KR20110002968A - Method and system for providing financial trading service by using biometrics and portable memory unit therefor - Google Patents

Abstract

PURPOSE: A method and a system for providing a financial trading service using biometric authentication and a portable storage device therefor are provided to enable a user to store biometric information in a portable storage device with superior security, thereby enabling the user to conveniently perform biometric authentication. CONSTITUTION: Login is requested from a user terminal(140) to which a portable storage device(110) is connected. A financial transaction server requests real name authentication information to the user terminal. User information and biometric information are received from the user terminal. The financial transaction server requests the biometric information about a user to a biometric information management server(130). The financial transaction server authenticates the real name of the user.

Description

Method and system for providing financial transaction service using biometric authentication and portable storage device therefor {Method and System for Providing Financial Trading Service by Using Biometrics and Portable Memory Unit Therefor}

The present invention relates to a method and system for providing a financial transaction service using biometric authentication and a portable storage device therefor. More particularly, the present invention relates to a method and system for performing real name authentication using biometric authentication to provide a financial transaction service, and a portable storage device therefor.

Recently, as the use of the Internet online service increases, there is a problem of using the online service in a malicious manner by obtaining a real name authentication by stealing another person's name. In particular, through the real name verification process, which is under 14 years old, the illegal name is illegally joined to game sites or other adult sites, which causes social problems. Severe damages are often incurred, such as corrupting or conducting financial settlements in the names of others.

Therefore, the currently provided online service provides a service after authenticating the user's real name in various ways such as real name authentication using a public certificate or real name authentication using a mobile phone. However, such a conventional real name authentication method has a problem that it remains difficult to verify the identity by using the personal information of the subscriber, it is difficult to authenticate by authenticating whether the user is a real person.

In order to solve the above problems, the present invention has a main object to provide a secure financial transaction service by recognizing a user's biometrics and utilizing it for real name authentication.

In order to achieve the above object, the present invention, a biometric information recognizer for recognizing a user's living body to generate biometric information; A portable storage device for storing user information of a user and receiving and storing biometric information from a biometric information recognizer; A biometric information management server that receives user information and biometric information from a biometric information recognizer and stores and manages the user information and the biometric information in association with each other; A user terminal that receives and transmits user information and biometric information from a portable storage device upon receiving real name authentication information for a financial transaction service requiring login and real name authentication; And authenticating the user's real name using biometric information stored in a portable storage device received through a user terminal and biometric information received from a biometric information management server each time a real name authentication information for login and financial transaction service is requested. When the real name authentication is successful, the present invention provides a financial transaction service providing system comprising a financial transaction server which processes a login and financial transaction service and transmits a processing result to a user terminal.

In addition, according to another object of the present invention, a communication device for performing communication with an external device; And a program area for storing an electronic wallet program for authenticating a user's real name and performing a financial transaction, biometric information of a user's user information, biometric recognition of a user's biometrics, and financial transaction service information for a financial transaction service. A flash memory including a data area for storing data, an encryption processor for encrypting user information and biometric information, a data processor for managing various data, and a communication processor for communicating with an external device using a communicator. Including a smart card, the encryption processor provides a portable storage device for a financial transaction service, characterized in that the biometric information is encrypted differently according to the type of the recognized biometrics.

In addition, according to another object of the present invention, the financial transaction server login request step of receiving a login request from a user terminal connected to a portable storage device for storing user information and biometric information; A real name authentication information receiving step, wherein the financial transaction server requests the real name authentication information from the user terminal and receives user information and biometric information stored in the portable storage device from the user terminal; A biometric information receiving step, wherein the financial transaction server requests and receives biometric information about the user identified by the user information from the biometric information management server; A real name authentication step, wherein the financial transaction server authenticates the real name of the user using the biometric information received from the user terminal and the biometric information received from the biometric information management server; A financial transaction service request step of the financial transaction server requesting a financial transaction service from a user terminal to which a portable storage device is connected; A real name reauthentication step in which the financial transaction server performs the real name authentication information receiving step and the real name authentication step; And a financial transaction service processing step of the financial transaction server processing the financial transaction service and transmitting the processing result to the user terminal.

In addition, according to another object of the present invention, the financial transaction server login request step of receiving a login request from a user terminal connected to a portable storage device for storing user information and biometric information; A real name authentication information receiving step, wherein the financial transaction server requests the real name authentication information from the user terminal and receives user information and biometric information stored in the portable storage device from the user terminal; A real name authentication request step, wherein the financial transaction server delivers the user information and the biometric information transmitted from the user terminal to the biometric information management server and requests real name authentication for the user identified by the user information; A real name authentication step of the biometric information management server performing real name authentication for a user using biometric information and pre-stored biometric information transmitted from a financial transaction server and transmitting a result of performing the real name authentication to the financial transaction server; A financial transaction service request step of the financial transaction server requesting a financial transaction service from a user terminal to which a portable storage device is connected; A real name reauthentication step in which the financial transaction server and the biometric information management server perform the real name authentication information reception step and the real name authentication step; And a financial transaction service processing step of the financial transaction server processing the financial transaction service and transmitting the processing result to the user terminal.

As described above, according to the present invention, by authenticating the user's real name by using the user's biometric information, the reliability of the real name authentication can be further increased, and the user can secure the biometric information. Because it can be stored and carried in an excellent portable storage device, it is possible to easily perform biometric authentication anytime, anywhere to provide a secure financial transaction service.

