KR100734724B1 - Wireless terminal and program recording media - Google Patents

Abstract

The present invention relates to a wireless terminal and a program recording medium, and the wireless terminal according to the present invention includes a predetermined wireless banking transaction interface screen for providing a wireless banking function and a one-time password for validating the wireless banking. A memory unit for storing predetermined screen output information including the wireless banking transaction interface coordinate information and the one-time password (OTP) generation interface coordinate information; and the wireless banking function. When the program for generating the one time password (OTP) is executed in a state in which a program for providing a program is executed, the wireless banking transaction interface coordinate information and the one time password (OTP) are referred to with reference to the screen output information stored in the memory unit. Check the generated interface coordinate information; By controlling the surface output unit, the wireless banking transaction interface screen is output to the wireless banking transaction interface coordinates, and the one-time password (OTP) generation interface screen to output the one-time password (OTP) generation interface screen, on a single screen The wireless banking transaction interface screen and the one-time password (OTP) generation interface screen includes a multi-screen processing unit for processing to output at the same time.

Description

Wireless terminal and program recording medium {Mobile Devices and Program Recording Medium}

1 is a diagram illustrating a wireless terminal function configuration for multi-screen processing according to an embodiment of the present invention.

2A and 2B illustrate exemplary information configurations of program information and screen output information included in a wireless terminal for multi-screen processing according to an embodiment of the present invention.

3 is a diagram illustrating a multi-screen processing screen of a wireless terminal according to an embodiment of the present invention.

4 is a diagram illustrating a multi-screen processing function of a wireless terminal according to an embodiment of the present invention.

5 is a diagram illustrating a multi-screen process of a wireless terminal according to a preferred embodiment of the present invention.

6 is a diagram illustrating a process of restoring a multi-screen of a wireless terminal according to a preferred embodiment of the present invention.

7 illustrates a configuration of a system for providing a predetermined OTP generation program to the customer wireless terminal according to an embodiment of the present invention.

8 is a diagram illustrating OTP generation program information to be provided to a wireless terminal according to an embodiment of the present invention.

9 is a diagram illustrating OTP generation program information to be provided to a wireless terminal according to another embodiment of the present invention.

FIG. 10 is a diagram illustrating an embodiment of providing and mounting an OTP generation program to a customer wireless terminal according to an embodiment of the present invention.

11A and 11B illustrate an information structure of OTP generation program information stored in the storage medium according to an embodiment of the present invention.

12 is a diagram illustrating an information configuration of wireless terminal information stored in the storage medium according to an embodiment of the present invention.

13 is a diagram illustrating an OTP code generation and output process according to an embodiment of the present invention.

14 is a diagram illustrating an OTP code generation and output process according to another exemplary embodiment of the present invention.

<Description of main parts of drawing>

100: wireless terminal 105: control unit

110: screen output unit 115: key input unit

120: sound processor 125: battery

130: wireless processing unit 135: short-range communication unit

140: short-range device 145: memory unit

150: IC chip reader 155: IC chip

160: camera unit 165: camera

170: multi-screen processing unit 175: multi-mode confirmation unit

180: banking processing unit 185: OTP processing unit

The present invention connects to a wireless communication network based on a code division multiple access (CDMA) stack, and selects one time password (OTP) during wireless banking based on WAP (Wireless Application Protocol) and / or wireless banking based on an integrated circuit (IC) chip. The present invention relates to a wireless terminal providing a multi-screen for use as a non-face-to-face authentication means of the wireless banking.

With the continuous development of information and communication technology, financial transactions based on conventional face-to-face transactions are developing into various types of non-face-to-face financial transactions based on ICT infrastructure and security functions. Representative security features that provide transactions include encryption / decryption of transaction data and / or digital signatures and One Time Password (OTP).

Unlike other security functions, OTP requires screen output of OTP code. Non-face-to-face financial transactions such as wireless banking based on WAP (Wireless Application Protocol) and / or wireless banking based on integrated circuit (IC) chip. In the case of having the OTP security function of the software method (for example, when a predetermined OTP generation program is mounted on the wireless terminal), the wireless banking interface screen and the OTP code output screen is separated due to the small screen size of the wireless terminal. It should be configured as a screen of and printed.

However, when the wireless banking interface screen and the OTP code output screen are configured as separate screens as described above, the financial transaction customer memorizes the OTP code output on the OTP code output screen, and switches to the wireless banking interface screen. The OTP code needs to be input. In this case, the financial transaction customer has to memorize the OTP code momentarily, and in the case of a time synchronization type OTP code, the OTP code input time exceeds the OTP code synchronization time. It contains a problem that can be invalidated.

An object of the present invention is to connect to a wireless communication network based on a Code Division Multiple Access (CDMA) stack, and select one of the wireless application protocol (WAP) based wireless banking and / or the integrated circuit (IC) chip based wireless banking. In order to use Time Password) as a non-face-to-face authentication means of the wireless banking, a wireless terminal providing a multi-screen is provided.

The wireless terminal according to the present invention includes a screen output unit for outputting a predetermined wireless banking transaction interface screen for providing a wireless banking function and a one time password (OTP) generation interface screen for validating the wireless banking; A memory unit for storing predetermined screen output information including the wireless banking transaction interface coordinate information and the one-time password generation interface coordinate information; And when the program for generating the one time password (OTP) is executed while the program providing the wireless banking function is executed and operated, referring to the screen output information stored in the memory unit, the wireless banking transaction interface coordinate information and the Confirm the one-time password (OTP) generation interface coordinate information, and control the screen output unit, the wireless banking transaction interface screen is output to the wireless banking transaction interface coordinates, the one-time password to the one-time password (OTP) generation interface coordinates And a multi-screen processor configured to output the OTP generation interface screen and simultaneously output the wireless banking transaction interface screen and the One Time Password (OTP) generation interface screen on a single screen. do.

According to the present invention, the screen output unit, the screen output means provided in the wireless terminal (Text Oriented Coordinate System), and / or Pixel Oriented Coordinate System, and / or inch unit (Inch A) a mapping mode of any one of a logical unit coordinate system including at least one coordinate system, a millimeter (mm) unit coordinate system, an isotropic coordinate system, and an anisotropic coordinate system; do.

According to the present invention, the wireless banking transaction interface coordinate information and / or the one-time password generation interface coordinate information may include a left-top coordinate value and a right-bottom corresponding to the text-based coordinate system. An upper left coordinate value and / or an upper left coordinate value and / or a lower left coordinate value corresponding to the pixel-based coordinate system and / or corresponding to the pixel-based coordinate system, and / or It characterized in that it comprises a, wherein the wireless banking transaction interface screen and the one-time password (OTP) generation interface screen characterized in that it comprises a coordinate value that does not overlap.

According to the present invention, the multi-screen processing unit scrolls the hidden area when a hidden area exists in the wireless banking transaction interface screen which is multi-processed and outputted through the one-time password generation (OTP) generation interface screen. And a multi-processing of the wireless banking transaction interface screen and the one time password generation (OTP) generation interface screen, and a caret corresponding to a key input device provided in the wireless terminal. (Caret) is assigned to the one-time password (OTP) input user interface of the wireless banking interface screen.

Meanwhile, the wireless terminal according to the present invention outputs a predetermined wireless banking transaction interface and a one time password (OTP) generation interface for authentication processing of the wireless banking transaction on separate screens on a single screen. Characterized in that.

On the other hand, the present invention includes a recording medium characterized by recording a program for executing the above-described wireless terminal function.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a functional configuration of a wireless terminal 100 for multi-screen processing according to an embodiment of the present invention.

In more detail, FIG. 1 shows that a wireless terminal 100 accessing a wireless communication network based on a code division multiple access (CDMA) stack has a wireless application protocol (WAP) based wireless banking and / or an integrated circuit (IC) chip based wireless banking. Of the preferred functional configuration of the wireless terminal 100 to provide a multi-screen in order to use a predetermined one time password (OTP) as a non-face-to-face authentication means of the wireless banking, the general knowledge in the art If the person having the present invention can be inferred from various implementation methods for providing a multi-screen for OTP processing during wireless banking with reference to FIG. 1, the present invention includes all the inferred implementation methods, as shown in FIG. It is not limited to the implementation method shown.

In terms of hardware, the wireless terminal 100 providing a CDMA stack based mobile communication service includes an external body, a speaker, a microphone, a keypad, a liquid crystal display (LCD), an antenna, a battery, and the like. Internally, a predetermined modem chip incorporating functions such as a code division multiple access (CDMA) modem, a central processing unit / micro processing unit (CPU / MPU), a vocoder, and the like (e.g., an MSM series modem chip from Qualcomm, USA) And various memory elements, a duplexer filter that separates transmission and reception signals from one antenna, a power amplifier for amplifying a transmission signal, a high power amplifier (HPA), and an isolator for preventing a high power transmission signal from being reversed. Isolator), RF / IF SAW filter for removing out-of-band unwanted signals, frequency up-circuit in transmission path, frequency down-conversion circuit in receive path, reference clock VCTCXO (Voltage Controlled Temperature Compensated X-tal Oscillator), UHF frequency synthesizer used as local signal of frequency up-down conversion, and codec chip for converting analog voice signal into digital signal. The internal components such as are gradually integrated in the modem chip, and in addition to the core components for the mobile communication service, the modem chip is integrated with various functions for various multimedia services and / or additional services. have.

Referring to FIG. 1, a wireless terminal 100 that provides a multi-screen for OTP processing during a predetermined wireless banking basically includes a control unit 105, a screen output unit 110, a key input unit 115, and a sound processing unit 120. ), A wireless processing unit 130, a short range communication unit 135, a memory unit 145, and a battery 125 for power supply, and according to an embodiment, a wireless terminal for wireless banking based on the IC chip 155. The IC chip 155 mounted on or detached from the 100 and the IC chip reader 150 for reading / writing predetermined information (or data) on the IC chip 155 and the wireless terminal 100 And a functional configuration including a detachable camera 165 and a camera unit 160 for reading predetermined image information from the camera 165.

The control unit 105 includes a CDMA stack-based modem chip (eg, MSM series) in hardware, and specifically includes a processor and an execution memory including a CPU / MPU included in the modem chip. A bus for inputting / outputting a predetermined program routine and / or program data for providing a function specific to the wireless terminal 100 from a predetermined memory element, and a predetermined electronic circuit (or integrated circuit) provided therefor. Program routines and / or program data which are loaded into the execution memory from a predetermined memory device and / or chipset by software and are processed by the processor to perform a specific function. Collectively (therefore, certain predetermined recordings on the recording medium of the wireless terminal 100 for multi-screen processing according to the present invention) A program routine is illustrated and illustrated as being provided in the control unit 105 for convenience.), And various functions to be implemented in the wireless terminal 100 are thereby realized by the control unit 105, and the same function as described above. It is characterized in that to control and manage the overall operation of the wireless terminal 100 to realize them.

In particular, when power is input to the wireless terminal 100 to perform a function of the control unit 105 for controlling and managing the overall operation of the wireless terminal 100, an operating system routine and a system stored in a predetermined memory device. Management routines and / or system variables are loaded into the execution memory and computed by the processor to serve as variables for providing an operating system, system management program, and / or mobile communication service.

