KR20210023172A - Method for Additional Authentication of Abroad Residents - Google Patents

Abstract

The present invention relates to an additional authentication method for an overseas customer to proceed additional authentication through an authentication application of company B in which authentication is already completed if additional authentication is required for electronic financial transactions such as transfer from a banking application of bank A. The additional authentication method for an overseas customer may comprise the steps of: (A) requesting additional authentication according to an electronic financial service request from a banking application of bank A installed in a portable terminal owned by an overseas customer through a server of bank A; (B) requesting additional authentication of the overseas customer through the server of bank A to an authentication server of company B, which is registered in advance by the overseas customer if additional authentication of the overseas customer is requested; (C) transmitting a unique authentication number for the additional authentication requested through an authentication server of company B to an authentication application of company B installed in the portable terminal; (D) providing an authentication number through the authentication application of company B to the banking application of bank A of the portable terminal when the authentication number is inputted; (E) requesting verification of the authentication number by transmitting the inputted authentication number to the server of bank A through the banking application of bank A; (F) requesting verification of the authentication number by transferring the authentication number inputted from the banking application of bank A to the authentication server of company B through the server of bank A; and (G) storing the verification number in advance for each overseas customer, comparing the verification number, and transferring a verification result of the verification number to the server of bank A when the verification number requested for verification is inputted through the authentication server of company B.

Description

Additional authentication method for overseas customers {Method for Additional Authentication of Abroad Residents}

The present invention relates to an additional authentication method for overseas resident customers in which additional authentication is performed through a company B authentication app whose identity verification has been completed in advance when additional authentication is required in an electronic financial transaction such as a transfer in a bank A banking app.

In electronic financial services provided in various forms such as Internet banking, mobile banking, smart banking, or e-commerce, authentication service providers have various security programs such as accredited certificates, security cards, virtual keyboards, ARS authentication, and OTP to strengthen personal information security. In particular, the Electronic Financial Transactions Act stipulates that electronic financial companies must provide users with accredited certificates, PC firewalls, and keyboard hacking prevention programs.

With the rapid development of communication technology, electronic financial services are actively provided in various terminal devices such as PCs and smartphones, and financial companies such as banks and credit card companies provide various identification information such as financial transaction history for each customer or the IP address of the terminal device. By collecting and storing it, we are trying to prevent accidents related to electronic finance.

To this end, the Financial Services Commission is obligated to apply the'Electronic Financial Fraud Prevention Service', which is currently being implemented, and accordingly, when reissuing an accredited certificate or transferring funds to internet banking of 3 million won or more, use a designated terminal or text message on a mobile phone. Additional authentication is required through.

However, the means to strengthen security when providing electronic financial services to persons staying abroad for the purpose of travel, work, or residence (hereinafter referred to as overseas customers) is currently in a very weak stage. In other words, an additional means of authentication is required for customers who do not use domestic smartphones among overseas customers.

As an example, currently, for additional authentication, an authentication method for additionally determining whether a device that is making a transaction and an electronic financial transaction instruction electronically, such as two-channel ARS authentication and smart simple authentication, is used. However, among overseas customers, customers who have not used a domestic smartphone cannot use ARS authentication and smart simple authentication, so there is no additional authentication method.

Accordingly, there is an urgent need for technology to prevent leakage of personal information related to electronic financial services from the risk of hacking by overseas customers who have limitations in the use of SMS or ARS, and to further strengthen the additional authentication function. It's a situation.

It is an object of the present invention to provide an additional authentication method for overseas customers in which additional authentication is performed through a company B authentication app whose identity verification has been completed in advance when additional authentication is required for electronic financial transactions such as transfer in the Bank A banking app.

The objects of the present invention are not limited to the above-mentioned objects, and other objects and advantages of the present invention that are not mentioned can be understood by the following description, and will be more clearly understood by examples of the present invention. In addition, it will be easily understood that the objects and advantages of the present invention can be realized by the means shown in the claims and combinations thereof.