Hereinafter, some embodiments of the present invention will be described in detail through exemplary drawings. In adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are assigned to the same components as much as possible even though they are shown in different drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

In addition, in describing the component of this invention, terms, such as 1st, 2nd, A, B, (a), (b), can be used. These terms are only for distinguishing the components from other components, and the nature, order or order of the components are not limited by the terms. If a component is described as being "connected", "coupled" or "connected" to another component, that component may be directly connected or connected to that other component, but there may be another configuration between each component. It is to be understood that the elements may be "connected", "coupled" or "connected".

In the embodiment of the present invention, the user information refers to information for identifying a user who uses a portable storage device, a user terminal, or the like to use a service requiring real name authentication. For example, a user's name, social security number, and address. , Personal information such as occupation, gender, credit rating, personal information, personal credit information, and the like. A service that requires real name authentication means a service provided to a user only when the real name of the user who uses the service for the protection of personal information or for the public benefit is provided. It may be a portal service provided only after logging in, or a service such as a public service or financial transaction service provided only after a membership, login, or real name verification is completed at a site operated by a public institution or a financial institution. In addition, the recognized living body refers to a part or all of the body of the person who can identify the characteristics of the user, and may be various bodies such as, for example, an iris, a fingerprint, a face, a hand, a vein, a voice, DNA, and the like.

1 is a block diagram schematically illustrating a system for providing a real name authentication service according to an embodiment of the present invention.

The system for providing a real name authentication service 100 according to an embodiment of the present invention may include a portable storage device 110, a biometric information recognizer 120, a biometric information management server 130, a user terminal 140, and a service server 150. It may be configured to include.

The portable storage device 110 stores user information of a user and is connected to the biometric information recognizer 120 to receive and store biometric information from the biometric information recognizer 120. The portable storage device 110 is connected to the user terminal 140 and connected to the user terminal ( When the user information and the biometric information are requested from the 140, the user information and the biometric information are transmitted to the user terminal 140. The portable storage device 110 may be implemented to be portable so that a user can easily carry and use the stored information by freely connecting to a computer provided at home, work, public institutions, financial institutions, etc., and an external storage medium such as a flash memory. It may be implemented as a portable storage medium, such as an electronic wallet device having an or an IC card having an integrated circuit (IC) chip, and is connected to an external device such as a biometric information recognizer 120, a user terminal 140, and the like. It can be equipped with a communication function to perform.

In addition, the portable storage device 110 may store device-specific information of the portable storage device 110, and when the device-specific information is requested together with the user information and the biometric information from the user terminal 140, the user information and the biometric Device-specific information may be transmitted to the user terminal 140 together with the information. Such device-specific information may be transmitted to the service server 150 by the user terminal 140 and used to authenticate the real name of the user in the service server 150. In addition, the device-specific information is information that is given when issuing the portable storage device 110, such as a model name, model number, manufacturing serial number, identification number of the portable storage device 110 (for example, electronic wallet identification number (WIN) : Wallet Identification Number)), may be stored in the portable storage device 110 is encrypted by the issuing organization issuing the portable storage device 110, it may be stored together with the server or service server 150 of the issuing authority. have.

In addition, when the portable storage device 110 is connected to the biometric information recognizer 120, the portable storage device 110 may authenticate the user using the biometric information recognizer 120 or the user terminal 140 connected to the portable storage device 110. For example, when the portable storage device 110 stores a personal identification number (PIN) and is connected to the biometric information recognizer 120, the portable storage device 110 may transmit the user information to the biometric information recognizer 120 or the user terminal 140. The user may be authenticated using the personal identification number and the previously stored personal identification number received from the biometric information recognizer 120 or the user terminal 140. However, the authentication of the user using the personal identification number is merely an example, and the user may be authenticated using various information such as device-specific information such as an electronic wallet identification number.

In addition, the portable storage device 110 may encrypt and store the biometric information received from the biometric information recognizer 120. The portable storage device 110 may encrypt the biometric information in a different manner according to the type of the recognized biometric. For example, the portable storage device 110 may use different encryption algorithms according to the type of biometric to be recognized, change the key value for encryption, or change the length of the biometric information value, thereby obtaining biometric information in different ways. It can be encrypted. For example, when the biometric of the recognized user is an iris, the encryption may be performed using a secret key encryption algorithm, or when the biometric of the recognized user is a fingerprint, it may be encrypted using a public key encryption algorithm. The encryption algorithm uses the same one for the case of the voice and the palm of the hand, and encrypts by using different encryption key values, and the bit of the biometric information stored for the case where the user's biometric is the face and the vein You can encrypt it by changing the value.

In addition, the portable storage device 110 may include a smart card with a built-in flash memory, but is not necessarily limited thereto and may include a flash memory and a smart card independently.

In addition, when the portable storage device 110 receives the user information and the biometric information from the user terminal 140, the portable storage device 110 authenticates the user using the user terminal 140, and then displays the user information and the biometric information in the user terminal 140. ) Can be sent. That is, when the user information and the biometric information are requested as the information for the real name authentication from the user terminal 140, the user is inputted using an input / output interface such as a touch screen, a liquid crystal screen, a monitor, a keyboard, and a mouse of the user terminal 140. The user information and the biometric information may be transmitted to the user terminal 140 only when the user is authenticated and the authentication is successful by receiving the information for authentication and comparing the previously stored information. To this end, the portable storage device 110 may store screen data for authenticating a user using the user terminal 140 and provide the same to the user terminal 140.

The biometric information recognizer 120 generates biometric information by recognizing a user's living body. The biometric information recognizer 120 includes a sensor for detecting a user's living body, a data storage and processor for generating biometric information by storing the detected user's biometric data, and storing the biometric information as needed, and a portable storage device. 110, a communicator for transmitting to an external device such as the biometric information management server 130 may be provided. The biometric information recognizer 120 may be stored in a government office such as a government office, a ward office, a city hall, or a financial institution such as a bank or a card company, and may be connected to the biometric information management server 130 through the Internet or an intranet. The user may conveniently visit the location where 120 is provided to recognize his / her living body and store biometric information.

