KR20070021580A - System and Method for Processing Financial Transaction, Devices for Processing Financial Transaction, Terminals and Recording Medium - Google Patents

Abstract

The present invention relates to a financial transaction processing method and system, wherein at least one or more financial transaction information and / or customer-owned financial information (and / or customer-owned wireless terminal information) and the customer-owned information in a predetermined information storage means. A financial transaction means information storing step of linking predetermined token generating program information of the token generating program provided in the terminal and storing the same in a predetermined storage medium; Providing predetermined financial transaction information corresponding to a financial transaction using the financial transaction means of the customer who owns the financial transaction means from the predetermined financial transaction terminal to the financial transaction processing means (or the financial transaction processing means linking device or server) on the communication network. Including the predetermined token code generated by the token generation program included in the customer-owned terminal in the financial transaction information or transmitting the token code separately from the financial transaction information; The financial transaction means information corresponding to the financial transaction and / or the customer owning the financial transaction means in association with the storage medium (or storage medium operation means) in the financial transaction processing means (or financial transaction processing means linking device or server); Identifying token generation program information associated with the information (and / or customer-owned wireless terminal information), authenticating the validity of the token code using the token generation program information, and according to a result of the validation of the token code, A financial transaction authentication step of authenticating the validity of the financial transaction; And a financial transaction processing step of processing the financial transaction in accordance with the validity verification result in the financial transaction processing means.

Thereby, more secure financial transactions are possible through a predetermined token code volatilized by time and / or by a random random variable, and by means of a wireless terminal number, financial transaction information (eg, financial account information, credit card). More convenient and safe financial transactions are possible without exposing information, debit card information, cash card information, check card information, prepaid card information, electronic money information, etc.).

Financial transactions, passwords, tokens

Description

Financial transaction processing method and system, financial transaction processing device, financial transaction terminal device, terminal device and recording medium {System and Method for Processing Financial Transaction, Devices for Processing Financial Transaction, Terminals and Recording Medium}

1 is a diagram illustrating a financial transaction processing system according to the present invention.

2 illustrates a configuration of a system for providing a predetermined token agent to the customer wireless terminal according to an embodiment of the present invention.

3 is a diagram illustrating token agent information to be provided to a wireless terminal according to an embodiment of the present invention.

4 is a diagram illustrating token agent information to be provided to a wireless terminal according to an embodiment of the present invention.

5 is a diagram illustrating an exemplary process of providing and mounting a token agent program to a customer wireless terminal according to an exemplary embodiment of the present invention.

6 is a diagram illustrating an information configuration of wireless terminal information stored in the storage medium 110 according to an embodiment of the present invention.

7 is a diagram illustrating an information configuration of token agent information stored in the storage medium according to an embodiment of the present invention.

8 is a diagram illustrating an information configuration of customer information stored in the storage medium according to an embodiment of the present invention.

9 is a diagram illustrating an information configuration of financial transaction information stored in the storage medium according to an embodiment of the present invention.

10 is a diagram illustrating an embodiment of a financial transaction processing system using a wireless terminal number according to an embodiment of the present invention.

11 is a diagram illustrating a functional configuration of a wireless terminal equipped with a token agent according to an embodiment of the present invention.

12 is a diagram illustrating a token code structure according to an embodiment of the present invention.

13 is a view showing the functional configuration of a financial transaction terminal according to an embodiment of the present invention.

14 is a diagram illustrating a token code operation process according to an embodiment of the present invention.

15 is a diagram illustrating a token code operation process according to an embodiment of the present invention.

16 is a diagram illustrating a token code operation process according to an embodiment of the present invention.

17 is a diagram illustrating a token code operation process according to an embodiment of the present invention.

18 illustrates an implementation process of applying a token code based financial transaction to a card settlement system according to an embodiment of the present invention.

19 illustrates a complete payment processing request for token code based payment processing according to an embodiment of the present invention.

20 illustrates an implementation process of applying a token code based financial transaction to a financial automation system according to an exemplary embodiment of the present invention.

21 illustrates an implementation process of applying a token code based financial transaction to an online payment system according to an embodiment of the present invention.

22 illustrates an implementation process of applying a token code based financial transaction to a wireless financial system according to an exemplary embodiment of the present invention.

<Description of main parts of drawing>

100: token agent providing means 105: information storage means

110: storage medium 115: server

120: financial transaction processing means 125: information transmission means

130: information storage means 135: storage medium

140: network means 145: financial transaction terminal

The present invention uses at least one financial transaction means information, the financial means owned customer-owned wireless terminal information (and / or customer information) and the token generation program provided in the customer-owned terminal, When the financial transaction processing means (or the financial transaction processing means linking device or the server) on the communication network provides the predetermined financial transaction information corresponding to the financial transaction using the financial transaction means of the customer who owns the financial transaction means, A financial transaction that includes or separates predetermined token code information generated by a token generation program provided in the customer-owned terminal and provides the financial transaction processing means to process the financial transaction according to the validity of the token code information. It relates to a method and a system.

As the Internet infrastructure and financial transaction infrastructure evolved, user authentication became very important for financial transactions and website access.

In particular, phishing is used to extract information about a person's financial transactions (e.g., authentication number, credit card number, account information, etc.) by eliciting or linking to an e-mail sent from a website such as a financial institution. To steal your domain or trick your domain name system (DNS) name to mislead users into real sites, pharming to steal personal information such as personal IDs, passwords, and account information, or from your keyboard As keyboard hacking to hack input key input information (eg, personal ID, password, account information, etc.) becomes a problem, a safer and more efficient method for financial transactions is being sought.

In addition, in general, since a plurality of authentication information (for example, ID and password) required for financial transaction login or financial transaction does not exist, the user had to bear the damage completely when leaked to others through hacking or the like. .

The present invention is derived to solve the above problems, and provided with at least one financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information) and the customer-owned terminal Information storage means for linking predetermined token generation program information for a token generation program to a predetermined storage medium and a predetermined transaction corresponding to a financial transaction using the financial transaction means of a customer possessing the financial transaction means by a server on a communication network; When providing financial transaction information, a financial transaction terminal that includes a predetermined token code generated by the token generation program included in the customer-owned terminal in the financial transaction information or transmits the token code separately from the financial transaction information. And in connection with the storage medium (or storage medium operating means), Confirm the token generating program information associated with the corresponding financial trading instrument information and / or the financial trading instrument ownership customer information (and / or the customer-owned wireless terminal information), and use the token generating program information for the token code. An object of the present invention is to provide a financial transaction processing system including a server for authenticating validity and authenticating the validity of the financial transaction according to the validity authentication result of the token code.

In addition, the present invention is predetermined financial transaction information corresponding to the financial transaction using the financial transaction means of the customer owning the predetermined financial transaction means in the predetermined financial transaction terminal generated by the token generation program provided in the customer-owned terminal And a receiving unit for transmitting the token code including or transmitting the token code separately from the financial transaction information, or receiving the token code directly through a server relay, the at least one financial transaction means information, and And / or a predetermined storage medium storing and managing the financial transaction means owned customer information (and / or customer owned wireless terminal information) and predetermined token generation program information for the token generation program provided in the customer owned terminal ( Or information related to the financial transaction means corresponding to the financial transaction and / or the storage medium operation means). Using the information verification unit for confirming the token generation program information associated with the financial transaction means customer information (and / or customer-owned wireless terminal information) and the token generation program information to authenticate the validity of the token code, It is an object of the present invention to provide a financial transaction processing apparatus having an authentication unit for authenticating the validity of the financial transaction, according to the validity authentication result of the token code.

In addition, the present invention is a communication unit for processing data transmission and reception with the financial transaction processing means (or financial transaction processing means associated device or server) on the communication network and the financial transaction processing means (or financial transaction processing means associated device or A predetermined token code generated by a token generation program included in the client's own terminal when providing financial transaction information corresponding to the financial transaction using the financial transaction means of the customer possessing the financial transaction means. It is an object of the present invention to provide a financial transaction terminal device including a token code processing unit to include information or transmit the token code separately from the financial transaction information.

In addition, the token generation program is driven by using a communication processor for receiving a predetermined token generation program and a predetermined code (or pin number or password) input by the user through a predetermined key input unit in connection with a server on a communication network. And a control unit which outputs the token code generated by the token generation program in association with a predetermined output unit, or provides the generated token code to a predetermined terminal (or server) in cooperation with the communication processing unit. It is an object of the present invention to provide a terminal device.

In addition, the present invention, the financial transaction means information data file for storing at least one financial transaction means information, the financial transaction means owned customer information data file for storing the financial transaction means owned customer information and the financial transaction means owned customer terminal Or providing a token generating program information data file for storing predetermined token generating program information for a predetermined token generating program provided in the financial transaction-owning customer terminal.

Financial transaction processing method according to the present invention for achieving the above object, at least one or more financial transaction means information and / or the financial transaction means owned customer information (and / or customer-owned wireless terminal information) in a predetermined information storage means; A financial transaction information storage step of linking predetermined token generation program information of a token generation program provided in a customer-owned terminal to a predetermined storage medium, and storing financial transaction means (or financial) on a communication network at a predetermined financial transaction terminal; A predetermined transaction generated by a token generation program provided in the customer-owned terminal upon providing predetermined financial transaction information corresponding to a financial transaction using the financial transaction means of the customer who owns the financial transaction means Include the token code in the financial transaction information or Transmitting separately from the financial transaction information, and in connection with the storage medium (or storage medium operating means) in the financial transaction processing means (or the financial transaction processing means linking device or server), the financial transaction corresponding to the financial transaction; Verify token generation program information associated with the means information and / or the financial transaction means owned customer information (and / or customer owned wireless terminal information), and verify the validity of the token code using the token generation program information; And a financial transaction authentication step of authenticating the validity of the financial transaction according to the validity authentication result of the token code, and a financial transaction processing step of processing the financial transaction according to the validity authentication result in the financial transaction processing means. Characterized in that made.

According to an embodiment of the present invention, the financial transaction preferably includes an offline financial transaction and / or an online financial transaction.

According to an embodiment of the present invention, the financial transaction may include at least one payment processing financial transaction in offline and / or online, account transfer financial transaction in offline and / or online, and cash withdrawal financial transaction in offline. It is preferable to include.

According to an embodiment of the present invention, the financial transaction means preferably comprises at least one financial account, a credit card, a debit card, a cash card, a check card, a prepaid card, and an electronic money. .

According to an embodiment of the present invention, the financial transaction terminal includes at least one payment terminal including the customer-owned wireless terminal or wired terminal, a financial transaction automation processing device such as CD / ATM, and a CAT terminal or a POS terminal. It is preferable to make it.

According to the method of the present invention, the customer-owned terminal, preferably comprises a wireless terminal and / or wired terminal.

According to the present invention, the financial transaction processing method may be configured to further include a token generating program providing step of providing a predetermined token generating program from a predetermined token generating program providing means to a predetermined financial transaction-owning customer terminal. .

According to the present invention, the financial transaction processing method, predetermined financial transaction processing history (or payment approval full text) data corresponding to the financial transaction processing in a predetermined information transmission means owns the financial transaction terminal (or owned by the financial transaction means). It may be configured to further include an information transmission step for transmitting to a customer wireless terminal or a wired terminal).

Here, the information transmitting step, the financial transaction processing history (or payment approval specialized) data via a predetermined relay server, such as a VAN company server to the financial transaction terminal (or the financial transaction means owned customer wireless terminal or wired terminal) It is desirable to send to.

According to the present invention, the financial transaction processing method, the predetermined financial information processing means (or payment approval full text) data corresponding to the financial transaction processing in the predetermined information storage means the financial transaction means information (and / or customer information) ) May further include a financial transaction processing history storage step of storing the transaction in a predetermined storage medium.

According to the implementation method of the present invention, the financial transaction authentication step, when the financial transaction information includes at least one or more authentication information (or secret code) associated with the financial transaction means, the authentication information (or secret code) It may further comprise the step of including the validity verification of the validity of the financial transaction.

According to the present invention, the financial transaction processing method, when the financial transaction means is used on-line, predetermined financial transaction information from a server on a communication network in the financial transaction terminal (or the wireless transaction means owned customer wireless terminal or wired terminal). It may be configured to further include receiving.

According to an embodiment of the present invention, the financial transaction authentication step refers to the token generation program information associated with the financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information). By generating a predetermined token authentication code corresponding to the received token code, and comparing the token code and the token authentication code to verify the validity of the token code.

In addition, the present invention is characterized in that it comprises a recording medium recording a computer-readable program for executing the at least one financial transaction processing method described above.

On the other hand, the financial transaction processing system according to the present invention for realizing the above-described financial transaction processing method, at least one financial transaction means information and / or the financial transaction means owned customer information (and / or customer-owned wireless terminal information) and Information storage means for linking predetermined token generation program information for the token generation program provided in the customer-owned terminal to a predetermined storage medium, and using the financial transaction means of the customer with the financial transaction means as a server on a communication network. In providing the predetermined financial transaction information corresponding to the financial transaction, the predetermined token code generated by the token generation program included in the customer-owned terminal is included in the financial transaction information, or the token code is combined with the financial transaction information. Linked with the financial transaction terminal and the storage medium (or storage medium operating means) for transmitting separately Check the token generation program information associated with the financial transaction means information and / or the financial transaction ownership customer information (and / or the customer-owned wireless terminal information) corresponding to the financial transaction, and use the token generation program information. By authenticating the validity of the token code, according to the validity authentication result of the token code, characterized in that it comprises a server for authenticating the validity of the financial transaction.

According to the method of the present invention, the server is characterized in that for processing the financial transaction, according to the validity authentication result.

According to the present invention, the financial transaction processing system may be configured to further include financial transaction processing means for processing the financial transaction according to the validity authentication result of the server.

According to the present invention, the financial transaction processing system may be configured to further include a token generating program providing means for providing a predetermined token generating program to a predetermined financial transaction means customer terminal.

According to the present invention, the financial transaction processing system, predetermined financial transaction processing history (or payment approval professional) data corresponding to the financial transaction processing the financial transaction terminal (or financial transaction means owned customer wireless terminal or wired terminal) It may be configured to further include information transmitting means for transmitting to).

According to the implementation method of the present invention, the information transmission means, the financial transaction processing history (or payment approval professional) data via a predetermined relay server, such as a VAN company server, the financial transaction terminal (or the customer owned by the financial transaction means) Wireless terminal or wired terminal).

According to the present invention, the financial transaction processing system, predetermined financial transaction processing history (or payment approval professional) data corresponding to the financial transaction processing in conjunction with the financial transaction means information (and / or customer information) predetermined It may be configured to further include information storage means for storing in the storage medium.

According to an embodiment of the present invention, the server, if the financial transaction information includes at least one or more authentication information (or secret code) associated with the financial transaction means, validity authentication of the authentication information (or secret code) It is preferable to include in the validation of the financial transaction.

According to an embodiment of the present invention, when the financial transaction terminal is used on-line, it is preferable that the financial transaction terminal receives predetermined financial transaction information from a server on a communication network.

According to an embodiment of the present invention, the server may refer to the token generation program information associated with the financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information). Generate a predetermined token authentication code corresponding to the received token code, and compares the token code and the token authentication code to authenticate the validity of the token code.

Further, according to the present invention, each of the means provided in the financial transaction processing system is characterized in that it is provided in a single server (or device) or a plurality of servers (or devices).

On the other hand, the financial transaction processing apparatus for realizing the present invention includes a predetermined financial transaction information from the predetermined financial transaction terminal to the customer-owned terminal in predetermined financial transaction information corresponding to the financial transaction using the financial transaction means. A receiving unit including a predetermined token code generated by the provided token generating program or transmitting the token code separately from the financial transaction information, when receiving the token code, or receiving the same through a server relay; The at least one financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information) and predetermined token generation program information for the token generation program provided in the customer-owned terminal The financial transaction in connection with a predetermined storage medium (or storage medium operating means) for storing and managing By using the information verification unit and the token generation program information for confirming the token transaction program information associated with the financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information) corresponding to the Validating the token code, characterized in that it comprises an authentication unit for authenticating the validity of the financial transaction in accordance with the validation result of the token code.

According to the present invention, the financial transaction processing apparatus may be configured to further include a financial transaction processing unit for processing the financial transaction according to the validity authentication result.

According to the present invention, the financial transaction processing apparatus may be configured to further include a token generation program providing unit for providing a predetermined token generation program to the customer terminal.

According to the present invention, the financial transaction processing apparatus, predetermined financial transaction processing history (or payment approval professional) data corresponding to the financial transaction processing the financial transaction terminal (or financial transaction means owned customer wireless terminal or wired terminal) It may be configured to further include an information transmitting unit for transmitting.

According to the present invention, the financial transaction processing apparatus is configured to link predetermined financial transaction processing history (or payment approval text) data corresponding to the financial transaction processing with the financial transaction means information (and / or customer information). It may be configured to further include an information storage unit for storing in the storage medium.

According to an embodiment of the present invention, the authentication unit, if the financial transaction information includes at least one or more authentication information (or secret code) associated with the financial transaction means, validity authentication of the authentication information (or secret code) It is preferable to include in the validation of the financial transaction.

According to an embodiment of the present invention, the authentication unit may receive the token by referring to the token generation program information associated with the financial transaction means information and / or the financial transaction means owned customer information (and / or customer-owned wireless terminal information). It is preferable to generate a predetermined token authentication code corresponding to the token code, and compare the token code and the token authentication code to authenticate the validity of the token code.

