KR101470702B1 - Bank Server for Providing Financial Dealing Service Using Temporary Password and Method for Operating The Same - Google Patents

Abstract

The present invention relates to a bank server providing a financial transaction service using a disposable password and a method of operating the bank server, and more particularly, to a bank server providing a communication interface between a financial automation device and a customer's mobile phone. A customer information database storing personal information of the customer; A customer authentication unit for comparing the disposable password request information received from the customer's cellular phone through the network communication unit with customer information stored in the customer information database to perform customer authentication; A disposable password having a random series of numbers is generated using a predetermined random number when the customer's authentication is completed by the customer authentication unit and the disposable password is transmitted to the customer's cellular phone through the network communication unit A password generating unit; And a financial transaction processor for processing the requested financial transaction when the customer requests the financial transaction using the disposable password.

Description

Technical Field [0001] The present invention relates to a bank server for providing a financial transaction service using a one-time password,

The present invention relates to a financial system, and more particularly, to a system and method for issuing a disposable password to a customer's mobile phone at the request of a customer in a financial transaction using a financial automation device, And a bank server for providing a financial transaction service using a one-time password.

An automated teller machine (ATM) is an automation device that can support basic financial services such as deposits or withdrawals without regard to the time and place of the financial service and without bank staff. The automated teller machine is structured such that it can automatically conduct transactions such as withdrawal (withdrawal) of cash (banknote) or deposit (deposit) using a medium such as a card or bankbook.

In recent years, most companies use financial automation devices such as ATMs and CD-based devices, rather than people go directly to the banks by implementing the five-day workweek system. As a result, The number of people is increasing. At present, financial automation devices are being implemented not only in main business but also in various additional functions, and continue to develop financial automation equipment to improve bank competitiveness and satisfy customers.

In order to allow authorized users to operate the device normally, a password is assigned to each user, and a password is input before executing the financial processing function. It is possible to confirm the correspondence with the previously registered password and to perform the next step only when the input password matches the previously registered password.

However, in the currently operated financial automation equipment, when inputting the password, a pin-hole camera can be installed in the financial automation equipment or the installation booth so as to extort financial transaction information including the password of the customer, An unauthorized withdrawal or illegal credit transaction may be made from the customer's account through the duplicated card or card number obtained by the method described above.

In the case of foreign countries, the severity of such crimes is very high and increasing every year, and various efforts have been made to prevent them.

Disclosure of Invention Technical Problem [8] Accordingly, the present invention has been made to solve the above-mentioned problems and it is an object of the present invention to provide a financial transaction service using a one-time password that can prevent a password exposure accident that may occur in financial transactions, And a method of operating the same.

In order to achieve the above object, according to a first aspect of the present invention, there is provided a bank server for providing a financial transaction service using a disposable password according to the present invention comprises a financial automation device and a network A communication unit; A customer information database storing personal information of the customer; A customer authentication unit for comparing the disposable password request information received from the customer's cellular phone through the network communication unit with customer information stored in the customer information database to perform customer authentication; A disposable password having a random series of numbers is generated using a predetermined random number when the customer's authentication is completed by the customer authentication unit and the disposable password is transmitted to the customer's cellular phone through the network communication unit A password generating unit; And a financial transaction processor for processing the requested financial transaction when the customer requests the financial transaction using the disposable password.

According to a second aspect of the present invention, there is provided a method of providing a financial transaction service using a disposable password, the method comprising: receiving disposable password request information from a customer's cellular phone; Performing authentication of the customer by comparing the received one-time password request information with pre-stored customer information; Generating a random series of one-time passwords using a predetermined random number when the authentication of the customer is completed, and transmitting the generated one-time password to the customer's cellular phone; And processing the requested financial transaction when the customer requests the financial transaction using the disposable password.

As described above, according to the present invention, it is possible to actively cope with financial accidents, which are increasing in recent years, by providing a bank server providing a financial transaction service using a one-time password and an operation method thereof, The security stability can be improved and the customer's property can be kept more secure, which is effective in raising the corporate image.