The biometric information management server 130 receives user information and biometric information from the biometric information recognizer 120, stores and manages the user information and the biometric information in association with each other. The biometric information management server 130 may be implemented as a conventional network server that exists independently, but is not necessarily limited to the components or program modules provided in the biometric information recognizer 120 or the service server 150. Could be implemented.

In addition, the biometric information management server 130, like the above-described portable storage device 110, when storing the user information and biometric information received from the biometric information recognizer 120, may store the biometric information encrypted, The biometric information may be encrypted in different ways depending on the type of biometric to be recognized. Since the example of encrypting the biometric information in different ways according to the type of the living body has been described above, a detailed description thereof will be omitted. However, the biometric information management server 130 and the portable storage device 110 may encrypt the same biometrics in the same manner. Therefore, it is preferable that the portable storage device 110 and the biometric information management server 130 make an appointment in advance regarding the encryption method used according to the type of the living body.

The user terminal 140 connects to the service server 150 using wired or wireless Internet according to a user's operation, and receives user name and biometric information from the connected portable storage device 110 when real name authentication information is requested from the service server 150. The recognition information is received and transmitted to the service server 150. In this case, the user terminal 140 may request a service for which real name authentication is required from the service server 150 as needed, and may receive real name authentication information from the service server 150 accordingly, but separately from the service server 150. Without the procedure of requesting the service of the real name authentication information may be requested from the service server 150.

In addition, when the user terminal 140 receives the real name authentication information from the service server 150, the user terminal 140 may further receive device specific information together with user information and biometric information from the portable storage device 110, and in this case, the service The device 150 may further transmit device-specific information along with user information and biometric information as real name authentication information to the server 150.

The user terminal 140 may be a personal computer (PC), a notebook computer, a personal digital assistant (PDA), a portable multimedia player (PMP), or a PlayStation Portable (PSP). Information communication computers such as mobile phones, mobile communication terminals, card payment terminals, electronic cash registers, set-top boxes, cash dispensers, and ATMs. It may be a device such as an automated teller machine, a financial storage device such as a utility bill collector, and a communication device such as a communication modem for performing communication with various devices or wired / wireless communication networks, real name authentication and financial transaction service, and services requiring real name authentication. Memory for storing various programs and data for execution, and executing programs It means a variety of devices including a microprocessor and the like for operation and control.

The service server 150 requests real name authentication information from the user terminal 140 to receive user information and biometric information from the user terminal 140, and transmits the user information to the biometric information management server 130 for the user. The biometric information is requested and received from the biometric information management server 130, and the real name of the user is authenticated using the biometric information received from the user terminal 140 and the biometric information received from the biometric information management server 130. do. The service server 150 may be implemented as a general network server, and may include a database for storing user information, biometric information, service information on a service requiring a real name, and various information for providing a service. .

In addition, the service server 150 may receive device-specific information together with user information and biometric information as real name authentication information from the user terminal 140. In this case, the biometric information transmitted from the user terminal 140 is used. In addition to performing real name authentication of the user, the real name of the user may be additionally authenticated using device-specific information. In the case of further authenticating the real name of the user by using the device specific information, the service server 150 may store the device specific information transmitted from the user terminal 140 and the device specific information previously stored for the user identified by the user information. By comparing and determining the match, the real name of the user can be authenticated.

In addition, the service server 150 compares the biometric information received from the user terminal 140 with the biometric information received from the biometric information management server 130 and determines whether the real name authentication succeeds or fails according to whether or not they match. If the real name authentication is successful, the service request from the user terminal 140 may be processed and the processing result may be transmitted to the user terminal 140.

2 is a block diagram schematically illustrating a portable storage device according to an embodiment of the present invention.

The portable storage device 110 according to an embodiment of the present invention includes a program area 230 for storing an electronic wallet program 240 for authenticating a user's real name and a biometric in which user information of a user and a user's biometric are recognized. A flash memory 220 including a data area 260 for storing various data including information, an encryption processor 280 for encrypting user information and biometric information, a data processor 282 for managing various data, A smart card including a communication processor 284 for performing communication with an external device such as the biometric information recognizer 120, the user terminal 140, and a controller 290 for performing overall control using the communicator 292. 210 and a communicator 292 for communicating with an external device.

Hereinafter, although the flash memory 220 is shown and described as being embedded in the smart card, the flash memory 220 is not necessarily embedded in the smart card. In this case, the portable storage device 110 may include a smart card, a flash memory, and a communicator. The smart card does not have a built-in flash memory, but has a built-in memory, and the flash memory is configured independently of the smart card. Is connected with the smart card. That is, when the flash memory 220 is not embedded in the smart card 210, the portable storage device 110 uses an encryption processor for encrypting user information and biometric information, a data processor for managing various data, and a communicator. A smart card including a communication processor for performing communication with an external device and a controller for performing overall control, a program area for storing an electronic wallet program for authenticating a user's real name, and user information of a user and a user's biometrics The flash memory may include a flash memory including a data area for storing various types of data including the biometric information, and a communicator for communicating with an external device. The internal memory embedded in the smart card may store security related information such as a public certificate, user information, device specific information, basic financial information, and the like, and when the security related information is stored in the internal memory of the smart card, They may not be stored in flash memory.

Here, a smart card refers to a device that stores data or information and transmits the stored data or information to an external device through communication, or receives and stores data or information from an external device, and is not necessarily limited to a smart card. It may be implemented as a memory or a storage medium having a new function.

