and second may be used to describe various components, but the components are not limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

When a component is said to be "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but other components may be present in the middle. It should be understood that. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

Singular expressions include plural expressions unless the context clearly indicates otherwise.

In this application, the terms "comprises" or "having" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

1 is an exemplary view for explaining a financial service providing server and a financial service providing system including the same according to an exemplary embodiment.

As shown, the payment service providing system may include a financial service providing server 10, terminals 20 and 21, and an authentication server 20.

The financial service providing server 10 is provided by all financial companies that open and operate a predetermined financial account, such as a commercial bank, a savings bank, a securities company, and can issue a predetermined electronic bankbook, a cash card, and a debit card. It includes a server for providing a financial service, and is not limited to a server that provides a financial service of a specific financial institution. In the following description, it is assumed that the financial service providing server 10 is a bank server.

The terminals 20 and 21 described in the present specification may be connected to a personal computer (PC) or a laptop equipped with a wired Internet connection and a browsing function, a laptop or a mobile terminal equipped with a wireless LAN / portable Internet connection and a browsing function, and a mobile communication network. Personal Communication System (PCS), Global System for Mobile (GSM) terminal, Personal Digital Assistant (PDA), Smart Phone or Telematics, Kiosk, ATM (automated) with access and browsing capabilities teller machine).

The terminals 20 and 21 are connected to the bank server 10 and the authentication server 20 through the wired / wireless communication network 40. In addition, the terminal 20, 21, the bank server 10, and the authentication server 20 agree to provide third party information required for the user of the user terminal 20 to receive financial services from the bank server 10. Procedures related to the

For example, the user terminal 20 displays a screen for agreeing to provide third party information provided by the bank server 10. Then, the user terminal 20 receives the name of the third party that needs to provide information consent from the user, and transmits it to the bank server 10. The bank server 10 generates a third party information provision consent message and transmits it to the user terminal 20. When the message recipient and the transmission method are selected by the user, the user terminal 20 transmits a third party information provision consent message to the message recipient in the selected transmission method. The third party terminal 21 receiving the message performs a third party authentication procedure with the authentication server 30 and transmits a third party information provision agreement completion message to the bank server 10. Then, the bank server 10 stores the third party authentication data and the information provision agreement data in the database, and provides a service subsequent to the user terminal 20.

The authentication server 30 includes a personal information database for identity verification and may be provided inside or outside the bank server 10. For example, the authentication server 30 may perform a procedure related to identity verification with the terminals 20 and 21 through a mobile phone identity authentication scheme, a public certificate authentication scheme, a biometric scheme, and the like. The way of becoming is not limited to this.

The bank server 10, the terminals 20 and 21, and the authentication server 30 may be connected via the communication network 40. The bank server 10 provides at least one financial service through the terminals 20 and 21.

The communication network 40 may be a network connected to a TCP / IP based backbone network (eg, wired Internet, or an IEEE 802.11x based wireless LAN, or an IEEE 802.16x based portable internet), or a predetermined wireless network (eg, Code Division Multiple Access (CDMA) based mobile communication network, IEEE 802.16x based mobile Internet, or DataTAC / Mobitex based wireless data communication network, predetermined wired voice communication network (e.g., public switched telephone network (PSTN)) may include at least one wired call terminal (eg, a telephone) or a predetermined wireless voice call network (eg, a CDMA-based mobile communication network).

Next, with reference to FIG. 2, the bank server of an Example is demonstrated concretely.

2 is a block diagram illustrating a bank server according to an exemplary embodiment. As shown, the bank server 10 includes a communication unit 110, a control unit 120, a user information DB 130, and a service request information DB 140.

The communication unit 110 is connected to the terminals 20 and 21 to transmit and receive data. The communication unit 110 may be one or more to enable communication between the bank server 10 and the terminals 20, 21, between the bank server 10 and the authentication server 30, or between the bank server 10 and an external server. It may include a module. In addition, the communication unit 110 may include one or more modules for connecting the bank server 10 to one or more networks.

