KR101921516B1 - Method and system for transaction linkage associated with selection of user equipment - Google Patents

Abstract

A transaction interworking method and system combined with a usage terminal specification are disclosed. A transaction interlocking method combined with a use terminal designation includes a step of registering a unique designation user apparatus for electronic transaction to a financial institution server through a registration procedure, a step of registering a seed value and a time synchronization Sharing a session key for configuring a secure channel between a financial institution server and a designated user device on the basis of an authentication procedure, and a step of sharing a session key between a financial institution server, a designated user device and a transaction interworking device, A step of performing an electronic transaction based on a key generated based on the time stamp value, the unique identification information of the designated user device, and the session key.

Description

FIELD OF THE INVENTION [0001] The present invention relates to a method and a system for transaction linkage combined with a user terminal designation,

The present invention relates to a transaction interworking method and system, and more particularly, to a transaction interworking method and system combined with a usage terminal designation.

As Internet banking and electronic commerce have increased in size, exchange of goods and services through the Internet has become a major part of the national economy. However, in spite of various security technologies applied in the process of building a network for internet banking and e-commerce, hacking of Internet banking services has occurred in many cases, and similar internet banking and e-commerce transactions such as hacking and telebanking e- Financial damages are continuously occurring.

Like general security applications, online financial transactions use security technologies to secure security requirements such as confidentiality, integrity, availability, and non-repudiation. Security has evolved over the past several decades for a variety of encryption-based technologies, and its utility has been well demonstrated by the use of proven mathematical tools. Nevertheless, most of the security problems arise in the process or environment that utilizes them for security applications rather than the encryption-based technologies. Now, research is needed to find vulnerabilities on online financial transaction networks other than encryption-based technologies Do.

KR 10-2005-0064494

One aspect of the present invention provides a transaction interlock method combined with a usage terminal specification.

Another aspect of the invention provides a transaction interlocking system in combination with a usage terminal specification.

A transaction interworking method combined with a usage terminal specification according to an aspect of the present invention includes the steps of registering a specific designated user apparatus for electronic transaction in the financial institution server through a registration procedure, And sharing a session key for configuring a secure channel between the financial institution server and the designated user equipment based on an authentication procedure; The server, the designated user device, and the transaction interworking device perform the electronic transaction based on the key generated based on the seed value and the timestamp value, unique identification information of the designated user device, and the session key .

The step of performing the electronic transaction may further include encrypting the transaction information for the electronic transaction and the unique identification information and transmitting the transaction information to the financial institution server, wherein the financial institution server transmits the seed value and the first Encrypting the transaction information and the unique identification information with a first key value generated based on a time stamp value and transmitting the encrypted transaction information and the unique identification information to the transaction interworking device through the designated user device, Decrypting the transaction information and the unique identification information based on the received transaction information and requesting approval of the user for the transaction information; if the approval of the user is input, the transaction interlock transmits the approved transaction information to the seed value And a second key value generated based on the second time stamp value, Transmitting the transaction information to the financial institution server through the transaction server, comparing the transaction information received from the transaction interlocking device with the transaction information received from the designated user device, The financial institution server processes the electronic transaction and sends the generated final electronic transaction result information to the third key generated based on the seed value and the third timestamp value, And transmitting the encrypted information to the transaction interlocking device via the designated user device, the transaction interlocking device outputting information on the result of the electronic transaction and storing information on the result of the electronic transaction .

Each of the first key, the second key, and the third key may be configured as a hash-chain type according to the first timestamp value, the second timestamp value, and the third timestamp value, respectively .

In addition, the session value may be changed for each session.

A transaction interworking method and system combined with a usage terminal specification according to an embodiment of the present invention provides mutual authentication and is secure against eavesdropping attacks, replay attacks, spoofing attacks, and denial of service attacks. By checking the hardware specific information of the designated terminal, it is possible to detect that an attempt is made from a terminal not designated. Therefore, since it is possible to respond to all security threats, the security of the online identity verification means is improved, and a more secure Internet banking service can be provided.

