KR20210013788A - Account transferring system and method thereof - Google Patents

Abstract

Disclosed is an account transfer system capable of protecting trust for a legitimate product transaction of a buyer. According to the present invention, the account transfer system comprises: a money receiver terminal to transmit a first public key among generated asymmetric keys and information on a deposit account; a bank server to execute a deposit into the deposit account in a withdrawal-deferred state in accordance with a transfer request; and a money sender terminal to generate a first token by a key agreement based on the first public key received from the money receiver terminal, and transmit a transfer request including information on a withdrawal account and the generated first token to the bank server. If the money receiver terminal receives a second public key from the money sender terminal in accordance with a withdrawal deferment cancelation request of the money sender terminal, the money receiver terminal generates a second token by a key agreement based on the second public key, and transmits the second token and a withdrawal request to the bank server. If the withdrawal request is received, the bank server cancels the withdrawal-deferred state based on a comparison result of the first token and the second token, and executes a withdrawal of an amount deposited into the money receiver terminal.

Description

Account transfer system and its method {ACCOUNT TRANSFERRING SYSTEM AND METHOD THEREOF}

The present invention relates to an account transfer system and method thereof, and more particularly, to an account transfer system and method capable of conditional account transfer.

Account transfer is when a sender transfers a predetermined amount from his or her withdrawal account to the deposit account of the receiver. Rather than actually visiting an offline guesthouse (bank, etc.), it is becoming more popular for remitters to make online account transfers through internet banking, phone banking, and ATM machines.

In recent years, direct transactions such as account transfer between senders and receivers without an intermediary such as used trading sites have been activated. However, in the case of general used transactions, it is common for the buyer to pre-pay the product price to the seller before delivery of the product that the seller intends to trade by bank transfer. Therefore, if the seller does not deliver the product or ships the defective product, the buyer can take relief. It was difficult to receive. In particular, in the case of fraudulent transactions in which the seller abuses such transaction conditions, separate protection measures for the buyer were insufficient.

Accordingly, needs to protect buyers from transactions made directly between sellers and buyers such as used transactions have increased.

The present invention is to solve the above-described problems, and an object of the present invention is to provide an account transfer system that can protect the trust of the purchaser in a legitimate product transaction when a transaction is made directly between a buyer and a seller without an intermediary such as used transactions. Is in.

In order to achieve the above object, the account transfer system according to an embodiment of the present invention includes information on a deposit account and a receiver terminal that transmits the first public key among the generated asymmetric keys, and withdrawal is held to the deposit account according to the remittance request. Generates a first token according to a key agreement based on the bank server that deposits money in the state and the first public key received from the receiver terminal, and the generated first token and withdrawal It includes a sender terminal for transmitting a remittance request including information on the account to the bank server. At this time, when the receiver terminal receives the second public key from the sender terminal in response to the withdrawal release request of the sender terminal, it generates a second token by key agreement based on the received second public key. And, transmits the second token and the withdrawal request to the bank server, the bank server, when the withdrawal request is received, releases the withdrawal pending state based on the comparison result of the first token and the second token, The withdrawal of the amount deposited to the receiver terminal is executed.

In addition, the information on the deposit account may include information related to the deposit account and information on the validity period of the withdrawal pending state.

In addition, the first token is a session key generated by a first public key received at the sender terminal and a second private key included in an asymmetric key generated at the sender terminal according to the key agreement. ) Can be an encrypted signature.

In addition, the second token encrypts the session key generated by the second public key received at the receiver terminal and the first private key included in the asymmetric key generated at the receiver terminal according to the key agreement. It can be a signature.

In addition, the key agreement may be a key agreement based on a Diffie-Hellman or Elliptic Curve Diffie-Hellman algorithm.

In addition, the bank server may release the withdrawal pending state when the first token and the second token coincide with each other, and maintain the withdrawal pending state if the first token and the second token do not coincide with each other. .

In addition, the validity period may be extended according to a preset number and period by a command on the sender terminal, and when it expires, the withdrawal pending state may be released.

On the other hand, the account transfer method according to an embodiment of the present invention is the step of transmitting, by a receiver terminal, a first public key among information on a deposit account and a generated asymmetric key to a sender terminal, and the sender terminal Generating a first token based on a key agreement based on the first public key received from the terminal, wherein the sender terminal includes information on the generated first token and a withdrawal account Transmitting a remittance request to a bank server, the bank server executing a deposit in a withdrawal pending state to the deposit account in accordance with the remittance request, and the receiver terminal according to the withdrawal pending release request of the remittance terminal. Receiving a second public key from the sender terminal, the receiver terminal generates a second token by key agreement based on the received second public key, and sends the second token and the withdrawal request to the bank server And, when the bank server receives the withdrawal request, releases the withdrawal pending state based on the comparison result of the first token and the second token, and withdraws the amount deposited to the receiver terminal. It includes the step of executing.