The additional authentication method for overseas customers according to the present invention includes the steps of: (A) requesting additional authentication according to a request for electronic financial services from the bank A banking app installed in the portable terminal owned by the overseas customer through the bank A server; (B) when additional authentication of the overseas customer is requested, requesting additional authentication of the overseas customer through the authentication server of the company B registered by the overseas customer in advance through the bank A server; (C) passing a unique authentication number for the requested additional authentication to the vendor B authentication app installed in the portable terminal through the vendor B authentication server; (D) when the authentication number is input, providing the authentication number to the banking app of the bank A of the portable terminal through the company B authentication app; (E) requesting verification of the authentication number by transmitting the input authentication number to the Bank A server through the Bank A banking app; (F) requesting verification of the authentication number by transmitting the authentication number input from the bank A banking app to the company B authentication server through the bank A server; And (G) when the authentication number requested for verification is input through the authentication server of company B, storing the authentication number for each overseas customer in advance, comparing the authentication number, and transmitting the verification result of the authentication number to the bank A server.

In addition, the Bank A banking app verifies the location information and IP of the portable terminal to be used, and if the electronic financial service is being used abroad, the "Overseas Resident Customer Additional Authentication" is automatically activated, and the customer is activated. Additional authentication may be requested by selecting the "Additional Customer Authentication" menu.

In addition, the B company authentication app may be activated when a "overseas resident customer additional authentication" menu is selected and activated in the portable terminal to be used, and a unique authentication number transmitted from the B company authentication server may be received.

In addition, in step (C), the overseas customer may pre-register for identity verification with the company B authentication server in the company B authentication app.

In addition, for the pre-registration, the customer identification is performed using the account number of the bank A server or the overseas license number issued by the bank A banking app for identification, and the overseas license number is the bank A banking app and It can be issued based on unique information (IP, time, location information, etc.) generated when linking between company B authentication apps.

In addition, the step (C) is a step of issuing a specific token from the A bank server to the B company authentication server; And transmitting the issued specific token when transmitting the authentication number to the company B authentication app through the company B authentication server.

In addition, in the step (G), by using the IP information of the portable terminal transmitted together with the input number requested for verification, it is possible to pre-store for each overseas customer and detect the authentication number of the corresponding overseas customer among the authentication numbers. have.

In addition, the step (G), when the comparison result is matched with each other, transmitting a result of authenticating that the person is a legitimate identity to the server of the Bank A; If the comparison result is not matched with each other, transmitting a result indicating that the person is not a legitimate person to the server of the Bank A; And transmitting the processing result of the electronic financial service requested from the bank A banking app to the bank A banking app of the portable terminal based on the verification result transmitted through the bank A server.

In addition, if the verification result transmitted from the company authentication server 200 is a result of authenticating that the person is legitimate, transferring the result of successful processing of the electronic financial service requested from the bank A banking app to the bank A banking app; And if the verification result transmitted from the company's authentication server is a result indicating that it is not a legitimate person, transmitting a result of failure to process the electronic financial service requested from the bank A banking app to the bank A banking app. have.

The additional authentication method for overseas residents according to the present invention may be an exception to the additional authentication being conducted to prevent electronic financial accidents, that is, additional authentication may be performed for foreign customers using foreign smartphones of overseas customers.

Accordingly, it is possible to provide electronic financial services with enhanced security functions to overseas customers who have been alienated from security benefits through conventional ARS authentication, SMS authentication, and the like.

In addition, the additional authentication system and method for overseas customers according to the present invention makes it possible to check whether or not the device is owned by electronic finance through additional authentication through an app for which identity authentication has been completed, so that even if the customer is using a foreign smartphone, it is currently added. There is an effect of enabling smart simple authentication used in authentication.

In addition to the above-described effects, specific effects of the present invention will be described together with explanation of specific matters for carrying out the present invention.

1 is a block diagram showing a system for additional authentication of overseas customers according to an embodiment of the present invention.
2 is a flowchart illustrating a method of additional authentication for overseas residents according to an embodiment of the present invention.

The above-described objects, features, and advantages will be described later in detail with reference to the accompanying drawings, and accordingly, a person of ordinary skill in the art to which the present invention pertains will be able to easily implement the technical idea of the present invention. In describing the present invention, if it is determined that a detailed description of known technologies related to the present invention may unnecessarily obscure the subject matter of the present invention, a detailed description will be omitted. Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the drawings, the same reference numerals are used to indicate the same or similar elements.

Hereinafter, when a component is described as being "connected", "coupled" or "connected" to another component, the components may be directly connected or connected to each other, but other components are "interposed" between each component. It is to be understood that "or, each component may be "connected", "coupled" or "connected" through other components.