The screen output unit 110 is a liquid crystal display (LCD) driver for outputting a screen, and a key input unit 115 by the control unit 105 (for example, a program routine for outputting predetermined information or data to the LCD). Key data generated through the &lt; RTI ID = 0.0 &gt;), and various kinds of information, signals, and / or content (e. G., Text content, image content, and And / or multimedia content) to a predetermined screen output device (eg, an LCD panel).

That is, the screen output unit 110 controls and processes the output of at least one or more information to be output to the screen output device while the wireless terminal 100 operates at least one function. To this end, the screen output unit 110 may be connected to an operating system and / or a wireless internet platform for interoperability (WIPI) platform provided in the wireless terminal 100 to determine the resolution of the screen output device provided in the wireless terminal 100. At least one coordinate system corresponding to a resolution may be operated.

When text-oriented information is output to the screen output device according to an embodiment of the present invention, the screen output unit 110 is associated with an operating system and / or WIPI platform provided in the wireless terminal 100. It is preferable to operate a text-oriented coordinate system (Text Oriented Coordinate System) corresponding to the font standard of the character, thereby at least one or more character data is output to the screen output device without clipping.

The character-based coordinate system is a mapping mode (for example, right-bottom) in which the left-top of the screen is the origin, the horizontal coordinate value increases in the right direction, and the vertical coordinate value increases in the downward direction. The coordinate value increases in a direction), the horizontal coordinate value is increased in units of the width (and / or left / right margins of the font) of the font, and the vertical coordinate value is the font. It is desirable to increase in units of Height (and / or the top and bottom margins of the font).

According to another exemplary embodiment of the present invention, when graphic-oriented information is output to the screen output device, the screen output unit 110 may include an operating system and / or a WIPI platform provided in the wireless terminal 100. It is preferable to operate a Pixel Oriented Coordinate System in conjunction, whereby at least one or more image data is effectively output to the screen output device.

Here, the pixel-based coordinate system includes a mapping mode in which the upper left corner of the screen is the origin, the horizontal coordinate value increases in the right direction, and the vertical coordinate value increases in the downward direction, and the horizontal coordinate value increases in units of pixels. In addition, the vertical coordinate value is preferably increased in units of pixels.

According to another exemplary embodiment of the present invention, when the graphic and / or vector drawing-oriented information is output to the screen output device, the screen output unit 110 is the wireless terminal 100. It is preferable to operate a Logical Unit Coordinate System in connection with an operating system and / or a WIPI platform provided in the present invention, whereby at least one or more image data is effectively output to the screen output device.

Here, the logical unit coordinate system preferably includes a mapping mode in which the origin and / or coordinate value increase direction of the coordinate system are logically defined.

For example, the logical unit coordinate system includes at least one of an inch coordinate system, a millimeter (mm) coordinate system, an isotropic coordinate system, and an anisotropic coordinate system.

The key input unit 115 is provided with at least one key button including a predetermined number key and / or a character key and / or a function key. Detects information (or signal) input from the keypad and detects a predetermined key button provided in the keypad in a specific input mode and / or operation mode of the wireless terminal 100 controlled by the controller 105. When predetermined information (or signal) is inputted from the controller, a key event (eg, MH_KEY_PRESSEVENT, MH_KEY_REPEATEVENT, MH_KEY_RELEASEEVENT) corresponding to the input information (or signal) is generated, and the generated key event is transmitted to the controller 105. The controller 105 reads predetermined key data corresponding to the key event in the current input mode and / or operation mode of the wireless terminal 100 (eg, each Read the key data from the key table from a key table that stores (manages) at least one key data corresponding to a specific key event in an input mode and / or an operation mode, and / or the key event. A command for executing a predetermined function that is matched and defined is read. The keypad including the key input unit 115 and at least one key button interlocks with each other to perform a function of key input means provided in the wireless terminal 100.

The sound processor 120 encodes a predetermined sound signal input from a microphone included in the wireless terminal 100 and provides the sound signal to the controller 105, or extracted and / or generated by the controller 105. It is characterized in that a predetermined sound signal is decoded and output through a speaker. To this end, the sound processor 120 includes a predetermined vocoder and a codec. The sound processing unit 120 performs a function of a sound input unit provided in the wireless terminal 100 through the microphone, or the sound output unit provided in the wireless terminal 100 through the sound processing unit 120 and a speaker. Perform the function of the means.

The wireless processor 130 may register a location and / or a slot mode and / or a power control in conjunction with the controller 105 (eg, a program routine for providing a mobile communication service). Or providing a mobile communication service including a hand-off and / or call processing procedure, the base station corresponding to an end of a wireless communication network in the process of providing the mobile communication service. RF processing functions (eg, antenna control, modulation, synthesis, amplification, and / or filtering of radio frequency signals) for performing transmission and reception of radio frequency signals are further included. In particular, the wireless processing unit 130 processes the information or signal transmitted from the wireless terminal 100 to the base station to provide a mobile communication service to the CDMA stack, or predetermined information from the CDMA stack received from the base station. Or it provides a function for reading the signal.

According to an embodiment of the present invention, the wireless terminal 100 connects a base station on a predetermined wireless communication network with a predetermined wireless section through the wireless processing unit 130, and through a predetermined wired section including the base station. It is preferable to connect a predetermined communication channel with a financial server (and / or banking server) provided on the wireless communication network and / or a predetermined communication network interworking with the wireless communication network.

The short range communication unit 135 may include infrared ray communication and / or radio frequency (RF) communication and / or Bluetooth and / or wireless LAN and / or Wi-Fi and ultra-wideband. A terminal (or device) and a short range wireless communication session are connected through at least one short range wireless communication means including an ultra wide band (UWB). The infrared communication, the RF communication, It includes a predetermined short range wireless communication module for short range wireless communication including Bluetooth, WLAN, Wi-Fi, and ultra-wideband communication, and includes a communication protocol and / or driver for the short range wireless communication in software.

According to an exemplary embodiment of the present invention, the wireless terminal 100 connects a wireless section connecting a predetermined short distance device and a predetermined short distance wireless communication session through the short distance communication 135, and the short distance device is connected. It is preferable to connect a predetermined communication channel with a financial server (and / or banking server) provided on a predetermined communication network through a wired section including a predetermined network.

The memory unit 145 enters and exits when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the wireless terminal 100 is performed. A general term for a memory device for storing information and / or data outputted therein, the read-only memory (ROM) corresponding to the read-only memory, the flash memory (FM) for reading / writing, and the electrically erasable and EEPROM. Programmable Read Only Memory). In general, the ROM stores system information that should not be deleted, and the flash memory includes an operating system routine, a call processing program routine, and / or an application program routine provided through the wireless terminal 100 and information or data therefor. The EEPROM stores a terminal registration related parameter and a telephone number (eg, an address book) or at least one or more information and / or data extracted and / or generated while executing an application provided in the wireless terminal 100. do.

According to an exemplary embodiment of the present invention, the memory unit 145 includes program information including at least two program couples corresponding to a multi-screen processing target according to the present invention, and at least two programs included in the program. In the case where the program is simultaneously executed and operated, the screen output information for multi-processing and outputting the program on the screen may be cooperatively stored and the program information and the screen output information may be stored in the memory unit 145. And may be provided in a function configuration unit that provides a multi-screen processing function according to the present invention.

According to an exemplary embodiment of the present invention, the program information corresponds to browser program information mounted on the wireless terminal 100 for WAP-based wireless banking, and non-face-to-face authentication means for WAP-based wireless banking using the browser program. It is preferable to include the OTP generating program information, and / or the predetermined banking program information mounted on the wireless terminal 100 for WAP-based wireless banking, and the ratio for WAP-based wireless banking using the banking program It is preferable to include OTP generation program information corresponding to the face-to-face authentication means.

The banking program may include a virtual machine provided to the wireless terminal 100 by a predetermined financial institution for the WAP-based wireless banking.

According to another exemplary embodiment of the present invention, the program information may include predetermined banking program information mounted in the wireless terminal 100 for wireless banking based on the IC chip 155 and the IC chip 155 using the banking program. It is preferable to include OTP generation program information corresponding to the non-face-to-face authentication means for wireless banking.

Here, the banking program may include a virtual machine provided by the predetermined financial institution for the wireless banking based on the IC chip 155 and mounted on the wireless terminal 100.

According to the exemplary embodiment of the present invention, the screen output information is displayed in the wireless terminal 100 when the browser program (and / or banking program) and the OTP generating program are simultaneously executed and operated. Outputting the OTP generating program so as not to overlap the browser program (and / or banking program) output information and the browser program (and / or banking program) output information for outputting the browser program (and / or banking program) on the screen; It is preferable to include the OTP generation program output information.

Here, the browser program (and / or banking program) output information includes coordinate information on which the browser program (and / or banking program) is output on the screen of the wireless terminal 100, and the OTP generation program output information is Preferably, the wireless terminal 100 includes coordinate information on which the OTP generation program is output.

According to the exemplary embodiment of the present invention, the screen output information is the wireless terminal 100 when the browser program (and / or banking program) and the OTP generating program are simultaneously executed and operated. OTP generating program output information for outputting the OTP generating program on the screen, and a browser program (and / or banking program) outputting the browser program (and / or banking program) so as not to overlap with the OTP generating program output information. It is preferable to comprise.

Here, the OTP generation program output information includes coordinate information on which the OTP generation program is output on the screen of the wireless terminal 100, and the browser program (and / or banking program) output information is the wireless terminal 100. The browser program (and / or banking program) is preferably included on the screen including coordinate information output.

The IC chip reader unit 150 has a functional configuration related to the IC chip 155 provided in the wireless terminal 100 through the IC chip 155 standard including ISO / IEC 7816 and / or ISO / IEC 14443. And information and / or data exchange between the IC chip 155 agent program provided in the wireless terminal 100 and the IC chip 155 mounted or detached from the wireless terminal 100. For example, the IC chip reader unit 150 provides information and / or data exchange between the IC chip 155 agent program and the IC chip 155 through an application protocol data unit (APDU).

The camera unit 160 reads raster-based CCD image information from a camera 165 including a predetermined optical unit and a charge coupled device (CCD) device in a bitmap manner, and controls the image information to the controller 105. It is characterized by inputting).

Referring to FIG. 1, the wireless terminal 100 refers to the program information stored in the memory unit 145 and at least two or more programs included in the program information are simultaneously executed and operated in the wireless terminal 100. If the multi-mode check unit 175 to check periodically (or in response to a program execution event) and at least two or more programs included in the program information are executed and operated simultaneously, the multi-mode check unit 175 The multi-screen processing unit 170 outputs the multi-processing through the screen output unit 110 so that at least two or more programs included in the program information do not overlap each other with reference to the screen output information.

The multi-mode checking unit 175 periodically (or at least two or more programs included in the program information are simultaneously executed and operated in the wireless terminal 100 with reference to the program information stored in the memory unit 145). In response to a program execution event), and when at least two programs included in the program information are simultaneously executed and operated, the screen output mode of the wireless terminal 100 is processed in a multi-screen mode. It is done.

According to an exemplary embodiment of the present invention, the multi-mode identification unit 175 is a non-face-to-face of the WAP-based wireless banking while a browser program (and / or banking program) for WAP-based wireless banking is executed and operating. It is desirable to periodically check whether a predetermined OTP generating program used as an authentication means is executed (or in response to a program execution event), and if the browser program (and / or banking program) for the WAP-based wireless banking is executed, When the OTP generating program is executed in the operating state, the multi-mode checking unit 175 multi-processes the browser program (and / or banking program) and the OTP generating program to the multi-screen processing unit 170. Through the screen output unit 110, it is preferable to process the output on the screen of the wireless terminal 100 at the same time. The.