Here, the encryption processor 280 may encrypt the biometric information differently according to the recognized biometric type. Encoding biometric information in different ways according to the type of living body is described above with reference to FIG. 1, and thus a detailed description thereof will be omitted.

Also, the electronic wallet program 240 recognizes a computing environment of an external device such as the biometric information recognizer 120 and the user terminal 140 connected using the communicator 292, or the biometric information recognizer 120 or the user terminal ( When the external device such as the basic module 242 for authenticating a user and the biometric information recognizer 120 is connected to the external device such as the 140 and the user, the external storage such as the biometric information recognizer 120 is connected. Transmitting a program and / or screen data and user information for recognizing a user's living body to the device, and receiving biometric information from an external device such as the biometric information recognizer 120, encrypts and flashes using the encryption processor 280 When the biometric information is requested from an external device such as the biometric management module 254 and the user terminal 140 stored in the memory 220, the user information and the biometric information are received. A can comprise a name verification processing module (256) for transmitting to an external device, such as a user terminal 140.

Here, the biometric management module 254 causes the basic module 242 to communicate with the biometric information recognizer 120 and the user terminal 140 before an external device such as the biometric information recognizer 120 is connected or receives the biometric information. The same external device can be used to control the authentication of a user. In addition, when the real name authentication processing module 256 receives biometric information from an external device such as the user terminal 140, the real name authentication processing module 256 may control the basic module 242 to authenticate the user using the external device.

In addition, the electronic wallet program 240 is connected to the service server 150, such as a portal service server operating a portal site, a financial transaction server operated by various financial institutions or public institutions, etc., through the user terminal 140, and flash memory. By using the various information stored in the data area 260 of 220, the same portal service provided by a plurality of portal sites or similar services such as the same financial service provided by a plurality of financial institutions according to a user's command The same screens and input procedures should be used. To this end, communication with the service server 150 may use not only the existing Hyper Text Transfer Protocol (HTTP) method but also XML (eXtended Mark-up Language) or a newly defined standard full text.

In addition, the electronic wallet program 240 may use a control object for moving screens, icons, and menus for the user interface of the user terminal 140 from the data area 260 of the flash memory 220. have. Accordingly, the portable storage device 110 automatically or manually recognizes the connection to the user terminal 140 using the electronic wallet program 240, and accesses a wired / wireless communication network such as the Internet, such as a portal service or a financial transaction service. A control element for moving a screen or menu for processing a service requiring real name authentication or for querying stored information may be read and used in the data area 260.

To this end, the electronic wallet program 240 is an electronic wallet management module 244 for automatically checking and updating the version of the program, smart card management module 246 for controlling the operation of the smart card 210, flash memory ( Data processing module 248 that stores, inquires, and deletes various data stored in data area 260 of 220, personal information or financial information of users scattered in multiple portal sites or scattered in multiple financial institutions. The integrated financial management module 250 and the portable storage device 110, which provide comprehensive analysis and output, and provide various analysis such as statistical information such as usage frequency, amount, service type, etc. for each financial institution, include various types of user terminals 140. If you connect to an external device and use a variety of financial services, such as banking, stock trading, money trading, and e-commerce, Therefore, the user terminal 140 requests the financial transaction service to the financial transaction server using the financial transaction service information, and receives the processing result of processing the financial transaction service from the financial transaction server through the user terminal 140 to perform the financial transaction. It may further include one or more of the financial transaction processing module 252 for updating the service information.

In the data area 260 of the flash memory unit 220, the portable storage device 110 is connected to the user terminal 140 or the biometric information recognizer 120 to authenticate the user and recognize the living body and the user terminal ( In the case of providing various financial services by connecting to the financial transaction server through 140, various screen data 262 required for each financial transaction service, financial transaction data such as financial transaction details, processing results, and usage history logs 264. Computer-specific data 266 such as information for identifying various computer devices and input / output device information of each computer device, and user setting data 268 such as personal environment setting information and various custom contents, and user's biometrics Biometric data 270 such as biometric information generated by using the same, a portable storage device 110 such as an electronic wallet identification number and a personal identification number and / or Include authentication data 272 may be stored for authenticating a user. In addition, in the flash memory unit 220, the remaining area (memory) other than the program area 230 and the data area 260 may store various data (document, image / music / video file, etc.) for the user's convenience. .

Such a portable storage device 110 is implemented like a general USB memory stick and can be easily and conveniently carried by anyone. The portable storage device 110 can be mounted on most computers equipped with a USB port to communicate with a computer through a USB interface. Can be. Therefore, the communicator 292 is preferably implemented in the form of a USB terminal that supports a USB interface, but is not necessarily limited thereto, and various communication capable of communicating with the biometric information recognizer 120 and the user terminal 140. The wired / wireless communication device may be implemented as, for example, a serial port and a parallel communication port of a computer, or may be implemented as a short range wireless communication function such as Bluetooth, Zigbee, or the like.

In addition, as described above, the flash memory 220 includes a program area 230 and a data area 260. When the user terminal 140 is connected to the portable storage device 110, the portable storage device ( The flash memory 220 of the 110 may be recognized as an external disk that is an auxiliary memory. The flash memory 220 may store device unique information such as an electronic wallet identification number for identifying the portable storage device 110 and user information such as a personal identification number (PIN) for identifying a user. The unique information and the user information may be input and encrypted and stored only when the user visits an issuing institution such as a public institution or a financial institution for the first time to register or issue the portable storage device 110. If the flash memory 220 is not embedded in the smart card 210, the flash memory 220 may be encrypted and stored in the internal memory of the smart card 210.