According to the present invention, the financial transaction processing device is made of a single device (or server) or a plurality of devices (or servers).

Further, according to the present invention, the financial transaction processing apparatus is characterized in that it comprises a recording medium on which a program for executing the functions of the at least one or more device constituents is recorded.

On the other hand, the financial transaction terminal apparatus for realizing the present invention, the financial transaction processing means (or financial transaction processing means associated device or server) on the communication network and the communication unit for processing a predetermined data transmission and reception and the financial transaction processing means through the communication unit (Or a financial transaction processing means linking device or server) generated by the token generation program provided in the customer-owned terminal when providing the predetermined financial transaction information corresponding to the financial transaction using the financial transaction means of the customer owning the financial transaction means. Or a token code processing unit configured to include a predetermined token code in the financial transaction information or transmit the token code separately from the financial transaction information.

According to the invention, the financial transaction terminal device is characterized in that it comprises a recording medium recording a program for executing a function of the at least one device component.

On the other hand, the terminal device for realizing the present invention, in connection with the server on the communication network, a predetermined code (or pin number or password) input by the user through a communication processing unit for receiving a predetermined token generation program and a predetermined key input unit Drive the token generation program by using, and output the token code generated by the token generation program in conjunction with a predetermined output unit, or in conjunction with the communication processing unit, the generated token code to a predetermined terminal (Or a server) characterized by comprising a control unit.

According to the embodiment of the present invention, the communication processing unit may further receive predetermined payment information from a server (or device) on the communication network.

In addition, according to the present invention, the terminal apparatus is characterized in that the recording medium includes a program for executing the functions of at least one or more device components described above.

Meanwhile, the information storage medium required for realizing the present invention includes a financial transaction means information data file for storing at least one financial transaction means information, and a financial transaction means customer information data file for storing the financial transaction means customer information. And a token generation program information data file provided to the financial transaction means owning customer terminal or storing predetermined token generation program information for a predetermined token generation program provided in the financial transaction means owning customer terminal. It is characterized by.

According to the present invention, the information storage medium, the financial transaction means information data file, the financial transaction means owned customer information data file, and the token generation program information data file at least one of the mutually interworking process for storing. It is done.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In the present invention, each means constituting the financial transaction processing system using the wireless terminal number is a program (e.g., each recorded on a recording medium provided in a predetermined server according to unique characteristics (or roles) defined in the means). A program comprising at least one function unit (Function) for performing the unique function (or role) of the means, and / or configured as an independent server performing the unique function defined in the means ( For example, a plurality of server systems interoperating with each other through a predetermined server-to-server interface) can be configured. The preferred embodiment of the present invention, which is implemented below, can be used to efficiently describe the technical components of the present invention. Are stored on a recording medium provided in a predetermined server and / or through a plurality of interoperable servers. Would be described as the display, but are not limited to the exemplary method of the device, if more than the embodiment in no way. In addition, the following embodiment uses an implementation method in which a predetermined token generation program is mounted on a customer wireless terminal, whereby the token generation program is referred to as a token agent and / or a token agent program for convenience. In addition, the terms used in the following embodiments will be used appropriately modified according to the field to which the token code-based financial transactions according to the present invention is applied, whereby the present invention is not limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a financial transaction processing system according to the present invention.

In more detail, Figure 1 shows at least one financial transaction instrument information and / or the financial instrument ownership customer information (and / or customer-owned wireless terminal information) and a predetermined token for the token generation program provided in the customer-owned terminal Information storage means 105 for storing the generated program information in a predetermined storage medium 110 and the server 115 on the communication network corresponding to the financial transaction using the financial transaction means of the customer owning the financial transaction means In the case of providing predetermined financial transaction information, the financial transaction information includes a predetermined token code generated by the token generation program included in the customer-owned terminal or transmits the token code separately from the financial transaction information. The number of financial transactions corresponding to the financial transaction in association with the transaction terminal 145 and the storage medium 110 (or storage medium operating means) Verify token generation program information associated with the information and / or the financial transaction means owned customer information (and / or customer owned wireless terminal information), and verify the validity of the token code using the token generation program information; According to the validity authentication result of the token code, the financial transaction processing system comprising a server 115 for authenticating the validity of the financial transaction.

Referring to FIG. 1, the financial transaction processing system may further include financial transaction processing means 120 for processing the financial transaction according to the validity authentication result of the server 115.

In addition, the financial transaction processing system preferably further comprises a token agent providing means 100 for providing a predetermined token generating program to a predetermined financial transaction means owned customer terminal.

In addition, the financial transaction processing system transmits predetermined financial transaction processing history (or payment approval specialized text) data corresponding to the financial transaction processing to the financial transaction terminal 145 (or the wireless transaction means-owned customer wireless terminal or wired terminal). It is preferable that the information transmission means 125 for transmitting to the financial transaction processing history (or payment approval specialized) data via a predetermined relay server, such as a VAN company server, the financial transaction terminal 145 ( Or the financial transaction means owned customer wireless terminal or wired terminal).

In addition, the financial transaction processing system connects predetermined financial transaction processing history (or payment authorization) data corresponding to the financial transaction processing with the financial transaction means information (and / or customer information), and stores a predetermined storage medium 135. It is preferable that the information storage means 130 to be stored further).

According to an embodiment of the present invention, the server 115 preferably processes the financial transaction according to the validity authentication result, and / or at least one authentication associated with the financial transaction means in the financial transaction information. When information (or secret code) is included (e.g., when there is a password defined for input in a conventional financial transaction procedure), the validity authentication of the authentication information (or secret code) is applied to the validity authentication of the financial transaction. It is preferable to include.

Further, the server 115 refers to the received token code by referring to the token generating program information associated with the financial transaction instrument information and / or the financial transaction instrument ownership customer information (and / or the customer owned wireless terminal information). It is preferable to generate a predetermined token authentication code corresponding to, and to verify the validity of the token code by comparing the token code and the token authentication code.

According to an embodiment of the present invention, the financial transaction preferably comprises an offline financial transaction, and / or an online financial transaction, and / or an offline and / or online payment processing financial transaction; It is preferable to include at least one or more of the account transfer financial transactions on-line and / or online, and cash withdrawal financial transactions on the offline.

According to an embodiment of the present invention, the financial transaction means preferably comprises a financial account, a credit card, a debit card, a cash card, a check card, a prepaid card, and at least one electronic money. And / or the financial transaction terminal 145 includes at least one payment terminal including the customer-owned wireless terminal or wired terminal, a financial transaction automation processing device such as CD / ATM, and a CAT terminal or a POS terminal. desirable.

In addition, the customer-owned terminal may be a Personal Communication System (PCS) and / or a Global System for Mobile communications (GSM) terminal and / or a Personal Digital Cellular (PDC) and / or Personal Handyphone (PHS). System) and / or at least one personal digital assistant (PDA) and / or smart phone and / or telematics and / or wireless data communication terminal and / or portable internet terminal. It is preferable to include a wireless terminal, and / or preferably comprises a wired terminal including at least one or more of a personal computer (PC) and / or laptop.

2 illustrates a configuration of a system for providing a predetermined token agent to the customer wireless terminal 1100 according to an embodiment of the present invention.

More specifically, FIG. 2 provides a token agent program provided to a customer wireless terminal 1100 having at least one financial transaction means and is mounted thereon, wherein the at least one financial transaction means information and financial transaction means customer information ( And / or customer wireless terminal information) and a token agent providing system for storing token agent information in a predetermined storage medium 110, the person having ordinary skill in the art to which the present invention pertains. In order to easily explain the technical features of the present invention to FIG. 1, the token agent providing system is a financial transaction means issuing server 200 for issuing a predetermined financial transaction means to a predetermined customer, and the customer wireless terminal 1100. A token agent providing server 215 for providing and mounting a predetermined token agent program at A predetermined storage medium by linking token agent information mounted on the customer wireless terminal 1100 with customer information (and / or customer wireless terminal information) owned by the financial transaction means and at least one financial transaction information issued to the customer ( It will be described as being configured to include an information storage server 235 to be stored in 110. However, technical features of the token agent providing system are not limited to those illustrated in FIG. 2, and a person having ordinary knowledge in the technical field to which the present invention pertains may refer to the financial transaction means issuing server with reference to FIG. 2. It is easy to infer a method of implementing various token agent providing systems in which the 200 and the token agent providing server 215 and the information storage server 235 are constituted by one server and / or are composed of at least two or more servers. You can do it.

The financial transaction means issuing server 200 is a financial account financial transaction means, credit card financial transaction means, debit card financial transaction means, cash card financial transaction means, check card financial transaction means, prepaid card financial transaction means And a server provided in a bank and / or a financial company for issuing a financial transaction means including at least one electronic money financial transaction means to the customer. Referring to FIG. 2, at least one financial transaction means is provided to the customer. Issuing financial transaction means issuing unit 205, and financial transaction means information D / B (210) for storing in association with the at least one financial transaction means information and the customer information issued to the customer.

The financial transaction means issuing unit 205 obtains predetermined customer information about the customer through a predetermined financial transaction means issuing interface 250 and / or issues the customer to the customer based on the obtained customer information. Generate at least one financial transaction instrument information, store the financial transaction instrument information in a DBMS provided in a predetermined financial system, and / or print the financial transaction instrument information in a predetermined account book and / or a predetermined card Characterized in that it is stored and issued in a medium (eg, an MS card and / or an IC card) and / or a wireless chip medium (eg, an IC chip mounted or detached from the customer wireless terminal 1100).

According to the exemplary embodiment of the present invention, the method for acquiring the customer information about the customer by the financial transaction means issuing unit 205 may be provided with the customer information through a document including a predetermined customer information entry form. It is preferable to include a method of using the financial transaction means issuing interface 250 obtained in an offline manner through a predetermined information input means (for example, an information input terminal), and / or a predetermined customer terminal used by the customer ( For example, a financial transaction means issuing interface 250 for providing a predetermined customer information input interface to a customer-owned wired terminal and / or a customer-owned wireless terminal) and acquiring the customer information online through the customer information input interface. It is preferable to include the method of using.

In addition, the financial transaction means issuing unit 205 reads the obtained customer information (for example, credit rating of the customer) to generate at least one financial transaction means information to be issued to the customer, and the generated financial transaction means Preferably, the information is stored in a DBMS provided in a predetermined financial system, and / or the financial transaction information is printed on a predetermined account book or stored on a predetermined card medium and / or wireless chip medium and issued to the customer. .

When at least one financial transaction means is issued to the customer as described above, the financial transaction means issuing unit 205 associates the customer information with at least one financial transaction means information issued to the customer to the financial transaction means information D. / B 210 to store.

Referring to FIG. 2, the token agent providing server 215 may include a token agent D / B 225 for storing at least one token agent corresponding to at least one customer wireless terminal platform, and the token agent D / B ( And an agent providing unit 220 for providing and mounting a predetermined token agent stored in the customer wireless terminal 225, and the token provided in the customer wireless terminal by the agent providing unit 220. It is preferable that the token agent further comprises a diagnostic unit 230 for diagnosing the validity of the agent.

The token agent D / B 225 stores at least one token agent program capable of operating in correspondence with a predetermined customer wireless terminal platform, and token agent related information corresponding to the token agent program. Detailed description of the token agent D / B 225 will be described with reference to FIG.

The agent providing unit 220 extracts a predetermined token agent program corresponding to a platform provided in the customer wireless terminal 1100 from the token agent D / B 225, and / or at least one token generating information. To dynamically generate a predetermined token agent program executable on the platform provided in the customer wireless terminal 1100, and through the predetermined token agent providing interface 255, the token agent program and / or the token agent program At least one token generation information associated with the service is provided to the customer wireless terminal 1100 and mounted thereon.

The agent providing unit 220 needs the wireless terminal information to provide a predetermined token agent program to the customer wireless terminal 1100. The wireless terminal information provides the token agent to the customer wireless terminal 1100. It is provided by the subject requesting to mount it.

According to one embodiment of the invention, the financial transaction means issuing server 200 issuing at least one financial transaction means to the customer, and / or after issuing at least one financial transaction means to the customer, Request to provide the token agent program to the token agent providing server 215 to the customer wireless terminal 1100 in which the financial transaction means is issued and mount the token agent program for processing a financial transaction using a wireless terminal number based on a token code. The financial transaction means issuing server 200 provides the wireless terminal information included in the customer information to the agent providing unit 220 of the token agent providing server 215.

According to another exemplary embodiment of the present invention, the customer accesses the token agent providing server 215 through a predetermined customer terminal (eg, a customer-owned wired terminal and / or a wireless terminal), and wirelessly based on a token code. Preferably, the wireless terminal information is provided to the token agent providing server 215 for financial transaction processing using the terminal number.

When the token agent program is provided and the mounted wireless terminal information is provided as described above, the agent provider 220 checks the platform of the customer wireless terminal 1100 based on the wireless terminal information. For example, when the customer wireless terminal 1100 is a mobile communication terminal connected to a predetermined mobile communication network, the agent providing unit 220 may use the subscriber D / B (e.g., provided on the mobile communication network) using the wireless terminal information. For example, the wireless terminal platform may be identified by referring to a home location register (HLR) or a visitor location register (VLR) (not shown).

When the customer wireless terminal 1100 platform is confirmed as described above, the agent provider 220 extracts a predetermined token agent program corresponding to the wireless terminal 1100 platform from the token agent D / B 225, And / or at least one token generation information.

In addition, the agent providing unit 220 extracts at least one token generation information corresponding to the token agent program from the token agent D / B 225, and the extraction (and / or dynamically generated) token agent The client wireless terminal 1100 through a predetermined token agent providing interface 255 (eg, the wireless network 140 to which the customer wireless terminal 1100 is connected) in association with a program and / or the extracted at least one token generation information. ), The token agent program is mounted in the customer wireless terminal 1100.

According to an embodiment of the present invention, the token agent program may be both mounted on the customer wireless terminal 1100 platform and / or mounted on an IC chip mounted or detached from the wireless terminal 1100. The present invention is not limited thereto.

The token agent program provided to and mounted on the customer wireless terminal 1100 according to the present invention may include at least one token code generation method including a time-synchro and a challenge-response method. The present invention is not limited by the token code generation method.

When the token agent program is mounted on the customer wireless terminal 1100 as described above, the token agent diagnosis unit 230 is connected to the customer wireless terminal 1100 and the token agent program mounted on the wireless terminal 1100 is provided. It is characterized by diagnosing normal operation.

According to one embodiment of the invention, the method for diagnosing the token agent program mounted on the customer wireless terminal 1100, the token agent program mounted on the customer wireless terminal 1100 is a predetermined diagnostic token code When generated and provided to the token agent diagnosis unit 230, the token agent diagnosis unit 230 generates a predetermined diagnostic token authentication code corresponding to the received token code, and generates the received token code and the generated token. By comparing the token authentication code, it is preferable to diagnose the validity of the token agent program mounted on the customer wireless terminal 1100.

According to the present invention, the token agent providing server 215 performs a function of a token generating program providing means for providing and mounting a predetermined token agent program to the customer wireless terminal 1100.

As described above, when a predetermined token agent program is normally provided and mounted to the customer wireless terminal 1100, the information storage server 235 may be provided with at least one financial transaction issued by the financial transaction means issuing server 200 to the customer. The means information, predetermined wireless terminal information on the customer wireless terminal 1100, and token agent information loaded on the customer wireless terminal 1100 are stored in the predetermined storage medium 110 in association with each other.

Referring to FIG. 2, the information storage server 235 stores at least one financial transaction information and / or customer information (eg, wireless terminal information) issued to the customer from the financial transaction information D / B 210. And an information extraction unit 240 for extracting token agent information provided and loaded from the token agent D / B 225 to the customer wireless terminal 1100, and the extracted at least one financial unit. Information that stores the trading means information, the financial means owned customer information (and / or customer wireless terminal information) and the token agent information provided to the customer wireless terminal 1100 and stored in the predetermined storage medium 110 by interworking with each other. It characterized in that it comprises a storage unit 245.

According to the present invention, the information storage server 235 is at least one financial transaction means information, the financial transaction means customer information (and / or customer wireless terminal information) and the token agent program provided in the wireless terminal 1100 It performs the function of the information storage means 105 for storing in the predetermined storage medium 110 in association with the predetermined token agent information for.

3 is a diagram illustrating token agent information to be provided to the wireless terminal 1100 according to an embodiment of the present invention.

In more detail, Figure 3 is a predetermined token agent for generating a time-synchoken token code, the predetermined token for each platform corresponding to the platform of the wireless terminal 1100 on which the token agent is to be mounted As an example of attribute information on an agent, the token agent information includes a token agent program (or source code to be compiled into a token agent program) corresponding to each platform, a version of the token agent, and a token generation algorithm. And at least one token generation information, and / or a token renewal cycle, at least one information item may be further included according to the intention of the person skilled in the art, and the present invention is not limited to the information item. .

According to the present invention, the token agent program is mounted on the wireless terminal 1100 owned by the customer, and generates a predetermined token code, whereby the token agent program is the customer wireless terminal 1100 platform. It characterized in that it comprises a program code that can be driven and / or operated in. For example, if the wireless terminal 1100 is equipped with a WIPI (Wireless Internet Platform for Interoperability) platform, the token agent includes a program code that operates on a WIPI basis, and the other platform (eg, GVM / SK-VM). / BREW, etc.) is included, the program code running on the platform is included.