At this time, the multi-mode confirmation unit 175 is provided in the wireless terminal 100 in the form of a RAM-resident program (RAM-resident program) to perform the WAP-based wireless banking periodically (or in response to a program execution event) It is preferable to check whether the OTP generation program is executed while the browser program (and / or banking program) is executed, and / or for the WAP-based wireless banking at a predetermined financial server (and / or banking server). The WAP-based wireless banking is provided in the form of a script included in a Wireless Markup Language (WML) and / or Hyper-Text Markup Language (HTML) -based document provided as a browser program periodically (or in response to an OTP generating program execution event). It is preferable to check whether the OTP generation program is executed while the browser program for the is executed, and / or It is provided in the form of an internal function provided in a banking program for WAP-based wireless banking and periodically (or in response to an OTP generation program execution event) while the banking program for the WAP-based wireless banking is executed. It is preferable to check whether the OTP generating program is executed.

According to another exemplary embodiment of the present invention, the multi-mode verification unit 175 is a state in which a banking program for the IC chip 155 based wireless banking is executed and operated. It is preferable to periodically check whether a predetermined OTP generation program used as a non-face-to-face authentication means is executed (or in response to a program execution event), and if the banking program for the IC chip 155 based wireless banking is executed and operated, When the OTP generating program is executed in the state, the multi-mode checking unit 175 multi-processes the banking program and the OTP generating program to the multi-screen processing unit 170 through the screen output unit 110. It is preferable to process the output on the screen of the wireless terminal 100 at the same time.

In this case, the multi-mode verification unit 175 is provided in the wireless terminal 100 in the form of a RAM resident program and periodically (or in response to a program execution event) banking for wireless banking based on the IC chip 155. It is preferable to check whether the OTP generation program is executed while the program is executed, and / or is provided in the form of an internal function provided in the banking program for the IC chip 155 based wireless banking periodically (or OTP generation). In response to a program execution event, it is preferable to check whether the OTP generation program is executed while the banking program for the IC chip 155 based wireless banking is executed.

In addition, the multi-mode check unit 175 periodically checks whether one of the at least two program functions that are multi-processed and output on the screen of the wireless terminal 100 by the multi-screen processing unit 170 is terminated ( Or in response to a program execution event), and when a program function of at least two or more programs is terminated, the screen output mode of the wireless terminal 100 is treated as a single screen mode. .

According to an embodiment of the present invention, the multi-mode verification unit 175 is a predetermined OTP used as a browser program (and / or banking program) for WAP-based wireless banking and non-face-to-face authentication means of the WAP-based wireless banking It is preferable to periodically check whether the function of the OTP generating program is terminated (or in response to a program function termination event) among the generating programs. If the function of the OTP generating program is terminated, the multi-mode checking unit 175 is The multi-screen processing unit 170 preferably processes the browser program (and / or banking program) to be output on the entire screen of the wireless terminal 100.

At this time, the multi-mode verification unit 175 is provided in the wireless terminal 100 in the form of a RAM resident program (or in response to a program function termination event) a browser program for the WAP-based wireless banking (and And / or a banking program) and an OTP generating program, it is preferable to confirm that the function of the OTP generating program is terminated, and / or provided to a browser program for the WAP-based wireless banking in a predetermined financial server (and / or banking server). A browser program (and / or banking program) and an OTP generating program for the WAP-based wireless banking are periodically provided (or in response to an OTP generating program termination event) provided in the form of a script included in a WML and / or HTML-based document. It is preferable to confirm that the function of the OTP generating program is terminated, and / or the WAP A browser program (and / or banking program) and an OTP generating program for the WAP-based wireless banking are provided in the form of an internal function provided in a banking program for semi-wireless banking periodically (or in response to an OTP generating program function termination event). It is preferable to confirm that the function of the OTP generation program is terminated.

According to another exemplary embodiment of the present invention, the multi-mode identification unit 175 is a banking program for IC chip 155 based wireless banking and a predetermined non-face-to-face authentication means for the IC chip 155 based wireless banking. It is preferable to periodically check whether the OTP generating program function is terminated (or in response to a program function termination event) among the OTP generating programs of the OTP generating program. If the function of the OTP generating program is terminated, the multi-mode checking unit 175 Preferably, the multi-screen processing unit 170 processes the banking program to be output on the entire screen of the wireless terminal 100.

At this time, the multi-mode check unit 175 is provided in the wireless terminal 100 in the form of a RAM resident program for periodically (or in response to a program function termination event) for the IC chip 155 based wireless banking It is preferable to check that the function of the OTP generating program is terminated among the banking program and the OTP generating program, and / or is provided in the form of an internal function provided in the banking program for the IC chip 155 based wireless banking periodically (or In response to an OTP generation program function termination event), it is preferable to confirm that the OTP generation program function among the banking program and the OTP generation program for the IC chip 155 based wireless banking is terminated.

The multi-screen processing unit 170 when the at least two programs included in the program information is executed at the same time as a result of the check by the multi-mode check unit 175, with reference to the screen output information processed in conjunction with the program information At least two or more programs included in the program information may be multi-processed and output through the screen output unit 110 so as not to overlap each other.

According to an exemplary embodiment of the present invention, the multi-mode verification unit 175 confirms that the browser program (and / or banking program) for WAP-based wireless banking and the predetermined non-face-to-face authentication means of the WAP-based wireless banking When the OTP generating program of the same time is executed, the multi-screen processing unit 170 is outputted to the browser program (and / or banking program) on the top of the screen of the wireless terminal 100 through the screen output unit 110 Preferably, the OTP generating program is output at the bottom of the screen of the wireless terminal 100 so as not to overlap the browser program (and / or banking program), or the multi-screen processing unit 170 outputs the screen. The OTP generating program is output to the top of the screen of the wireless terminal 100 through the unit 110, and the browser program (and / or banking program) is output. The multi-processing may be performed so as not to overlap with the OTP generating program, and outputted to the bottom of the screen of the wireless terminal 100.

At this time, a caret (and / or cursor) associated with the key input unit 115 is preferably assigned to an OTP input user interface of the browser program (and / or banking program). The user of the wireless terminal 100 may input a predetermined OTP code through an OTP input user interface of the browser program (and / or banking program) with reference to the predetermined OTP code output to the OTP generating program.

In the multi-processing and outputting of the browser program (and / or banking program) and the OTP generating program according to the embodiment, the multi-screen processing unit 170 is multi-processing browser program so as not to overlap with the OTP generating program ( And / or checking whether a hidden area exists in the banking program) screen, and if the hidden area exists, processing to scroll the hidden area for reference output. desirable.

In addition, in the embodiment, the browser program (and / or banking program) may be multi-processed and output so that the browser program (and / or banking program) does not overlap with the OTP generation program. Outputting so as not to overlap with the OTP input interface output region of the &lt;

According to an exemplary embodiment of the present invention, the multi-mode verification unit 175 confirms that the banking program for the IC chip 155 based wireless banking is used as a non-face-to-face authentication means for the IC chip 155 based wireless banking. When a predetermined OTP generating program is executed at the same time, the multi-screen processing unit 170 outputs the banking program to the top of the screen of the wireless terminal 100 through the screen output unit 110, and the OTP generating program is Preferably, the multi-screen processing unit 170 outputs the OTP generation program through the screen output unit 110 so as not to overlap with the banking program. 100) is output at the top of the screen, and the multi-processing so that the banking program does not overlap with the OTP generating program to output to the bottom of the screen of the wireless terminal (100) Is preferred.

At this time, the caret associated with the key input unit 115 is preferably assigned to the OTP input user interface of the banking program, whereby the user of the wireless terminal 100 is a predetermined OTP code output to the OTP generating program A predetermined OTP code can be input through the OTP input user interface of the banking program.

In the multi-processing and outputting of the banking program and the OTP generating program according to the embodiment, the multi-screen processing unit 170 whether there is a hidden area on the screen of the banking program that is multi-processed so as not to overlap with the OTP generating program. And if the hidden area exists, further comprising a function of scrolling the hidden area for reference output.

In addition, the multi-processing and outputting of the banking program so that the banking program does not overlap with the OTP generating program may include outputting the screen output area of the OTP generating program so as not to overlap with the OTP input interface output area of the banking program. It is done by

The multi-screen processing unit 170 is multi-processed corresponding to the program information as a result of the check by the multi-mode check unit 175 is terminated any program function of the program being simultaneously output on the screen of the wireless terminal 100 In this case, the remaining program other than the program whose function is confirmed to be terminated is output to the entire screen of the wireless terminal 100.

According to an embodiment of the present invention, a browser program (and / or banking program) for the WAP-based wireless banking and a predetermined OTP generation program used for non-face-to-face authentication of the WAP-based wireless banking are simultaneously executed. In the case where the multi-mode check unit 175 confirms that the function of the OTP generating program is terminated (eg, a predetermined OTP code is input to the OTP input user interface of the browser program (and / or banking program)), The multi-screen processing unit 170 preferably outputs the browser program (and / or banking program) to the entire area of the screen of the wireless terminal 100 through the screen output unit 110.

According to another exemplary embodiment of the present invention, a banking program for the IC chip 155 based wireless banking and a predetermined OTP generation program used as a non-face-to-face authentication means of the IC chip 155 based wireless banking are simultaneously executed. In the state, when the function of the OTP generating program is terminated (for example, a predetermined OTP code is input to the OTP input user interface of the banking program) as a result of the multi-mode checking unit 175, the multi-screen processing unit 170 It is preferable that the banking program is output to the entire area of the screen of the wireless terminal 100 through the screen output unit 110.

According to the present invention, the wireless terminal 100 includes a banking processor 180 corresponding to a browser program (and / or banking program) for WAP-based wireless banking included in the program information, and the ratio of the WAP-based wireless banking. An OTP processing unit 185 corresponding to a predetermined OTP generating program used as a face-to-face authentication means is provided.

In addition, the wireless terminal 100 is a non-face-to-face authentication of the banking processing unit 180 corresponding to the banking program for the IC chip 155 based wireless banking included in the program information, and the IC chip 155 based wireless banking An OTP processing unit 185 corresponding to a predetermined OTP generating program used as a means is provided.

Those skilled in the art, the browser program (and / or banking program) for the WAP-based wireless banking corresponding to the banking processing unit 180, and / or IC chip 155 based wireless Since you will be familiar with the detailed technical features of the banking program for banking, a detailed description thereof will be omitted for convenience, but a predetermined OTP generation program used as a non-face-to-face authentication means of the WAP-based wireless banking, and / or the A preferred embodiment of the OTP processing unit 185 corresponding to a predetermined OTP generation program used as a non-face-to-face authentication means of the IC chip 155 based wireless banking will be described in detail through the implementation method shown in Figs. .

2A and 2B illustrate exemplary information configurations of program information and screen output information included in the wireless terminal 100 for multi-screen processing according to an exemplary embodiment of the present invention.