Here, the electronic wallet identification number is an identification number for authenticating the portable storage device 110. When the user performs a service requiring real name authentication such as a portal service or a financial transaction service, the service server 150 or other portable storage device may be used. The electronic device may be used to authenticate the portable storage device 110 by comparing with the electronic wallet identification number registered and stored in the server managing the 110. In addition, the personal identification number may be used when the user connects the portable storage device 110 to the user terminal 140, when the user connects the portable storage device 110 to the biometric information recognizer 120, or when the user uses the user terminal ( When real name authentication is performed by requesting a service requiring real name authentication to the service server 150 using 140, the user who uses the portable storage device 110 may be used to authenticate whether the user is a legitimate user.

The portable storage device 110 accesses a server operated by various financial institutions, financial service agencies, and public institutions to receive the services provided by the server, and includes account information, card information, user certificates, and biometrics. Information and various passwords can be stored. Such information may be registered by being stored in the flash memory 220 or the internal memory of the smart card 210. In this case, the electronic wallet program 240 accesses the corresponding server using the stored information or performs a sequential financial transaction. Various services such as services can be handled automatically or manually.

3 is a flowchart illustrating a method for providing a real name authentication service according to an embodiment of the present invention.

A user visits a public institution, a financial institution, an electronic wallet issuing agency, etc. and receives a portable storage device. In this case, the user recognizes his / her own living body using the biometric information recognizer 120 provided in a public institution, a financial institution, an electronic wallet issuing agency, and the like, and the portable storage device in which the biometric information generated is stored along with the user information. Can be issued.

In addition, when a user has already received and used a portable storage device, a service user requiring real name authentication using biometric information may include a biometric information recognizer 120 such as a public institution, a financial institution, or an electronic wallet issuing agency. If the portable storage device 110 is connected to the biometric information recognizer 120 at step S302, the portable storage device 110 transmits previously stored user information to the biometric information recognizer 120 (S304). After performing the biometric information recognizer 120 recognizes the user's living body (S306).

Here, step S304 may be selectively performed according to an implementation manner. That is, the portable storage device 110 may not transmit the user information to the biometric information recognizer 120. In this case, the biometric information recognizer 120 may use the input / output device provided before the biometrics of the user. After receiving the information, it can recognize the living body. In operation S304, the portable storage device 110 may provide not only user information but also screen data for biometric recognition to the biometric information recognizer 120, and the biometric information recognizer 120 may include the portable storage device 110. By outputting a screen using screen data and the like provided by the user, the user may recognize the user's living body by making the user contact or approach the living body.

The biometric information recognizer 120 that has performed biometrics generates biometric information, which is information about the recognized user's biometric, and transmits the generated biometric information to the portable storage device 110 and the biometric information management server 130 (S310). In this case, when the biometric information recognizer 120 transmits the biometric information to the biometric information management server 130, the biometric information recognizer 120 transmits the user information together so that the biometric information management server 130 may identify the biometric information for the user identified by the user information. May be stored (ie, storing user information and biometric information in association with each other).

The portable storage device 110 receives and stores the biometric information from the biometric information recognizer 120 (S312), and the biometric information management server 130 also stores the biometric information in association with the user information (S314). In this case, the portable storage device 110 and the biometric information management server 130 may store the biometric information by encrypting the stored biometric information. As described above with reference to FIG. Can be encrypted. However, the portable storage device 110 and the biometric information management server 130 may encrypt the biometric information of the same user in the same manner.

Through this process, the biometric information may be stored in the portable storage device 110, and the user may receive a service requiring real name authentication by performing real name authentication using the biometric information stored in the portable storage device 110. Can be. Of course, as described above, even when the biometric information is stored when the portable storage device 110 is issued, the user performs real name authentication using the stored biometric information to provide a service requiring real name authentication. I can receive it.

To this end, when the user connects the portable storage device 110 to the user terminal 140 (S316) and operates the user terminal 140 to access the service server 150 through the wired or wireless Internet, the user terminal 140 Requests for a service requiring real name authentication to the service server 150 according to the user's operation (S318). Here, the service requiring real name authentication may be a direct service such as a search service or a financial transaction service, but may be a request such as membership registration or login required before requesting a direct service.

The service server 150, which has received a service request from the user terminal 140, transmits the real name authentication information to the user terminal 140 to authenticate whether the user who uses the user terminal 140 is a real name user who is provided with the service. Request (S320).

Meanwhile, in steps S318 and S320, when the user terminal 140 requests a service requiring real name authentication from the service server 150, the service server 150 requests the real name authentication information from the user terminal 140. As described above, even when the user terminal 140 does not request a service requiring real name authentication from the service server 150, the service server 150 may request real name authentication information from the user terminal 140. That is, the service server 150 may request real name authentication information from the user terminal 140 as needed regardless of the service request of the user terminal 140.

The user terminal 140, which has received the real name authentication information from the service server 150, requests the biometric information to be utilized as the real name authentication information to the connected portable storage device 110 (S322), and the portable storage device 110 The biometric information of the stored user is read and transmitted to the user terminal 140 (S324).

Meanwhile, although the portable storage device 110 and the user terminal 140 are illustrated and described as already connected in step S316, the portable storage device 110 does not necessarily need to be connected to the user terminal 140 in step S316. When the terminal 140 receives the real name authentication information from the service server 150, the terminal 140 may allow the user to connect the portable storage device 110 to the user terminal 140 on the provided screen. That is, the portable storage device 110 may be connected to the user terminal 140 before step S322.

In addition, when the service server 150 requests the real name authentication information to the user terminal 140 in step S320, the service server 150 may select one of a plurality of real name authentication methods, and the user terminal 140 may select a plurality of user terminals. Only when the biometric authentication is selected as one of the real name authentication methods, the biometric information may be requested to the portable storage device 110. Here, the plurality of real name authentication method may be a variety of real name authentication method that has been performed online, for example, real name authentication method using a public certificate, real name authentication method using a mobile phone, real name authentication method using a credit card or telephone And the like.