In this case, the information on the deposit account may include information related to the deposit account and information on a valid period of the withdrawal pending state.

In addition, the first token is a session key generated by a first public key received at the sender terminal and a second private key included in an asymmetric key generated at the sender terminal according to the key agreement. ) Can be an encrypted signature.

In addition, the second token encrypts the session key generated by the second public key received at the receiver terminal and the first private key included in the asymmetric key generated at the receiver terminal according to the key agreement. It can be a signature.

In addition, the key agreement may be a key agreement based on a Diffie-Hellman or Elliptic Curve Diffie-Hellman algorithm.

In addition, in the executing of the withdrawal, if the first token and the second token coincide with each other, the withdrawal pending state is released, and if the first token and the second token do not coincide with each other, the withdrawal pending state is maintained. Can be maintained.

In addition, the validity period may be extended according to a preset number and period by a command on the sender terminal, and when it expires, the withdrawal pending state may be released.

According to the various embodiments of the present invention as described above, when a transaction is made directly between a buyer and a seller without an intermediary such as a used transaction, it is possible to secure the expectation and trust of the buyer for a legitimate product purchase.

1 is a block diagram for briefly explaining an account transfer system according to an embodiment of the present invention;
2 is a flow chart for explaining the deposit process of the account transfer system according to an embodiment of the present invention;
3 is a flow chart for explaining a withdrawal process of the account transfer system according to an embodiment of the present invention;
4 is a flowchart illustrating an account transfer method according to an embodiment of the present invention.

First, general terms used in the specification and claims are selected in consideration of functions in various embodiments of the present invention. However, these terms may vary depending on the intention of a technician in the field, legal or technical interpretation, and the emergence of new technologies. In addition, some terms may be terms arbitrarily selected by the applicant. These terms may be interpreted as the meanings defined in the present specification, and if there is no specific term definition, they may be interpreted based on the general contents of the present specification and common technical knowledge in the art.

In addition, the same reference numbers or numerals in each drawing attached to the present specification indicate parts or components that perform substantially the same function. For convenience of description and understanding, different embodiments will be described using the same reference numbers or symbols. That is, even if all the components having the same reference numerals are shown in a plurality of drawings, the plurality of drawings do not mean one embodiment.

In addition, terms including ordinal numbers such as'first' and'second' may be used in the specification and claims to distinguish between components. These ordinal numbers are used to distinguish the same or similar constituent elements from each other, and the meaning of the term should not be limitedly interpreted due to the use of such ordinal numbers. For example, components combined with these ordinal numbers should not be interpreted as limiting the order of use or arrangement by the number. If necessary, each ordinal number may be used interchangeably.

In the present specification, expressions in the singular include plural expressions unless the context clearly indicates otherwise. In the present application, terms such as'comprise' or'comprise' are intended to designate the existence of features, numbers, steps, actions, components, parts, or a combination thereof described in the specification, but one or more other It is to be understood that it does not preclude the presence or addition of features, numbers, steps, actions, components, parts, or combinations thereof.

In addition, in an embodiment of the present invention, when a part is connected to another part, this includes not only a direct connection but also an indirect connection through another medium. In addition, the meaning that a certain part includes a certain component means that other components may be further included rather than excluding other components unless specifically stated to the contrary.

Hereinafter, the present invention will be described in more detail with reference to the accompanying drawings.

1 is a block diagram for briefly explaining an account transfer system according to an embodiment of the present invention.

The account transfer system 1000 of the present invention according to FIG. 1 includes a receiver terminal 100, a bank server 200 and a sender terminal 300.

The receiver terminal 100 and the sender terminal 300 exemplify a computer terminal (desktop, laptop computer, smartphone, tablet PC, etc.) capable of Internet banking via a wired or wireless network. In addition, in the case of a smartphone, when a SIM card with an integrated circuit (IC) chip is embedded, Internet banking is possible through the service of each mobile operator.

The bank server 200 is a sender terminal 100 and a receiver terminal 300 through internet banking using an internet banking homepage, mobile banking using a bank application (banking app) or SMS text service, and an ARS phone banking service. It can provide an interface for entering information related to this account transfer.