2A and 2B illustrate a browser program and / or banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking in the wireless terminal 100 shown in FIG. 1 and the wireless banking. In order to simultaneously output the OTP generating program used as a non-face-to-face authentication means on the screen of the wireless terminal 100, the preferred information configuration for the program information and the screen output information provided in the wireless terminal 100, 2a shows program information for confirming that a browser program for WAP-based wireless banking and a predetermined OTP generating program used as a non-face-to-face authentication means of the WAP-based wireless banking are simultaneously executed, and the browser program and the OTP generating program are When executed at the same time, the browser program screen of the wireless terminal 100 Screen output information for outputting at the top and outputting the OTP generation program at the bottom of the screen of the wireless terminal 100 so as not to overlap with the browser program, Figure 2b is the IC chip 155 based wireless Program information for checking whether a banking program for banking and a predetermined OTP generating program used as a non-face-to-face authentication means of the IC chip 155 based wireless banking are executed simultaneously, and the banking program and the OTP generating program are simultaneously executed. In this case, screen output information for outputting the banking program at the top of the screen of the wireless terminal 100 and outputting the OTP generation program at the bottom of the screen of the wireless terminal 100 so as not to overlap with the banking program is illustrated. It is.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 2a and 2b to correspond to the resolution of the screen output device provided in each wireless terminal 100 according to the present invention. Various embodiments of the program information and the screen output information provided in the wireless terminal 100 for the multi-screen processing can be inferred, but the present invention includes both the inferred implementation method, this figure 2a and the figure It is not limited to the implementation method illustrated in 2b.

2A and 2B, the technical features of the present invention will be described by considering the resolution of the screen output device provided in the wireless terminal 100 as 100 * 120 pixels.

Referring to FIG. 2A, the program information includes browser program information provided in the wireless terminal 100 for the WAP-based wireless banking, and predetermined OTP generation program information used as a non-face-to-face authentication means of the WAP-based wireless banking. The multi-mode confirmation unit 175 included in the wireless terminal 100 periodically (or in response to a program execution event) refers to the program information to the wireless terminal 100 by the browser program. And OTP generator are run at the same time.

In addition, referring to FIG. 2A, the browser program and the OTP generating program are output based on a text-based coordinate system, wherein the text-based coordinate system has 20 columns in a horizontal direction (eg, English / number / symbol, etc.). Outputs one character in one column, and Hangul outputs one character in two columns) and 12 rows in the vertical direction (for example, the font unit is 10 pixels horizontally and vertically). 5 pixels), and when the browser program and the OTP generating program are executed and operated at the same time, the screen output information outputs the browser program from the first row to the tenth row in the text-based coordinate system, and generates the OTP. The program outputs lines 11 through 12 in the character-based coordinate system.

Referring to FIG. 2B, the program information may include banking program information provided in the wireless terminal 100 for the IC chip 155 based wireless banking and non-face-to-face authentication means of the IC chip 155 based wireless banking. It includes a predetermined OTP generating program information used, the multi-mode confirmation unit 175 provided in the wireless terminal 100 periodically (or in response to a program execution event) with reference to the program information to the wireless The terminal 100 checks whether the banking program and the OTP generating program are simultaneously executed and operated.

2B, the banking program and the OTP generating program are output based on a pixel-based coordinate system, wherein the pixel-based coordinate system includes 100 pixels in a horizontal direction and 120 pixels in a vertical direction. When the program and the OTP generating program are simultaneously executed and operated, the screen output information outputs the banking program from the upper left (0,0) coordinate value to the lower right (99,99) coordinate value in the pixel-based coordinate system. The OTP generation program outputs from the upper left (0,100) coordinate value to the lower right (99, 119) in the pixel-based coordinate system.

3 is a diagram illustrating a multi-screen processing screen of the wireless terminal 100 according to an embodiment of the present invention.

In more detail, FIG. 3 illustrates a non-face-to-face of a browser program and / or banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking in the wireless terminal 100 shown in FIG. The figure illustrates that the OTP generation program used as an authentication means is multi-processed and output on the screen of the wireless terminal 100. If a person having ordinary knowledge in the technical field to which the present invention pertains refers to FIG. Alternatively, the OTP generation program used as a browser program and / or banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking on the screen of the wireless terminal 100 and as a non-face-to-face authentication means of the wireless banking. It is possible to infer various implementation methods that are output by being multi-processed, but the present invention includes all the implementation methods that are inferred, and FIG. 3 It is not limited by.

Hereinafter, a browser program and / or banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking mounted in the wireless terminal 100 shown in FIG. 1 in FIG. 3 will be referred to as a "wireless banking program." "

3A illustrates an example in which the wireless banking program is output on the entire screen of the wireless terminal 100 before the wireless banking program executes the OTP generation program. Those skilled in the art will be aware that a predetermined wireless banking program is output on the entire screen of the wireless terminal 100 in response to WAP-based wireless banking and / or IC chip 155-based wireless banking. Detailed description thereof will be omitted for convenience.

3 (b) and (c) of FIG. 3 execute a predetermined OTP generation program provided in the wireless terminal 100 to generate a predetermined OTP code in the wireless banking program shown in FIG. In operation, the OTP generating program is executed while the wireless banking program is executed by referring to the program information shown in FIGS. 2A and / or 2B by the multi-mode confirmation unit 175 included in the wireless terminal 100. The multi-screen processing unit 170 multi-processes the wireless banking program and the OTP generating program by referring to the screen output information cooperatively processed with the program information shown in FIGS. 2A and / or 2B. This is an example.

Referring to (b) of FIG. 3, a caret of the wireless terminal 100 is assigned to an OTP code input user interface of the wireless banking program, whereby the user of the wireless terminal 100 enters into the OTP generating program. The predetermined OTP code generated by the program is input to the OTP code input user interface as shown in FIG.

3D illustrates that the function of the OTP generating program is terminated and the wireless banking program is output on the entire screen of the wireless terminal 100. If you have, you will be aware that a predetermined wireless banking program is output on the entire screen of the wireless terminal 100 in response to WAP-based wireless banking and / or IC chip (155) -based wireless banking, a detailed description thereof Is omitted for convenience.

4 is a diagram illustrating a multi-screen processing function of a wireless terminal 100 according to an embodiment of the present invention.

In more detail, FIG. 4 shows a browser for WAP-based wireless banking and / or IC chip 155-based wireless banking on the screen of the multi-processed wireless terminal 100 as shown in (b) and / or (c) of FIG. A program and / or a banking program and an OTP generating program used as a non-face-to-face authentication means of the wireless banking are illustrated as a multi-processing method, and a person skilled in the art to which the present invention pertains to FIG. Reference and / or modified to be used as a non-face-to-face authentication means of a browser program and / or banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking on the screen of the wireless terminal 100 and the wireless banking. The OTP generation program may be multi-processed to infer various implementation methods, but the present invention includes all of the inferred implementation methods, Not determined

Hereinafter, a browser program and / or a banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking mounted in the wireless terminal 100 shown in FIG. 1 will be referred to as "wireless banking program" in FIG. "

4A illustrates that the wireless banking program and the OTP generating program are multi-processed so as not to overlap each other including an independent display area, and FIG. 4B shows the OTP above the wireless banking program. It illustrates that the generated program is multi-processed so as not to overlap.

In the implementation method shown in (a) of FIG. 4, the coordinate values on the character-based coordinate system of the wireless banking program are the upper left (0,0) and the lower right (19,9), and the character-based of the OTP generating program. The coordinate values on the coordinate system are the upper left (0, 10) and the lower right (19, 11).

In addition, the coordinate values on the pixel-based coordinate system of the wireless banking program shown in FIG. 4A are upper left (0,0) and lower right (99,99), and coordinates on the character-based coordinate system of the OTP generating program. The values are top left (0,100) and bottom right (99,119).

In the method shown in (b) of FIG. 4, the coordinate values on the character-based coordinate system of the wireless banking program are the upper left (0,0) and the lower right (19,11), and the character-based of the OTP generating program. The coordinate values on the coordinate system are the upper left (0, 10) and the lower right (19, 11).

In addition, the coordinate values on the pixel-based coordinate system of the wireless banking program shown in (b) of FIG. 4 are the upper left (0,0) and the lower right (99,119), and the coordinate values on the character-based coordinate system of the OTP generating program. Are the upper left (0,100) and the lower right (99,119).

However, in the implementation method shown in (b) of FIG. 4, it is preferable that an X-order value is fixed so that the OTP generating program is output above the wireless banking program.

5 is a diagram illustrating a multi-screen processing process of the wireless terminal 100 according to a preferred embodiment of the present invention.

In more detail, FIG. 5 illustrates a wireless banking process using a browser program and / or a banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking in the wireless terminal 100 shown in FIG. When the OTP generating program used as the non-face-to-face authentication means of the wireless banking is executed, the browser program and / or the banking program and the OTP generating program are multi-processed and output on the screen of the wireless terminal 100. As shown in the drawings, those of ordinary skill in the art to which the present invention pertains may refer to, and / or modify, this W5 based wireless banking and / or IC chip 155 on the screen of the wireless terminal 100. Browser program and / or banking program for wireless banking based and OTP generation pro used as a non-face-to-face authentication means of the wireless banking Would be able to infer a variety of exemplary methods for the multiprocessing output the ram, the present invention includes all the embodiments in which the inference method, not limited by the figure 5.

For example, in FIG. 5, the screen corresponding to the browser program and / or banking program is multi-processed and output first, and then the screen corresponding to the OTP generating program is multi-processed and output. The multi-screen processing is not limited thereto, and the screen corresponding to the OTP generating program is multi-processed and output first, and then the screen corresponding to the browser program and / or banking program is multi-processed and output. Alternatively, the screen corresponding to the browser program and / or banking program and the screen corresponding to the OTP generating program may be multi-processed and output simultaneously.

Hereinafter, a browser program and / or a banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking mounted in the wireless terminal 100 shown in FIG. 1 will be referred to as "wireless banking program" in FIG. "

Referring to FIG. 5, the wireless terminal 100 executes a predetermined wireless banking program (and / or accesses a predetermined financial server (and / or banking server) in the case of WAP-based wireless banking) to the wireless banking program. In order to perform a corresponding wireless banking procedure (500), those of ordinary skill in the art will be familiar with each wireless banking procedure corresponding to the wireless banking program, so a detailed description thereof Is omitted for convenience.

While performing the wireless banking procedure, the wireless terminal 100 refers to predetermined program information and periodically (or responds to a program execution event) whether an OTP generation program for non-face-to-face authentication processing corresponding to the wireless banking procedure is executed. (505).

If it is confirmed that the OTP generation program is executed while the wireless banking program is executed in step 510, the wireless terminal 100 refers to the screen output information associated with the program information and displays the screen of the wireless terminal 100. Coordinate information to be output by multi-processing the wireless banking program on the screen and coordinate information to be output by multi-processing the OTP generation program so as not to overlap with the wireless banking program is checked (515).

Subsequently, when the wireless terminal 100 outputs the wireless banking program through the wireless banking program output coordinate information, the wireless terminal 100 checks whether a predetermined hidden area exists so that the scroll function of the wireless banking interface screen should be added. (520).

If there is no need to add a scroll function to the screen of the wireless banking interface because there is no hidden area in the process of outputting the wireless banking program through the wireless banking program output coordinate information (525), the wireless terminal 100 ) Generates a wireless banking interface screen corresponding to the output coordinate information of the wireless banking program (530), and outputs the wireless banking interface screen to the output coordinates of the wireless banking program as shown in (b) of FIG. (540).