In addition, in step S322, the user terminal 140 may further request the device-specific information while requesting the biometric information utilized as the real name authentication information to the portable storage device 110, in this case, in step S324, the portable storage device 110 may transmit pre-stored device specific information to the user terminal 140 together with the biometric information.

The user terminal 140 receiving the biometric information of the user transmits the user information and the biometric information to the service server 150 as a response to the real name authentication information request (S326), and the service server 150 transmits the user terminal ( In order to perform the user's real name authentication using the biometric information received from 140, biometric information is requested to the biometric information management server 130 (S328), and the biometric information management server 130 is stored. The data is retrieved and biometric information about the requested user is transmitted to the service server 150 (S330).

Here, in step S320, the service server 150 selects one of a plurality of real name authentication methods, and thus biometric authentication is selected by the user, and the user terminal 140 receives biometric information from the portable storage device 110. If the user terminal 140 transmits user information and biometric information as a response to the real name authentication information request in step S326, the user terminal 140 may further transmit information indicating that real name authentication is selected.

Thereafter, the service server 150 performs real name authentication on the user by using the biometric information received from the user terminal 140 and the biometric information received from the biometric information management server 130 (S332). In this case, the service server 150 may perform real name authentication by comparing the biometric information received from the user terminal 140 with the biometric information received from the biometric information management server 130 and checking whether they match. The result of whether the real name authentication succeeds or fails may be transmitted to the user terminal 140.

In addition, the service server 150 may release encryption on the biometric information received from the user terminal 140 and the biometric information received from the biometric information management server 130. That is, since the biometric information received by the service server 150 from the user terminal 140 and the biometric information management server 130 is encrypted by the user terminal 140 and the biometric information management server 130, the encryption is performed. The real name of the user can be authenticated by releasing and comparing with each other. However, when performing the real name authentication of the user, the service server 150 does not necessarily need to release encryption of the biometric information to check whether it is matched, and to protect personal information and prevent hacking, It may be more desirable to authenticate the real name of the user by checking whether the biometric information matches.

In addition, when the user terminal 140 receives the device specific information together with the biometric information from the portable storage device 110 in step S324, in step S326, the user terminal 140 is not only user information and biometric information. The device specific information may be transmitted to the service server 150. In operation S332, the service server 150 not only authenticates the user's real name using the biometric information but also adds the user's real name using the device unique information. You can authenticate with In this case, steps S328 and S330 may be omitted, and the service server 150 compares the device-specific information previously stored with the device-specific information transmitted from the user terminal 140 to determine whether they match, thereby realizing the real name of the user. You can authenticate.

1 and 3, when the service server 150 receives user information and biometric information from the user terminal 140 (S326), the biometric information management server 130 requests biometric information about the user. Although (S328), receiving the biometric information about the user from the biometric information management server 130 (S330), but performing the real name authentication (S332), but as described above, the service server 150 is a real name authentication It is not necessary to be a subject of the biometric information management server 130, rather than the service server 150 may be a subject of real name authentication.

That is, when the service server 150 receives the user information and the biometric information from the user terminal 140 as in step S326, the service server 150 is delivered from the user terminal 140 to the biometric information management server 130 The user name and biometric information may be transmitted, and real name authentication may be requested for the user. In this case, the biometric information management server 130 may identify the user identified by the biometric information and the user information transmitted from the service server 140. By comparing the stored biometric information, the real name of the user may be authenticated, and the result of the real name authentication may be transmitted to the service server 150. The service server 150 may be configured to perform real name authentication transmitted from the biometric information management server 130. As a result, it may be determined whether to provide a service requiring real name authentication to the user terminal 140.

Meanwhile, the real name authentication has been described as all performed using biometric information. However, the present invention is not limited thereto, and real name authentication may be performed by combining real name authentication using biometric information and an existing online real name authentication method. . For example, real name authentication for login may be performed using an existing public certificate and real name authentication for a service may be performed using biometric information.

4 is a block diagram schematically illustrating a financial transaction service providing system according to an exemplary embodiment of the present invention.

Financial transaction service providing system 400 according to an embodiment of the present invention is the portable storage device 110, the biometric information recognizer (described above) in the real name authentication service providing system according to an embodiment of the present invention described above with reference to FIG. 120, a biometric information management server 130, and a user terminal 140, and may include a financial transaction server 410 instead of a service server 150. Since the portable storage device 110, the biometric information recognizer 120, the biometric information management server 130, and the user terminal 140 are the same as or similar to those described above with reference to FIGS. 1 to 3, detailed descriptions thereof will be omitted. A role different from the above-described role will be described together with the financial transaction service providing method to be described with reference to FIG. 5.

The financial transaction server 410 receives biometric information stored in the portable storage device 110 received through the user terminal 140 and biometric information received from the biometric information management server 150 whenever a login and financial transaction service is requested. The real name of the user is authenticated using the information, and if the real name is successfully authenticated, the login and financial transaction service are processed to transmit the processing result to the user terminal 140. The financial transaction server 410 may be implemented as a conventional network server. To this end, the user terminal 140 requests a financial transaction service that requires login and real name authentication to the financial transaction server 410, and receives the real name authentication information from the financial transaction server 410 from the portable storage device 110. The user information and the biometric information are received and transferred to the financial transaction server 410.

5A and 5B are flowcharts illustrating a method for providing a financial transaction service according to an embodiment of the present invention.