FIG. 1 is a conceptual diagram illustrating a method of identifying a user for an existing online financial transaction.
2 is a conceptual diagram showing an existing transaction interlocking technique.
3 is a conceptual diagram illustrating a transaction interlocking method combined with a usage terminal designation according to an embodiment of the present invention.
4 is a conceptual diagram illustrating a registration process according to an embodiment of the present invention.
5 is a conceptual diagram illustrating an authentication process according to an embodiment of the present invention.
FIG. 6 is a conceptual diagram illustrating a code to which a protocol according to an embodiment of the present invention is applied.
FIG. 7 is a conceptual diagram illustrating a result according to a code to which a proposed protocol according to an embodiment of the present invention is applied.

The following detailed description of the invention refers to the accompanying drawings, which illustrate, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, certain features, structures, and characteristics described herein may be implemented in other embodiments without departing from the spirit and scope of the invention in connection with an embodiment. It is also to be understood that the position or arrangement of the individual components within each disclosed embodiment may be varied without departing from the spirit and scope of the invention. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is to be limited only by the appended claims, along with the full scope of equivalents to which such claims are entitled, if properly explained. In the drawings, like reference numerals refer to the same or similar functions throughout the several views.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the drawings.

FIG. 1 is a conceptual diagram illustrating a method of identifying a user for an existing online financial transaction.

Referring to FIG. 1, the identity verification means can be classified into an offline identity confirmation means from the outside and an online identity confirmation means from the inside.

Outside identity verification means include identity verification to verify identity through closed circuit television (CCTV), access control such as surveillance, identification and face-to-face identification, pass to authorize identified persons, And so on.

Internal identity verification means identity management to ensure that you are your identity. Password protection for devices such as passwords and security keyboards and virtual keyboards to protect input devices such as keyboards. Only you own certificates and devices , OTP (one time password) and proof of ownership such as public certificate, security card, and multi factor, environment certification such as designated PC, multi-channel, and bio due to the fact that the environment to be used is specific. Can be.

In order to protect the above identification means, platform security such as encryption technology and keyboard security is applied inside, and network security and physical security such as SSL (Secure Socket Layer) communication can be applied from the outside.

Input / output devices like today's network or universal serial bus (USB) are vulnerable to attacks by third parties. Below is a specific disclosure of eavesdropping and retransmission attacks, spoofing attacks, and asynchronous attacks by third parties.

An eavesdropping attack is an attack to steal information transmitted between a financial institution server, a user, a user, and a transaction interlocking device in order to falsify / alter transaction information by a third party attacker. To respond to eavesdropping attacks, eavesdroppers should not be able to change transaction information or obtain shared secret information, even if they use information obtained through eavesdropping.

A retransmission attack may be an attack to take unauthorized users to receive normal service by reusing the captured information after taking over the transmitted information. If a retransmission attack is possible, an attacker who is a third party can authenticate as a legitimate user by using the captured message through the eavesdropping in the previous session in the current session. Therefore, in order to respond to a retransmission attack, even if a message is captured, if the session is changed, the value should be meaningless information.

A spoofing attack is an attack in which a third party, an attacker, masquerades as a legitimate device and deceives or seizes information. A spoofing attack is possible if an attacker can correctly generate a response to a query in the protocol. Since the transaction information is transmitted / received from the financial institution server and the transaction interlocking device, synchronization between the two objects should be performed. If you do not send information from one entity, transactions may not be processed normally. Accordingly, an attacker can use this to block information transmitted and received between two objects, thereby attempting an attack so that settlement is not normally performed. This is called an asynchronous attack. Because it is an attack related to denial of service attack, it is necessary to check if the information of server and device is inconsistent.

Therefore, in the embodiment of the present invention, the transaction interlocking method combined with the use terminal designation providing the mutual authentication and satisfying the security requirement for ensuring the security from the eavesdropping attack, the retransmission attack, the spoofing attack and the asynchronous attack .

Mutual authentication is a procedure for checking whether a financial institution server, a designated user device and a transaction interlocking device for an Internet banking service are legitimate entities. In the mutual authentication procedure, mutual authentication can be performed by performing encryption / decryption based on a value shared between a financial institution server, a designated user device, and a transaction interlocking device, and confirming encryption / decryption result.