In FIG. 3, the token agent program is provided in the token agent D / B 225 in the form of a precompiled program, and / or the token agent D / B 225 in the form of source code to be compiled. It is characterized in that stored in.

When the token agent program is provided in the token agent D / B 225 in the form of a precompiled program according to an embodiment of the present invention, the token agent providing server 215 establishes a predetermined wireless network 140. At the time of providing and mounting the token agent program to the wireless terminal 1100, at least one or more token generation information corresponding to the token agent program (for example, a number randomly generated by the token agent providing server 215) Secret key value corresponding to the same) is provided together with the wireless terminal 1100 and stored in a predetermined storage device, wherein the token agent program mounted in the wireless terminal 1100 generates a predetermined token code. At this point, the token agent program may be configured to store the token agent external storage device (e.g., a wireless terminal). Extracting at least one token generation information from a memory of 1100 and / or a memory provided in an IC chip mounted or detached from the wireless terminal 1100) and generating a predetermined token code based on the token generation information. It is desirable to.

According to another embodiment of the present invention, when the token agent program is stored in the token agent D / B 225 in the form of source code to be compiled, the token agent providing server 215 at the wireless terminal 1100. At the time of providing the token agent program, at least one or more token generation information corresponding to the token agent program (eg, a secret key value corresponding to a randomly generated number by the token agent providing server 215) is provided. Substituting the token generation information variable included in the token agent source code, and generates a predetermined token agent program by compiling the token agent source code of at least one token generation information is substituted into a predetermined token generation information variable as described above The token agent program generated dynamically as described above. Definition It is preferable to provide the wireless terminal 1100 through the wireless network 140 and to be mounted, and at the time when the token agent program mounted on the wireless terminal 1100 generates a predetermined token code, the token agent The program preferably generates a predetermined token code based on the token generation information inserted into the token agent program internal variable.

According to another exemplary embodiment of the present invention, even when at least one token generation information is substituted into the token agent program as described above, the dynamically generated token agent program is provided to the wireless terminal 1100 according to the intention of a person skilled in the art. At the time of mounting, at least one other token generation information is provided together with the wireless terminal 1100 and stored in a predetermined storage device, and the token agent program mounted on the wireless terminal 1100 is assigned a predetermined token code. At the time of generating the token, it is possible to generate a predetermined token code using both the token generation information provided in the token agent program and the token generation information provided in the external storage device, thereby limiting the present invention. It doesn't work.

The version of the token agent information includes version information of the token agent program for each platform to be provided to the wireless terminal 1100.

According to the embodiment of the present invention, even if the same kind of token agent program (for example, a token agent program operating on the same platform), the type and / or version of the token generation algorithm applied according to the version of the token agent program may be different. And, as a result, the token code generated by the token agent program will also vary, so that the version information provides information for accurately determining the token agent mounted on the wireless terminal 1100. It is possible to minimize the token code authentication error that may occur in the process of authenticating the predetermined token code generated in the wireless terminal 1100 by the version information of the token code agent program.

The token generation algorithm of the token agent information includes hashing algorithm information applied to the token agent program and / or detailed attribute information of the hashing algorithm. Currently, the most commonly used hashing algorithms for generating tokens are MD4, MD5, SHA, and the like, and hashing algorithms (eg, SHA1 hashing algorithms modified from SHAs), which are modified from the hashing algorithm, are used according to application fields. .

The token generation information of the token agent information is information for generating a token code of a time synchronous method. Referring to FIG. 3, the token code generation information indicates a time (or time) at which the token code is generated. According to the implementation method, a secret key value corresponding to a value randomly generated by the token agent providing server 215 and / or a MIN / ESN uniquely assigned to the wireless terminal 1100 on which the token agent is mounted. Is preferably used as the second generation information and / or the third generation information.

Referring to one embodiment of the present invention, when the token agent uses MIN / ESN of the wireless terminal 1100 as token generation information for generating a predetermined token code, the MIN / ESN is used as token generation information as it is. It is possible to use a predetermined hash function in the MIN / ESN in order to prevent the token agent from overflowing in the process of generating the token code by having the MIN / ESN value too large. It is possible to apply and convert to a value within a certain size, which is determined according to the intention of the person skilled in the art and / or the computing power of the wireless platform.

The token update period of the token agent information is a time interval in which a predetermined token code generated by the token agent is volatilized and invalidated in time when the token generation algorithm follows a time synchronization scheme. If it is difficult to transmit the time (or time) information of the token code generated with the token code in the process of transmitting to the financial transaction server 1000, the wireless terminal 1100 and the financial transaction server 1000 It is used to synchronize token generation time (or time) information for a certain period of time. That is, the token code generated by the token agent is transmitted to the predetermined financial transaction server 1000 within the token update period, and the predetermined token authentication code corresponding to the token code is generated by the financial transaction server 1000. Should be. That is, after a predetermined token code is generated in the token agent provided in the wireless terminal 1100, when a predetermined token authentication code is generated within the talk update period in the financial transaction server 1000, the token code is included in the token code. Is validated. Accordingly, the token update period may include a time required to provide the token code generated by the wireless terminal 1100 to a predetermined payment terminal, a time required to transmit the token code to the financial transaction server 1000, and The financial transaction server 1000 may determine the time taken to generate a predetermined token authentication code.

According to another exemplary embodiment of the present invention, the token generation algorithm follows a time synchronization scheme and it is easy to transmit the time (or time) information at which the token code is generated in the token agent to the financial transaction server 1000. In this case, the token update period may be omitted, or may be set at very short time intervals.

4 illustrates token agent information to be provided to the wireless terminal 1100 according to an exemplary embodiment of the present invention.

In more detail, Figure 4 is a predetermined token agent for generating a challenge-response token code, and each platform corresponding to the platform of the wireless terminal 1100 on which the token agent is to be mounted is predetermined. As an example of attribute information on a token agent, the token agent information includes a token agent program (or source code to be compiled into a token agent program) corresponding to each platform, a version of the token agent, and a token generation. It comprises an algorithm and at least one token generation information, at least one or more information items may be further included according to the intention of those skilled in the art, the invention is not limited by the information items.

According to the present invention, the token agent program is mounted on the wireless terminal 1100 owned by the customer, and generates a predetermined token code, whereby the token agent program is the customer wireless terminal 1100 platform. It characterized in that it comprises a program code that can be driven and / or operated in. For example, if the wireless terminal 1100 is equipped with a WIPI (Wireless Internet Platform for Interoperability) platform, the token agent includes a program code that operates on a WIPI basis, and the other platform (eg, GVM / SK-VM). / BREW, etc.) is included, the program code running on the platform is included.

4, the token agent program D / B 225 is provided in the token agent D / B 225 in the form of a precompiled program, and / or in the form of source code to be compiled. It is characterized in that stored in.

According to an embodiment of the present invention, the token agent program is provided in the token agent D / B 225 in the form of a precompiled program, and the token agent program generates the token code from a predetermined server 115. Receive a predetermined challenge value as token generation information for the token agent providing server 215 provides the token agent program to the customer wireless terminal 1100 through a predetermined wireless network 140 Preferably, the token agent program installed in the wireless terminal 1100 generates a predetermined token code, and the token agent program is based on a predetermined challenge value received from the server 115. It is desirable to generate a predetermined token code.

According to another exemplary embodiment of the present invention, when the token agent program is provided in the token agent D / B 225 in the form of a precompiled program, a predetermined wireless network 140 is provided by the token agent providing server 215. At the time of providing and mounting the token agent program to the wireless terminal 1100 through at least one or more token generation information corresponding to the token agent program (for example, randomly generated by the token agent providing server 215). Secret key value corresponding to a number) is provided together with the wireless terminal 1100 and stored in a predetermined storage device, and the token agent program installed in the wireless terminal 1100 stores a predetermined token code. At the time of creation, the token agent program is connected to a predetermined challenge value received from the server 115. Extracting at least one token generation information from the token agent external storage device (eg, a memory of the wireless terminal 1100 and / or a memory provided in an IC chip mounted or detached from the wireless terminal 1100), and It is preferable to generate a predetermined token code based on the token generation information.

According to another exemplary embodiment of the present invention, when the token agent program is stored in the token agent D / B 225 in the form of source code to be compiled, the token agent providing server 215 at the wireless terminal 1100. At the time of providing the token agent program, at least one token generation information corresponding to the token agent program (for example, a secret key value corresponding to a randomly generated number by the token agent providing server 215) is obtained. Substituting the token generation information variable included in the token agent source code, and generates a predetermined token agent program by compiling the token agent source code of at least one token generation information is substituted into a predetermined token generation information variable as described above And dynamically generate the token agent program as described above. Definition It is preferable to provide the wireless terminal 1100 through the wireless network 140 and to be mounted, and at the time when the token agent program mounted on the wireless terminal 1100 generates a predetermined token code, the token agent The program may generate a predetermined token code based on a predetermined challenge value received from the server 115 and token generation information substituted into the token agent program internal variable.

According to another exemplary embodiment of the present invention, even when at least one token generation information is substituted into the token agent program as described above, the dynamically generated token agent program is provided to the wireless terminal 1100 according to the intention of a person skilled in the art. At the time of mounting, at least one other token generation information is provided together with the wireless terminal 1100 and stored in a predetermined storage device, and the token agent program mounted on the wireless terminal 1100 is assigned a predetermined token code. At the time of generating the token agent, the token agent program uses a predetermined challenge value received from the server 115, the token generation information provided in the corresponding token agent program, the token generation information provided in the external storage device, and the like. It is possible to generate a predetermined token code, thereby This is not limited.

The version of the token agent information includes version information of the token agent program for each platform to be provided to the wireless terminal 1100.

According to the embodiment of the present invention, even if the same kind of token agent program (for example, a token agent program operating on the same platform), the type and / or version of the token generation algorithm applied according to the version of the token agent program may be different. And, as a result, the token code generated by the token agent program will also vary, so that the version information provides information for accurately determining the token agent mounted on the wireless terminal 1100. It is possible to minimize the token code authentication error that may occur in the process of authenticating the predetermined token code generated in the wireless terminal 1100 by the version information of the token code agent program.

The token generation algorithm of the token agent information includes hashing algorithm information applied to the token agent program and / or detailed attribute information of the hashing algorithm. Currently, the most commonly used hashing algorithms for generating tokens are MD4, MD5, SHA, and the like, and a hashing algorithm (for example, SHA-1 hashing algorithm with SHA) is further modified according to an application. It is used.

The token generation information of the token agent information is information for generating a token code of a time synchronous method. Referring to FIG. 4, the token code generation information is determined by the token agent program provided in the wireless terminal 1100. At the time of generating the token code, a predetermined challenge value provided to the wireless terminal 1100 through the server 115 is used as first generation information, and randomly provided by the token agent providing server 215 according to an implementation method. It is preferable to use, as second generation information and / or third generation information, a secret key value corresponding to the generated value and / or a MIN / ESN uniquely assigned to the wireless terminal 1100 on which the token agent is mounted. .

According to an embodiment of the present invention, the challenge value is an arbitrary value randomly generated by the server 115 at the time when the token agent program included in the wireless terminal 1100 generates a predetermined token code. The server 115 transmits the challenge value transmitted to the wireless terminal 1100 until a token code (for example, a response corresponding to the challenge) generated based on the challenge value is received from the wireless terminal 1100. It is preferable to maintain the token code, and when the token code is received, it is preferable to generate a predetermined token authentication code based on the challenge value to authenticate the received token code.

Referring to one embodiment of the present invention, when the token agent uses MIN / ESN of the wireless terminal 1100 as token generation information for generating a predetermined token code, the MIN / ESN is used as token generation information as it is. It is possible to use a predetermined hash function in the MIN / ESN in order to prevent the token agent from overflowing in the process of generating the token code by having the MIN / ESN value too large. It is possible to apply and convert to a value within a certain size, which is determined according to the intention of those skilled in the art and / or the computing power of the wireless platform.

5 is a diagram illustrating an embodiment of providing and mounting a token agent program to a customer wireless terminal 1100 according to an embodiment of the present invention.

In more detail, Figure 5 is a process for mounting a token agent program for a token code-based financial transactions to a predetermined customer wireless terminal 1100, if one of ordinary skill in the art to which the present invention belongs In addition to the implementation method illustrated below with reference to FIG. 5, various implementation methods for mounting a predetermined token agent to the customer wireless terminal 1100 may be easily inferred, and the present invention is limited by the implementation method. I never know.

Referring to FIG. 5, predetermined token information (and / or wireless terminal information) on which a token agent program for token code-based financial transactions is mounted is provided to the token agent providing server 215 (500).

According to an embodiment of the present invention, the process 500 may include predetermined customer information (and / or wireless) in which a predetermined token agent program will be loaded from a predetermined financial means issuing server 200 to the token agent providing server 215. And / or the client accesses the token agent providing server 215 to provide customer information (and / or wireless terminal information) for the customer-owned wireless terminal 1100. It is preferable to include the process of providing.

When the customer wireless terminal information is provided as described above, the token agent providing server 215 reads the customer information (and / or wireless terminal information) and provides a predetermined token agent program to the customer wireless terminal 1100. (505).

According to an exemplary embodiment of the present invention, when a valid token agent program is preloaded in the customer wireless terminal 1100, the token agent providing server 215 may need to mount a token agent in the wireless terminal 1100. If the wireless terminal 1100 is not equipped with a valid token agent program, it is preferable to provide and mount the token agent.

If it is necessary to provide a predetermined token agent program to the customer wireless terminal 1100 (510), the token agent providing server 215 reads the wireless terminal information of the customer to the customer wireless terminal 1100. The token agent program to be provided is identified (515).

According to an embodiment of the present invention, the token agent providing server 215 is a subscriber D / B (eg, home location register or visited location register) provided in the mobile communication network when the wireless terminal information is connected to the mobile communication network; It is preferable to confirm the token agent program to be provided to the customer wireless terminal 1100 by identifying the platform of the wireless terminal 1100 with reference to the &quot; 1 &quot; Alternatively, the platform information of the wireless terminal 1100 (or model information of the wireless terminal) in the process of receiving the wireless terminal information 500 in order to process the token agent providing process irrespective of the mobile communication company according to an embodiment. It is also possible to be provided including a further.

When the token agent to be provided to the customer wireless terminal 1100 is identified as described above, the token agent providing server 215 extracts or compiles the identified token agent program from the token agent D / B 225. Dynamically generate and / or extract from the token agent D / B 225 some token generation information required for the token agent program to generate a given token code, or dynamically generate (eg, a random value). Generate 520).

As described above, when a predetermined token agent program to be provided and mounted to the customer wireless terminal 1100 and at least one token generation information corresponding to the token agent program is prepared, the token agent providing server 215 may be configured as the customer wireless terminal. In operation 1525, the token agent is provided and mounted.

According to an embodiment of the present invention, the token agent providing server 215 may include a predetermined wireless message (eg, a callback URL) for providing the token agent to the customer wireless terminal 1100 (eg, a callback URL). When a short message service (SMS), an enhanced message service (EMS), a multimedia messaging service (MMS), and the like are transmitted, the wireless terminal 1100 accesses the token agent providing server 215 through the callback UEL. Preferably, the token agent is provided to the wireless terminal 1100 and mounted thereon.

According to another exemplary embodiment of the present invention, the token agent providing server 215 may be configured by the customer through another type of wireless software loading method that does not use the callback UE due to the intention of the person skilled in the art and / or the policy of the wireless network operator. It is possible to provide and mount the token agent to the wireless terminal 1100, whereby the present invention is not limited.

After the predetermined token agent program is loaded into the customer wireless terminal 1100 as described above, the customer wireless terminal 1100 determines to execute a diagnostic mode for the mounted token agent program. When the mode is executed (530), the wireless terminal 1100 executes the mounted token agent program to generate a predetermined diagnostic token code and transmits it to the token agent providing server 215 (535). Providing server 215 generates a predetermined diagnostic token authentication code corresponding to the diagnostic token code (540), by comparing the diagnostic token code and the diagnostic token authentication code token agent mounted on the customer wireless terminal 1100. Validate the program (545).

According to an embodiment of the present invention, the token agent program mounted on the customer wireless terminal 1100 generates a predetermined token code in a time synchronous manner, and the token agent program is provided in the wireless terminal 1100 for this purpose. It is preferable to extract the current time (or time) information from the internal timer, and generate the diagnostic token code by using the extracted time (or time) information as predetermined token generation information for generating the diagnostic token code. Of course, according to the intention and / or implementation method of those skilled in the art, the token agent program may be configured to store at least one token generation information (for example, the token agent program at the token agent providing server 215) from storage provided in the wireless terminal 1100. A secret key including a random value transmitted together in the providing process, and / or MIN / ESN information of the wireless terminal 1100 stored in a number assignment module (NAM) of the wireless terminal 1100). It is possible to generate the diagnostic token code.

The diagnostic token code generated as described above is provided to the token agent providing server 215 through a predetermined wireless network, and the token agent providing server 215 generates the diagnostic token code in the wireless terminal 1100. Generates a predetermined diagnostic token authentication code including time (or time) information, and compares the received diagnostic token code with the generated diagnostic token authentication code, the token agent program mounted on the wireless terminal 1100 Check the validity.