The controller 120 typically controls the overall operation of the bank server 10. The controller 120 includes a user authenticator 122 and a service manager 124.

The user authentication unit 122 performs a login process for the user of the terminal 20 by using the login information transmitted from the user terminal 20. That is, the user authentication unit 122 performs a login process for the user requesting payment in the payment service providing process.

In relation to the login process for the user, the user information DB 130 includes at least one of an identifier of the user, a telephone number of the user, a personal identification number (PIN), a password, and a public certificate for user authentication. Store user authentication information.

The user authentication unit 122 receives login information including at least one of an ID, a PIN, a password, and a public certificate from the terminal 20, and receives the received login information and the user stored in the user information DB 130. The authentication information can be compared.

The service manager 124 obtains information necessary for providing a financial service and stores it in the service application information DB 140. In addition, the service manager 124 reads the information stored in the service request information DB 140 to determine the insufficient information, and generates a message, a web page, and the like for obtaining it.

The service application information DB 140 stores information required for financial service application. Financial services that may be provided to the user include: customer information inquiry, change, deposit, withdrawal, transfer, open a new account, apply for financial products, add, change, delete, pay utility bills, pay the delivery fee, issue account book, carry over account, financial media Loss registration, financial media loss registration cancellation, telebanking service subscription, online banking service application, check card issuance, credit card issuance, security card / OTP card issuance, certificate issuance and password change may include at least one.

For example, in the service application information DB 140, application information related to a loan service application from a user is assigned and stored. In order to provide a loan service to the user, it is assumed that loan information and the like of the household member of the user must be checked. The service manager 124 determines that the loan information of the household member (ie, the third party) of the user is insufficient to provide the loan service, and sends a message for proceeding with the authentication procedure for the household member of the user who wants to provide the loan service. Create The service manager 124 encodes the name and the unique number of the household member in the URL address, and includes the URL address in the corresponding message and transmits the URL to the user terminal 20 through the communication unit 110. Then, the service manager 124 receives the third party authentication data and the information providing consent data from the third party terminal 21, stores the same in the service application information DB 140, and loans the service to the user terminal 20. Provides a screen for providing.

The bank server 10 configured as described above provides financial services to the user of the terminal 20 in connection with the terminals 20 and 21. Hereinafter, a method of providing a financial service will be described with reference to FIGS. 3 to 5.

3 is a flowchart illustrating a financial service providing method according to an exemplary embodiment, FIG. 4 is an exemplary view showing a screen displayed on a user terminal according to the financial service method of FIG. 3, and FIG. 5 is a diagram illustrating the financial service method of FIG. 3. Accordingly, this is an exemplary view showing a screen displayed on the third party terminal.

As shown in FIG. 3, the user terminal 20 and the bank server 10 perform a login procedure and a loan service application inquiry (S301).

For example, the user terminal 20 is installed with a banking application program, so that the user can execute the banking application program and proceed with a login procedure by inputting an ID and a password. The bank server 10 compares the ID and password received from the user terminal 20 with the user authentication information stored in the user information DB 140 to determine whether the login is successful. If it is determined that the login is successful, the bank server 10 provides a screen for providing the financial service to the user terminal 20. If it is determined that the login has failed, the bank server 10 provides information about the login failure. 20) to provide.

When a menu for receiving a loan service is selected by the user of the user terminal 20, the bank server 10 may check whether the application information related to the loan service application from the user is stored in the service application information DB 140. have.

If the application information related to the loan service application is stored in the service application information DB 140, the bank server 10 may determine whether the third party authentication is completed using the corresponding application information.

If it is determined that the third party authentication is not completed, the bank server 10 may provide a screen for third party authentication to the user terminal 10. In this regard, reference is made to FIG. 4A together.

As shown in (a) of FIG. 4, the screen 400a for third party authentication may be displayed on the user terminal 20.