It is possible to prevent the occurrence of financial accidents in advance and to guarantee the safety of the customers that may arise by providing the bank server providing the financial transaction service using the disposable password for checking whether the disposable password is reused or not, It is possible to improve the reliability.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a diagram for explaining an operation of a financial system according to an embodiment of the present invention;
FIG. 2 is a block diagram showing a schematic configuration of a bank server providing a financial transaction service using a disposable password according to an embodiment of the present invention; FIG.
3 is a flowchart illustrating a method of providing a financial transaction service using a disposable password according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

1 is a view for explaining the operation of a financial system according to an embodiment of the present invention.

1, when a customer who owns a card 101 (or a bankbook) inputs his or her card 101 into the automated teller machine 110 and desires to withdraw a predetermined amount of money, ), Executes the disposable password request application of his / her cell phone 130, inputs the account password, and requests the bank server 120 to generate a disposable password.

The bank server 120 compares the one-time password request information received from the customer's cellular phone 130 with pre-stored customer information to perform a customer authentication, generates a one-time password, and transmits the generated one- 130).

The customer can input the disposable password received through the mobile phone 130 at the withdrawal transaction to the automated teller machine 110 so that the customer can normally withdraw the desired withdrawal amount.

In order to authenticate a customer for issuing the disposable password as described above, the bank server 120 may receive and store customer information from a customer when a card or passbook is opened.

Meanwhile, when the disposable password is reused within a predetermined time after finishing the financial transaction using the disposable password, the bank server 120 according to the present invention restricts the financial transaction using the disposable password or reuses the disposable password It is possible to notify the business terminal.

2 is a block diagram illustrating a schematic configuration of a bank server for providing a financial transaction service using a disposable password according to an embodiment of the present invention.

2, a bank server 120 according to the present invention includes a network communication unit 210, a customer information database 220, a customer authentication unit 230, a disposable password generation unit 240, and a financial transaction processing unit 250. [ And the like.

The network communication unit 210 is a communication interface for communicating with the financial automation device 110 and the customer's cellular phone 130. The communication interface 210 may be a local area network (LAN), a metropolitan area network (MAN) The mobile terminal 100 exchanges information necessary for financial transactions with the financial automation device 110 through a Packet Switched Data Network (PSDN) over a wide area network (WAN) 130) and information necessary for issuing a disposable password.

The customer information database 220 stores customer information necessary for performing authentication of the customer when issuing the disposable password. Here, the customer information may include a name, an address, a telephone number, an account number, and an account password of the customer. To this end, the customer information database 220 may be included in the bank server 120 or may be implemented as an external database server separately from the bank server 120.

The customer authentication unit 230 compares the one-time password request information received from the customer's mobile phone 130 with the customer information stored in the customer information database 220 through the network communication unit 210 and performs authentication of the customer. In detail, the customer authentication unit 230 compares the telephone number of the customer and the account password included in the one-time password request information with the telephone number of the customer and the account password included in the customer information, respectively, and performs authentication of the customer.

When the customer's authentication is completed by the customer authentication unit 230, the one-time password generation unit 240 generates a random series of one-time passwords using a predetermined random number, and transmits the generated one- 210 to the customer's cellular phone 130. Here, the disposable password generating unit 240 may randomly generate a disposable password using a random number using various random number generation algorithms.

The financial transaction processing unit 250 is a functional unit for processing a financial transaction requested by the automated teller machine 110, and performs financial transactions such as financial transfer, deposit and withdrawal. The financial transaction processing unit 250 according to the present invention processes a requested financial transaction when a customer requests a financial transaction using a one-time password.

Meanwhile, the bank server 120 according to the present invention may further include a financial transaction restricting unit 260 or a disposable password reuse notifying unit 270.