Hereinafter, a method of additional authentication for foreign resident customers according to some embodiments of the present invention will be described.

1 is a block diagram showing an entire system for an additional authentication method for foreign customers according to an embodiment of the present invention.

As shown in FIG. 1, the entire system of the present invention includes a bank A server 100, a company B authentication server 200, and a portable terminal 300. At this time, the portable terminal 300 may include a bank A banking app 310 and a company B authentication app 320.

The bank A server 100 stores and manages the bank account information of the domestic bank A, which has a bank account in the name of an overseas customer, and may provide electronic financial services to overseas customers.

The Bank A banking app 310 is installed on the portable terminal 300 under the name of the overseas customer, and requests for additional authentication and requested additional authentication information for the electronic financial service of the overseas customer provided by the Bank A server 100 Receives and performs an electronic financial service with the A bank server 100. It should be understood that electronic financial services can mean all services related to financial transactions of customers, such as Internet banking and smart banking.

At this time, when the bank A banking app 310 provides transaction information for electronic financial services to the bank A server 100 and the electronic financial service to the bank A server 100, the GPS, IP Information for additional authentication including information may be included.

The authentication server 200 of the company B transmits verification information for additional authentication to provide electronic financial services from the bank A server 100 to the bank A server 100 or the portable terminal 300 according to the request of the overseas customer. to provide. The provided verification information may include an authentication number for additional authentication, and verification result information according to an authentication number verification request from the bank A server 100.

To this end, the B company authentication server 200 stores a pre-registered authentication number for each overseas customer for additional authentication of overseas customers, and provides a pre-registered authentication number when requesting additional authentication. In addition, the company B authentication server 200 compares the authentication number received from the bank A server 100 with the previously stored authentication number and returns the verification result of the authentication number to the bank A server 100.

The B company authentication app 320 is installed on the portable terminal 300 in the name of the overseas customer, and is provided with an additional authentication number for the additional authentication service provided by the company B authentication server 200 for banking A bank. An additional authentication number input providing service is performed with the app 310. At this time, the B company authentication app 320 stores the token issued by the A bank server 100 through a pre-registration procedure with the B company authentication server 300, so that it is possible to check the validity of the electronic financial transaction with a token. I can.

The operation of the additional authentication system for overseas residents according to the present invention configured as described above will be described in detail with reference to the accompanying drawings. The same reference numerals as in FIG. 1 refer to the same member performing the same function.

2 is a flowchart illustrating a method of additional authentication for overseas residents according to an embodiment of the present invention.

Referring to FIG. 2, first, the bank A server 100 requests additional authentication according to the electronic financial service request from the bank A banking app 310 installed on the portable terminal 300 owned by the overseas customer ( S10). At this time, the bank A banking app 310 installed in the portable terminal 300 is an application or program for receiving electronic financial services to the bank A server 100 and the bank A server 100 to perform the electronic financial service. The application or program may be provided from the Bank A server 100 or may be provided and installed from other smartphone application markets (eg, Apple App Store, Google Android Market, etc.).

In addition, the Bank A banking app 310 verifies the location information and IP of the portable terminal 300 to be used, and when the electronic financial service is being used abroad, "Overseas Resident Customer Additional Authentication" is automatically activated, and the customer is activated. Additional authentication may be requested through the selection of the "Additional Authentication for Overseas Residents" menu.

To this end, when the bank A banking app 310 provides electronic financial service transaction information to the bank A server 100 for performing electronic financial services with the bank A server 100, the GPS and IP information of the portable terminal are included together. Can include.

When the bank A server 100 requests additional authentication of a foreign customer from the bank A banking app 310 installed on the portable terminal 300, the overseas customer resides abroad with the B company authentication server 200 registered in advance. Requests for additional authentication of the customer (S20). At this time, the bank A server 100 may transmit GPS and IP information of the portable terminal 300 of the overseas customer when additional authentication is requested by the overseas customer to the B company authentication server 200.

This requires additional certification, which is obligatory to apply the'Electronic Financial Fraud Prevention Service' currently in place. For this purpose, the A bank server 100 uses the B company authentication server 200 as an additional authentication method for overseas customers who do not use a domestic smartphone among overseas customers. That is, the A bank server 100 performs additional authentication with the B company authentication server 200 for additional authentication prior to providing electronic financial services to overseas customers staying abroad for the purpose of travel, work, or residence, etc. Will be requested.