According to another exemplary embodiment of the present invention, the token agent program installed in the customer wireless terminal 1100 generates a predetermined token code in a challenge-response manner, and for this purpose, the token agent providing server 215 provides a predetermined token code. A challenge value is generated and provided to the wireless terminal 1100, and the token agent program preferably generates a diagnostic token code by using the provided challenge value as predetermined token generation information for generating a diagnostic token code. Of course, according to the intention and / or implementation method of the person skilled in the art, the token agent program provides at least one token generation information (eg, the token agent providing program at the token agent providing server 215) from the storage provided in the wireless terminal 1100. A secret key including a random value transmitted together with the process, and / or MIN / ESN information of the wireless terminal 1100 stored in the NAM of the wireless terminal 1100). It is possible to do

The diagnostic token code generated as described above is provided to the token agent providing server 215 through a predetermined wireless network, and the token agent providing server 215 generates the diagnostic token code at the wireless terminal 1100. Generates a predetermined diagnostic token authentication code including the challenge value used, and compares the received diagnostic token code and the generated diagnostic token authentication code, the validity of the token agent program mounted on the wireless terminal 1100 Check.

If the token diagnostic token code and the diagnostic token authentication code do not match (550), the token agent providing server 215 requests retransmission of the token diagnostic token code to the wireless terminal 1100 (555), and the process By repeating (535 ~ 545) to check the validity of the token agent.

On the other hand, if the token diagnostic token code and the diagnostic token authentication code match the validity of the token agent (550), the information storage server 235 and the financial transaction means information provided from the financial means issuing server 200 and The token agent information and the customer information (and / or wireless terminal information) are interworked and stored in a predetermined storage medium (560).

6 is a diagram illustrating an information configuration of wireless terminal information stored in the storage medium 110 according to an embodiment of the present invention.

In more detail, Figure 6 illustrates a preferred information configuration of the financial transaction wireless terminal information associated with the financial means information and / or token agent information for token code-based financial transactions, the storage medium ( Each information stored in 110 may be further added with at least one item of information according to the intention of the person skilled in the art of implementing the present invention, and the present invention is not limited thereto.

Referring to FIG. 6, the wireless terminal information includes at least one wireless terminal 1100 (1100) number information of a telephone number (MIN) and a serial number (ESN) of the financial transaction customer-owned wireless terminal equipped with the token agent. Characterized in that it comprises, and may further include the platform information, the carrier information and the terminal model information for the wireless terminal (1100, 1100).

According to the exemplary embodiment of the present invention, the wireless terminal information may be further added with at least one information item according to the intention of the person skilled in the art. For example, the wireless terminal information may further include IC chip unique information (ICCHIP) (not shown) in an IC chip mounted or detached from the wireless terminal, and / or a subscriber identity module (SIM) in the wireless terminal. ) Or when a Universal Identification Module (UIM) or Universal Subscriber Identity Module (USIM) is provided, the SIM information, UIM information, or USIM information may be further included.

7A and 7B illustrate an information configuration of token agent information stored in the storage medium 110 according to an embodiment of the present invention.

In more detail, FIGS. 7A and 7B illustrate preferred information configurations of token agent information corresponding to the token agent program mounted on the financial transaction customer wireless terminal 1100 for token code-based financial transactions. FIG. 7 illustrates a preferred information configuration of token agent information corresponding to a time synchronous token agent program, and FIG. 7B illustrates a preferred information configuration of token agent information corresponding to a challenge-response token agent program.

According to the method of the present invention, the token agent information is preferably associated with the financial transaction wireless terminal information and / or the financial transaction means information on which the token agent program is mounted, each stored in the storage medium 110 The information may be added to at least one or more information items according to the intention of the person skilled in the art for carrying out the present invention, and the present invention is not limited thereto.

Referring to FIGS. 7A and 7B, the token agent information is information for identifying what kind of token agent is mounted in the customer wireless terminal and generating a token authentication code for authenticating the token code generated by the token agent. To this end, the token agent information includes the platform information of the wireless terminal equipped with the token agent program, the version of the token agent and the token generation algorithm and at least one token generation information mounted on the platform; Is done.

Referring to FIG. 7A according to an embodiment of the present invention, the token agent information of the time synchronization method may further include a predetermined token update period in which time synchronization is maintained.

Referring to FIG. 7B according to another exemplary embodiment of the present invention, the challenge value (eg, the first generation information of FIG. 7B) of the token generation information included in the token agent information of the challenge-response method is the financial transaction customer wireless terminal. Before the challenge value to be transmitted to 1100 is generated, a null value is included. When the challenge value to be transmitted to the financial transaction customer wireless terminal 1100 is generated, the generated challenge value is substituted and the radio is transmitted. It is preferable to maintain the substituted challenge value until a predetermined token code (response) corresponding to the challenge value is received from the token agent program mounted on the terminal 1100, and the received token is provided through the challenge value. After the authentication procedure for the code is performed (e.g., token authentication corresponding to the received token code via the maintained challenge value) After Degas generated), a first generation of a challenge value information (e.g., reference 7b of the token generation information), it is preferable to again include a null value.

The wireless terminal information is characterized in that it comprises at least one wireless terminal 1100 number information of the telephone number (MIN) and serial number (ESN) of the financial transaction customer owned wireless terminal equipped with the token agent, The mobile terminal 1100 may further include platform information, communication company information, terminal model information, and the like.

According to the exemplary embodiment of the present invention, the wireless terminal information may be further added with at least one information item according to the intention of the person skilled in the art. For example, the wireless terminal information may further include IC chip unique information (ICCHIP) (not shown) in an IC chip mounted or detached from the wireless terminal, and / or a subscriber identity module (SIM) in the wireless terminal. ) Or when a Universal Identification Module (UIM) or Universal Subscriber Identity Module (USIM) is provided, the SIM information, UIM information, or USIM information may be further included.

8 is a diagram illustrating an information configuration of customer information stored in the storage medium 110 according to an embodiment of the present invention.

In more detail, Figure 8 illustrates a preferred information configuration of predetermined customer information for a financial transaction customer linked to the financial means information and / or token agent information for token code-based financial transactions, Each information stored in the storage medium 110 may be added to at least one or more information items according to the intention of those skilled in the art to which the present invention is implemented, whereby the present invention is not limited.

Referring to FIG. 8, the customer information includes customer personal information including at least one of a name, a social security number, an address, etc. for the financial transaction customer, and a token agent relationship for establishing a relationship between the financial transaction customer and the token agent. Characterized in that it comprises information.

Referring to FIG. 8 according to a preferred embodiment of the present invention, the token agent relationship information preferably includes the financial transaction customer-owned wireless terminal information, whereby the token agent mounted on the customer wireless terminal 1100. Token code-based financial transactions using the program are carried out.

9A and 9B illustrate an information structure of financial transaction information stored in the storage medium 110 according to an embodiment of the present invention.

More specifically, Figure 9a is associated with the financial instrument ownership customer information (and / or customer wireless terminal information) for token code-based financial transactions and / or payment processing through the financial means, and / or the customer wireless As an exemplary configuration of the information on the financial transaction means associated with the token agent information mounted on the terminal 1100, more specifically, the customer financial account information corresponding to the financial transaction means issued to the customer by a predetermined bank is provided. It illustrates an example of financial transaction means information comprising at least one.

Persons of ordinary skill in the art to which the present invention pertains may refer to the financial transaction means as described with reference to FIG. 9A. And / or when linked with a wireless chip medium (eg, an IC chip mounted or detached from the customer wireless terminal 1100), the media information (eg, MS card and / or IC card) linked to the financial transaction means information. And / or an IC chip) and / or media storage information (e.g., information stored in Track-II, if the medium is an MS card, etc.) stored on the card and / or wireless chip media. The present invention is not limited by the financial means information configuration item.

Referring to FIG. 9A, the financial transaction means information stored in the storage medium 110 may include a type of financial means corresponding to the financial transaction means and a bank account for issuing the financial transaction means (or a bank account corresponding to the financial transaction means). Bank information, and the name of the customer who issued the financial transaction means, and further includes financial account information corresponding to the financial transaction means.

According to the method of the present invention, the financial account information, the financial account information corresponding to the financial transaction means is a predetermined account number for the financial transaction means, the establishment date of the bank account corresponding to the financial transaction means, and the customer It is preferable to include the branch information of the bank that issued the financial transaction means to the bank, and according to the implementation method, the financial account information may include information on the issuance of the bank account corresponding to the financial transaction means (not shown), and the settlement date (e.g., 2nd Friday of each January, May, August, November, etc.) (not shown) is preferably further included.

In more detail, FIG. 9B illustrates token agent information associated with financial transaction means customer information (and / or customer wireless terminal information) and / or mounted on the customer wireless terminal 1100 for token code based payment processing. As an exemplary information configuration of the financial means information associated with the payment, more specifically, the payment means issued to the customer by a predetermined payment means issuer includes at least one track-II and / or track-III data. In the case of a magnetic stripe (MS) card, the financial transaction means information included in the MS card is exemplified.

Those skilled in the art to which the present invention pertains are equipped with an integrated circuit (IC) card and / or the customer wireless terminal 1100 in addition to the financial transaction information included in the MS card with reference to FIG. 9B. Alternatively, it is possible to easily infer the desired information configuration of the financial transaction means information provided on the detached IC chip (for example, the payment means provided on the IC card and / or IC chip included in the track-II of the MS card). Information is included), and the present invention is not limited by the financial means information configuration item. For example, if the storage medium 110 stores the IC card and / or financial transaction information provided in the IC chip with a predetermined certificate, the information item includes information corresponding to the certificate (for example, a certificate). Issuer, copy of accredited certificate, etc.).

Referring to FIG. 9B, the financial transaction means information stored in the storage medium 110 includes credit card payment means, debit card payment means, cash card payment means, check card payment means, prepaid card payment means, A financial account payment means, financial transaction means information including at least one electronic money payment means, a payment means issuing agency that issued the payment means, and owns the payment means (e.g., predetermined from the payment means issuer) Customer name (e.g., English customer's name) issued by the payment method, and the information stored in track-II and / or track-III of the payment method. It is done.

According to the method of the present invention, the information stored in the track-II of the payment means comprises a 16-digit card number, the date of issuing the payment means, the expiration date of the payment means, and at least one CVC number. Preferably, the information stored in the track-III of the payment means further comprises at least one affiliate information and / or additional service information associated with the payment means.

Hereinafter, in FIG. 1, the server 115 and / or the information transmitting means 125 and / or the information storing means 130 and / or the financial transaction processing means 120 for providing the token code based financial transaction according to the present invention. The technical features of the present invention will be described in detail by defining the financial transaction server 1000. In addition, for the sake of convenience, the customer information (and / or wireless terminal information) is referred to as customer information, and the customer information basically includes customer terminal information on which the token agent is mounted according to an implementation method.

10A and 10B are diagrams showing an embodiment of a financial transaction processing system using a wireless terminal number according to an embodiment of the present invention.

In more detail, in FIG. 10A, a token agent program included in the customer wireless terminal 1100 generates a predetermined token code according to a token code generation method including at least one token generation information and a predetermined token generation algorithm. The present invention relates to a method for providing a predetermined token code to a predetermined financial transaction server 1000 through a predetermined financial transaction terminal 145, and FIG. 10b illustrates that at least one token agent program included in the customer wireless terminal 1100 is provided. The present invention relates to an implementation method of generating a predetermined token code according to a token code generation method including token generation information and a predetermined token generation algorithm and providing the same token code to a predetermined financial transaction server 1000.

Referring to FIG. 10A, the financial transaction server 1000 may include an interface unit 1005 connecting at least one financial transaction terminal 145 and a communication channel for financial transactions for a financial transaction based on a token code. The financial transaction information for the financial transaction based on the token code, the financial transaction means owned customer information (and / or customer wireless terminal information) and the token code from the financial transaction terminal 145 through the interface unit 1005 An information receiving unit 1010 for receiving one or more financial transaction information data, and reading the received financial transaction information data to read the financial transaction information data and / or customer wireless terminal information; An information confirming unit 1015 for confirming information, and a connection associated with the wireless terminal information from the storage medium 110 based on the confirmed wireless terminal information. An extraction unit 1020 for extracting agent information and the same condition (eg, the same token generation information) that generates the token code in the token agent program included in the wireless terminal 1100 based on the extracted token agent information; Token generation algorithm) generates a predetermined token authentication code, the authentication unit for comparing the token code received from the financial transaction terminal 145 and the generated token authentication code to authenticate the validity of the received token code ( 1025), characterized in that consisting of.

In addition, when the validity of the received token code is authenticated by the authentication unit 1025, the financial transaction server 1000 is included in the financial transaction information data and corresponds to the received financial transaction information. It is characterized in that it further comprises a financial transaction unit 1030 to perform.

In addition, when the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 links the at least one financial transaction process with the financial transaction means information and / or customer information. Characterized in that it further comprises a storage unit 1035 for storing in the storage medium 135.

In addition, when the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 transmits the financial transaction processing history to the financial transaction terminal 145 through the interface unit 1005. Characterized in that it further comprises an information transmission unit 1040.

The interface unit 1005 connects at least one financial transaction terminal 145 with a financial transaction communication channel for financial transactions based on the token code through a predetermined financial transaction network 140. The financial transaction network 140 may include at least one wired network 140 (eg, TCP / IP based Internet) and / or a wireless network 140 (eg, depending on the type of the financial transaction terminal 145). , CDMA-based mobile communication network) and / or value-added communication network () and / or financial common network.

The information receiving unit 1010 includes at least one financial transaction means information, financial transaction information, financial transaction means customer information and / or token code transmitted from the financial transaction terminal 145 through the interface unit 1005. And receiving financial transaction information data that includes.

According to the exemplary embodiment of the present invention, the financial transaction information, the financial transaction information, the financial transaction means customer information, and / or the token code are included in the financial transaction information data including the financial transaction information and the information receiver ( 1010).

According to another exemplary embodiment of the present invention, the financial transaction information, the financial transaction information, the financial transaction means customer information and / or the token code includes the financial transaction information from the financial transaction terminal 145. Before the information data is received by the information receiving unit 1010, it is preferable that the data is received through a separate token code transmission message (or data).

According to another exemplary embodiment of the present invention, the financial transaction information, the financial transaction information, the financial transaction means customer information and / or the token code includes the financial transaction information from the financial transaction terminal 145. After the transaction information data is received by the information receiver 1010, it is preferable that the transaction information data is received through a separate token code transmission message (or data).

The information checking unit 1015 reads the financial transaction information data received by the information receiving unit 1010, thereby obtaining customer information (and / or customer wireless terminal information) owned by the financial transaction means included in the financial transaction information data. And / or identifying and extracting financial transaction means information, wherein the financial transaction means customer information (and / or customer wireless terminal information) and / or financial transaction means information is a full token code transfer (or Data), read the full text (or data) for the token code transmission, and identify and extract the financial transaction means customer information (and / or customer wireless terminal information) and / or financial transaction means information. desirable.

The extractor 1020 may use the financial transaction means owned customer information (and / or customer wireless terminal information) and / or financial transaction means information from the storage medium 110. And / or the token agent information associated with the customer wireless terminal information) and / or the financial transaction information, and is provided to the authentication unit 1025.

The authentication unit 1025 authenticates a predetermined token through the same token generation information and token generation algorithm used to generate the token code in the token agent program included in the wireless terminal 1100 based on the extracted token agent information. Generating a code, and comparing the generated token authentication code with the token code received from the financial transaction terminal 145, characterized in that for authenticating the validity of the received token code, the authentication unit 1025 Validation of the received token code by means of ensuring confidentiality, authentication, integrity, and nonrepudiation for financial transactions based on the token code. do.

When the validity of the token code is verified by the authenticator 1025, the financial transaction unit 1030 may perform a financial transaction corresponding to the financial transaction information included in the financial transaction information data. .

According to the exemplary embodiment of the present invention, the financial transaction unit 1030 may perform a financial transaction corresponding to the financial transaction information by interworking with a predetermined financial system based on the financial transaction information.

According to the exemplary embodiment of the present invention, the financial transaction unit 1030 may perform a financial transaction corresponding to the financial transaction information, and generate a predetermined financial transaction processing history corresponding to the settlement processing / financial transaction]. The storage unit 1035 stores the generated one or more financial transaction processing details in a predetermined storage medium 135 in association with the financial transaction information and / or customer information. The transmission unit 1040 transmits the generated financial transaction processing history to the financial transaction terminal 145 through the interface unit 1005.

According to another exemplary embodiment of the present invention, when the token code received from the financial transaction terminal 145 is generated in a challenge-response manner, the authenticator 1025 may dynamically generate an arbitrary challenge value. The information transmitter 1040 may further include a function of transmitting the generated challenge value to the customer wireless terminal 1100.

Referring to FIG. 10B, the financial transaction server 1000 may include an interface unit 1005 connecting a communication channel for at least one customer wireless terminal 1100 with a financial transaction for a financial transaction based on a token code. Financial transaction information and financial transaction means customer information (and / or customer wireless terminal information) and / or financial transaction means for financial transactions based on the token code from the wireless terminal 1100 through the interface unit 1005 An information receiving unit 1010 for receiving financial transaction information data including at least one information and a token code; and customer information (and / or customer wireless terminal information) owned by the financial transaction means which transmitted the financial transaction information data; and / or Financial transaction ownership customer information (and / or customer wireless terminal information) and / or financial clearance from the storage medium 110 on the basis of financial transaction information; An extracting unit 1020 for extracting token agent information associated with radon information and the same condition for generating the token code in a token agent program included in the wireless terminal 1100 based on the extracted token agent information ( For example, a predetermined token authentication code is generated using the same token generation information and a token generation algorithm), and the token code received from the customer wireless terminal 1100 is compared with the generated token authentication code for the received token code. Characterized in that it comprises an authentication unit 1025 for authenticating the validity.

