KR101547730B1 - Apparatus and method for managing financial account having two or more secret numbers in an account - Google Patents

Abstract

The present invention is characterized in that a plurality of passwords are operated for one corporate financial account, a different transaction limit is set for the password, and a plurality of users have different usage rights for one account, A financial account management apparatus and method, wherein a financial account management apparatus confirms an account number, a password, a transaction type, and a transaction amount included in the received financial transaction request information, and then the password is stored in a main password And determines whether the transaction is possible or not by checking whether the transaction amount is within a transaction limit set according to the password.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a financial account management apparatus and method for managing two or more passwords for an account,

The present invention relates to a financial account management apparatus and method for managing two or more passwords, more particularly, to a system and method for managing a plurality of passwords for one corporate financial account, setting a different transaction limit for the password, The present invention relates to a financial account management apparatus and method for enabling a plurality of users to use an account with different use rights to an account of a financial account.

Business customers' passbooks are used by various persons such as representatives, accounting managers, accounting staff, and dealers such as account transfer and cash withdrawal from branches. The bank checks the passbook password with the passbook and the passbook seal (or the bankbook with the passbook seal stamped on the passbook seal), processes the cash withdrawal, account transfer, etc. with the amount desired by the customer. In other words, unlimited withdrawals are possible for customers possessing a bankbook, a passbook seal and a password.

On the other hand, in the case of corporations, the accounting manager or accounting officer who usually deals with bank transactions deals with the account book and bankbook seal of business accounts, and often knows the password. In this case, a large amount of withdrawal accidents caused by employees may occur.

In order to prevent this, the corporation restricts the withdrawal amount by using the bankbook of the bankbook with the bankbook seal instead of the bankbook seal. However, as the technology is developed, it is too easy to forge the seal. At present, the representatives of the company feel uneasy about the risk have.

In addition, when an employee who knows the password is left, there is a problem that it is troublesome to change the password of the business passbook in order to prepare for the unauthorized withdrawal of the business passbook.

It is an object of the present invention to provide a method for minimizing a large amount of illegal withdrawals by limiting a transaction limit for each password by setting a plurality of passwords for a company exclusive bankbook .

According to a first aspect of the present invention, there is provided a financial account management apparatus for managing one or more passwords for an account according to the present invention includes a communication interface unit for transmitting and receiving information to and from a terminal, A user information database unit in which passwords are stored in association with each other and in which the transaction limit for each password is stored; and a password and transaction limit information included in the financial transaction request information, when the financial transaction request information is received from the communication interface unit, An account management unit for inquiring through the database to confirm whether or not the transaction can be performed; and a transaction management unit for performing transaction processing requested from the financial transaction request information according to the transaction availability.

The user information database unit stores the nickname, the transaction limit, the use range, and the validity period for each password in association with each other.

The account management unit checks an account number, a password, a transaction type, and a transaction amount included in the received financial transaction request information, inquires the user information database to confirm whether the password is a password associated with the account number, And checking whether the transaction amount is equal to or less than the transaction limit of the password.

Wherein the at least one password is divided into a main password and a sub password, and the main password is unlimited in terms of transaction, and the alias, transaction limit, use range, and validity period of the common password can be registered, .

According to a second aspect of the present invention, there is provided a method of operating one or more passwords for an account by a financial account management apparatus according to the present invention includes: receiving financial transaction request information from a terminal; Confirming the account number, the password, the transaction type, and the transaction amount included in the request information and confirming whether the password is the main password or the sub-password associated with the account number; and if the password is the main password, Checking whether the transaction amount is less than the transaction limit of the password when the password is a sub-password, confirming whether or not the transaction is possible; and if it is determined that the transaction is possible, And processing the data.

And notifying the abnormal transaction to the number registered in advance without performing the transaction processing if it is determined that the transaction is not possible as a result of the confirmation.

If it is determined that the transaction is not possible as a result of the confirmation, and the password included in the financial transaction request information is a sub-password, the abnormal transaction is notified to the customer terminal associated with the main password.