In other words, in the embodiment of the present invention, since the security of the online identity verification means can not be secured due to the existing and new security threats in the identity verification means, A combined transaction interworking method is disclosed. However, in the present invention, security is secured due to a fundamental new security threat that occurs in the environment provided by the online identity verification unit and the Internet banking service. Disclosed is a transaction interworking method combined with utilization terminal designation for solving a problem that can not be solved.

Existing transaction interworking technology was carried out through possession - based identity verification. The biggest problem with the identity-based identity verification means is abuse of the identity verification means due to theft of the identity verification means. In addition, the existing transaction interlocking technology can be exposed because the interworking code is input by the keyboard. Since the transaction is uni-directionally authenticated, mutual authentication can not be provided and transaction details are stored only in the financial institution. There is a problem that it can not be provided. Therefore, in order to solve such a problem, in the embodiment of the present invention, a new transaction interworking technique combining a usage terminal designation and a transaction interworking technique has been proposed so that a transaction can be approved only in a designated terminal.

The transaction interlocking method combined with the use terminal designation according to the embodiment of the present invention can deal with a transaction only in a designated user device so that it can cope with theft, provides mutual authentication, and stores transaction details in a transaction interlock device, Prevention function can be provided. By providing such a function, it is possible to respond to most of existing security threats, so that the security of the online identity verification means utilized in the Internet banking service can be improved.

2 is a conceptual diagram showing an existing transaction interlocking technique.

2, when the user inputs transaction information such as a transfer account and a transfer amount into the transaction interlock device 220, the transaction interlock device 220 transfers the transaction information to the Internet banking server (or the financial institution server) Based on the shared key with the key generation unit 240, and output the generated interlocking code. The user can confirm the outputted interworking code and input it to the web browser so that the interworking code can be transmitted to the Internet banking server (or financial institution server) 240.

Such existing transaction interlocking technology can be exploited in case of theft, and the interworking code may be inputted through the keyboard, so there is a threat of exposure of the interworking code. In addition, the server and the user apparatus do not provide mutual authentication, but only the server provides the one-way authentication for authenticating the user apparatus, and transaction details are stored only in the financial institution, so that the problem of non-repudiation can not be provided.

Therefore, the transaction interlocking method combined with the usage terminal designation according to the embodiment of the present invention can be used only in the designated user device in order to improve the security, Mutual authentication between devices can be provided. In addition, the generated interworking information is not input through a keyboard but directly transmitted from a user device, and provides transaction prevention information by storing transaction information in the user device.

3 is a conceptual diagram illustrating a transaction interlocking method combined with a usage terminal designation according to an embodiment of the present invention.

Referring to FIG. 3, in the registration process, the user submits the user terminal designation service to the financial institution, and the user can register the hardware specific information of the user device to be registered with the financial institution (step S300).

After the application of the using terminal designation service, the user visits the financial institution directly to confirm that the user is offline, and the transaction interlocking device can be issued from the financial institution after the identity is confirmed (step S310).

In the issuance process of the transaction interlocking device, the financial institution server and the transaction interlocking device share the seed value for generating the key and can be time synchronized.

After the above-mentioned registration process, the user can access the financial transaction site through the designated user device registered in the financial institution through the authentication process (step S320).

The designated user apparatus and the financial institution server can share the session key for configuring the secure channel in the network communication (step S330).

The transaction information input by the user through the designated user apparatus and the unique information of the designated user apparatus are encrypted and transmitted to the financial institution server (step S340).

In step S350, the financial institution server encrypts the received transaction information and the unique information using the key generated based on the seed value shared between the financial institution server and the transaction interlocking device in order to communicate with the transaction interlocking device.

The user device authenticates the financial institution server based on the received information, and transmits the encrypted transaction information and the unique information to the transaction interlock device (step S360).

The transaction interlock device decrypts the received transaction information and outputs it to a separate output device so that the user can confirm the transaction information. The user confirms that the transaction information is input based on the output result of the transaction interlock device, and approves the transaction.

When the transaction is approved, the approved transaction information and the unique information are encrypted by the transaction interworking device using the key generated based on the seed value and transmitted to the user device (step S370).