In addition, when the validity of the received token code is authenticated by the authentication unit 1025, the financial transaction server 1000 is included in the financial transaction information data and corresponds to the received financial transaction information. It is characterized in that it further comprises a financial transaction unit 1030 to perform.

In addition, when the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 links the at least one financial transaction process with the financial transaction means information and / or customer information. Characterized in that it further comprises a storage unit 1035 for storing in the storage medium 135.

In addition, when the financial transaction is normally performed by the financial transaction unit 1030, the financial transaction server 1000 transmits the financial transaction processing details to the customer wireless terminal 1100 through the interface unit 1005. Characterized in that it further comprises an information transmission unit 1040.

The interface unit 1005 connects at least one customer wireless terminal 1100 and a financial transaction communication channel for a financial transaction based on the token code through a predetermined financial transaction network 140. In addition, the financial transaction network 140 may include a predetermined wireless network 140 (eg, a CDMA-based mobile communication network).

The information receiving unit 1010 is the financial transaction information transmitted from the customer wireless terminal 1100 through the interface unit 1005 and the financial transaction means owned customer information (and / or customer wireless terminal information) and / or financial transaction means And receiving financial transaction information data including at least one information and a token code.

According to an embodiment of the present invention, when the token agent is mounted on the customer-owned wireless terminal, the information receiver may extract the wireless terminal information as caller information in the process of receiving the financial transaction information data.

According to the exemplary embodiment of the present invention, the financial transaction information, the financial transaction information, the financial transaction means customer information, and / or the token code are included in the financial transaction information data including the financial transaction information and the information receiver ( 1010).

According to another exemplary embodiment of the present invention, the financial transaction information, the financial transaction information, the financial transaction means customer information, and / or the token code include the financial transaction information from the customer wireless terminal 1100. Preferably, the information data is received through separate token code transmission data before the information data is received by the information receiver 1010.

According to another exemplary embodiment of the present invention, the financial transaction information, financial transaction information, financial transaction means customer information and / or token code includes the financial transaction information from the customer wireless terminal 1100. After the financial transaction information data is received by the information receiving unit 1010, it is preferably received through separate token code transmission data.

According to another exemplary embodiment of the present invention, when the token code received from the customer wireless terminal 1100 is generated in a challenge-response manner, the authenticator 1025 may dynamically generate an arbitrary challenge value. The information transmitter 1040 may further include a function of transmitting the generated challenge value to the customer wireless terminal 1100.

11 is a diagram illustrating a functional configuration of a wireless terminal 1100 equipped with a token agent according to an embodiment of the present invention.

In more detail, FIG. 11 illustrates a case in which a mobile communication terminal accessing a mobile communication network based on code division multiple access (CDMA) performs a function of the wireless terminal 1100 for generating a token code for the token code based financial transaction. The present invention relates to a preferred functional configuration of the mobile communication terminal for generating the token code. Those skilled in the art to which the present invention pertains, with reference to FIG. 11, another wireless terminal 1100 (eg, wireless data communication) for generating a token code for the token code based financial transaction in addition to the mobile communication terminal. It is possible to easily infer the functional configuration of the terminal, or portable Internet terminal). As a result, the functional configuration of the wireless terminal 1100 equipped with the token agent program is not limited to that shown in FIG. 11, and violates the core technology of the present invention according to the type and / or technical features of the wireless terminal 1100. Various modifications can be made without departing from the scope of the invention.

In terms of hardware, the wireless terminal 1100 providing a mobile communication service includes an external body, a speaker, a microphone, a keypad, a liquid crystal display (LCD), an antenna, a battery 1125, and the like. For example, certain modem chips (for example, MSM series modem chips from Qualcomm, Inc.) that incorporate functions such as a code division multiple access (CDMA) modem, a CPU / MPU (Central Processing Unit / Micro Processing Unit), and a vocoder; , Various memory elements, duplexer filter that separates transmission and reception signals from one antenna, power amplifier to amplify transmission signal, high power amplifier (HPA), isolator to prevent the return of high output transmission signal , RF / IF SAW filter for removing out-of-band unwanted signals, frequency up-circuit in transmission path, frequency down-conversion circuit in receive path, and reference clock source VCTCXO (Voltage Controlled Temperature Compensated X-tal Oscillator), UHF frequency synthesizer used as local signal of frequency up-down conversion, and codec chip for converting analog voice signal into digital signal. Elements are gradually integrated in the modem chip, and in addition to the core components for the mobile communication service, the modem chip is also integrated with various functions for various multimedia services and / or additional services.

Referring to FIG. 11, the wireless terminal 1100 generating a predetermined token code for the token code-based financial transaction basically includes a control unit 1105, a screen output unit 1110, a sound processor 1115, and a key input unit ( 1120, a wireless processing unit 1130, a short range communication unit 1135, a memory unit 1155, and a battery 1125 for supplying power, and are mounted or detached from the wireless terminal 1100 according to an implementation method. It further comprises a functional configuration including a chip 1150 and the IC chip reader unit 1145 for reading / writing predetermined information or data in the IC chip 1150.

The controller 1105 includes a processor and an execution memory including a CPU / MPU provided in the modem chip in hardware, and provides a predetermined program routine for providing a function specific to the wireless terminal 1100 from a predetermined memory element. (Routine) and / or a bus (BUS) for inputting and outputting the program data and a predetermined electronic circuit (or integrated circuit) provided for this, characterized in that from a predetermined memory device and / or chipset in software Generic term of program routines and / or program data loaded into the execution memory and processed by the processor to perform specific functions (hence, in the present invention, a wireless terminal for generating token codes for token code-based financial transactions). For convenience, a predetermined token agent program routine recorded on the recording medium of 1100 may be used. It will be described as being provided in the fisherman (1105).), By the control unit 1105, various functions which are intended to be implemented in the wireless terminal 1100 is realized, and also wireless to realize such functions It is characterized in that to control and manage the overall operation of the terminal 1100. In particular, when power is input to the wireless terminal 1100 to perform a function of the controller 1105 for controlling and managing the overall operation of the wireless terminal 1100, an operating system routine or system stored in a predetermined memory device. Management routines and / or system variables are loaded into the execution memory and computed by the processor to serve as variables for providing an operating system, system management program, and / or mobile communication service.

The screen output unit 1110 is a liquid crystal display (LCD) driver for outputting a screen and is a key input unit 1120 by the controller 1105 (eg, a program routine for outputting predetermined information or data to the LCD). Key data generated through the &lt; RTI ID = 0.0 &gt;), various information, signals, and / or content (e. G., Text content, image content, and / or &lt; / RTI &gt; Or multimedia content) to a predetermined screen output device (for example, an LCD panel), and the screen output unit 1110 is linked with a screen output device (LCD) to operate the token code based finance. It is preferable to perform a function of outputting predetermined information required in the process of generating a token code for a transaction.

The sound processor 1115 encodes a predetermined sound signal input from a microphone included in the wireless terminal 1100 and provides the sound signal to the controller 1105 or extracted and / or generated by the controller 1105. A sound signal is decoded and output through a speaker. To this end, the sound processor 1115 includes a predetermined vocoder and a codec. Performs a function of a sound input unit provided in the wireless terminal 1100 through the sound processor 1115 and a microphone, or outputs a sound provided in the wireless terminal 1100 through the sound processor 1115 and a speaker. Perform the function of the means.

The key input unit 1120 includes a predetermined key having at least one or more key buttons including a predetermined number key and / or a character key and / or a function key. Detects information (or signal) input from the keypad, and predetermined key buttons provided on the keypad in a specific input mode and / or operation mode of the wireless terminal 1100 controlled by the controller 1105. When predetermined information (or signal) is inputted from the device, a key event (eg, MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, MH_KEY_RELEASEEVENT) corresponding to the input information (or signal) is generated, and the generated key event is transmitted to the controller 1105. The controller 1105 reads predetermined key data corresponding to the key event in the current input mode and / or operation mode of the wireless terminal 1100 (eg, respectively). Read key data from the key table storing (managing) at least one key data corresponding to a specific key event in an input mode and / or an operation mode of the wireless terminal 1100 of the wireless terminal 1100, and / or the key event Read a command to execute a predetermined function matched with the defined. The keypad including the key input unit 1120 and at least one key button interlocks with each other to perform a function of a key input unit provided in the wireless terminal 1100.

The wireless processor 1130 may register a location and / or a slot mode and / or a power control in conjunction with the controller 1105 (eg, a program routine for providing a mobile communication service). Or providing a mobile communication service including a hand-off and / or call processing procedure, the base station corresponding to an end of the mobile communication network in the process of providing the mobile communication service. And an RF processing function (eg, performing antenna control, modulating, synthesizing, amplifying and / or filtering the radio frequency signal) for performing transmission and reception of the radio frequency signal. In particular, the wireless processing unit 1130 processes the information or signal transmitted from the wireless terminal 1100 to the base station in a CDMA stack to provide the mobile communication service, or predetermined information from the CDMA stack received from the base station. Or it provides a function for reading the signal.

According to an exemplary embodiment of the present invention, the wireless terminal 1100 connects a base station on a predetermined mobile communication network with a predetermined wireless section through the wireless processing unit 1130, and connects the predetermined wireless section through the predetermined wired section including the base station. It is preferable to connect a predetermined communication channel with a predetermined server (or device) provided on a mobile communication network and / or a predetermined communication network that interworks with the mobile communication network.

According to an embodiment of the present invention, the wireless processing unit 1130 connects a predetermined communication channel with the token agent providing server 215 to mount a predetermined token agent program on the wireless terminal 1100, and In cooperation with the control unit 1105, a predetermined token agent program may be received from the token agent providing server 215.

According to another exemplary embodiment of the present invention, when the token agent program generates a predetermined token code for the predetermined token code-based financial transaction in a challenge-response manner, the wireless processor 1130 may control the controller 1105. ) May connect a predetermined communication channel with the financial transaction server 1000, and receive a predetermined challenge value for generating the token code from the financial transaction server 1000.

According to another exemplary embodiment of the present invention, in the process of providing a predetermined token code generated by the token agent program to the financial transaction server 1000, the token code may be wirelessly transmitted from the wireless terminal 1100. When providing to the financial transaction server 1000 through the network 140 (for example, a portion of the generated token code is transmitted to the financial transaction server 1000, or the generated token code is transmitted to the financial transaction server 1000). (In case of transmitting to 1000), the wireless processor 1130 connects a predetermined communication channel with the financial transaction server 1000 in cooperation with the control unit 1105, and generates the financial transaction server 1000. It is desirable to send the token token.

The near field communication unit 1135 may be configured to perform infrared ray communication and / or radio frequency (RF) communication and / or Bluetooth and / or wireless LAN and / or Wi-Fi and ultra-wideband. A terminal (or device) and a short range wireless communication session are connected through at least one short range wireless communication means including an ultra wide band (UWB). The infrared communication, the RF communication, It includes a predetermined short range wireless communication module for short range wireless communication including Bluetooth, WLAN, Wi-Fi, and ultra-wideband communication, and includes a communication protocol and / or driver for the short range wireless communication in software.

According to the exemplary embodiment of the present invention, the wireless terminal 1100 connects a wireless section connecting a predetermined short range device 1140 and a predetermined short range wireless communication session through the short range communication unit 1135, and the short range device ( It is preferable to connect a predetermined communication channel with a predetermined server (or device) provided on the predetermined communication network through a wired section including the predetermined network 140 to which the 1140 is connected.

According to the exemplary embodiment of the present invention, the short range communication unit 1135 and the token agent providing server 215 through the local area device 1140 to mount a predetermined token agent program on the wireless terminal 1100 are provided. Connect a communication channel of the mobile station, and receive a predetermined token agent program from the token agent providing server 215 in cooperation with the controller 1105.

According to another exemplary embodiment of the present invention, when the token agent program generates a predetermined token code for the predetermined token code-based financial transaction in a challenge-response manner, the local area communication unit 1135 may control the controller 1105. And a predetermined communication channel with the financial transaction server 1000 through the short range device 1140, and receive a predetermined challenge value for generating the token code from the financial transaction server 1000. have.

According to another exemplary embodiment of the present invention, the short range device 1140 may be a financial transaction terminal 145 for processing the token code based financial transaction, and / or a short range communication module provided in the financial transaction terminal 145. In this case, the local area communication unit 1135 may be connected to the local area device 1140 and a predetermined local area communication channel in cooperation with the control unit 1105, and may be connected to the local area device 1140 through the local area communication channel. It is possible to provide the token code generated by the token agent program.

The memory unit 1155 may enter or exit when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the wireless terminal 1100 is performed. A general term for a memory device for storing information and / or data outputted therein, the read-only memory (ROM) corresponding to the read-only memory, the flash memory (FM) for reading / writing, and the electrically erasable and EEPROM. Programmable Read Only Memory). In general, the ROM stores system information that should not be deleted, and the flash memory includes an operating system routine, a call processing program routine, and / or an application program routine provided through the wireless terminal 1100 and information or data therefor. The EEPROM stores a terminal registration related parameter and a telephone number (eg, an address book) or at least one or more information and / or data extracted and / or generated while executing an application included in the wireless terminal 1100. do.

According to an embodiment of the present invention, the token generation information is read from an internal functional configuration provided in the wireless terminal 1100 (for example, when the token agent program generates a token code in a time-synchronous manner, the wireless terminal ( Read current time (or time) information as token generation information from a timer included in 1100), and / or are stored in the token generation information area of the memory unit 1155, and / or in the token agent program. The memory unit 1155 may store at least one token generation information defined to be stored in a storage device provided in the wireless terminal 1100. For example, the memory unit 1155 stores MIN / ESN information for the wireless terminal 1100 in a number assignment module (NAM) area and / or uniquely assigns the token agent program to a predetermined token generation information area. Stored at least one secret key value.

The IC chip reader unit 1145 may be configured with IC chip related functions (eg, the wireless terminal 1100) provided in the wireless terminal 1100 through IC chip standards including ISO / IEC 7816 and / or ISO / IEC 14443. IC chip agent program) and IC chip 1150 mounted on or detached from the wireless terminal 1100 to exchange information and / or data. For example, the IC chip reader unit 1145 provides information and / or data exchange between the IC chip agent program and the IC chip 1150 through an application protocol data unit (APDU).

Referring to standards including ISO / IEC 7816 and / or ISO / IEC 14443, the IC chip 1150 mounted or detached from the customer wireless terminal 1100 may include a power supply (VCC), a reset signal (RST), Communication with IC chip reader 1145 (e.g. command or data exchange, etc.) via contact points such as clock signal CLK, ground GND, programming power supply (VPP), and / or input / output (I / O), etc. A processor unit comprising an input / output interface, a CPU (Central Process Unit), an MPU (Micro Process Unit), and / or a coprocessor (Coprocessor), and the like, and a ROM (Read Only Memory) and RAM. (Random Access Memory), EEPROM (Electrically Erasable and Programmable Read Only Memory), a memory unit including at least one or more memory elements including Flash Memory (FM), and the like, in particular at least one or more of the memory elements (e.g., , ROM) IC card A chip operating system (COS) for managing and operating internal resources is stored. When a predetermined power is supplied from the IC chip reader unit 1145 through a power supply (VCC) contact point of the input / output interface, the memory is stored. The COS stored in the unit is loaded into a predetermined execution memory to control the overall operation of the IC chip 1150, and based on the clock frequency (eg, 3.57 MHz or 4.9 MHz) of the contact point of the clock signal CLK (APDU) Protocol Data Unit) controls the exchange of information or data between the IC chip 1150 and the IC chip reader 1145.

According to another exemplary embodiment of the present invention, the token agent program may be provided in the IC chip 1150 (for example, the token agent program may be recorded on a recording medium provided in the IC chip 1150). The present invention is not limited by this.

According to another exemplary embodiment of the present invention, when the token agent program is provided in the platform of the wireless terminal 1100 and / or in the IC chip 1150, some of the token generation information may be included in the IC. It is possible to be stored in the memory unit provided in the chip 1150, whereby the present invention is not limited.

Referring to FIG. 11, the token agent is received in connection with a predetermined token agent mounted on the wireless terminal 1100 and a token agent providing server 215 on the wireless network 140, and / or the token. It comprises a communication processing unit 1180 for generating a predetermined token code by an agent, or performing the communication function required to process the token code in a predetermined financial transaction.

Referring to FIG. 11 according to a preferred embodiment of the present invention, the token agent mounted on the wireless terminal 1100 may include an input unit 1160 that receives at least one information (or data) for generating the token code; A reading unit 1165 that reads at least one token generation information required to generate a predetermined token code, and a generation unit that generates the predetermined token code by applying the read token generation information to a predetermined token generation algorithm. 1170, and an output unit 1175 for outputting the generated token code on the screen of the wireless terminal 1100.

The input unit 1160 may receive at least one or more information (or data) for generating the token code in cooperation with the key input unit, and the input information (or data) generates a predetermined token code. Outputting a token generation command, and / or predetermined PIN (Personal Identification Number) information for internal authentication on the generated token code, and / or the generated token code on the screen of the wireless terminal 1100, or Alternatively, at least one token code output command may be output to the outside of the wireless terminal 1100 through the wireless processing unit 1130 and / or the short range communication unit 1135 in cooperation with the communication processing unit 1180.