According to the present invention, there is an effect that the risk of fraudulent transactions can be minimized by designating a transaction limit per passbook password.

A plurality of passwords are set for one bankbook, and a plurality of users or departments use the bankbooks so that the usage details for each user or each department can be visually confirmed through transaction details of the account.

FIG. 1 is a diagram schematically showing a configuration of a corporate financial account management service providing system according to an embodiment of the present invention.
2 is a diagram schematically illustrating a configuration of a financial server for providing a financial account management service according to an embodiment of the present invention.
FIG. 3 is a table showing a table storing passwords and detailed information for registered corporate financial accounts.
4 is a flowchart illustrating a method of providing a corporate financial account management service according to an exemplary embodiment of the present invention.
FIG. 5 is a flow chart illustrating in detail the method for confirming the availability of transactions in the step of FIG.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The configuration of the present invention and the operation and effect thereof will be clearly understood through the following detailed description. Before describing the present invention in detail, the same components are denoted by the same reference symbols as possible even if they are displayed on different drawings. In the case where it is judged that the gist of the present invention may be blurred to a known configuration, do.

FIG. 1 is a diagram schematically showing a configuration of a corporate financial account management service providing system according to an embodiment of the present invention.

The financial service service providing system according to the embodiment of the present invention can be realized by interconnecting the terminal 100 and the financial server 200 through a communication network.

The terminal 100 is a portable customer terminal, for example, a smart phone. The external terminal 100 may include a PC, a notebook PC, a tablet PC, and the like. In addition, the terminal 100 may include a PC, a notebook PC, a tablet PC, and the like as a staff terminal installed at a window.

When the terminal 100 is a customer terminal, an application capable of electronic financial transaction is installed in the terminal. Accordingly, the terminal 100 accesses the financial server 200 through this application and performs financial transactions online.

In particular, the terminal 100 according to the embodiment of the present invention performs an electronic financial transaction through an arbitrary password among a plurality of passwords registered in the financial server 200 before a financial transaction. At this time, different transaction limits are registered in advance according to the password. A plurality of passwords are divided into a main password and a sub password. The main password can be used by a person who has the right to set the transaction limit of the subvision number and the right to delete the common password and who has a high account usage right like the representative. Such a password registration can be performed by a representative directly by visiting a bank or a bank branch or by connecting through a web page, or can be performed directly through an application installed in the terminal 100. [

The financial server 200 according to the embodiment of the present invention performs validity authentication by comparing the input password and the pre-stored password when a password required for authentication in the electronic financial transaction is input from the terminal 100. [ If the authentication is successful, the transaction limit is confirmed and the financial service is processed and provided within the transaction limit.

The financial server 200 registers the fingerprint information of the customer in advance. That is, when a plurality of passwords are requested from the terminal 100, the terminal 100 is requested to enter a password and enter a transaction limit and a use range. The transaction limit means the limit amount that can be used in the transaction, and the scope of use refers to the scope of whether to provide the service through the password authentication to the financial service item requiring password authentication. For example, a representative password can be used for all items of financial services, but a general password can set a transaction restriction for a loan service and the like. On the other hand, it is possible to set a period during which the use of the password is valid for the general password. If the period ends, the password is deleted as long as there is no special extension request.

Further, the password may be a combination of general numbers, numbers, letters, symbols, and the like, and may also be set through biometrics, that is, fingerprints or the like.

The financial server 200 stores and manages information related to a password, a transaction limit, and a usage range inputted from the terminal 100, with the customer information. Accordingly, the financial server 200 can selectively provide a transaction limit and a usage guide screen according to a predetermined use range for each password.

FIG. 2 is a diagram schematically showing a configuration of a financial server for providing a corporate financial account management service according to an embodiment of the present invention.

The financial account management apparatus includes a control unit 210, a communication interface unit 220, an account management unit 230, and a transaction management unit 230. The financial account management apparatus includes a control unit 210, a communication interface unit 220, 240, and a user information database unit 250.