On the other hand, if there is a hidden area in the process of outputting the wireless banking program through the wireless banking program output coordinate information, the scroll function should be added to the screen of the wireless banking interface (525). Create a wireless banking interface screen to which the scroll function for the hidden area of the wireless banking interface screen corresponding to the output coordinate information of the banking program is added (535), and the wireless banking interface screen as shown in (b) of FIG. The control unit outputs the output to the output coordinates of the wireless banking program (540).

Thereafter, the wireless terminal 100 generates an OTP generation interface screen corresponding to the OTP generation program output coordinate information (545), and generates the OTP interface program output coordinates as shown in (b) of FIG. Output to (550).

Since the wireless banking interface screen and the OTP generation interface screen are multi-processed and output on the screen of the wireless terminal 100 as described above, the wireless banking procedure as shown in (c) of FIG. 3 is performed.

6 is a diagram illustrating a process of restoring a multi-screen of the wireless terminal 100 according to a preferred embodiment of the present invention.

In more detail, FIG. 6 illustrates a WAP-based wireless banking and / or IC chip as shown in (b) of FIG. 3 by performing the multi-screen processing process as shown in FIG. 5 in the wireless terminal 100 shown in FIG. 155) After the browser program and / or banking program for the wireless banking based and the OTP generating program used as the non-face-to-face authentication means of the wireless banking are multi-processed and outputted, based on the multi-screen of FIG. When the function of the OTP generating program is terminated by performing the same predetermined wireless banking procedure, a preferred method of restoring the screen of the wireless terminal 100 as shown in (d) of FIG. 3 is shown. Those skilled in the art can refer to and / or modify this drawing to restore various screens of the screen of the wireless terminal 100 to the previous single screen. One embodiment may be inferred, but the present invention encompasses all of the inferred implementations, and is not limited by this figure.

Hereinafter, a browser program and / or a banking program for WAP-based wireless banking and / or IC chip 155-based wireless banking mounted in the wireless terminal 100 shown in FIG. 1 will be referred to as "wireless banking program" in FIG. "

Referring to FIG. 5, when the wireless terminal 100 performs a multi-screen processing process as shown in FIG. 5 and outputs a multi-processed wireless banking program and an OTP generating program as shown in (b) of FIG. The terminal 100 performs a predetermined wireless banking procedure as shown in (c) of FIG. 3 based on the multi-screen (600), while the wireless terminal 100 performs the OTP while performing the wireless banking procedure. Periodically (or in response to a program function end event), the function of the generating program is ended (605).

If it is confirmed that the function of the OTP generating program is terminated (for example, if "2. confirmation" is selected in (C) of FIG. 3), the wireless terminal 100 determines that the wireless banking program is 610. Generate a predetermined wireless banking interface screen for outputting the wireless interface screen corresponding to the full screen coordinates (614), the wireless banking interface screen as shown in (d) of Figure 3 full screen of the wireless terminal 100 By outputting (620), the entire screen before the multi-processed screen is output is restored.

Hereinafter, a description will be given of a preferred implementation method of the OTP generation program that is processed as a multi-screen on the wireless terminal 100.

7 illustrates a configuration of a system for providing a predetermined OTP generation program to the customer wireless terminal 100 according to an embodiment of the present invention.

In more detail, FIG. 7 provides and mounts a predetermined OTP generation program to a customer wireless terminal 100 having at least one financial means, and includes the at least one financial means information, wireless terminal 100 information, and wireless OTP. As a preferred embodiment of the OTP generation program providing system for storing information in a predetermined storage medium 760, it will be described easily to those skilled in the art as technical features of the present invention. 1 is provided with a financial means issuing server 700 for issuing a predetermined financial means to a predetermined customer by the OTP generating program providing system and providing a predetermined OTP generating program to the customer wireless terminal 100. The wireless OTP providing server 715, the wireless OTP information and the wireless terminal 100 information mounted in the customer wireless terminal 100, An information storage server 735 for storing at least one financial medium information issued to the customer in a predetermined storage medium 760 will be described.

However, technical features of the OTP generation program providing system are not limited to those shown in FIG. 7, and those skilled in the art to which the present invention pertains may refer to the financial means issuing server with reference to FIG. 7. 700 and the wireless OTP providing server 715 and the information storage server 735 is made of a single server, and / or easy to implement a variety of OTP generating program providing system consisting of at least two or more servers It can be inferred.

The financial means issuing server 700 is a financial account financial means, credit card financial means, debit card financial means, cash card financial means, check card financial means, prepaid card financial means, electronic money financial means A server provided in a bank and / or financial company for issuing at least one financial means to the customer. Referring to FIG. 7, the financial means issuing unit 705 issuing at least one financial means to the customer. And financial means information D / B 710 for storing in association with at least one financial means information issued to the customer and the customer information.

The financial means issuing unit 705 obtains predetermined customer information about the customer through a predetermined financial means issuing interface 750 and / or at least one to issue to the customer based on the obtained customer information. Generate the financial instrument information, store the financial instrument information in a DBMS provided in a predetermined financial system, and / or print the financial instrument information on a predetermined account book and / or a predetermined card medium (e.g., MS). Card and / or IC card) and / or wireless chip medium (eg, IC chip 155 mounted or detached from customer wireless terminal 100) and issuing.

According to an exemplary embodiment of the present invention, the method for acquiring customer information about the customer by the financial means issuing unit 705 may include receiving the customer information through a document including a predetermined customer information writing form, And a method of using the financial means issuing interface 750 which is obtained in an offline manner through an information input means (e.g., an information input terminal), and / or a predetermined customer terminal (e.g., Providing a predetermined customer information input interface to a customer-owned wired terminal and / or a customer-owned wireless terminal) and using the financial means issuing interface 750 for acquiring the customer information online through the customer information input interface. It is preferable to comprise.

In addition, the financial means issuing unit 705 reads the obtained customer information (for example, credit rating of the customer) to generate at least one or more financial means information to be issued to the customer, and the generated financial means information is predetermined. It is preferable to store the information in the DBMS provided in the financial system, and / or print the information on the financial means on a predetermined account book or store it on a predetermined card medium and / or a wireless chip medium to issue it to the customer.

When at least one financial means is issued to the customer as described above, the financial means issuing unit 705 links the customer information with at least one financial means information issued to the customer to the financial means information D / B 710. ).

Referring to FIG. 7, the wireless OTP providing server 715 includes an OTP generating program D / B 725 for storing at least one OTP generating program corresponding to at least one customer wireless terminal platform, and the OTP generating program D. And a program providing unit 720 which provides and mounts a predetermined OTP generating program stored in the / B 725 to the customer wireless terminal, and is provided by the program providing unit 720 to the customer wireless terminal. Preferably, the wireless OTP diagnosis unit further comprises a wireless OTP diagnosis unit for diagnosing the validity of the OTP generating program.

The OTP generating program D / B 725 stores at least one OTP generating program capable of operating in correspondence with a predetermined customer wireless terminal platform, and OTP generating program related information corresponding to the OTP generating program. A detailed description of the OTP generation program D / B 725 will be described with reference to FIGS. 8 and 9.

The program providing unit 720 extracts a predetermined OTP generating program corresponding to a platform provided in the customer wireless terminal 100 from the OTP generating program D / B 725, and / or generates at least one token. Dynamically generate a predetermined OTP generating program executable on the platform provided in the customer wireless terminal 100, including the information, and the OTP generating program and / or the OTP via a predetermined OTP generating program providing interface 755 At least one token generation information associated with a generation program is provided to the customer wireless terminal 100 and mounted.

In order for the program provider 720 to provide a predetermined OTP generation program to the customer wireless terminal 100, the wireless terminal 100 information is required, and the wireless terminal 100 information is the customer wireless terminal 100. It is provided by the subject requesting to provide and mount the OTP generating program.

According to one embodiment of the invention, the financial means issuing server 700 issuing at least one financial means to the customer, and / or after issuing at least one financial means to the customer, WAP-based Providing the OTP generating program to the customer wireless terminal 100 issuing the financial means to the wireless OTP providing server 715 for financial transactions based on wireless banking and / or IC chip (155) -based wireless banking The financial instrument issuing server 700 provides the wireless terminal 100 information included in the customer information to the program providing unit 720 of the wireless OTP providing server 715.

According to another embodiment of the present invention, the customer accesses the wireless OTP providing server 715 through a predetermined customer terminal (eg, a customer-owned wired terminal and / or a wireless terminal), and WAP-based wireless banking and / or Alternatively, the wireless terminal 100 may be provided to the wireless OTP providing server 715 for financial transactions based on IC chip 155 based on wireless banking.

When the information on the wireless terminal 100 provided with the OTP generation program is provided as described above, the program providing unit 720 identifies the platform of the customer wireless terminal 100 based on the information on the wireless terminal 100. do. For example, when the customer wireless terminal 100 is a mobile communication terminal connected to a predetermined mobile communication network, the program providing unit 720 is provided on the mobile communication network using the information of the wireless terminal 100. The wireless terminal platform may be identified with reference to / B (eg, Home Location Register (HLR) or Visitor Location Register (VLR)) (not shown).

When the customer wireless terminal 100 platform is identified as described above, the program provider 720 extracts a predetermined OTP generation program corresponding to the wireless terminal 100 platform from the OTP generation program D / B 725. And / or dynamically generate information including at least one token generation information.

In addition, the program provider 720 extracts at least one token generation information corresponding to the OTP generation program from the OTP generation program D / B 725, and extracts (and / or dynamically generates) OTP. The customer wireless terminal 100 through a predetermined OTP generation program providing interface 755 (eg, a wireless network to which the customer wireless terminal 100 is connected) in association with a generation program and / or the extracted at least one token generation information. By transmitting to the, the customer wireless terminal 100 is mounted on the OTP generating program.

According to one embodiment of the present invention, the OTP generation program is mounted on the IC chip 155 mounted on the customer wireless terminal 100 platform and / or mounted or detached from the wireless terminal 100. Anything is possible, and is not limited by this invention.

According to the present invention, the OTP generation program provided and mounted to the customer wireless terminal 100 includes at least one token code generation method of a time-synchro- ry and challenge-response method. The present invention is not limited by the token code generation method.

When the OTP generation program is mounted in the customer wireless terminal 100 as described above, the wireless OTP diagnosis unit diagnoses whether the OTP generation program mounted in the wireless terminal 100 operates normally in connection with the customer wireless terminal 100. Characterized in that.

According to one embodiment of the invention, the method for diagnosing the OTP generating program mounted on the customer wireless terminal 100, the OTP generating program mounted on the customer wireless terminal 100 is a predetermined diagnostic token code When the generated and provided to the wireless OTP diagnostic unit, by generating a predetermined diagnostic token authentication code corresponding to the received token code in the wireless OTP diagnostic unit, by comparing the received token code and the generated token authentication code, It is preferable to diagnose the validity of the OTP generating program mounted on the customer wireless terminal 100.

According to the present invention, the wireless OTP providing server 715 performs a function of a token generating program providing means for providing and mounting a predetermined OTP generating program to the customer wireless terminal 100.

When the predetermined OTP generation program is normally provided and mounted to the customer wireless terminal 100 as described above, the information storage server 735 may provide at least one financial means information issued to the customer by the financial means issuing server 700. And the predetermined wireless terminal 100 information on the customer wireless terminal 100 and the wireless OTP information mounted on the customer wireless terminal 100 are stored in a predetermined storage medium 760.