The financial transaction restricting unit 260 restricts the financial transaction using the one-time password when the one-time password is reused within a predetermined time after the completion of the customer's financial transaction.

The disposable password reuse notification unit 270 automatically notifies the security company of the reuse of the disposable password when the disposable password is reused within the predetermined time after the completion of the customer's financial transaction, If the crime is suspected, the use of the financial automation equipment shall be restricted.

3 is a flowchart illustrating a method of providing a financial transaction service using a disposable password according to an embodiment of the present invention.

3, the customer presses the disposable password input button of the automated teller machine 110, executes the disposable password request application of his / her cell phone 130, and inputs the account password to the bank server 120, And requests the generation of a password (S310). At this time, the bank server 120 receives the disposable password request information from the customer's cellular phone 130.

The one-time password request information received from the customer's mobile phone 130 is compared with pre-stored customer information to perform authentication of the customer (S320). Specifically, the customer's authentication is performed by comparing the telephone number of the customer and the account password contained in the one-time password request information with the telephone number of the customer and the account password included in the customer information.

When the authentication of the customer is completed, a random number of one-time passwords is generated using a predetermined random number, and the generated one-time password is transmitted to the customer's mobile phone (S330).

Subsequently, when the customer requests the financial transaction using the one-time password, the requested financial transaction is processed (S340).

In addition, it is determined whether the disposable password is reused within a predetermined time after finishing the customer's financing transaction (S350). If the disposable password is reused within the preset time, the financial transaction using the disposable password is restricted, And notifies the reuse to a specific terminal (for example, a terminal of the security company) (S360).

The embodiments disclosed in the specification of the present invention do not limit the present invention. The scope of the present invention should be construed according to the following claims, and all the techniques within the scope of equivalents should be construed as being included in the scope of the present invention.

210: network communication unit 220: customer information database
230: customer authentication unit 240: one-time password generation unit
250: financial transaction processing unit 260: financial transaction restriction unit
270: Disposable password reuse notification section

Claims (8)

A network communication unit for providing a communication interface between the financial automation device and the customer's cellular phone;
A customer information database storing customer information;
A customer authentication unit for comparing the disposable password request information received from the customer's cellular phone through the network communication unit with customer information stored in the customer information database to perform customer authentication;
A disposable password having a random series of numbers is generated using a predetermined random number when the customer's authentication is completed by the customer authentication unit and the disposable password is transmitted to the customer's cellular phone through the network communication unit A password generating unit;
A financial transaction processing unit for processing the requested financial transaction when the customer requests the financial transaction using the disposable password;
A financial transaction restricting unit for restricting financial transactions using the disposable password when the disposable password is reused within a predetermined time after finishing the customer's financial transaction; And
A disposable password reuse notification unit for notifying a specific terminal of reuse of the disposable password when the disposable password is reused within a predetermined time after the financial transaction of the customer is completed;
A bank server providing a financial transaction service using a one-time password including a password.
The method according to claim 1,
Wherein the customer authentication unit compares the telephone number of the customer and the account password included in the one-time password request information with the telephone number of the customer and the account password included in the customer information to perform the authentication of the customer. A bank server that provides financial transaction services using
delete delete Receiving the disposable password request information from the customer's cellular phone;
Performing authentication of the customer by comparing the received one-time password request information with pre-stored customer information;
Generating a random series of one-time passwords using a predetermined random number when the authentication of the customer is completed, and transmitting the generated one-time password to the customer's cellular phone;
Processing the requested financial transaction when the customer requests the financial transaction using the disposable password; And
Limiting the financial transaction using the disposable password and notifying the specific terminal of the reuse of the disposable password when the disposable password is reused within a predetermined time after finishing the customer's financial transaction;
The method comprising the steps of:
6. The method of claim 5, wherein in performing the authentication of the customer,
Wherein the authentication of the customer is performed by comparing the telephone number of the customer and the account password included in the one-time password request information with the telephone number of the customer and the account password included in the customer information, How to provide services.
delete delete

Images