Briefly explaining the entire execution process of the account transfer system 1000, the receiver terminal 300 executes a bank application, etc., and transfers deposit account information, which is information on the account to be deposited to the receiver on the executed bank application. It transmits it to the terminal 100. At this time, the deposit account information includes the name of the recipient, the name of the deposit bank, and the deposit account number. However, such information is only an example and is not necessarily limited thereto, and information on the phone number or e-mail address of the recipient who can be contacted, and the reason for the collection (such as sales of goods) may be included as a means of user notification.

When the sender terminal 100 receives the deposit account information from the receiver terminal 300, the withdrawal account information including the name of the sender, the withdrawal bank name, the withdrawal account number, the withdrawal amount, etc. is input on the executed bank application, and the bank server For (200), a request for remittance of the withdrawal amount is transmitted to the deposit account of the recipient. The withdrawal amount may be subject to private agreement between the sender and the receiver.

At this time, the bank server 200 executes the deposit according to the remittance request to the deposit account of the receiver, but may hold the withdrawal so that the requested remittance is not withdrawn for a certain period. The amount requested for remittance can be released from the withdrawal pending status only when a certain period of time has elapsed or a specific event is satisfied. For example, after the expiration date of the withdrawal pending status set in the sender terminal 300 or the receiver terminal 100 has elapsed, or after a request to cancel the withdrawal hold is executed in the sender terminal 300, user authentication of the receiver is completed. If so, the withdrawal pending status may be canceled and the receiver may change to a state in which the requested amount of remittance can be withdrawn.

That is, the bank server 200 may perform conditional account transfer with respect to the deposit account of the recipient, and the recipient terminal 300 may check the amount transferred by the sender to the recipient's account even in the withdrawal pending state.

The receiver can trust the sender because the sender has transferred the remittance amount according to the private agreement to the receiver's account, and takes action to satisfy the conditions agreed with the sender in order to ensure that the sender finally releases the withdrawal hold. You can tell the sender.

When a specific action condition agreed with the receiver is satisfied, the sender may execute a request for withdrawal hold release on the bank application executed in the sender terminal 300. After the withdrawal hold release request is executed, the receiver terminal 100 may transmit a withdrawal request for the remittance amount or an account transfer request for transferring the remittance amount to another account on the bank application to the bank server 200.

The bank server 200 performs user authentication through the recipient's electronic signature, and when authentication is completed, the withdrawal pending state is released, and the remittance amount can be withdrawn or transferred from the recipient's deposit account according to the recipient's withdrawal request or account transfer request. have.

In order to perform account transfer conditionally, when user authentication is completed by comparing tokens sequentially generated in the sender terminal 300 and the receiver terminal 100 according to each step of the account transfer by a key agreement. You can use the method of canceling the withdrawal pending status.

Detailed information about this will be described with reference to FIGS. 2 and 3 for an embodiment of using an account transfer as a payment method for product price in a product transaction between a seller and a buyer.

2 is a flowchart illustrating a deposit process of an account transfer system according to an embodiment of the present invention.

In this embodiment, since the receiver is a seller who sells products to the sender, and the sender is a buyer who purchases products from the receiver, the receiver and receiver terminal 100 are respectively a seller and a seller terminal, and the sender And the sender terminal 300 is referred to as a purchaser and a purchaser terminal, respectively.

First, the seller executes a bank application on the seller terminal 100 and inputs deposit account information through an interface provided by the executed bank application (S21). At this time, the seller may set the validity period of the withdrawal pending state to one week, 10 days, or two weeks.

The seller terminal 100 may generate and store the seller's public key (Pub_S) and private key (Pri_S) as a pair of asymmetric keys (S22). The seller terminal 100 may transmit deposit account information and the generated seller's public key (Pub_S) to the buyer terminal 100 through a bank application.

The buyer can check the deposit account information sent by the seller by running the bank application on the buyer terminal 300, and input the withdrawal account information to withdraw the product price to be deposited to the seller through the interface provided by the bank application. Alternatively, it can be selected (S24).

At this time, the purchaser can change the validity period set by the seller. The purchaser may extend the validity period according to the number and period preset by a command on the purchaser terminal 300. If the validity period expires, the withdrawal pending status may be canceled.

Likewise, the buyer terminal 300 may generate and store the buyer's public key (Pub_B) and private key (Pri_B) as a pair of asymmetric keys (S25), and received from the seller terminal 100 according to a key agreement. A session key based on the seller's public key (Pub_S) and the buyer's private key (Pri_B) can be generated.

In this case, the key agreement may be a key agreement based on a Diffie-Hellman or Elliptic Curve Diffie-Hellman algorithm.