Steps S502 to S532 are the same as or similar to steps S302 to S332 described above with reference to FIG. 3, and thus a detailed description thereof will be omitted. However, in step S518, unlike step S318 described above with reference to FIG. 3, the user terminal 140 does not request a service requiring real name authentication to the financial transaction server 410, but requests membership registration or login.

The financial transaction server 410 performing real name authentication determines whether the authentication succeeds (S534). If the authentication fails, the financial transaction server 410 notifies the user terminal 140 of the login failure as a result of the real name authentication (S536). In the case of real name authentication, the user terminal 140 is notified of the login success (S538).

The user terminal 140 notified of the login failure may request to log in again by selecting the real name authentication in a different manner according to the user's selection, and the user terminal 140 notified of the successful login may request the financial transaction server according to the user's operation. In step 410, the financial transaction service is requested.

The financial transaction server 410 receiving the financial transaction service request the real name authentication information to the user terminal 140 (S542), and then the steps S549 to S554 are the same as the steps S322 to S332 described above with reference to FIG. Is performed similarly.

In step S554, the financial transaction server 410 that performs real name authentication determines whether the authentication is successful (S556). If the authentication fails, the financial transaction server 410 notifies the user of the financial transaction rejection (S558). The user terminal 140 is notified of the financial transaction approval (S558), and only if the authentication is successful, the financial transaction service requested from the user terminal 140 (S562), and the financial transaction processing result is the user terminal 140. To send.

Meanwhile, the real name authentication in step S332 and the real name authentication in step S554 are described as being performed using biometric information. However, the present invention is not limited thereto, and real name authentication using biometric information and existing online real name authentication are performed. It is also possible to perform real name authentication in combination of the methods. For example, real name authentication for login as in step S332 may be performed using an existing authorized certificate and real name authentication for financial transaction services as in step S554 may be performed using biometric information.

In addition, when the user terminal 140 receives the device specific information together with the biometric information from the portable storage device 110 in step S524, in step S526, the user terminal 140 is not only user information and biometric information. The device specific information may be transmitted to the financial transaction server 410. In operation S532, the financial transaction server 410 not only authenticates the user's real name using biometric information but also uses the device specific information to verify the user's real name. In addition, you can authenticate. In this case, the financial transaction server 410 may authenticate the real name of the user by comparing the device-specific information previously stored and the device-specific information transmitted from the user terminal 140 to determine a match.

In addition, when the financial transaction server 410 receives the user information and biometric information from the user terminal 140 (S526), the biometric information management server 130 requests biometric information for the user (S528). Although receiving the biometric information of the user from the biometric information management server 130 (S530), and performing the real name authentication (S532), but the financial transaction server 410 is sure that the subject of the real name authentication It is not required, and the biometric information management server 130 may be a subject of real name authentication, not the financial transaction server 410.

That is, when the financial transaction server 410 receives the user information and the biometric information from the user terminal 140 as in step S526, the financial transaction server 150 from the user terminal 140 to the biometric information management server 130 The user information and the biometric information may be transmitted while requesting real name authentication for the user. In this case, the biometric information management server 130 may be identified by the biometric information and the user information transmitted from the financial transaction server 410. By comparing the pre-stored biometric information for the user, the real name of the user can be authenticated, and the result of the real name authentication can be transmitted to the financial transaction server 410, and the financial transaction server 410 is provided from the biometric information management server 130. It may be determined whether the authentication of the step S534 is successful according to the result of the real name authentication delivered.

In this way, the biometric information management server 130 instead of the financial transaction server 410 may be applied as the subject of authentication in steps S550 to S556 as well. That is, when the financial transaction server 410 receives the user information and the biometric information from the user terminal 140 as in step S548, the financial transaction server 150 from the user terminal 140 to the biometric information management server 130. The user information and the biometric information may be transmitted while requesting real name authentication for the user. In this case, the biometric information management server 130 may be identified by the biometric information and the user information transmitted from the financial transaction server 410. By comparing the pre-stored biometric information for the user, the real name of the user can be authenticated, and the result of the real name authentication can be transmitted to the financial transaction server 410, and the financial transaction server 410 is provided from the biometric information management server 130. It may be determined whether the authentication of the step S556 is successful according to the result of the real name authentication delivered.

As described above, according to the real-name authentication service providing system and method and the financial transaction service providing system and method according to an embodiment of the present invention, real-name authentication performed online using a highly reliable biometrics In addition, since the user can easily carry the biometric information for biometrics to the portable storage device 110, a service requiring real name authentication can be provided through biometric authentication anytime, anywhere. In addition, the portable storage device according to an embodiment of the present invention, when connected to various computers, can recognize the computer and provide an interface for real name authentication service or financial transaction service to the computer, thereby enhancing user convenience. In addition, existing systems such as the biometric information recognizer 120 and the user terminal 140 may be utilized without greatly modifying or supplementing them. In addition, since the portable storage device 110 according to the embodiment of the present invention is excellent in security, it is possible to secure higher reliability of biometric authentication with high reliability.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. In other words, within the scope of the present invention, all of the components may be selectively operated in combination with one or more. In addition, although all of the components may be implemented in one independent hardware, each or all of the components may be selectively combined to perform some or all functions combined in one or a plurality of hardware. It may be implemented as a computer program having a. Codes and code segments constituting the computer program may be easily inferred by those skilled in the art. Such a computer program may be stored in a computer readable storage medium and read and executed by a computer, thereby implementing embodiments of the present invention. The storage medium of the computer program may include a magnetic recording medium, an optical recording medium, a carrier wave medium, and the like.