The communication interface unit 220 transmits and receives information to and from terminals and devices requesting a financial transaction to an enterprise financial account such as the terminal 100 or an ATM.

The account management unit 230 registers the password with respect to the corporate financial account stored in the user information database unit 250 in association with the user information database unit 250 stored in association with the issued corporate finance account, A plurality of use ranges for each password and a transaction limit are set, and management such as correction or deletion is performed. For example, if a password is set for a random password among a plurality of passwords, the password can be deleted from the database after the expiration of the expiration date, or the password can be changed after authenticating the user in response to a request for changing the password.

When the transaction management unit 240 receives the financial transaction request information from the terminal 100, the transaction management unit 240 requests the account management unit 230 to inquire the password included in the financial transaction request information to check the transaction limit and the usage range stored in association with the password Transactions are processed in the case of transaction requests within the scope of authority. Also, it is possible to stop the transaction with respect to the transaction request that is out of the transaction limit and the use range, and notify the representative terminal 100 that has been registered in advance of the abnormal transaction situation.

The control unit 210 controls the overall operation of each component of the financial server 200. In particular, upon receipt of the financial transaction request information through the communication interface unit 220, it is determined whether the transaction request of the financial transaction request information can be performed by interlocking the account management unit 230 and the user information database unit 250, If it is determined that the transaction can be performed, the transaction management unit 240 and the user information database unit 250 are interlocked to perform transaction processing according to the financial transaction request information.

As shown in FIG. 3, the user information database unit 250 stores a plurality of passwords corresponding to the enterprise financial accounts, and stores transaction limits, usage ranges, validity periods, and the like for each password. In addition, the user information database unit 250 can manage the use history of each password for the corporate financial account, and can set and manage the total sum limit for each password in addition to the one-day limit. For example, when the total amount of usage is set to a certain limit for a certain period, an alarm may be provided to the representative number when the cumulative amount of use for the corresponding password is the above limit, or the temporary transaction may be stopped for the concerned password. Suspension of temporary trading can be done after entering and confirming the representative's password.

In addition, although not shown, it may further include an ATM connection, and it may receive financial transaction request information through an ATM connection. In this case, the financial server 200 transmits the transaction result to the ATM device that has transmitted the financial transaction request information through the ATM connection unit. The control unit 210 of the financial server 200 may connect the account management unit 230 and the user information database unit 250 to the financial institution 200. In the case where the transaction type included in the financial transaction request information received through the ATM connection unit is withdrawal, It is determined whether or not the transaction request of the transaction request information can be performed. If it is determined that the transaction can be performed, the determination result is transmitted to the ATM device that transmitted the financial transaction request information through the ATM connection to permit or deny the withdrawal.

A table storing related information for a corporate financial account as shown in FIG. 3 is referred to as an account number related table for the sake of convenience.

In the account number association table, a plurality of passwords are stored in correspondence to one account number, and an alias, a transaction limit, a usage degree, and an expiration date can be stored for each password.

For example, three passwords can be assigned to one account number, and each nickname can be assigned to a representative, financial director, or accountant. In this case, it is convenient to set a transaction limit differently for the user corresponding to each password and use it.

As another example, a plurality of passwords may be assigned to one account number, and a user alias may be assigned to each department name for each password. In this case, it is convenient to check the usage history by department only by checking transaction history.

4 is a flowchart illustrating a method of providing a corporate financial account management service according to an exemplary embodiment of the present invention.

The financial transaction request information is received from the customer terminal or the employee terminal (S100). The financial transaction request information includes information such as an account number, a password, a transaction type, and a transaction amount, which are inputted by a customer through a customer terminal or an employee terminal for financial transactions.

The server confirms whether or not the transaction is possible by referring to the password (S110).

Checks the account number, the password, the transaction type, and the transaction amount included in the received financial transaction request information to determine whether the password is a representative password or a common password associated with the account number, and if the password is a representative password, If the password is the general password without confirming the limit, it is confirmed whether or not the transaction is possible by checking whether the transaction amount is the transaction limit linked with the password.