According to an embodiment of the present invention, the generation unit 1170 inputted from the key input unit through the input unit 1160 may be used as predetermined token generation information for generating a predetermined token code. And / or in combination with the token code in the process of outputting the token code generated by the generation unit 1170 (eg, outputted on the screen of the wireless terminal 1100, and / or outputted to the outside of the wireless terminal 1100). It is possible to be.

According to another exemplary embodiment of the present invention, when the token agent is provided in the IC chip 1150 mounted or detached from the wireless terminal 1100, the PIN information is a user defined in the IC chip 1150. Preferably, the method further comprises performing an authentication procedure.

The read unit 1165 may be configured to generate the token from the internal resources of the wireless terminal 1100 and / or the token agent internal code and / or the memory unit included in the memory unit 1155 and / or the IC chip 1150. And the agent reads at least one token code generation information defined to be used to generate a predetermined token code.

According to an exemplary embodiment of the present invention, the reader 1165 receives time (or time) information required for generating the token code from the internal resource of the wireless terminal 1100 (eg, a timer resource in the wireless terminal 1100). It is preferable to read, and / or a predetermined secret set for generating the token code from the token agent internal code and / or the memory unit included in the memory unit 1155 and / or the IC chip 1150. It is preferable to read a key value, and / or to read a predetermined MIN / ESN from the NAM area of the memory unit 1155.

In addition, in the case of token generation information defined to apply a predetermined hash function among the read token generation information, the reader 1165 applies the predetermined hash function to the read token generation information to apply the corresponding token generation information. Preferably, the method further includes a function of converting (or limiting) a value within a predetermined size.

According to another exemplary embodiment of the present invention, the reading unit 1165 is linked to the communication processing unit 1180 to generate a real time from the financial transaction server 1000 (for example, at random in the financial transaction server 1000). And receiving the predetermined challenge value generated as the predetermined token generation information used to generate the predetermined token code in the generation unit 1170.

The generation unit 1170 generates an unpredictable predetermined token code according to a predetermined token generation algorithm based on at least one token generation information read by the reader 1165. Preferably, the data block includes a predetermined length of data blocks.

The output unit 1175 outputs the token code generated by the generation unit 1170 to the screen of the wireless terminal 1100. The wireless processing unit 1130 and / or the short-range communication unit may be used. Providing a portion (or all) of the generated token code to the financial transaction server 1000 through 1135 and / or processing the token code based financial transaction via the local area communication unit 1135. It is preferable to provide to the transaction terminal 145.

The communication processor 1180 receives a predetermined token agent to be mounted in the wireless terminal 1100 in connection with a token agent providing server 215 on the wireless network 140. It is preferable that the configuration further comprises a functional configuration to mount (or installed) on the customer wireless terminal 1100 through.

In addition, when the token agent receives a predetermined challenge value from the financial transaction server 1000 in the process of generating a predetermined token code, the communication processing unit 1180 may include the wireless processing unit 1130 and / or the local area communication unit. In connection with 1135, a predetermined communication channel may be connected to the financial transaction server 1000 (or the communication channel connection process may be omitted if the challenge value is received through a wireless message), and the financial transaction may be performed through the communication channel. It is desirable to receive a predetermined challenge value dynamically generated at the server 1000.

In addition, when the token agent and / or a portion of the token code generated by the token agent are transmitted to the financial transaction server 1000 through the wireless processing unit 1130 and / or the local area communication unit 1135, the communication The processor 1180 connects a predetermined communication channel to the financial transaction server 1000 by interworking with the wireless processor 1130 and / or the local area communication unit 1135 and through the communication channel to the financial transaction server 1000. It is preferable to transmit the generated token code and / or a portion of the token code.

In addition, when providing the token code and / or a portion of the token code generated by the token agent to the financial transaction terminal 145 processing the token code based financial transaction through the local area communication unit 1135, the The communication processor 1180 connects the financial transaction terminal 145 with a predetermined short range communication channel in association with the short range communication unit 1135, and generates the token to the financial transaction terminal 145 through the short range communication channel. It is desirable to transmit a portion of the code and / or token code.

According to another exemplary embodiment of the present invention, the wireless terminal 1100 may perform a function of the financial transaction terminal 145 for processing the token code based financial transaction, and for this purpose, the wireless terminal 1100 It is possible to further comprise a financial processing unit 1185 to process the token code-based financial transactions.

12 illustrates a token code structure according to an embodiment of the present invention.

More specifically, FIG. 12 shows a preferred embodiment of the token code generated by the token agent program, and each information position constituting the token code can be changed by those skilled in the art. Those skilled in the art to which the present invention pertains will be able to easily infer a token code structure including more information with reference to FIG. 12, and the present invention is not limited thereto. .

Referring to FIG. 12, a token code generated by the token agent program is generated through a hash algorithm for generating a predetermined token code based on at least one token generation information in the token agent as shown in FIG. Characterized by including a predetermined hashing code, at least one or more information may be further included in the hashing code according to the intention of the skilled person and / or information subject to intuitively authenticate through the token code.

Referring to (b) of FIG. 12, the token code is a predetermined hashing code generated by a hash algorithm for generating a predetermined hash token code defined in the token agent program. It may further comprise PIN information, or may further comprise predetermined user input information input by the user (customer) as shown in (d) of FIG. 12, or the user as shown in (d) of FIG. It is possible to further include hashed input information (eg, reducing the length of the user input information to within a predetermined length) to which the predetermined hash function is applied to the input information, and the present invention is not limited thereto.

Referring to (e) of FIG. 12, the token code further includes the PIN information and the user input information in a predetermined hashing code generated through a hash algorithm for generating a predetermined hash token code defined in the token agent program. Or hashed input information to which the PIN information and the user input information are applied to the hashing code as shown in FIG. This is not limited.

13 is a diagram illustrating a functional configuration of a financial transaction terminal 145 according to an embodiment of the present invention.

In more detail, FIG. 13 illustrates a preferred functional configuration of an offline financial transaction terminal 145 for generating a predetermined financial transaction text (or data) for a financial transaction using the token code and transmitting the generated financial transaction text (or data) to the financial transaction server 1000. As the financial transaction terminal 145 shown in FIG. 13 includes a financial transaction automation processing device such as a CD / ATM and a payment terminal including a CAT terminal or a POS terminal.

Those skilled in the art to which the present invention pertains, with reference to this figure 13 of the online financial transaction terminal 145 (for example, provided in the form of a plug-in in a web browser) for financial transactions using the token code Functional configuration may be easily inferred, and description thereof is omitted for convenience, but the present invention is not limited thereto.

Referring to FIG. 13, the financial transaction terminal 145 basically includes a control unit 1305, a memory unit 1350, a card interface 1310, a key input unit 1320, a screen output unit 1315, and a communication unit 1330. It includes a power supply for supplying power to the security application module 1335, the printing unit 1340 and the financial transaction terminal 145.

The control unit 1305 controls the overall operation of the financial transaction terminal 145 in the functional configuration, manages the flow of information or data between each component, and is provided in the financial transaction terminal 145 for financial transactions using token codes. And at least one processor and execution memory (e.g., registers and / or random access memory (RAM)) including a central processing unit (CPU) and a micro processing unit (MPU) in hardware. And a bus for inputting and outputting predetermined data, and loading the execution memory from the predetermined recording medium into the execution memory in order to perform a function specific to the financial transaction terminal 145 in software. A predetermined program routine (Routine) and / or program data that is computed by the processor. Software processing is performed among the functional components provided in the financial transaction terminal 145 for a financial transaction using a predetermined program and / or token code recorded in the recording medium provided in the financial transaction terminal 145 for the financial transaction. Possible components are shown in the control unit 1305).

The memory unit 1350 is input and output when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the financial transaction terminal 145 is performed. General term of non-volatile memory for storing information or data), at least one of which includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and / or Flash Memory (FM) and / or Hard Disk Drive (HDD) in hardware. It includes the above storage means, and the predetermined program routine and program data required for the control unit 1305 to perform a predetermined control function (for example, data input or output for the program routine to perform a predetermined function) ) Is stored.

The card interface 1310 provides an interface for reading at least one or more information or data included in a predetermined card to realize card payment, and is based on an ISO / IEC 7810 standard. MS interface for providing an interface between a card and the financial transaction terminal 145, and / or a contact IC interface for providing an interface between the contact IC card and the financial transaction terminal 145 based on the ISO / IEC 7816 standard, And / or a contactless IC interface for providing an interface between the contactless IC card and the financial transaction terminal 145 based on the ISO / IEC 14443 standard.

The key input unit 1320 is a terminal operator and / or from a predetermined key input means including a plurality of number keys, a character key for inputting characters, a function key, and / or the like. Alternatively, the user inputs corresponding key data generated by clicking a predetermined key to the controller 1305, and the controller 1305 is key data input through the key input unit 1320. Read and control a predetermined function and / or a predefined task corresponding to the key data in association with at least one component provided in the financial transaction terminal 145.

According to a feature of the invention, the key input unit 1320 is a predetermined token code generated by the token agent mounted on the wireless terminal 1100 and financial transaction means owned customer information (and / or customer wireless terminal information) and It is desirable to provide a function of key input means for inputting financial instrument information.

The screen output unit 1315 is a liquid crystal display (LCD) and / / by the control unit 1305 while the financial transaction terminal 145 performs a predetermined function (for example, the electronic payment processing function using a card) Or outputting at least one or more information or data that is predefined or defined in real time to be output to a predetermined screen output means including a CRT (Cathode Ray Tube) through a predefined screen interface. Predefined information or data to be output on the screen by the terminal 145 is stored by key data input through the key input unit 1320 and / or components provided in the financial transaction terminal 145. Or information (or data) generated, information (or data) transmitted / received through the communication unit 1330, and / or a predetermined operation performed by the financial transaction terminal 145. (Or data) corresponding to the result of the operation comprises at least one.

According to an exemplary embodiment of the present invention, the screen output unit 1315 may include information input in a financial transaction process using the token code and / or information transmitted to the financial transaction server 1000 and / or the financial transaction server ( It is desirable to provide a function for outputting the information received from 1000).

The communication unit 1330 is a server (or terminal) and / or the financial transaction terminal on the network 140 in the process of the financial transaction terminal 145 performs a predetermined function (for example, electronic payment processing function using a card). 145 and a terminal (or device) connected through a predetermined cable and / or a predetermined session for connecting a communication session with the terminal (or device) connected to the financial transaction terminal 145 through a predetermined short-range wireless communication It is characterized by providing a communication means, predetermined hardware including a Value Added Network (VAN) or a financial common network or high-speed Internet (eg, ADSL / VDSL / Cable Network / ... / satellite communications) in hardware. A network connecting a communication channel with a server (or terminal) on the wired / wireless network 140 through a predetermined wireless network 140 including a wired network 140 and / or a mobile communication network or a wireless data communication network. 140 communication unit 1330, and / or cable communication unit 1330 for connecting a communication session with a predetermined terminal (or device) through a predetermined cable communication, and / or infrared ray communication, RF (Radio) Short-range for connecting a short-term wireless communication session with a predetermined terminal (or device) through at least one short-range wireless communication means including frequency communication, Bluetooth, wireless LAN, and Wi-Fi. It comprises at least one wireless communication unit 1330, and comprises a communication protocol and / or driver for connecting the communication channel (or communication session) in software.

According to the exemplary embodiment of the present invention, the short range wireless communication unit 1330 may use a predetermined token code and financial transaction means customer information (and / or customer wireless terminal information) and / or financial transaction means information from the wireless terminal 1100. Preferably, the method further comprises a function provided through the short-range wireless communication.

The secure application module (1335) (SAM) is a confidentiality and / or authentication (required in the process of performing the electronic payment and / or electronic payment by the financial transaction terminal 145 using the card ( Security requirements, including Authentication and / or Integrity and / or Nonrepudiation, may be applied within the financial transaction terminal 145 without using an authentication server (or payment server) on the network 140. As a safety device for performing a safe and reliable structure, a predetermined message (information) that is processed in the process of the financial transaction terminal 145 performing a predetermined security request function (for example, electronic payment and / or electronic payment function). Or encrypts or decrypts data, adds an authenticator that prevents forgery (or tampering) of the message, or is important in performing the security request function. To perform the function of storing the padding information is characterized.

In general, the security application module 1335 is preferably composed of a predetermined security application module 1335 inserter and a security application module 1335 chip, the security application module 1335 chip is a chip containing at least 8-bit CPU Application Specific Integrated Circuit (ASIC) chips (eg, PLCC 44-pin chips) and / or IC chips (eg, IC cards in the form of subscriber identity modules (SIMs)) with performance of 2 MIPS (Million Instructions Per Second) or more. It is preferable to comprise a.

In addition, the security application module 1335 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value required for the financial transaction terminal 145 to perform a predetermined security request function) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, immediate transaction cancellation protocols, collection protocols, SAM issuance protocols, (e.g. Card company) registration protocol, authorization acquisition protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / discard / Initialization / reprocessing / cancellation command).

The printing unit 1340 is a process in which the financial transaction terminal 145 performs a predetermined function (for example, an electronic payment processing function using a card) and / or predetermined information or data (for example, payment processing) generated as a result. Outputting the result information or data) to a predetermined printing device 1345 (eg, a receipt printer), and outputting the printing information or data in accordance with a predefined printing form through the predetermined printing device 1345. It includes a printing protocol and a driver for printing.

Referring to FIG. 13, the financial transaction terminal 145 may include a generation unit 1355 for generating a financial transaction request message (or data) for a financial transaction using the token code, and the financial transaction request message (or data). It includes a transmission unit 1365 for transmitting to the financial transaction server 1000, and a receiving unit 1360 for receiving the financial transaction approval full text (or data) from the financial transaction server 1000.

The generation unit 1355 is inputted through the key input means in addition to the conventional financial transaction related text (or data) generated by the financial transaction terminal 145, and / or the token code inputted through a local area communication unit. And a financial transaction request message (or data) including financial transaction means customer information (and / or customer wireless terminal information) and / or financial transaction means information and predetermined financial transaction information.

The transmission unit 1365 transmits the financial transaction request message (or data) generated by the generation unit 1355 to the financial transaction server 1000 through the communication unit 1330. If the communication network connected to the communication unit 1330 is an open communication network that allows external access such as the Internet (or the financial transaction terminal 145 is an online financial transaction terminal 145), the transmission unit requests the financial transaction. It is preferable to further include a functional configuration for encrypting the full text (or data) to be transmitted.

The receiving unit 1360 receives a predetermined financial transaction approval message (or data) (or a financial transaction error message (or data)) corresponding to the financial transaction request message (or data) from the financial transaction server 1000. It is characterized by.

When the functional configuration of the financial transaction terminal 145 of FIG. 13 is applied to a wired terminal including a personal computer and / or a laptop, a person having ordinary knowledge in the technical field to which the present invention pertains may refer to FIG. The generation unit 1355, the transmission unit 1365, and the reception unit 1360 may be connected to a web browser provided in the wired terminal to use the token code and financial transaction means customer information for a financial transaction using the token code. And / or customer wireless terminal information) and / or financial transaction instrument information and predetermined financial transaction information, the financial transaction request message (or data) may be provided in the form of a plug-in.

In addition, in the case where the functional configuration of the financial transaction terminal 145 of FIG. 13 is applied to the customer wireless terminal 1100, a person having ordinary knowledge in the technical field to which the present invention pertains may be generated with reference to the present FIG. It will be apparent that the unit 1355, the transmitter 1365, and the receiver 1360 are included in the financial processing unit 1185 of the wireless terminal 1100 shown in FIG. 11.

14A and 14B illustrate a token code operation process according to an exemplary embodiment of the present invention.

In more detail, FIGS. 14A and 14B illustrate a 10-digit token code generated by the token agent provided in the wireless terminal 1100 and the generated 10-digit token code through a predetermined financial transaction terminal 145. The preferred embodiment of the present invention transmits the financial transaction server 1000 and authenticates the token code in the financial transaction server 1000. For convenience, the token agent runs the token agent program and / or performs an internal authentication procedure. In order to do so, the process of inputting predetermined PIN information is omitted.

14A and 14B illustrate only the token code transmitted from the financial transaction to the financial transaction server 1000 in order to effectively explain the token code operation process, the present invention is common in the art. If the person having knowledge, the token code is a predetermined financial transaction including the predetermined financial transaction information and the financial means information and / or customer information (and / or customer wireless terminal information) for the token code-based financial transaction It will be clearly understood that it is included in the information data and is transmitted to the financial transaction server 1000, whereby the present invention is not limited.

Referring to FIG. 14A, the reader 1165 may read the internal resource of the wireless terminal 1100 and / or the token agent internal code by a predetermined token code generation command inputted by the input unit 1160 of the token agent program. And / or at least one token code generation information defined by the token agent to be used to generate a predetermined token code from the memory unit 1155 and / or the memory unit included in the IC chip 1150. Read (1400), and provides the read at least one token generation information to the generation unit 1170 (1405).

The generator 1170 generates a predetermined token code that is unpredictable by applying a hash algorithm for generating a token based on at least one token generation information provided from the reader 1165 (1410), and outputting the token. The unit 1175 outputs the generated token code to the screen of the wireless terminal (1415).

When the token code is output on the screen of the wireless terminal 1100 as described above, the token code is inputted to the financial transaction terminal 145 through a predetermined key input means provided in the financial transaction terminal 145 (1420). Or, the wireless terminal 1100 and the financial transaction terminal 145 are transmitted to the financial transaction terminal 145 through predetermined short-range communication means (1420), and the financial transaction terminal 145 is predetermined. The token code is transmitted to the financial transaction server 1000 through the payment network 140 (1425).