Referring to FIG. 7, the information storage server 735 may include at least one financial instrument information and / or customer information (eg, wireless terminal 100 information) issued to the customer from the financial instrument information D / B 710. An information extraction unit for extracting the wireless OTP information and / or the wireless terminal 100 information provided and mounted to the customer wireless terminal 100 from the OTP generation program D / B 725. 740 and the extracted at least one financial means information, the wireless terminal 100 information and the wireless OTP information provided to the customer wireless terminal 100 and stored in a predetermined storage medium 760. It characterized in that it comprises an information storage unit 745.

According to the present invention, the information storage server 735 may include at least one or more financial means information, the financial means-owned wireless terminal 100 information, and predetermined wireless OTP information about an OTP generating program included in the wireless terminal 100. It performs the function of information storage means for storing in a predetermined storage medium 760 in association with.

8 is a diagram illustrating OTP generation program information to be provided to the wireless terminal 100 according to an embodiment of the present invention.

In detail, FIG. 8 illustrates a predetermined OTP generation program for generating an OTP code of a time-synchoronous type, and the predetermined platform-specific platform corresponding to the platform of the wireless terminal 100 on which the OTP generation program is to be mounted. As an example of attribute information of an OTP generating program, the OTP generating program information includes an OTP generating program (or source code to be compiled into an OTP generating program) corresponding to each platform, and a version of the OTP generating program. And an OTP generation algorithm, at least one OTP generation information, and / or an OTP update period, which may further include at least one information item according to the intention of a person skilled in the art. It is by no means limited.

According to the present invention, the OTP generation program is mounted on the wireless terminal 100 owned by the customer to generate a predetermined OTP code, whereby the OTP generation program is the customer wireless terminal 100 platform It characterized in that it comprises a program code that can be driven and / or operated in. For example, if the wireless terminal 100 is equipped with a WIPI (Wireless Internet Platform for Interoperability) platform, the OTP generation program includes a program code that operates based on WIPI, and other platforms (eg, GVM / SK-VM). / BREW, etc.) is included, the program code running on the platform is included.

In FIG. 8, the OTP generation program is provided in the OTP generation program D / B in the form of a precompiled program, and / or stored in the OTP generation program D / B in the form of source code to be compiled. It is characterized by.

When the OTP generating program is provided in the OTP generating program D / B in the form of a pre-compiled program according to an embodiment of the present invention, the wireless OTP providing server 715 provides the wireless terminal with a predetermined wireless network. At the time of providing and mounting the OTP generating program at 100, at least one OTP generating information corresponding to the OTP generating program (eg, a secret key corresponding to a randomly generated number by the wireless OTP providing server 715) Value) is provided together with the wireless terminal 100 and stored in a predetermined storage device. The OTP is generated when the OTP generating program installed in the wireless terminal 100 generates a predetermined OTP code. The generated program may be a predetermined storage device (eg, the memory unit 145 of the wireless terminal 100 and / or the IC chip 155 mounted or detached from the wireless terminal 100). It is preferable to extract at least one OTP generation information from a memory)) and to generate a predetermined OTP code based on the OTP generation information.

According to another embodiment of the present invention, when the OTP generating program is stored in the OTP generating program D / B in the form of source code to be compiled, the wireless OTP providing server 715 sends the wireless terminal 100 to the wireless terminal 100. At the time of providing the OTP generating program, the OTP generating at least one OTP generating information corresponding to the OTP generating program (eg, a secret key value corresponding to a randomly generated number by the wireless OTP providing server 715). Substituting the OTP generation information variable included in the program source code, and compiling the OTP generation program source code in which at least one OTP generation information is assigned to a predetermined OTP generation information variable as described above to generate a predetermined OTP generation program The OTP generation program dynamically generated as described above is transferred to the wireless terminal 100 through a predetermined wireless network. It is preferable to provide and mount. When the OTP generation program mounted on the wireless terminal 100 generates a predetermined OTP code, the OTP generation program stores OTP generation information inserted into an internal variable of the OTP generation program. It is preferable to generate a predetermined OTP code based on the above.

According to another exemplary embodiment of the present invention, even when at least one OTP generation information is substituted into the OTP generation program as described above, the dynamically generated OTP generation program is provided to the wireless terminal 100 according to the intention of a person skilled in the art. At the time of mounting, at least one other OTP generation information is provided together with the wireless terminal 100 and stored in a predetermined storage device, and the OTP generating program mounted in the wireless terminal 100 is assigned a predetermined OTP code. At the time of generating the, it is possible to generate a predetermined OTP code using both the OTP generation information provided in the OTP generation program and the OTP generation information provided in the external storage device, thereby limiting the present invention. It doesn't work.

The version of the OTP generation program information includes version information of the OTP generation program for each platform to be provided to the wireless terminal 100.

According to the embodiment of the present invention, even if the same type of OTP generation program (eg, OTP generation program operating on the same platform), the type and / or version of the OTP generation algorithm applied according to the version of the OTP generation program may be different. As a result, since the OTP code generated by the OTP generating program will also be different, the version information provides information for accurately determining the OTP generating program mounted on the wireless terminal 100. OTP code authentication error that may occur in the process of authenticating a predetermined OTP code generated in the wireless terminal 100 by the version information of the OTP code agent program can be minimized.

The OTP generation algorithm of the OTP generation program information includes hashing algorithm information applied to the OTP generation program and / or detailed attribute information of the hashing algorithm.

Currently, the most commonly used hashing algorithms for generating OTP are MD4, MD5, SHA, and the like, and a hashing algorithm (for example, SHA1 hashing algorithm with SHA), which is modified from the hashing algorithm, is used according to an application field. .

The OTP generation information of the OTP generation program information is information for generating an OTP code of a time synchronous method. Referring to FIG. 8, the OTP code generation information first generates a time (or time) at which the OTP code is generated. Information, and a secret key value corresponding to a value randomly generated by the wireless OTP providing server 715 and / or a MIN / uniquely assigned to the wireless terminal 100 on which the OTP generating program is mounted. It is preferable to use ESN or the like as the second generation information and / or the third generation information.

Referring to an embodiment of the present invention, when the OTP generation program uses MIN / ESN of the wireless terminal 100 as OTP generation information for generating a predetermined OTP code, the MIN / ESN is used as the OTP generation information. In order to prevent the OTP generating program from overflowing in the process of generating the OTP code by using the MIN / ESN having an excessively large value, a predetermined hash is applied to the MIN / ESN. It is possible to apply a function and convert it to a value within a certain size, which is determined by the intention of the person skilled in the art and / or the computing power of the wireless platform.

The OTP update period of the OTP generation program information is a time interval in which a predetermined OTP code generated by the OTP generation program is volatilized and invalidated in time when the OTP generation algorithm follows a time synchronization scheme. In the process of transmitting the OTP code to the financial transaction server, it is difficult to transmit the time (or time) information generated by the OTP code together with the OTP code, between the wireless terminal 100 and the financial transaction server. It is used to synchronize the OTP generation time (or time) information of a certain time.

That is, the OTP code generated by the OTP generating program is transmitted to a predetermined financial transaction server within the OTP update period, and the predetermined OTP authentication code corresponding to the OTP code should be generated by the financial transaction server. That is, after a predetermined OTP code is generated in the OTP generation program included in the wireless terminal 100, the financial transaction server generates a predetermined OTP authentication code within the talk update period. This is certified.

Therefore, the OTP update period is the time required to provide the OTP code generated in the wireless terminal 100 to a predetermined wireless terminal 100, the time required to transmit the OTP code to the financial transaction server and The financial transaction server is preferably determined in consideration of the time required to generate a predetermined OTP authentication code.

According to another exemplary embodiment of the present invention, when the OTP generation algorithm follows a time synchronization scheme and it is easy to transmit time (or time) information in which the OTP code is generated in the OTP generation program to the financial transaction server, The OTP update period may be omitted or may be set at very short time intervals.

9 is a diagram illustrating OTP generation program information to be provided to the wireless terminal 100 according to another embodiment of the present invention.

In more detail, FIG. 9 illustrates a predetermined OTP generation program that generates a challenge-response type OTP code, and corresponds to each platform corresponding to the platform of the wireless terminal 100 on which the OTP generation program is to be mounted. As an example of attribute information of a predetermined OTP generating program, the OTP generating program information includes an OTP generating program (or source code to be compiled into an OTP generating program) corresponding to each platform, and the OTP generating program. It includes a version, an OTP generation algorithm, and at least one OTP generation information. At least one or more information items may be further included according to the intention of a person skilled in the art, and the present invention is not limited to the information items.

According to the present invention, the OTP generation program is mounted on the wireless terminal 100 owned by the customer to generate a predetermined OTP code, whereby the OTP generation program is the customer wireless terminal 100 platform It characterized in that it comprises a program code that can be driven and / or operated in.

For example, if the wireless terminal 100 is equipped with a WIPI (Wireless Internet Platform for Interoperability) platform, the OTP generation program includes a program code that operates on a WIPI-based, and other platforms (eg, GVM / SK- If VM / BREW is installed), it includes program code that runs on the platform.

In FIG. 9, the OTP generating program is provided in the OTP generating program D / B in the form of a precompiled program, and / or stored in the OTP generating program D / B in the form of source code to be compiled. It is characterized by.

According to an embodiment of the present invention, the OTP generation program is provided in the OTP generation program D / B in the form of a precompiled program, and the OTP generation program generates an OTP for generating the OTP code from a predetermined OTP authentication server. Characterized in that it receives a predetermined challenge value as information, the wireless OTP providing server 715 is preferably provided by providing the OTP generating program to the customer wireless terminal 100 via a predetermined wireless network, At the point in time when the OTP generation program mounted in the wireless terminal 100 generates a predetermined OTP code, the OTP generation program generates a predetermined OTP code based on a predetermined challenge value received from the OTP authentication server. It is preferable.

According to another embodiment of the present invention, when the OTP generating program is provided in the OTP generating program D / B in the form of a pre-compiled program, the wireless OTP providing server 715 provides the wireless terminal with a predetermined wireless network. At the time of providing and mounting the OTP generating program to 100, at least one OTP generating information corresponding to the OTP generating program (for example, corresponding to a number randomly generated by the wireless OTP providing server 715) A secret key value) is provided together with the wireless terminal 100 and stored in a predetermined storage device. At the time when the OTP generating program mounted in the wireless terminal 100 generates a predetermined OTP code, The OTP generating program may include a predetermined challenge value received from the OTP authentication server and a predetermined storage device (eg, a memory unit of the wireless terminal 100). 145, and / or a memory included in the IC chip 155 mounted on or detached from the wireless terminal 100) and extracts at least one OTP generation information, and generates a predetermined OTP code based on the OTP generation information. It is preferable to generate.

According to another embodiment of the present invention, when the OTP generating program is stored in the OTP generating program D / B in the form of source code to be compiled, the wireless OTP providing server 715 to the wireless terminal 100. At the time of providing the OTP generating program, at least one OTP generating information corresponding to the OTP generating program (for example, a secret key value corresponding to a randomly generated number by the wireless OTP providing server 715) is stored in the OTP. Substitute the OTP generation information variable included in the generation program source code, and generate the predetermined OTP generation program by compiling the OTP generation program source code in which at least one or more OTP generation information is assigned to the predetermined OTP generation information variable as described above. In addition, the wireless terminal 100 generates the OTP generating program dynamically generated as described above through a predetermined wireless network. It is preferable to provide and mount. When the OTP generating program mounted on the wireless terminal 100 generates a predetermined OTP code, the OTP generating program is connected to a predetermined challenge value received from the OTP authentication server. It is preferable to generate a predetermined OTP code based on the OTP generation information inserted into the OTP generation program internal variable.