The purchaser terminal 300 may generate a first token as an electronic signature encrypted with the generated session key (S26), and at this time, the first token is a deposit account, withdrawal account, deposit amount, expiration date, etc. It may include information necessary for account transfer.

The purchaser terminal 300 may transmit a remittance request for a deposit account to the bank server 200 along with information on the generated first token and withdrawal account (S27), and the bank server 200 It is possible to deposit the product price in the withdrawal pending state for the seller's deposit account (S28), and store information on the first token and the expiration date (S29).

The seller can check the price of the product deposited in his/her account even if the withdrawal is pending (S30), and since the purchaser has transferred the agreed product price, the product is delivered directly to the purchaser or through delivery.

3 is a flowchart illustrating a withdrawal process of an account transfer system according to an embodiment of the present invention.

When the product sent by the seller reaches the buyer, the buyer can check whether the product is defective and finally confirm the purchase. If there is a defect in the delivered product, the seller may prevent the seller from withdrawing the remitted product price by extending the set validity period in the transaction session formed between the seller and the buyer. Within the extended expiration period, the buyer may agree with the seller to adjust the price of the product or proceed with a refund.

If there is no defect in the delivered product and the buyer confirms the purchase of the product, the seller can request the release of the withdrawal pending status of the product price by selecting the purchase confirmation through the interface provided by the bank application. (S31).

When the buyer selects confirmation of purchase, the buyer terminal 300 may transmit the buyer's public key (Pub_B) generated in the buyer terminal 300 to the seller terminal 100 (S32), and the seller terminal 100 is the buyer. After receiving the public key (Pub_B) of, it is possible to request withdrawal of the product price or transfer to another account through a bank application (S33).

At this time, the seller terminal 100 generates a session key based on the buyer's public key (Pub_B) and the seller's private key (Pri_S) received from the buyer terminal 300 according to a key agreement. I can.

The seller terminal 100 may generate a second token as an electronic signature encrypted with the generated session key (S34), and at this time, the second token is also a deposit account, a withdrawal account, and the like as the first token. It can include information necessary for account transfer, such as deposit amount and expiration date.

The seller terminal 100 may transmit a request for withdrawal of the product price together with the generated second token to the bank server 200 (S35), and the bank server 200 may transmit a first token and a second token according to the corresponding withdrawal request. Compared to each other, it is checked whether they match each other or contain specific information that matches each other (S36). This is a means for authenticating whether a seller is a legitimate user in a corresponding session. In the case of a legitimate user, the first token and the second token coincide with each other or at least contain specific information that matches each other according to the key agreement.

When the first token and the second token coincide with each other, the bank server 200 releases the withdrawal pending state, and executes the withdrawal of the product price or transfer to another account (S37), and if they do not coincide with each other, The product price will remain on hold.

4 is a flowchart illustrating an account transfer method according to an embodiment of the present invention.

First, the receiver terminal 100 transmits the information on the deposit account and the first public key among the generated asymmetric keys to the sender terminal 300 (S410). At this time, the information on the deposit account may include information related to the deposit account and information on the validity period of the withdrawal pending state.

Thereafter, the sender terminal 300 generates a first token by a key agreement based on the first public key received from the receiver terminal 100 (S420). Here, the first token may be a signature obtained by encrypting the session key generated by the first public key received at the sender terminal and the second private key included in the asymmetric key generated at the sender terminal according to the key agreement. In addition, the key agreement here may be a key agreement based on a Diffie-Hellman or elliptic curve Diffie-Hellman algorithm.

Thereafter, the sender terminal 300 transmits a remittance request including information on the generated first token and the withdrawal account to the bank server 200 (S430).

Thereafter, the bank server 200 executes the deposit in the withdrawal pending state to the deposit account according to the remittance request (S440).

Thereafter, the receiver terminal 100 receives the second public key from the sender terminal 300 according to the request for the withdrawal hold release from the sender terminal 300 (S450).

Thereafter, the receiver terminal 100 generates a second token by key agreement based on the received second public key, and transmits the second token and the withdrawal request to the bank server 200 (S460). Here, the second token is a session key generated by the second public key received by the receiver terminal 100 and the first private key included in the asymmetric key generated by the receiver terminal 100 according to the key agreement. It can be an encrypted signature.

Thereafter, when the bank server 200 receives the withdrawal request, it releases the withdrawal pending state based on the comparison result of the first and second tokens, and executes the withdrawal of the amount deposited to the receiver terminal 100 (S470). ).