The screen 400a for the third party authentication includes indicators 410 indicating each step of the third party authentication, a third party's name 420 on which the third party authentication is completed, and a third party authentication is completed. An indicator 422 indicating, a third party's names 430 and 440 where third party authentication is in progress, an indicator 432 indicating that third party authentication is in progress, and an object 442 for resending messages for third party authentication , An object 434 and 444 for canceling the process of third party authentication, an input field 450 for inputting a third party's name, an object 452 for sending a message for third party authentication, an object to authenticate It may include an object 460 for adding three characters.

The user terminal 20 receives a name of a third party by the user (S303). When the user selects an object 460 for adding a third party to authenticate, the user terminal 20 may display an input field 450 for inputting a third party's name. The user may then enter a third party's name in the input box 450.

The user terminal 20 transmits the received third party's name information to the bank server 10 (S305).

The bank server 10 generates a third party information provision consent message including a third party's name and a unique number (S307). For example, the bank server 10 may form a name and a unique number of a third party in the form of a URL address (for example, “http://tong.shinhan.com/gdjajdfjdfjf%245dfef%23423%2342%”). ) And include the encoded URL address in the third party information provision consent message.

The bank server 10 transmits a third party information provision consent message to the user terminal 20 (S309).

The user terminal 20 is selected by the user to receive a third party information provision consent message and a transmission method (S311).

The user terminal 20 which has received the third party information provision consent message from the bank server 10 may display a screen for selecting a transmission method. In this regard, reference is made to FIG. 4B together.

As shown in FIG. 4B, a screen 400b for selecting a transmission method may be displayed on the user terminal 20.

The screen 400b for selecting a transmission method may include contents of a generated third party information provision consent message and objects 480, 482, and 484 corresponding to the transmission method. When one of the objects 480, 482, 484 corresponding to the transmission method is selected by the user, the user terminal 20 executes an application program related to the selected transmission method and transmits a third party information provision consent message. A screen for selecting a recipient can be displayed.

Then, the user terminal 20 transmits a third party information provision consent message to the terminal of the recipient selected by the user, that is, the third party terminal 21 (S313).

For example, when the object 480 is selected by the user and the third party information provision consent message is transmitted to the third party terminal 21 in the SMS message manner, as shown in FIG. The third party information provision consent message 510 may be displayed on the screen of the third party terminal 21. The user of the third party terminal 21 may select the URL address displayed in the third party information provision consent message 510 and proceed with the third party information provision consent service.

The third party terminal 21 requests the bank server 10 for a third party information provision consent service (S315). Then, the bank server 10 provides the third party terminal 21 with a screen for requesting third party identity verification.

When the URL address is selected by the user and the third party terminal 21 accesses the URL address, the bank server 10 decodes (decodes) the third party's name and unique number encoded in the URL address. By generating a screen for identity verification, it can be provided to the third party terminal 21 to access the URL address.

First, as shown in (b) of FIG. 5, the bank server 10 may provide a third party terminal 21 with a web page displaying guide information 520 related to third party authentication. When the third party information provision consent service request object 522 is selected by the user, the bank server 10 is the user of the user terminal 20, as shown in (c) of FIG. 5. The third party terminal 21 provides a screen for requesting third party identity authentication, in which the third party's name 530 inputted by the user is described in advance. The screen for requesting third-party identity verification includes a field 540 for entering a social security number, a carrier and phone number field 550 for mobile phone authentication, a field 560 for entering a verification number to be sent to a phone number, and a verification number. The object 562 for retransmitting the object, the object 570 for verifying the authentication number, and the object 580 for terminating the third party's identity authentication are displayed.

Here, the third party's name 530 previously described on the screen requesting the third party's identity cannot be modified by the third party. Therefore, when the recipient selected by the user of the user terminal 20 and the third party input by the user of the user terminal 20 are different from each other, the third party terminal 21 receiving the third party information provision consent message is received. ), I.e., the recipient, cannot continue with third-party authentication.

By the user of the third party terminal 21, the third party terminal 21 and the authentication server 30 perform a third party authentication procedure (S319).

If the third party authentication procedure is successfully completed, the third party terminal 21 transmits a third party information provision agreement completion message to the bank server 10 (S321). The third party information providing consent completion message may include a success value and an authentication value of the third party's own authentication, and contents of the authentication.