According to another exemplary embodiment of the present invention, even when at least one OTP generation information is substituted into the OTP generation program as described above, the dynamically generated OTP generation program is provided to the wireless terminal 100 according to the intention of a person skilled in the art. At the time of mounting, at least one other OTP generation information is provided together with the wireless terminal 100 and stored in a predetermined storage device, and the OTP generating program mounted in the wireless terminal 100 is assigned a predetermined OTP code. At the time of generating the OTP generating program, the OTP generating program uses a predetermined challenge value received from the OTP authentication server, the OTP generating information provided in the corresponding OTP generating program, the OTP generating information provided in the external storage device, and the like. It is possible to generate a predetermined OTP code, whereby the present invention is not limited.

The version of the OTP generation program information includes version information of the OTP generation program for each platform to be provided to the wireless terminal 100.

According to the embodiment of the present invention, even if the same type of OTP generating program (for example, an OTP generating program running on the same platform), the type and / or version of the OTP generating algorithm applied according to the version of the OTP generating program is different. As a result, since the OTP code generated by the OTP generating program will also be different, the version information provides information for accurately determining the OTP generating program installed in the wireless terminal 100. OTP code authentication error that may occur in the process of authenticating a predetermined OTP code generated in the wireless terminal 100 by the version information of the OTP code agent program can be minimized.

The OTP generation algorithm of the OTP generation program information includes hashing algorithm information applied to the OTP generation program and / or detailed attribute information of the hashing algorithm. Currently, the most commonly used hashing algorithms for generating OTP include MD4, MD5, SHA, and the like, and a hashing algorithm (for example, SHA-1 hashing algorithm with SHA) is further modified according to an application. It is used.

The OTP generation information of the OTP generation program information is information for generating an OTP code of a time synchronous method. Referring to FIG. 9, the OTP code generation information is determined by the OTP generation program provided in the wireless terminal 100. At the time of generating the OTP code, a predetermined challenge value provided to the wireless terminal 100 through the OTP authentication server is used as first generation information, and randomly in the wireless OTP providing server 715 according to an implementation method. It is preferable to use, as second generation information and / or third generation information, a secret key value corresponding to the generated value and / or a MIN / ESN uniquely assigned to the wireless terminal 100 on which the OTP generating program is mounted. Do.

According to an embodiment of the present invention, the challenge value is an arbitrary value randomly generated by the OTP authentication server when the OTP generation program included in the wireless terminal 100 generates a predetermined OTP code. The OTP authentication server maintains the challenge value transmitted to the wireless terminal 100 until an OTP code (eg, a response corresponding to the challenge) generated based on the challenge value is received from the wireless terminal 100. Preferably, when the OTP code is received, it is preferable to generate a predetermined OTP authentication code based on the challenge value to authenticate the received OTP code.

Referring to an embodiment of the present invention, when the OTP generation program uses MIN / ESN of the wireless terminal 100 as OTP generation information for generating a predetermined OTP code, the MIN / ESN is used as the OTP generation information. In order to prevent the OTP generating program from overflowing in the process of generating the OTP code by using the MIN / ESN having an excessively large value, a predetermined hash is applied to the MIN / ESN. It is possible to apply a function and convert it to a value within a certain size, which is determined by the intention of the person skilled in the art and / or the computing power of the wireless platform.

FIG. 10 is a diagram illustrating an embodiment of providing and mounting an OTP generating program to a customer wireless terminal 100 according to an embodiment of the present invention.

More specifically, FIG. 10 illustrates a method for generating a predetermined OTP to the wireless terminal 100 to use the OTP code as a non-face-to-face authentication means in a predetermined WAP based wireless banking and / or IC chip 155 based wireless banking process. As a process for mounting, those of ordinary skill in the art to which the present invention pertains, a predetermined OTP generation program is mounted to the customer wireless terminal 100 in addition to the implementation method shown below with reference to FIG. It will be apparent that various embodiments of the present invention can be easily inferred, and the present invention is not limited by the present methods.

Referring to FIG. 10, an OTP generating program for using an OTP code as a non-face-to-face authentication means in a predetermined WAP-based wireless banking and / or IC chip 155-based wireless banking process is provided to the wireless OTP providing server 715. The predetermined wireless terminal 100 information (and / or customer information) to be provided is provided (1000).

According to an embodiment of the present invention, the process 1000 may include the information (and / or) of the predetermined wireless terminal 100 in which a predetermined OTP generating program is to be mounted from the predetermined financial means issuing server to the wireless OTP providing server 715. And / or the customer accesses the wireless OTP providing server 715 and / or the wireless terminal 100 information (and / or the wireless terminal 100) for the customer-owned wireless terminal 100. Customer information).

When the wireless terminal 100 information is provided as described above, the wireless OTP providing server 715 reads the wireless terminal 100 information (and / or customer information) and transmits the predetermined information to the customer wireless terminal 100. It is checked whether or not to provide an OTP generating program and to mount it (1005).

According to an exemplary embodiment of the present invention, when a valid OTP generating program is preloaded in the customer wireless terminal 100, the wireless OTP providing server 715 needs to mount an OTP generating program in the wireless terminal 100. If the wireless terminal 100 is not equipped with a valid OTP generating program, it is preferable to provide and mount the OTP generating program.

If the customer wireless terminal 100 needs to provide and mount a predetermined OTP generating program (1010), the wireless OTP providing server 715 reads the information of the wireless terminal 100 of the customer to read the customer wireless terminal ( In step 1015, the OTP generation program to be provided is checked.

According to an embodiment of the present invention, the wireless OTP providing server 715 is a subscriber D / B (eg, home location register or provided in the mobile communication network, when the information of the wireless terminal 100 is connected to the mobile communication network); It is preferable to identify the OTP generation program to be provided to the customer wireless terminal 100 by checking the platform of the wireless terminal 100 with reference to the visited location register. Alternatively, in order to process the OTP generation program providing process irrespective of the mobile communication company according to the implementation method, the platform information (or the wireless terminal) of the wireless terminal 100 in the step of receiving the information of the wireless terminal 100 (1000). It may also be provided to further include (100 model information).

When the OTP generating program to be provided to the customer wireless terminal 100 is identified as described above, the wireless OTP providing server 715 extracts or compiles the identified OTP generating program from the OTP generating program D / B and dynamically compiles it. Generate and / or dynamically extract (eg, generate a random value) predetermined OTP generation information required for the OTP generating program to generate a predetermined OTP code from the OTP generating program D / B. (1020).

As described above, when a predetermined OTP generation program to be provided and mounted to the customer wireless terminal 100 and at least one OTP generation information corresponding to the OTP generation program are prepared, the wireless OTP providing server 715 is provided to the customer wireless terminal. The OTP generating program is provided and mounted at 100 (1025).

According to an embodiment of the present invention, the wireless OTP providing server 715 includes a predetermined wireless message (eg, CallbackURL) for providing the OTP generating program to the customer wireless terminal 100 (eg, a callback URL). A short message service (SMS), an enhanced message service (EMS), a multimedia messaging service (MMS), etc., and the wireless terminal 100 accesses the wireless OTP providing server 715 through the callback UEL. In this case, it is preferable to provide and mount the OTP generating program to the wireless terminal 100.

According to another exemplary embodiment of the present invention, the wireless OTP providing server 715 may use the customer through another kind of wireless software loading method that does not use the callback UEL according to the intention of the person skilled in the art and / or the policy of the wireless network operator. It is possible to provide and mount the OTP generating program to the wireless terminal 100, whereby the present invention is not limited.

After the predetermined OTP generating program is loaded into the customer wireless terminal 100 as described above, the customer wireless terminal 100 determines to execute a diagnostic mode for the mounted OTP generating program. When the diagnostic mode is executed (1030), the wireless terminal 100 executes the mounted OTP generating program to generate a predetermined diagnostic OTP code and transmits it to the wireless OTP providing server 715 (1035). The OTP providing server 715 generates a predetermined diagnostic OTP authentication code corresponding to the diagnostic OTP code (1040), and compares the diagnostic OTP code with the diagnostic OTP authentication code to install the OTP mounted in the customer wireless terminal 100. The validity of the generated program is checked (1045).

According to an embodiment of the present invention, the OTP generation program mounted in the customer wireless terminal 100 generates a predetermined OTP code in a time synchronous manner, and the OTP generation program is provided in the wireless terminal 100 for this purpose. It is preferable to extract the current time (or time) information from the internal timer, and generate the diagnostic OTP code using the extracted time (or time) information as predetermined OTP generation information for generating the diagnostic OTP code. Of course, according to the intention and / or implementation method of those skilled in the art, the OTP generation program provides at least one or more OTP generation information (for example, the OTP generation program in the wireless OTP providing server 715) from the storage provided in the wireless terminal 100. A secret key including a random value transmitted together with each other, and / or MIN / ESN information of the wireless terminal 100 stored in a number assignment module (NAM) of the wireless terminal 100). It is possible to generate diagnostic OTP codes.

The diagnostic OTP code generated as described above is provided to the wireless OTP providing server 715 through a predetermined wireless network, and the wireless OTP providing server 715 generates the diagnostic OTP code in the wireless terminal 100. Generates a predetermined diagnostic OTP authentication code including time (or time) information, and compares the received diagnostic OTP code and the generated diagnostic OTP authentication code, to the OTP generating program mounted on the wireless terminal 100 Check the validity.

According to another exemplary embodiment of the present invention, the OTP generation program installed in the customer wireless terminal 100 generates a predetermined OTP code in a challenge-response manner, and for this purpose, the wireless OTP providing server 715 provides a predetermined OTP code. A challenge value is generated and provided to the wireless terminal 100. The OTP generating program preferably generates a diagnostic OTP code using the provided challenge value as predetermined OTP generation information for generating a diagnostic OTP code. Of course, according to the intention and / or implementation method of those skilled in the art, the OTP generation program provides at least one or more OTP generation information (for example, the OTP generation program in the wireless OTP providing server 715) from the storage provided in the wireless terminal 100. A secret key including a random value transmitted together with the process, and / or MIN / ESN information of the wireless terminal 100 stored in the NAM of the wireless terminal 100) to generate the diagnostic OTP code. It is possible to do

The diagnostic OTP code generated as described above is provided to the wireless OTP providing server 715 through a predetermined wireless network, and the wireless OTP providing server 715 generates the diagnostic OTP code in the wireless terminal 100. Generates a predetermined diagnostic OTP authentication code including the challenge value used, and compares the received diagnostic OTP code and the generated diagnostic OTP authentication code, the validity of the OTP generating program mounted on the wireless terminal 100 Check.

If the OTP diagnostic OTP code and the diagnostic OTP authentication code do not match (1050), the wireless OTP providing server 715 requests retransmission of the OTP diagnostic OTP code to the wireless terminal 100 (1055). By repeating (1035 ~ 1045), the validity of the OTP generating program is confirmed.

On the other hand, if the validity of the OTP generating program is authenticated by matching the OTP diagnostic OTP code and the diagnostic OTP authentication code (1050), the information storage server is mounted on the wireless terminal 100 information and the customer wireless terminal 100. The OTP generation program information and / or the financial means information issued to the customer by the financial means issuing server are cooperatively stored and stored in the predetermined storage medium 760 (1060).