According to various embodiments of the present invention as described above, when a transaction is made directly between a buyer and a seller without an intermediary such as a used transaction, the buyer allows the seller to withdraw the product price depending on whether the product is delivered or whether the delivered product is defective. As a result, it is possible to secure the expectation and trust of the buyer for a legitimate product purchase.

On the other hand, although the preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above, and the technical field to which the present invention belongs without departing from the gist of the present invention claimed in the claims. In addition, various modifications are possible by those of ordinary skill in the art, and these modifications should not be individually understood from the technical spirit or prospect of the present invention.

1000: account transfer system 100: receiver terminal
200: bank server 300: sender terminal

Claims (14)

In the account transfer system,
A receiver terminal for transmitting information on the deposit account and a first public key among the generated asymmetric keys;
A bank server that executes a deposit in a state of withdrawal pending to a deposit account according to a remittance request; And
Generates a first token based on a key agreement based on the first public key received from the receiver terminal, and sends a remittance request including information on the generated first token and withdrawal account Including; a sender terminal for transmitting to the bank server,
The receiver terminal,
When a second public key is received from the sender terminal in response to the withdrawal release request of the sender terminal, a second token is generated by key agreement based on the received second public key, and the second token and Send a withdrawal request to the bank server,
The bank server,
When the withdrawal request is received, the withdrawal pending state is released based on a comparison result of the first token and the second token, and the withdrawal of the amount deposited to the receiver terminal is executed. The method of claim 1,
Information on the above deposit account,
An account transfer system comprising information related to the deposit account and information on an expiration date of the withdrawal pending state. The method of claim 1,
The first token,
According to the key agreement, a signature that encrypts a session key generated by a first public key received at the sender terminal and a second private key included in an asymmetric key generated at the sender terminal Characterized in, account transfer system. The method of claim 3,
The second token,
According to the key agreement, characterized in that the signature is an encrypted session key generated by the second public key received at the receiver terminal and the first private key included in the asymmetric key generated at the receiver terminal, Account transfer system. The method of claim 4,
The key agreement,
Diffie-Hellman (Diffie-Hellman) or Elliptic Curve Diffie-Hellman (Elliptic Curve Diffie-Hellman), characterized in that the key agreement based on the algorithm, account transfer system. The method of claim 4,
The bank server,
When the first token and the second token coincide with each other, the withdrawal pending state is released, and if the first token and the second token do not coincide with each other, the withdrawal pending state is maintained as it is. system. The method of claim 2,
The above validity period is:
The account transfer system, characterized in that the withdrawal pending state is released when the extension is extended according to a preset number and period by a command on the sender terminal and expires. In the account transfer method,
Transmitting, by the receiver terminal, the information on the deposit account and the first public key among the generated asymmetric keys to the sender terminal;
Generating, by the sender terminal, a first token according to a key agreement based on the first public key received from the receiver terminal;
Transmitting, by the sender terminal, a remittance request including information on the generated first token and a withdrawal account to a bank server;
Executing, by the bank server, depositing money into the deposit account in a withdrawal pending state according to the remittance request;
Receiving, by the receiver terminal, a second public key from the sender terminal in response to a request to cancel the withdrawal hold from the sender terminal;
Generating, by the receiver terminal, a second token by key agreement based on the received second public key, and transmitting the second token and a withdrawal request to the bank server; And
When the bank server receives the withdrawal request, canceling the withdrawal pending state based on the comparison result of the first token and the second token, and executing withdrawal of the amount deposited to the receiver terminal; Account transfer method. The method of claim 8,
Information on the above deposit account,
Characterized in that it comprises information related to the deposit account and information on the expiration date of the withdrawal pending state. The method of claim 8,
The first token,
According to the key agreement, a signature that encrypts a session key generated by a first public key received at the sender terminal and a second private key included in an asymmetric key generated at the sender terminal Characterized in, account transfer method. The method of claim 10,
The second token,
According to the key agreement, characterized in that the signature is an encrypted session key generated by the second public key received at the receiver terminal and the first private key included in the asymmetric key generated at the receiver terminal, Account transfer method. The method of claim 11,
The key agreement,
Diffie-Hellman (Diffie-Hellman) or Elliptic Curve Diffie-Hellman (Elliptic Curve Diffie-Hellman), characterized in that the key agreement based on the algorithm, account transfer method. The method of claim 11,
The step of executing the withdrawal,
When the first token and the second token coincide with each other, the withdrawal pending state is released, and if the first token and the second token do not coincide with each other, the withdrawal pending state is maintained as it is. Way. The method of claim 9,
The above validity period is:
It is extended according to a predetermined number and period by a command on the sender terminal, characterized in that the withdrawal pending state is released when it expires.

Images