The bank server 10 stores the success value, the authentication value, and the authentication information for the third party's identity in the application information of the corresponding unique number in the service application information DB 140 (S323). In this case, the bank server 10 may image the time stamp (the date on which the third party's identity authentication date is displayed) in the third party information provision agreement and store the image together with the service application information DB 140.

In this manner, the bank server 10 may obtain a third party's consent to provide information related to the user from the third party in a non-face to face manner. The user can be provided with the financial service without visiting the bank branch or the like with the third party or asking the third party for the consent to use the information.

It is apparent to those skilled in the art that the present invention can be embodied in other specific forms without departing from the spirit and essential features of the present invention.

The present invention described above can be embodied as computer readable codes on a medium in which a program is recorded. The computer-readable medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable media include hard disk drives (HDDs), solid state disks (SSDs), silicon disk drives (SDDs), ROMs, RAMs, CD-ROMs, magnetic tapes, floppy disks, optical data storage devices, and the like. This also includes implementations in the form of carrier waves (eg, transmission over the Internet). In addition, the computer may include a control unit of the terminal. Accordingly, the above detailed description should not be construed as limiting in all aspects and should be considered as illustrative. The scope of the invention should be determined by reasonable interpretation of the appended claims, and all changes within the equivalent scope of the invention are included in the scope of the invention.

Claims (8)

Receiving third party name information input by a user from a user terminal,
Generating a URL address by encoding a unique number of the financial service request information associated with the user terminal and the third party name information;
Transmitting a third party information provision consent message including the URL address to the user terminal; and
Providing a web page in which the third party name is pre-written to a third party terminal accessing the URL address;
Financial service providing method comprising a. The method of claim 1,
Providing a web page in which the third party name is pre-written to a third party terminal accessing the URL address,
Decoding the unique number and third party name information encoded in the URL address; and
Generating a web page in which the third party name of the decoded third party name information is pre-written;
How to provide financial services. The method of claim 2,
Before the step of receiving the third party name information,
Performing a login procedure with the user terminal;
When the login procedure is completed, checking whether financial service application information related to the user terminal is stored in a service application information database;
Determining whether third party authentication is completed using the financial service application information, and
If it is determined that the third party authentication is not completed, providing a screen for third party authentication to the user terminal.
Financial service providing method comprising more. The method of claim 3,
After providing the webpage with the third party's full name,
Receiving a third party information providing consent completion message including a success value and an authentication value for the third party's identity authentication from the third party terminal; and
Including the success value and the authentication value for the third party's identity authentication in the application information corresponding to the unique number and storing in the service application information database
Financial service providing method comprising more. A communication unit for communicating with a user terminal and a third party terminal through a communication network,
A service application information database for storing financial service application information; and
When the communication unit receives the third party name information input by the user from the user terminal, the financial service application information associated with the user terminal is read from the service application information database to identify the unique number of the read financial service application information and A third party terminal encoding the third party name information to generate a URL address, transmitting a third party information provision consent message including the URL address to the user terminal through the communication unit, and accessing the URL address; A control unit for providing a web page in which the third party name is pre-written in the
Financial service providing server comprising a. The method of claim 5,
The controller is configured to decode the unique number and third party name information encoded in the URL address, and to generate a web page in which the third party name of the decoded third party name information is previously described.
Financial service provider server. The method of claim 6,
The control unit performs a login procedure with the user terminal. When the login procedure is completed, the controller checks whether the financial service application information related to the user terminal is stored in a service application information database. It is determined whether the third party authentication is completed, and if it is determined that the third party authentication is not completed, providing a screen for third party authentication to the user terminal.
Financial service provider server. The method of claim 7, wherein
The communication unit receives a third party information providing consent completion message including a success value and authentication value for the third party's identity authentication from the third party terminal,
The control unit stores a success value and an authentication value for the third party's identity authentication in the application information corresponding to the unique number and stores it in the service application information database.
Financial service provider server.

Images