According to the exemplary embodiment of the present invention, the financial transaction terminal 145 transmits the token code to the financial transaction server 1000 through the payment network 140 for the token code-based financial transaction. The transaction terminal 145 may include the token code, the financial transaction means information, and the predetermined financial transaction information for the token-based financial transaction in the predetermined financial transaction information data and transmit the same to the financial transaction server 1000. .

Referring to FIG. 14B, the information receiver of the financial transaction server 1000 is transmitted from the financial transaction terminal 145 through the payment network 140 including a predetermined token code, financial transaction information, and financial transaction information. Receiving financial transaction information data (1430), the information confirmation unit confirms the financial transaction means information from the financial transaction information data (1435), and provides the identified financial transaction information data to the extraction unit (1440).

The extracting unit provided with the financial transaction means information extracts (1445) predetermined token agent information associated with the financial transaction means information (or corresponding token code) from the storage medium 110 (1445). The token agent information is provided to the authenticator (1440).

When the token agent information is provided as described above, the authentication unit generates token information identical to the token generation information used to generate the token code in the token agent provided in the customer wireless terminal 1100 based on the token agent information and / or Alternatively, the token agent generates a predetermined token authentication code through the same procedure as that of generating the token code (1455), and compares the token code received through the information receiver with the generated token authentication code. Validate the code (1460). If the validity of the token code is authenticated (1465), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

15A and 15B illustrate a token code operation process according to an exemplary embodiment of the present invention.

In more detail, FIGS. 15A and 15B illustrate a 10-digit token code generated by the token agent provided in the wireless terminal 1100, and the 10-digit token code generated by the wireless terminal 1100. As a preferred embodiment of the method for transmitting the financial transaction server 1000 through the network 140 and authenticating the token code in the financial transaction server 1000, the token agent program is operated by the token agent and / or for convenience. Alternatively, the process of inputting predetermined PIN information to perform the internal authentication procedure is omitted.

15A and 15B illustrate only the token code transmitted from the wireless terminal 1100 to the financial transaction server 1000 in order to efficiently explain the token code operation process, the present invention belongs to the present invention. Those skilled in the art will appreciate that the token code may be transmitted to the financial transaction server 1000 in association with predetermined financial transaction information for the token code based financial transaction, thereby. The present invention is not limited.

Referring to FIG. 15A, the reader 1165 may read the internal resource of the wireless terminal 1100 and / or the token agent internal code by a predetermined token code generation command inputted by the input unit 1160 of the token agent program. And / or read at least one token code generation information defined by the token agent to be used to generate a predetermined token code from the memory unit 1155 and / or the memory unit included in the IC chip 1150, and the like. In operation 1500, the read one or more token generation information is provided to the generation unit 1170.

The generation unit 1170 generates a predetermined token code that is unpredictable by applying a hash algorithm for generating a token based on at least one token generation information provided from the reader 1165 (1510), and outputting the token code. The unit 1175 outputs the generated token code to the screen of the wireless terminal (1515) and the financial transaction server 1000 through a predetermined wireless network 140 in association with the communication processing unit (1180) (1180). It is preferable to transmit the generated token code to (1520), further comprising financial transaction means information for providing a predetermined financial transaction in the process of transmitting the token code.

According to another embodiment of the present invention, when the wireless terminal 1100 equipped with the token agent program performs a function of a predetermined financial transaction terminal 145 for the token code-based financial transaction, the output unit 1375 and the communication processor 1180 transmit the wireless network 140 to the financial transaction server 1000 in association with the generated token code and the financial transaction information.

Referring to FIG. 15B, the information receiver of the financial transaction server 1000 receives a predetermined token code transmitted from the wireless terminal 1100 through the wireless network 140 (1530), and the information receiver receives the token. In the process of receiving a code, the financial transaction means information for providing a predetermined financial transaction is extracted and provided to the extraction unit (1540), and the extraction unit is associated with the financial transaction means information from the storage medium 110 (or Extracting predetermined token agent information (corresponding to the received token code) (1545) and providing the extracted token agent information to the authenticator (1540).

When the token agent information is provided as described above, the authentication unit generates token information identical to the token generation information used to generate the token code in the token agent provided in the customer wireless terminal 1100 based on the token agent information and / or Alternatively, the token agent generates a predetermined token authentication code through the same procedure as the procedure for generating the token code (1555), and compares the token with the token token received through the information receiver and the generated token authentication code. Validate the code (1560). If the validity of the token code is authenticated (1565), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

16A, 16B, and 16C illustrate a token code operation process according to an exemplary embodiment of the present invention.

In more detail, Figures 16a, 16b and 16c generate a 10-digit token code by receiving a predetermined challenge value from the financial transaction server 1000 in the token agent provided in the wireless terminal 1100, The preferred 10 digit token code is transmitted to the financial transaction server 1000 through a predetermined financial transaction terminal 145, and the financial transaction server 1000 relates to a preferred embodiment of the method for convenience. The process of inputting predetermined PIN information in order to drive the token agent program and / or perform an internal authentication procedure in the token agent is omitted.

16A and 16B illustrate only the token code being transmitted from the financial transaction to the financial transaction server 1000 in order to efficiently explain the token code operation process, the present invention is common in the art. If the person having knowledge, the token code is included in predetermined financial transaction information data for the token code-based financial transaction and the financial transaction information data including the financial transaction means information and transmitted to the financial transaction server 1000. It will be clearly understood that the present invention is not limited thereto.

Referring to FIG. 16A, the authentication unit included in the financial transaction server 1000 extracts predetermined wireless terminal information to transmit a predetermined challenge value from the storage medium 110 (1600) and transmits the predetermined wireless terminal information to the wireless terminal 1100. Dynamically generating a predetermined challenge value to be transmitted to the provided token agent program (1605), and providing the wireless terminal information and the challenge value to the information transmitter, the information transmitter based on the wireless terminal information, a predetermined payment network The generated challenge value is transmitted to the wireless terminal 1100 through 140 (1610).

When the generated challenge value is transmitted to the wireless terminal 1100 equipped with the token agent program as described above, the authentication unit stores the challenge value transmitted to the wireless terminal 1100 in the storage medium 110 (1615). ).

Referring to FIG. 16B, the reader 1165 of the token agent program receives a predetermined challenge value received from the financial transaction server 1000 through the communication processor 1620 and includes the received challenge value. At least one token defined to be used by the token agent to generate a predetermined token code from the token agent internal code and / or a memory unit included in the memory unit 1155 and / or the IC chip 1150 The code generation information is read (1625) and the read at least one token generation information is provided to the generation unit (1170) (1630).

The generation unit 1170 generates an unpredictable predetermined token code by applying a hash algorithm for generating a token based on at least one token generation information provided from the reader 1165 (1635), and outputs the token. The unit 1175 outputs the generated token code to the screen of the wireless terminal (1640).

When the token code is output on the screen of the wireless terminal 1100 as described above, the token code is input to the financial transaction terminal 145 through a predetermined key input means provided in the financial transaction terminal 145 (1645). Or through the predetermined short-range communication means provided in the wireless terminal 1100 and the financial transaction terminal 145 (1645), the financial transaction terminal 145 is predetermined The token code is transmitted to the financial transaction server 1000 through the payment network 140 (S1650).

According to the exemplary embodiment of the present invention, the financial transaction terminal 145 transmits the token code to the financial transaction server 1000 through the payment network 140 for the token code-based financial transaction. The transaction terminal 145 may include the token code, financial transaction means information for providing a predetermined financial transaction, and predetermined financial transaction information for a token-based financial transaction in the predetermined financial transaction information data. Is preferred.

Referring to FIG. 16c, the information receiver of the financial transaction server 1000 is transmitted from the financial transaction terminal 145 through the payment network 140 including a predetermined token code, financial transaction information, and financial transaction information. Receiving financial transaction information data (1655), the information confirmation unit confirms the financial transaction means information from the financial transaction information data (1660), and provides the identified financial transaction information data to the extraction unit (1665).

The extracting unit provided with the financial transaction instrument information extracts (1670) predetermined token agent information associated with the financial transaction instrument information (or corresponding token code) from the storage medium 110 (1670). The token agent information is provided to the authenticator (1675).

When the token agent information is provided as described above, the authentication unit generates token information identical to the token generation information used to generate the token code in the token agent provided in the customer wireless terminal 1100 based on the token agent information and / or Alternatively, the token agent generates a predetermined token authentication code through the same procedure as that of generating the token code (1680), and compares the token code received through the information receiver with the generated token authentication code. Validate the code (1685). If the validity of the token code is authenticated (1690), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

17A, 17B, and 17C illustrate a token code operation process according to an exemplary embodiment of the present invention.

In more detail, FIGS. 17A, 17B, and 17C generate a 10-digit token code by receiving a predetermined challenge value from the financial transaction server 1000 in the token agent provided in the wireless terminal 1100, The generated 10-digit token code is transmitted from the wireless terminal 1100 to the financial transaction server 1000 through a predetermined wireless network 140, and the financial transaction server 1000 is preferably implemented to authenticate the token code. As a method, for convenience, a process of inputting predetermined PIN information to run the token agent program and / or perform an internal authentication procedure in the token agent is omitted.

17A and 17B illustrate only the token code transmitted from the wireless terminal 1100 to the financial transaction server 1000 in order to efficiently explain the token code operation process, the present invention belongs to the present invention. Those skilled in the art will appreciate that the token code may be transmitted to the financial transaction server 1000 in association with predetermined financial transaction information for the token code based financial transaction, thereby. The present invention is not limited.

Referring to FIG. 17A, the authentication unit included in the financial transaction server 1000 extracts predetermined wireless terminal information to transmit a predetermined challenge value from the storage medium 110 (1700) and transmits the predetermined wireless terminal information to the wireless terminal 1100. Dynamically generating a predetermined challenge value to be transmitted to the provided token agent program (1705), and providing the wireless terminal information and the challenge value to the information transmitter, the information transmitter based on the wireless terminal information The generated challenge value is transmitted to the wireless terminal 1100 through 140 (1710).

When the generated challenge value is transmitted to the wireless terminal 1100 equipped with the token agent program as described above, the authentication unit stores the challenge value transmitted to the wireless terminal 1100 in the storage medium 110 (1715). ).

Referring to FIG. 17B, the reader 1165 of the token agent program receives a predetermined challenge value received from the financial transaction server 1000 through the communication processor 1720, and includes the received challenge value. At least one token defined to be used by the token agent to generate a predetermined token code from the token agent internal code and / or a memory unit included in the memory unit 1155 and / or the IC chip 1150 The code generation information is read (1725) and the read at least one token generation information is provided to the generation unit 1170 (1730).

The generation unit 1170 generates an unpredictable predetermined token code by applying a hash algorithm for generating a token based on at least one token generation information provided from the reader 1165 (1735), and outputs the token code. The unit 1175 outputs the generated token code to the screen of the wireless terminal (1740), and generates the generated token code to the financial transaction server 1000 through a predetermined wireless network 140 in cooperation with the communication processing unit 1180. The token code is transmitted (1745), and in the process, it is preferable to further include financial transaction means information for providing a predetermined financial transaction.

According to another embodiment of the present invention, when the wireless terminal 1100 equipped with the token agent program performs a function of a predetermined financial transaction terminal 145 for the token code-based financial transaction, the output unit 1755 and the communication processor 1180 transmit the wireless network 140 to the financial transaction server 1000 in association with the generated token code and the financial transaction information.

Referring to FIG. 17C, the information receiver of the financial transaction server 1000 receives a predetermined token code transmitted from the wireless terminal 1100 through the wireless network 140 (1755), and the information receiver receives the token. In the process of receiving a code, the financial transaction means information for providing a predetermined financial transaction is extracted and provided to the extracting unit (1765), and the extracting unit is associated with (or received) the wireless terminal information from the storage medium 110. The token token information corresponding to the token token is extracted (1770), and the extracted token agent information is provided to the authenticator (1775).

When the token agent information is provided as described above, the authentication unit generates token information identical to the token generation information used to generate the token code in the token agent provided in the customer wireless terminal 1100 based on the token agent information and / or Alternatively, the token agent generates a predetermined token authentication code through the same procedure as that of generating the token code (1780), and compares the token code received through the information receiver with the generated token authentication code. Validate the code (1785). If the validity of the token code is verified (1790), the financial transaction unit 1030 of the financial transaction server 1000 performs at least one financial transaction using the financial transaction means.

18 is a diagram illustrating an implementation process of applying a token code-based financial transaction to a card settlement system according to an embodiment of the present invention.

In more detail, Figure 18 illustrates a method of applying a token code-based financial transaction method according to the present invention to a card payment system including at least one of a credit card, a debit card, and a check card. The present invention relates to an implementation method of using the token code as a card payment authentication means.

However, the implementation method of applying the token code-based financial transaction method according to the present invention to the card payment system is not limited to the case of FIG. 18, and a person having ordinary knowledge in the technical field to which the present invention belongs, Various implementation methods for applying the token code-based financial transaction method according to the present invention to a card payment system with reference to 18 (eg, an implementation method for transmitting wireless terminal information and token codes to a server before / after a card payment process is performed) ) Can be easily inferred.

Referring to FIG. 18, a payment terminal (e.g., CAT (Credit Authorization Terminal)) reads financial transaction means (or payment means) information included in a customer's own card (e.g., MS card / IC card), and makes a predetermined payment. Entering or receiving an amount of money from the POS (1800), and requests a predetermined token code generated by the token agent provided in the wireless terminal through a predetermined key input means (1805), the customer wireless terminal (1100) ) Drives a predetermined token agent included in the wireless terminal 1100 through a predetermined PIN (1810), and the driven token agent is based on at least one token generation information and a token generation algorithm. Generate and output to the screen of the wireless terminal 1100 (1815), the customer inputs the output token code through a predetermined key input means provided in the payment terminal; All.

According to another exemplary embodiment of the present invention, when the wireless terminal 1100 and the payment terminal have a predetermined short-range communication function, the wireless terminal information and the token code are input to the payment terminal through the short-range communication. It is possible.

If the generated token code is input (1820), the payment terminal generates the full payment processing request message including the financial transaction means (or payment means) information and the token code and the payment information (1825). In operation 1830, the generated payment processing request message is transmitted to the server (for example, a server that performs validation and payment processing on the token code).

The server, having received the payment processing request message from the payment terminal, reads the payment processing request message and extracts the financial transaction means (payment means) information and the token code (1835), and the storage medium 110 from the storage medium 110. Extract the predetermined token agent information associated with the financial transaction means (payment means) information, and the same token used by the token agent provided in the wireless terminal 1100 to generate the token code based on the extracted token agent. A predetermined token authentication code is generated through generation information and a token generation algorithm (1840), and the validity of the received token code is verified (1845) by comparing the received token code with the generated token authentication code.

If the validity of the received token code is not authenticated (e.g., the token code and the token authentication code do not match) (1850), the server generates a predetermined payment processing error message, and sends it to the payment terminal. In operation 1855, a receipt including the full text of the payment processing error is printed.

On the other hand, if the validity of the received token code is authenticated (eg, if the token code and the token authentication code match) (1850), the server processes the payment through the financial transaction means (or payment means) (1860), A predetermined payment processing approval message is generated, transmitted to the payment terminal, and output, and a receipt including the payment processing approval text is printed (1870).

Figure 19 illustrates the entire payment processing request for token code-based payment processing according to an embodiment of the present invention.

In more detail, in FIG. 19, the token code generated by the token agent installed in the wireless terminal is included in the 'password' area of the payment processing request message. The request is for the full text.

Referring to FIG. 19, it is preferable that the customer-owned financial distance means (or payment means) information is stored in the track-II area of the payment processing request message.

20 illustrates an implementation process of applying a token code based financial transaction to a financial automation system according to an exemplary embodiment of the present invention.

More specifically, FIG. 20 illustrates an implementation method of applying a token code-based financial transaction method according to the present invention to a financial automation system including CD / ATM. Specifically, the token code is used as a financial transaction authentication means in a financial transaction process. It is about the implementation method to use.

20, the financial terminal reads customer-owned financial transaction means information (2000) for predetermined financial transaction processing, and the predetermined financial transaction request information (e.g., each of the financial terminals) through a predetermined key input means. Request input of financial transaction necessary user input information corresponding to the operation step (2005).

If predetermined financial transaction request information is input (2010), the financial terminal requests input of a predetermined token code generated through a token agent provided in the wireless terminal 1100 through a predetermined key input means (2015). ), The customer wireless terminal 1100 drives a predetermined token agent provided in the wireless terminal 1100 through a predetermined PIN (2020), and the driven token agent generates at least one token generation information and a token. A predetermined token code is generated based on an algorithm and output to the screen of the wireless terminal 1100 (2025), and the customer inputs the output token code through a predetermined key input means provided in the financial terminal.

According to another exemplary embodiment of the present invention, when the wireless terminal 1100 and the financial terminal have a predetermined short-range communication function, the wireless terminal information and the token code are input to the financial terminal through the short-range communication. It is possible.

If the generated token code is input (2030), the financial terminal generates predetermined financial transaction information data including the wireless terminal information and the token code input through the key input means (2035). The generated financial transaction information data is transmitted to the server (eg, a server providing a financial transaction in association with a financial terminal) (2040).