11A and 11B illustrate an information structure of OTP generation program information stored in the storage medium 760 according to an embodiment of the present invention.

11a and 11b show in detail the generation of OTP mounted on the wireless terminal 100 to use the OTP code as a non-face-to-face authentication means in a predetermined WAP-based wireless banking and / or IC chip 155-based wireless banking process. As a preferred information configuration of the OTP generation program information corresponding to the program, specifically, Fig. 11A illustrates a preferred information configuration of the OTP generation program information corresponding to the OTP generation program of the time synchronization method, and Fig. 11B is a challenge- The preferred information structure of the OTP generation program information corresponding to the response type OTP generation program is illustrated.

According to the exemplary embodiment of the present invention, the OTP generating program information is preferably linked to the wireless terminal 100 information on which the OTP generating program is mounted and / or the financial means information, and is stored in the storage medium 760. Each piece of information may be further added with at least one item of information according to the intention of the person skilled in the art of implementing the present invention, and the present invention is not limited thereto.

11A and 11B, the OTP generation program information confirms what kind of OTP generation program is mounted in the customer wireless terminal, and generates an OTP authentication code for authenticating the OTP code generated by the OTP generation program. The OTP generating program information includes platform information of a wireless terminal equipped with an OTP generating program, an OTP generating program version mounted on the platform, an OTP generating algorithm, and at least one OTP generating program. It includes information.

Referring to FIG. 11A according to an embodiment of the present invention, the OTP generation program information of the time synchronization method may further include a predetermined OTP update period in which time synchronization is maintained.

Referring to FIG. 11B according to another exemplary embodiment of the present invention, a challenge value (eg, first generation information of FIG. 11B) included in the OTP generation program information of the challenge-response method is the wireless terminal 100. Before the challenge value to be transmitted is generated, a null value is included. When a challenge value to be transmitted to the wireless terminal 100 is generated, the generated challenge value is substituted and the wireless terminal 100 is substituted. It is preferable to maintain the substituted challenge value until a predetermined OTP code (response) corresponding to the challenge value is received from an onboard OTP generating program, and authentication for the received OTP code is performed through the challenge value. After the procedure is performed (e.g., after an OTP authentication code corresponding to the received OTP code is generated via the maintained challenge value), the challenge of the OTP generation information It is preferable that the value (for example, the first generation information in Fig. 11B) again includes a null value.

The wireless terminal 100 information includes at least one wireless terminal 100 number information of a telephone number (MIN) and serial number (ESN) of the financial transaction customer owned wireless terminal equipped with the OTP generating program. In addition, the wireless terminal 100 may further include platform information, carrier information, terminal model information, and the like.

According to the exemplary embodiment of the present invention, the wireless terminal 100 information may be further added with at least one information item according to the intention of the person skilled in the art. For example, the wireless terminal 100 information may further include the IC chip 155 unique information (ICCHIP) (not shown) in the IC chip 155 mounted or detached from the wireless terminal, and / or If the wireless terminal is provided with a subscriber identity module (SIM), a universal identification module (UIM), or a universal subscriber identity module (USIM), the SIM information, UIM information, or USIM information may be further included.

12 is a diagram illustrating an information configuration of information of the wireless terminal 100 stored in the storage medium 760 according to an embodiment of the present invention.

More specifically, FIG. 12 is associated with the financial instrument information and / or token agent to use an OTP code as a non-face-to-face authentication means in a predetermined WAP based wireless banking and / or IC chip 155 based wireless banking process. Illustrating a preferred configuration of information of the wireless terminal 100 information associated with the information, each information stored in the storage medium 760 is further added to at least one item of information according to the intention of those skilled in the art of practicing the present invention It is possible that the present invention is not limited thereby.

Referring to FIG. 12, the wireless terminal 100 information includes at least one wireless terminal 100 number information of a telephone number MIN and a serial number ESN of a financial transaction customer-owned wireless terminal equipped with the token agent. Characterized in that it comprises, and may further include the platform information, the carrier information and the terminal model information for the wireless terminal 100.

According to the exemplary embodiment of the present invention, the wireless terminal 100 information may be further added with at least one information item according to the intention of the person skilled in the art. For example, the wireless terminal 100 information may further include the IC chip 155 unique information (ICCHIP) (not shown) in the IC chip 155 mounted or detached from the wireless terminal, and / or If the wireless terminal is provided with a subscriber identity module (SIM), a universal identification module (UIM), or a universal subscriber identity module (USIM), the SIM information, UIM information, or USIM information may be further included.

13 is a diagram illustrating an OTP code generation and output process according to an embodiment of the present invention.

In more detail, FIG. 13 illustrates the generation of a 10-digit OTP code in the OTP generation program included in the wireless terminal 100 and multi-processing the generated 10-digit OTP code on the screen of the wireless terminal 100. In the preferred embodiment of the present invention, for convenience, the OTP generating program receives an input unit 1360 for receiving at least one or more information (or data) for generating a predetermined OTP code, and at least one or more required for generating the predetermined OTP code. A reader 1365 for reading OTP generation information, a generator 1370 for generating a predetermined OTP code by applying the read OTP generation information to a predetermined OTP generation algorithm, and the generated OTP code. It is illustrated and described as having an output unit 1375 output to the screen of the wireless terminal 100.

Referring to FIG. 13, the reader 1365 is configured to read the internal resource of the wireless terminal 100 and / or the internal OTP generation program by a predetermined OTP code generation command inputted by the input unit 1360 of the OTP generation program. Code and / or at least one OTP code generation information defined to be used by the OTP generation program to generate a predetermined OTP code from a memory unit or the like provided in the memory unit 145 and / or the IC chip 155. Read (1), and provides the read at least one OTP generation information to the generation unit (1370) (2).

The generation unit 1370 generates an unpredictable predetermined OTP code by applying a hash algorithm for generating an OTP based on at least one OTP generation information provided from the reader 1365 (3), and outputting the OTP code. The unit 1375 multi-processes the generated OTP code on the screen of the wireless terminal 100 and outputs the result to the screen (4).

14 is a diagram illustrating an OTP code generation and output process according to another exemplary embodiment of the present invention.

In detail, FIG. 14 shows a 10-digit OTP code by receiving a predetermined challenge value from a predetermined OTP authentication server in the OTP generation program included in the wireless terminal 100, and generates the 10-digit OTP code. The present invention relates to a multi-processing method for outputting a screen to the wireless terminal 100. For convenience, the OTP generating program receives an input unit 1460 for receiving at least one or more information (or data) for generating a predetermined OTP code. A generation unit 1465 that reads at least one OTP generation information required to generate a predetermined OTP code, and generates the predetermined OTP code by applying the read OTP generation information to a predetermined OTP generation algorithm. A unit 1470 and an output unit 1475 for outputting the generated OTP code on the screen of the wireless terminal 100 are illustrated. The.

Referring to FIG. 14, the OTP authentication server extracts predetermined wireless terminal 100 information to transmit a predetermined challenge value from the storage medium 760 and transmits the predetermined wireless terminal 100 information to the OTP generating program included in the wireless terminal 100. Dynamically generates a predetermined challenge value, and transmits the generated challenge value to the wireless terminal 100 via a predetermined wireless network, and the generated to the wireless terminal 100 equipped with the OTP generating program as described above When the challenge value is transmitted, the authenticator temporarily stores the challenge value transmitted to the wireless terminal 100 in the storage medium 760.

Thereafter, the reading unit 1465 of the OTP generating program receives the predetermined challenge value transmitted from the OTP authentication server (1), and includes the received challenge value and the OTP generating program internal code and / or the Read (2) at least one OTP code generation information defined by the OTP generation program to be used to generate a predetermined OTP code from a memory unit 145 and / or a memory unit provided in the IC chip 155 (2) In operation 3, the read one or more OTP generation information is provided to the generation unit 1470.

The generation unit 1470 generates a predetermined unpredictable OTP code by applying a hash algorithm for generating an OTP based on at least one OTP generation information provided from the reader 1465 (4). The output unit 1475 multiplexes the generated OTP code on the wireless terminal excitation screen as shown in FIG.

According to the present invention, when the non-face-to-face financial transaction such as wireless application protocol (WAP) based wireless banking and / or integrated circuit (IC) chip based wireless banking is provided with the software-based OTP security function (for example, Multi-processing the wireless banking interface screen and the OTP code output screen including a user interface for inputting a predetermined OTP code among the wireless banking interface screens; By outputting, the financial transaction customer has the advantage of eliminating the inconvenience of memorizing the OTP code instantaneously, there is an advantage of processing the OTP code generation and output and OTP code input in one interface screen.

Claims (6)

In a wireless terminal, A screen output unit configured to output a predetermined wireless banking transaction interface screen for providing a wireless banking function and a one time password (OTP) generation interface screen for validating the wireless banking; A memory unit for storing predetermined screen output information including the wireless banking transaction interface coordinate information and the one-time password generation interface coordinate information; And When the program for generating the one time password (OTP) is executed while the program providing the wireless banking function is executed and operated, the wireless banking transaction interface coordinate information and the one time disposable service are referred to with reference to the screen output information stored in the memory unit. Confirming a password (OTP) generation interface coordinate information, and controls the screen output unit, the wireless banking transaction interface screen is output to the wireless banking transaction interface coordinates, the one-time password (OTP) generation interface coordinates And a multi-screen processing unit for processing the wireless banking transaction interface screen and the one-time password (One Time Password, OTP) generation interface screen to be simultaneously output on a single screen. Wireless terminal. According to claim 1, wherein the screen output unit, The screen output means provided in the wireless terminal may be a text-oriented coordinate system, a pixel-oriented coordinate system, an inch coordinate system, a millimeter-based coordinate system, or isotropic. Wireless terminal, characterized in that for operating in any one of the mapping mode of the logical unit Coordinate System (Logical Unit Coordinate System) including at least one coordinate system, anisotropic coordinate system. According to claim 1, The wireless banking transaction interface coordinate information or the one-time password (OTP) generation interface coordinate information, Or a left-top coordinate value and a right-bottom coordinate value corresponding to the character-based coordinate system, or Or a top left coordinate value and a bottom right coordinate value corresponding to the pixel-based coordinate system, or It characterized in that it comprises a left upper coordinate value and a lower right coordinate value corresponding to the logical unit coordinate system, The wireless terminal, characterized in that the wireless banking transaction interface screen and the one-time password (OTP) generation interface screen comprises a coordinate value that does not overlap. The method of claim 1, wherein the multi-screen processing unit, When a hidden area exists in the wireless banking transaction interface screen which is multi-processed and outputted through the one-time password generation interface screen, The hidden region is characterized in that the processing to the reference output through the scroll (Scroll) function, When the wireless banking transaction interface screen and the one-time password (OTP) generation interface screen is multi-processed and outputted, And assigning a caret corresponding to a key input device provided in the wireless terminal to a one-time password input user interface of the wireless banking interface screen. In a wireless terminal, A predetermined wireless banking transaction interface, A wireless terminal, characterized in that for outputting the one-time password (OTP) generation interface for authentication processing for the wireless banking transaction on a single screen, respectively in a separate window. A recording medium comprising a program for executing the wireless terminal function according to any one of claims 1 to 5.

Images