Company B authentication server 200 is a unique authentication number for additional authentication of overseas customers requested from the A bank server 100 by a method such as a push to the company B authentication app 320 installed on the portable terminal 300 It transmits (S30). At this time, the B company authentication app 320 installed in the portable terminal 300 is an application or program for receiving an additional authentication service to the B company authentication server 200 to perform the B company authentication server 200 and the additional authentication service. . The application or program may be provided from the B company authentication server 200, or may be provided and installed from other smartphone application markets (eg, Apple App Store, Google Android Market, etc.).

And the B company authentication app 320 is automatically activated when the "Overseas resident customer additional authentication" menu is selected and activated in the portable terminal 300 to be used, and a unique authentication number transmitted from the company B authentication server 200 is Can be received.

On the other hand, overseas customers can pre-register for identification with the B company authentication server 200 in the B company authentication app 320. At this time, as a pre-registration method, for identification, customer identification can be performed using the account number of the bank A server 100 or the overseas license number issued through the bank A banking app 310. In this case, the overseas use permit number may be issued based on unique information (IP, time, location information, etc.) generated when linking between the bank A banking app 310 and the company B authentication app 320.

In addition, the A bank server 100 issues a specific token to the B company authentication server 200, and the B company authentication server 200 sends a specific token issued at the time of sending the authentication number to the B company authentication app 320. I can deliver. A specific token can be used as a means for legitimately verifying whether an overseas customer has completed identity verification (bank A banking app 310) (company B authentication app 320) during electronic financial transactions.

When the authentication number (for example, 6 digits) is entered into the B company authentication app 320 of the portable terminal 300, the entered authentication number is provided to the bank A banking app 310 of the portable terminal 300. (S40). At this time, the input of the authentication number to the bank A banking app 310 may be automatically entered into the bank A banking app 310 through the linkage between the company B authentication app 320 and the bank A banking app 310. However, the present invention is not limited thereto, and the overseas customer may directly input the authentication number entered by the company B authentication app 320 into the bank A banking app 310.

Subsequently, the bank A banking app 310 of the portable terminal 300 transmits the authentication number transmitted from the company B authentication app 320 to the bank A server 100 to request verification of the authentication number (S50). At this time, the B company authentication app 320 may include GPS and IP information of the portable terminal together with an authentication number for requesting verification.

When the authentication number for verification is input from the bank A banking app 310 installed in the portable terminal 300, the bank A server 100 transmits the authentication number requested for verification to the authentication server 200 of the company B Request verification (S60). In this case, when the bank A server 100 transmits the authentication number for verification to the vendor B authentication server 200, the GPS and IP information of the portable terminal 300 of the overseas customer may be transmitted together.

When the authentication number requested for verification from the bank A server 100 is input, the authentication server 200 of the company B stores in advance for each overseas customer by using the IP information of the portable terminal 300 that is transmitted along with the authentication number. Detects the corresponding overseas customer's authentication number. Then, the requested authentication number and the detected authentication number are compared with each other, and the verification result of the authentication number is transmitted to the bank A server 100 (S70). In this case, when the verification result matches each other as a result of the comparison, that is, if they match, the result of authenticating that the person is a legitimate identity may be transmitted to the bank A server 100. In addition, if the verification result is not matched with each other as a result of the comparison, that is, if they do not match, a result indicating that the person is not a legitimate person may be transmitted to the bank A server 100.

The bank A server 100 transmits the result of processing the electronic financial service requested from the bank A banking app 310 based on the verification result transmitted from the company B authentication server 200 to the bank A banking app of the portable terminal 300 ( 310) is transmitted (S80).

That is, if the verification result transmitted from the company authentication server 200 is the result of authenticating that the user is legitimate, the bank A server 100 transmits the result of the successful processing of the electronic financial service requested from the bank A banking app 310 to the portable terminal. It passes to the A bank banking app 310 of 300. For example, if the requested electronic financial service is a transfer service, a transfer to the requested account number may be processed, and the processed transfer result may be transmitted to the Bank A banking app 310.

On the other hand, the bank A server 100, if a result indicating that the verification result transmitted from the company authentication server 200 is not a legitimate person, the result of the failure of processing the electronic financial service requested from the bank A banking app 310 is portable. Delivered to the bank A banking app 310 of the terminal 300. For example, if the requested electronic financial service is a transfer service, identity authentication failure information corresponding to the failure result of the transfer process to the requested account number and the cause of the transfer process failure may be transferred to the Bank A banking app 310.