The server receiving the financial transaction information data from the financial terminal reads the financial transaction information data, extracts the financial transaction means information and the token code (2045), and the wireless terminal information from the storage medium 110. Extract the associated token agent information, and generate the same token generation information and token generation algorithm as the token agent included in the wireless terminal 1100 generates the token code based on the extracted token agent. Generate a predetermined token authentication code through (2050), and validates the received token code by comparing the received token code with the generated token authentication code (2055).

If the validity of the received token code is not authenticated (eg, if the token code and token authentication code do not match) (2060), the server generates predetermined token code authentication error data, and sends it to the financial terminal. And output (2065).

On the other hand, if the validity of the received token code is authenticated (for example, if the token code and the token authentication code match) (2060), the server performs a predetermined financial transaction through the financial transaction means, the financial transaction processing The details are generated and transmitted to the financial terminal (2070), and the financial transaction information is stored in a predetermined storage medium 135 in association with financial transaction processing details.

21 is a diagram illustrating an implementation process of applying a token code-based financial transaction to an online payment system according to an embodiment of the present invention.

More specifically, FIG. 21 illustrates an implementation method of applying a token code-based financial transaction method according to the present invention to an online payment system including an internet shopping mall. Specifically, the token code is used as a financial transaction authentication means in an online payment process. It is about the implementation method to use.

Referring to FIG. 21, a customer requests a predetermined payment by accessing a web server that provides a token code based financial transaction according to the present invention, and the payment processing preferably includes a predetermined secure payment method. In the online payment, the server (for example, a card company server performing secure payment) requests the wired terminal to input predetermined financial transaction information (2100).

If the financial transaction information is normally input (2105), the server requests a predetermined token code input to the wired terminal (2110), and the customer wireless terminal 1100 uses the wireless terminal (PIN) through a predetermined PIN. In operation 1115, the predetermined token agent provided in the device 1100 generates a predetermined token code based on at least one token generation information and a token generation algorithm, and displays the predetermined token code on the screen of the wireless terminal 1100. The customer inputs the output token code through a predetermined key input means provided in the wired terminal (2120).

According to another exemplary embodiment of the present invention, when the wireless terminal 1100 and the wired terminal have a predetermined short range communication function, the wireless terminal information and the token code are input to the financial terminal through the short range communication. It is possible.

If the generated token code is input (2125), the wired terminal transmits the wireless terminal information and the token code input through the key input means to the server (2130).

The server receiving the wireless terminal information and the token code from the wired terminal extracts predetermined token agent information associated with the financial transaction means information from the storage medium 110 and based on the extracted token agent, The token agent provided in the wireless terminal 1100 generates a predetermined token authentication code through the same token generation information and token generation algorithm as used to generate the token code (2135), and generates the received token code and the generated token code. The validity of the received token code is verified by comparing token authentication codes (2140).

If the validity of the received token code is not authenticated (eg, the token code and the token authentication code do not match) (2145), the server generates predetermined token code authentication error data and sends it to the financial terminal. And outputs it (2150).

On the other hand, if the validity of the received token code is authenticated (eg, if the token code and the token authentication code match) (1660), the server processes the predetermined financial transaction through the financial transaction means (2155), Generates a financial transaction processing history of the transaction and transmits it to the wired terminal for output (2160), and stores the financial transaction means information (or payment means information and payment processing details) in a predetermined author medium 135 (2165). ).

22 illustrates an implementation process in which a token code based financial transaction is applied to a wireless financial system according to an exemplary embodiment of the present invention.

More specifically, FIG. 22 illustrates an implementation method of applying a token code-based financial transaction method according to the present invention to a wireless banking system using a customer wireless terminal 1100. Specifically, the token code is authenticated in a wireless banking process. It is about the implementation method used as a means.

Referring to FIG. 22, the wireless terminal inputs predetermined financial transaction information (eg, an account number, etc.) through a predetermined key input means (2200), and is provided to the wireless terminal 1100 through a predetermined PIN. Drive a predetermined token agent (2205), the driven token agent generates a predetermined token code based on at least one or more token generation information and a token generation algorithm (2210), and Send a token code to the server (2215)

The server extracts predetermined token agent information associated with the wireless terminal information from the storage medium 110, and the token agent provided in the wireless terminal 1100 based on the extracted token agent provides the token code. Generate a predetermined token authentication code through the same token generation information and token generation algorithm used to generate (2220), and the validity of the received token code by comparing the received token code with the generated token authentication code Check (2225).

If the validity of the received token code is not authenticated (eg, the token code and the token authentication code do not match) 2230, the server generates predetermined token code authentication error data to generate the wireless terminal 1100. And transmit (2235).

On the other hand, if the validity of the received token code is authenticated (eg, if the token code and the token authentication code match) (2230), the server processes the predetermined financial transaction through the financial transaction means (2240), the payment A predetermined payment processing history corresponding to the processing is generated, transmitted to the wired terminal, and output (2245).

By providing a method and system for processing a financial transaction according to the present invention, there is an advantage that a more secure financial transaction is possible through a predetermined token code volatilized by time and / or by a random random variable.

Further, by using the wireless terminal number, without exposing financial transaction information (eg, financial account information, credit card information, debit card information, cash card information, check card information, prepaid card information, electronic money information, etc.) The advantage is that convenient and safe financial transactions are possible.

Claims (51)

Generating predetermined tokens for at least one or more financial transaction instrument information and / or the financial instrument ownership customer information (and / or customer-owned wireless terminal information) in the predetermined information storage means and the token generation program provided in the client-owned terminal. Storing financial transaction means information in association with program information and storing the same in a predetermined storage medium; Providing predetermined financial transaction information corresponding to a financial transaction using the financial transaction means of the customer who owns the financial transaction means from the predetermined financial transaction terminal to the financial transaction processing means (or the financial transaction processing means linking device or server) on the communication network. Including the predetermined token code generated by the token generation program included in the customer-owned terminal in the financial transaction information or transmitting the token code separately from the financial transaction information; The financial transaction means information corresponding to the financial transaction and / or the customer owning the financial transaction means in association with the storage medium (or storage medium operation means) in the financial transaction processing means (or financial transaction processing means linking device or server); Identifying token generation program information associated with the information (and / or customer-owned wireless terminal information), authenticating the validity of the token code using the token generation program information, and according to a result of the validation of the token code, A financial transaction authentication step of authenticating the validity of the financial transaction; And And a financial transaction processing step of processing the financial transaction in accordance with the validity verification result in the financial transaction processing means. The method of claim 1, wherein the financial transaction, A financial transaction processing method comprising an online financial transaction and / or an online financial transaction. The method of claim 1, wherein the financial transaction, Payment transactions on-line and / or online, Account transfer financial transactions offline and / or online, A financial transaction processing method comprising at least one cash withdrawal financial transaction on the offline. The method of claim 1, wherein the financial transaction means, A financial transaction processing method comprising at least one financial account, a credit card, a debit card, a cash card, a check card, a prepaid card, and electronic money. The method of claim 1, wherein the financial transaction terminal, And at least one payment terminal comprising the customer-owned wireless terminal or wired terminal, a financial transaction automation processing device such as CD / ATM, and a CAT terminal or a POS terminal. The method of claim 1, wherein the customer-owned terminal, A financial transaction processing method comprising a wireless terminal and / or a wired terminal. The method of claim 1, And a token generation program providing step of providing the predetermined token generation program from the predetermined token generation program providing means to the customer terminal possessing the predetermined financial transaction means. The method of claim 1, Information transmission for transmitting predetermined financial transaction processing history (or payment approval text) data corresponding to the financial transaction processing from a predetermined information transmission means to the financial transaction terminal (or a wireless terminal or a wired terminal owned by the financial transaction means). The financial transaction processing method, characterized in that further comprising the step. The method of claim 8, wherein the information transmitting step, The financial transaction processing (or payment approval) data is transmitted to the financial transaction terminal (or the financial transaction means-owned customer wireless terminal or wired terminal) via a predetermined relay server such as a VAN company server. How to process a transaction. The method of claim 1, Finance that stores predetermined financial transaction processing history (or payment approval) data corresponding to the financial transaction processing in a predetermined storage medium in association with the financial transaction information (and / or customer information) in a predetermined information storage means. Financial transaction processing method characterized in that it further comprises a transaction processing history storage step. According to claim 1, wherein the financial transaction authentication step, When the financial transaction information includes at least one or more authentication information (or secret code) associated with the financial transaction means, And incorporating the validity authentication of the authentication information (or secret code) into the validity authentication of the financial transaction. The method of claim 1, In the case of using the financial transaction means online, the financial transaction terminal (or the financial transaction means owned customer wireless terminal or wired terminal) further comprises the step of receiving predetermined financial transaction information from a server on the communication network How to deal with financial transactions. According to claim 1, wherein the financial transaction authentication step, A predetermined token authentication code corresponding to the received token code is referred to by referring to the token generation program information associated with the financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information). Generating and comparing the token code and the token authentication code to authenticate the validity of the token code. A recording medium comprising a program for executing the method of any one of claims 1 to 12. At least one financial transaction information and / or the financial transaction means-owned customer information (and / or customer-owned wireless terminal information) and predetermined token generation program information for the token generation program provided in the customer-owned terminal Information storage means for storing in a storage medium of the; When providing predetermined financial transaction information corresponding to the financial transaction using the financial transaction means of the customer owning the financial transaction means to the server on the communication network, the predetermined token code generated by the token generation program provided in the customer-owned terminal; A financial transaction terminal including in the financial transaction information or transmitting the token code separately from the financial transaction information; And A token generation program associated with the financial transaction means information corresponding to the financial transaction and / or the customer's own information (and / or customer-owned wireless terminal information) corresponding to the financial transaction in association with the storage medium (or the storage medium operation means); And verifying information, authenticating the validity of the token code using the token generation program information, and authenticating the validity of the financial transaction according to the validity authentication result of the token code. Financial transaction processing system. The method of claim 15, wherein the server, The financial transaction processing system according to the validity verification result, characterized in that for processing the financial transaction. The method of claim 15, And a financial transaction processing means for processing the financial transaction according to the validity authentication result of the server. The method of claim 15, wherein the financial transaction, A financial transaction processing system comprising an offline financial transaction and / or an online financial transaction. The method of claim 15, wherein the financial transaction, Payment transactions on-line and / or online, Account transfer financial transactions offline and / or online, Financial transaction processing system comprising at least one or more cash withdrawal financial transactions on the offline. The method of claim 15, wherein the financial transaction means, A financial transaction processing system comprising at least one of a financial account, a credit card, a debit card, a cash card, a check card, a prepaid card, and an electronic money. The method of claim 15, wherein the financial transaction terminal, And at least one payment terminal including the customer-owned wireless terminal or a wired terminal, a financial transaction automation processing device such as a CD / ATM, and a CAT terminal or a POS terminal. The method of claim 15, wherein the customer-owned terminal, Financial transaction processing system comprising a wireless terminal and / or a wired terminal. The method of claim 15, The financial transaction processing system further comprises a token generating program providing means for providing a predetermined token generating program to the customer terminal owning the predetermined financial transaction means. The method of claim 15, It further comprises information transmission means for transmitting a predetermined financial transaction processing history (or payment approval full text) data corresponding to the financial transaction processing to the financial transaction terminal (or a customer wireless terminal or wired terminal owned by the financial transaction means). Financial transaction processing system, characterized in that. The method of claim 24, wherein the information transmitting means, The financial transaction processing (or payment approval) data is transmitted to the financial transaction terminal (or the financial transaction means-owned customer wireless terminal or wired terminal) via a predetermined relay server such as a VAN company server. Transaction processing system. The method of claim 15, Further comprising information storage means for storing the predetermined financial transaction processing history (or payment approval professional) data corresponding to the financial transaction processing in a predetermined storage medium in association with the financial transaction means information (and / or customer information); Financial transaction processing system, characterized in that made. The method of claim 15, wherein the server, When the financial transaction information includes at least one or more authentication information (or secret code) associated with the financial transaction means, Financial transaction processing system, characterized in that to include the validity authentication of the authentication information (or secret code) in the validity of the financial transaction. The method of claim 15, wherein the financial transaction terminal, And when the financial transaction means is used on-line, receiving predetermined financial transaction information from a server on a communication network. The method of claim 15, wherein the server, A predetermined token authentication code corresponding to the received token code is referred to by referring to the token generation program information associated with the financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information). Generating and comparing the token code and the token authentication code to authenticate the validity of the token code. 27. The method of any one of claims 15 to 26, wherein each of the means is On a single server (or device), A financial transaction processing system, characterized in that provided in a plurality of servers (or devices). A predetermined token code generated by a token generation program provided in the customer-owned terminal is included in the predetermined financial transaction information corresponding to the financial transaction using the financial transaction means of the customer possessing the predetermined financial transaction means in the predetermined financial transaction terminal; Receiving unit for transmitting or receiving the token code when the token code is separated from the financial transaction information and transmitted directly, or through a predetermined server relay; The at least one financial transaction means information and / or the financial transaction means customer information (and / or customer-owned wireless terminal information) and predetermined token generation program information for the token generation program provided in the customer-owned terminal In connection with a predetermined storage medium (or storage medium operating means) for storing and managing, financial transaction means information corresponding to the financial transaction and / or customer information owned by the financial transaction means (and / or customer-owned wireless terminal information); An information confirmation unit confirming the associated token generation program information; And And an authentication unit for authenticating the validity of the token code by using the token generation program information and authenticating the validity of the financial transaction according to the validity authentication result of the token code. Device. The method of claim 31, wherein And a financial transaction processing unit for processing the financial transaction according to the validity verification result. The method of claim 31, wherein the financial transaction, A financial transaction processing apparatus comprising an online financial transaction and / or an online financial transaction. The method of claim 31, wherein the financial transaction, Payment transactions on-line and / or online, Account transfer financial transactions offline and / or online, Financial transaction processing apparatus comprising at least one or more cash withdrawal financial transactions on the offline. The method of claim 31, wherein the financial transaction means, A financial transaction processing apparatus comprising at least one financial account, a credit card, a debit card, a cash card, a check card, a prepaid card, and an electronic money. 32. The method of claim 31, wherein the financial transaction terminal, And at least one payment terminal including the customer-owned wireless terminal or wired terminal, a financial transaction automation processing device such as CD / ATM, and a CAT terminal or POS terminal. 32. The method of claim 31, wherein the customer-owned terminal, Financial transaction processing apparatus comprising a wireless terminal and / or a wired terminal. The method of claim 31, wherein And a token generation program providing unit for providing a predetermined token generation program to the customer terminal. The method of claim 31, wherein And an information transmitting unit for transmitting predetermined financial transaction processing details (or payment approval text) data corresponding to the financial transaction processing to the financial transaction terminal (or a wireless terminal or a wired terminal owned by the financial transaction means). Financial transaction processing apparatus, characterized in that. The method of claim 31, wherein And an information storage unit for storing predetermined financial transaction processing history (or payment approval) data corresponding to the financial transaction processing in a predetermined storage medium in association with the financial transaction means information (and / or customer information). Financial transaction processing apparatus, characterized in that. The method of claim 31, wherein the authentication unit, When the financial transaction information includes at least one or more authentication information (or secret code) associated with the financial transaction means, Financial transaction processing apparatus comprising the verification of the validity of the authentication information (or secret code) in the validity of the financial transaction. The method of claim 31, wherein the authentication unit, A predetermined token authentication code corresponding to the received token code with reference to the token generation program information associated with the financial transaction means information and / or the financial transaction means owned customer information (and / or customer-owned wireless terminal information). And generating a token and comparing the token code with a token authentication code to authenticate validity of the token code. 43. The apparatus according to any one of claims 31 to 42, wherein the financial transaction processing apparatus comprises: Consists of a single device (or server), or A financial transaction processing apparatus comprising a plurality of devices (or servers). 43. A recording medium, comprising: a program for executing a function of the apparatus component of any one of claims 31 to 42; A communication unit for processing predetermined data transmission and reception with a financial transaction processing means (or a financial transaction processing means associated device or server) on a communication network; And In the case of providing predetermined financial transaction information corresponding to the financial transaction using the financial transaction means of the financial transaction means owning customer to the financial transaction processing means (or financial transaction processing means linking device or server) through the communication unit, And a token code processor configured to include a predetermined token code generated by a token generation program provided in a terminal in the financial transaction information or transmit the token code separately from the financial transaction information. Financial transaction terminal device. A recording medium, comprising: a program for executing a function of the apparatus component of claim 45; A communication processor for receiving a predetermined token generation program in association with a server on a communication network; And Using the predetermined code (or pin number or password) input by the user through a predetermined key input unit, the token generation program is driven, and the token code generated by the token generation program is linked with a predetermined output unit. And a control unit for outputting or providing the generated token code to a predetermined terminal (or server) in cooperation with the communication processing unit. The method of claim 47, The communication processing unit, And receiving predetermined payment information from a server (or device) on a communication network. The terminal of claim 47, wherein the terminal device comprises: A terminal device comprising a wired terminal such as a mobile terminal, a PDA, a portable Internet phone, and at least one or more telematics, and / or a PC. 49. A recording medium comprising a program for executing a function of the device constituting part of any one of claims 47 to 48. A financial transaction instrument information data file that stores at least one financial transaction instrument information; A financial transaction means customer information data file that stores the financial transaction means customer information; And And a token generation program information data file provided to the financial transaction means owning customer terminal or storing predetermined token generation program information for a predetermined token generation program provided in the financial transaction means owning customer terminal. Characterized in that, At least one financial transaction means information data file, the financial transaction means customer information data file, and the token generating program information data file.

Images