In addition, the terms "comprise", "comprise" or "having" described above mean that the corresponding component may be inherent unless specifically stated otherwise, and thus excludes other components. It should be construed that it may further include other components instead. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. Terms used generally, such as terms defined in a dictionary, should be interpreted to coincide with the contextual meaning of the related art, and shall not be interpreted in an ideal or excessively formal sense unless explicitly defined in the present invention.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

1 is a block diagram schematically illustrating a system for providing a real name authentication service according to an embodiment of the present invention;

2 is a block diagram schematically illustrating a portable storage device according to an embodiment of the present invention;

3 is a flowchart illustrating a method for providing a real name authentication service according to an embodiment of the present invention;

4 is a block diagram schematically showing a financial transaction service providing system according to an embodiment of the present invention;

5A and 5B are flowcharts illustrating a method for providing a financial transaction service according to an embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

110: portable storage device 120: biometric information recognizer

130: biometric information management server 140: user terminal

150: service server 410: financial transaction server

Claims (9)

A biometric information recognizer configured to recognize biometrics of a user and generate biometric information; A portable storage device storing user information of the user and receiving and storing the biometric information from the biometric information recognizer; A biometric information management server configured to receive the user information and the biometric information from the biometric information recognizer, store and manage the user information and the biometric information in association with each other; A user terminal that receives and transmits the user information and the biometric information from the portable storage device upon receiving real name authentication information for a financial transaction service requiring login and real name authentication; And The biometric information stored in the portable storage device received through the user terminal and the biometric information received from the biometric information management server each time the login and real name authentication information for the financial transaction service are requested. A financial transaction server that authenticates a real name and, upon successful authentication of the real name, processes the login and the financial transaction service and transmits a processing result to the user terminal. Financial transaction service providing system comprising a. The portable storage device of claim 1, wherein the portable storage device comprises: When connected to the biometric information recognizer, the financial transaction service providing system, characterized in that for authenticating the user using a user terminal connected to the biometric information recognizer or the portable storage device. The method of claim 1, wherein the portable storage device and the biometric information management server, The financial transaction service providing system, characterized in that for encrypting the biometric information according to the type of the recognized biometrics. The portable storage device of claim 1, wherein the portable storage device comprises: And receiving the biometric information from the user terminal, after authenticating the user by using the user terminal, and transmitting the user information and the biometric information to the user terminal. A communicator for communicating with an external device; And A program area for storing an electronic wallet program for authenticating a user's real name and performing a financial transaction, biometric information in which the user's user information and biometrics of the user are recognized, and financial transaction service information for a financial transaction service; A flash memory including a data area for storing various data, an encryption processor for encrypting the user information and the biometric information, a data processor for managing the various data, and a communication device to communicate with the external device. Smart card including a communication processor for Includes, The encryption processor is a portable storage device for a financial transaction service, characterized in that for encrypting the biometric information differently according to the type of the recognized biometrics. The method of claim 5, wherein the electronic wallet program, A basic module for recognizing a computing environment of an external device connected using the communication device or recognizing an electronic wallet device with the external device, and authenticating the user; When the external device is connected, at least one of a program and screen data for recognizing the user's living body and the user information is transmitted to the external device, and when the biometric information is received from the external device, the encryption processor is used. A biometric management module to encrypt and store in the flash memory; A real name authentication processing module configured to transmit the user information and the biometric information to the external device when the biometric information is requested from the external device; An integrated financial management module for comprehensively managing and outputting the user's personal information or financial information; And The user terminal requests the financial transaction service to the financial transaction server using the financial transaction service information, and receives a processing result of processing the financial transaction service from the financial transaction server through the user terminal to perform the financial transaction. Financial transaction processing module to update service information Portable storage device for a financial transaction service comprising a. A login request step in which the financial transaction server receives a login request from a user terminal to which a portable storage device storing user information and biometric information is connected; A real name authentication information receiving step, wherein the financial transaction server requests real name authentication information from the user terminal to receive the user information and the biometric information stored in the portable storage device from the user terminal; A biometric information receiving step, by the financial transaction server, requesting and receiving biometric information about a user identified by the user information from a biometric information management server; A real name authentication step in which the financial transaction server authenticates a real name of the user using biometric information received from the user terminal and biometric information received from the biometric information management server; A financial transaction service request step, wherein the financial transaction server receives a financial transaction service request from a user terminal to which the portable storage device is connected; A real name re-authentication step wherein the financial transaction server performs the real name authentication information receiving step to the real name authentication step; And A financial transaction service processing step of the financial transaction server processing the financial transaction service and transmitting a processing result to the user terminal; Financial transaction service providing method comprising a. The method of claim 7, wherein the method is The biometric information recognizer generates a biometric information by recognizing a living body of the user and transmits the biometric information to a portable storage device that stores the user information, and transmits the user information and the biometric information to the biometric information management server. Financial transaction service providing method further comprises the step of generating biometric information. A login request step in which the financial transaction server receives a login request from a user terminal to which a portable storage device storing user information and biometric information is connected; A real name authentication information receiving step, wherein the financial transaction server requests real name authentication information from the user terminal to receive the user information and the biometric information stored in the portable storage device from the user terminal; A real name authentication request step, wherein the financial transaction server transfers user information and biometric information transmitted from the user terminal to a biometric information management server and requests real name authentication for the user identified by the user information; A real name authentication step, wherein the biometric information management server performs real name authentication on the user by using biometric information and pre-stored biometric information transmitted from the financial transaction server and transmits a result of real name authentication to the financial transaction server; A financial transaction service request step, wherein the financial transaction server receives a financial transaction service request from a user terminal to which the portable storage device is connected; A real name reauthentication step in which the financial transaction server and the biometric information management server perform the real name authentication information receiving step and the real name authentication step; And A financial transaction service processing step of the financial transaction server processing the financial transaction service and transmitting a processing result to the user terminal; Financial transaction service providing method comprising a.

Images