As described above with reference to the drawings illustrated for the present invention, the present invention is not limited by the embodiments and drawings disclosed in the present specification, and various by a person skilled in the art within the scope of the technical idea of the present invention. It is obvious that transformations can be made. In addition, even if not explicitly described and described the effects of the configuration of the present invention while describing the embodiments of the present invention, it is natural that the predictable effects of the configuration should also be recognized.

100: A bank server 200: B company authentication server
300: portable terminal 310: bank A banking app
320: Company B authentication app

Claims (10)

(A) requesting additional authentication according to a request for an electronic financial service from the Bank A banking app installed on a portable terminal owned by an overseas customer through the Bank A server;
(B) when additional authentication of the overseas customer is requested, requesting additional authentication of the overseas customer through the authentication server of the company B registered by the overseas customer in advance through the bank A server;
(C) passing a unique authentication number for the requested additional authentication to the vendor B authentication app installed in the portable terminal through the vendor B authentication server;
(D) when the authentication number is input, providing the authentication number to the banking app of the bank A of the portable terminal through the company B authentication app;
(E) requesting verification of the authentication number by transmitting the input authentication number to the Bank A server through the Bank A banking app;
(F) requesting verification of the authentication number by transmitting the authentication number input from the bank A banking app to the company B authentication server through the bank A server; And
(G) When the authentication number requested for verification is input through the authentication server of company B, the overseas resident customer is added, including the step of storing in advance for each overseas customer, comparing the authentication number, and transmitting the verification result of the authentication number to the bank A server. Authentication method.
The method of claim 1,
The Bank A banking app verifies the location information and IP of the portable terminal to be used, and when the electronic financial service is being used overseas, the "Overseas Resident Customer Additional Authentication" is automatically activated, and the customer is activated "Add Overseas Resident Customers" An additional authentication method for overseas customers that requires additional authentication by selecting the "Authentication" menu.
The method of claim 1,
The step (A) or step (B)
When the additional authentication is requested, an additional authentication method for overseas customers including GPS and IP information of a portable terminal.
The method of claim 1,
The company B authentication app is an additional authentication method for overseas customers in which a unique authentication number transmitted from the company B authentication server is activated when the "Additional authentication for overseas customers" menu is selected and activated on the portable terminal used.
The method of claim 1,
In the step (C), the overseas customer additional authentication method in which the overseas customer is pre-registered for identification with the company B authentication server in the company B authentication app.
The method of claim 5,
Pre-registration above
For identity verification, customer identity verification is performed using the account number of the bank A server or the overseas license number issued by the banking app of A bank.
At this time, the overseas license number is an additional authentication method for overseas residents that is issued based on unique information (IP, time, location information, etc.) generated when linking between the banking app of A bank and the authentication app of company B.
The method of claim 1,
Step (C)
Issuing a specific token from the A bank server to the B company authentication server; And
Additional authentication method for overseas customers comprising the step of delivering the issued specific token when transmitting the authentication number to the company B authentication app through the company B authentication server.
The method of claim 1,
Step (G)
An additional authentication method for overseas residents that uses the IP information of the portable terminal transmitted along with the input number requested for verification to be stored in advance for each overseas customer and detects the authentication number of the corresponding overseas customer among the authentication numbers.
The method of claim 1,
Step (G)
If the comparison result is matched with each other, transmitting a result of authenticating the identity of a legitimate identity to the bank A server;
If the comparison result is not matched with each other, transmitting a result indicating that the person is not a legitimate person to the bank A server; And
An additional authentication method for overseas customers comprising the step of transferring a processing result of the electronic financial service requested from the Bank A banking app to the bank A banking app of the portable terminal based on the verification result transmitted through the bank A server.
The method of claim 9,
If the verification result transmitted from the company authentication server 200 is a result of authenticating that the person is legitimate, transferring the result of successful processing of the electronic financial service requested from the Bank A banking app to the Bank A banking app; And
If the verification result transmitted from the company's authentication server is a result indicating that the person is not a legitimate person, the foreign resident comprising the step of delivering the result of failure to process the electronic financial service requested from the Bank A banking app to the Bank A banking app. Additional customer authentication methods.

Images