If it is determined that the transaction is not possible, the abnormal transaction attempt of the account is notified to the customer terminal registered in advance, for example, the representative terminal, and the transaction is stopped (S120, S130).

If it is determined that the password is valid, the financial transaction is processed according to the financial transaction request information, and the transaction processing history is notified to the customer terminal registered in advance after the financial transaction processing (S140, S150).

At this time, a plurality of customer terminals registered in advance may be used. For example, when the valid password is the common password, the transaction details can be notified to the customer terminal stored in association with the general password and the representative terminal.

In an embodiment of the present invention, the financial server receives the financial transaction request information from the terminal but may receive the transaction request information from the ATM. In this case, the process is the same as the above process.

5 is a flowchart illustrating in detail the method for password validation in step S110 of FIG.

The server refers to the account number association table (see FIG. 3) pre-stored in the user information database unit 250 for password validity verification.

In order to process the transaction, the server inquires whether the account number and the password included in the financial transaction request information are stored in the password storage table according to the account number, and confirms whether the received password is the account related password (S112). If it is determined that the password is the main password or the general password, it is determined that the transaction is possible without going through the next steps S114 and S116 because the main password is unlimited in the transaction limit and there is no restriction in the use area.

If it is determined in step S112 that the received password is an account related password, it is determined whether the transaction type is within the use range by checking the setting authority in the account number association table included in the financial transaction request information, If it is set or the validity period is set, it is checked whether the transaction date is within the validity period (S114).

If it is determined in step S114 that the received password has the setting authority, the transaction limit is confirmed (S116). More specifically, the transaction amount is determined by checking the transaction limit of the received password in the account number related table, and if the transaction amount is within the transaction limit, it is determined that the transaction is finally possible through the password. And then proceeds to the next step S140.

If it is determined in step S112, step S114, or step S116 that the inquiry is impossible or the password is not valid, the process proceeds to step S120.

The foregoing description is merely illustrative of the present invention, and various modifications may be made by those skilled in the art without departing from the spirit of the present invention. Accordingly, the embodiments disclosed in the specification of the present invention are not intended to limit the present invention. The scope of the present invention should be construed according to the following claims, and all the techniques within the scope of equivalents should be construed as being included in the scope of the present invention.

100: terminal
200: financial server
210:
220: Communication interface unit
230:
240: Transaction Manager
250: user information database unit

Claims (7)

A financial account management apparatus for managing two or more passwords for an account for providing an enterprise financial account management service,
A communication interface unit for transmitting and receiving information to and from the terminal;
A user information database unit in which one representative password and one or more general passwords are stored in association with the account number, and the nickname, transaction limit, use range, and validity period are stored in association with each other;
When receiving the financial transaction request information from the communication interface unit, confirms the password, the transaction type, and the transaction amount included in the financial transaction request information, inquires the user information database and stores the account number and password included in the financial transaction request information If the validity period of the password is set, checking whether the transaction date is within the valid period, judging whether the password is valid, checking whether the transaction type is within the usage range, Checking whether the transaction amount is less than or equal to the transaction limit associated with the password, and finally deleting the password when the expiration date set in the password ends;
A transaction management unit that performs transaction processing requested in the financial transaction request information according to whether or not the transaction can be performed,
Lt; / RTI >
The alias is a rank or department name, an alias is provided together with the transaction details,
The use range is a financial service item that can be provided through the password authentication,
Wherein the user corresponding to the general password other than the representative password is restricted in financial transactions based on the use range and the valid period. delete delete The method as claimed in claim 1, wherein the representative password is an unlimited transaction limit, and can register, modify and change the alias, transaction limit, use range, and validity period of the general password through the input of the representative password,
Wherein the account management unit does not check the expiration date of the password or the transaction limit of the password when the password included in the received financial transaction request information is the representative password, Account management device. delete delete delete

Images