If the transaction information is incorrect, any information may be encrypted and transmitted to the financial institution server to disturb the communication process.

The user device transmits encrypted transaction information and unique information received from the transaction interworking device to the financial institution server (step S380).

The financial institution server detects falsification / modulation by decoding the transaction information received from the user apparatus and comparing the information with information received from the user apparatus.

If there is no forgery / alteration, the financial institution server normally processes the transaction and encrypts and transmits the processed transaction result using the key (step S390).

The designated user device transmits the received transaction result to the transaction interlocking device (step S395).

The transaction interlock device can decrypt and output the transaction result received from the designated user device. The user can finally confirm the transaction result based on the result output from the transaction interlocking device. For the purpose of non-repudiation, the transaction result may be stored inside the transaction interlock / designated user device.

The financial institution server and the transaction interworking device can generate the key based on the time stamp generated by the time synchronization with the shared seed value. The keys generated by the financial institution server and the transaction interworking device may be configured in a hash-chain type according to a time stamp so that transaction information and hardware specific information are not encrypted / decrypted by the same key.

In addition, in step S330 in which the designated user apparatus and the financial institution server share a session key for configuring a secure channel in network communication, the session key for network communication is changed every session to prevent a retransmission attack. In addition, for more robust transactions, the security interlocking device can be strengthened by applying a fixed password-based knowledge base identification method.

In addition, the transaction interlocking device may include a personal computer (PC) and a connector that can be inserted into the mobile, or may be implemented to be wirelessly communicable so that the transaction interlocking device can be flexibly applied to various devices. Examples include smart cards, USB tokens, and clock devices (Apple Watch, Galaxy Gear, etc.).

If the security of the technology combined with the designation of the user terminal is examined, the hash-chain type key is generated based on the shared seed value and the time stamp to encrypt / decrypt the transaction information within the server and the transaction interfacing device. It is safe against reverse engineer attack, and it can be safe in transmission process / reception process between network and server, host, and device.

Also, in the transaction interlocking method combined with the use terminal designation, communication between the host and the apparatus is not a query / response structure but a one-sided transmission form, which is safer because the communication process is hidden from the attacker.

In the embodiment of the present invention, a protocol for a transaction interlocking method combined with a usage terminal specification is proposed. In the transaction, a protocol supporting a server, a transaction interlock device, a server and a user, Is proposed. In the proposed protocol, the financial institution server, the designated user equipment, and the transaction interworking device communicate through a wired network or a wireless network, and the wired network / wireless network may be assumed to be an unsecured channel.

As described above, the transaction interlock device is issued after confirming the identity of the user offline, and the time synchronization between the financial institution server and the transaction interlock device can be performed during offline authentication. Further, it can be assumed that the financial institution server and the designated user apparatus operate in an environment in which a session key can be shared.

As described above, after the financial institution server and the transaction interworking device share the seed value through the offline authentication, the key can be generated based on the shared seed value. The financial institution server can perform both the authentication of the designated user apparatus and the transaction interlocking apparatus based on the above-described protocol, and can check whether the transaction information is valid against the designated user apparatus and the transaction interlocking apparatus.

The transaction information input by the designated user device and the unique information of the designated user device specified by the user are encrypted and transmitted to the financial institution server. The financial institution server confirms whether the unique information of the designated user device designated is correct, And transmits the transaction information and the unique information to the user device by first encrypting the transaction information and the unique information based on the generated seed value and the first key based on the time stamp.

The user device can transmit the encrypted transaction information and the unique information to the transaction interlock device. The transaction interlock device can decrypt the encrypted transaction information and the unique information, and then request the user to confirm the transaction information.

When the user approves the transaction information, the transaction interlinking unit re-encrypts the approval details again with the second key generated based on the seed value and the time stamp shared with the financial institution server, and transmits the second encryption to the financial institution server Lt; / RTI >

The financial institution server can approve the transaction by confirming whether the first transaction information transmitted from both sides, that is, the first transaction information transmitted from the designated user apparatus, is the same as the second transaction information transmitted from the transaction interlocking apparatus. The financial institution server can third-encrypt the transaction result with a third key generated based on the seed value and the time stamp shared with the user device / transaction interlock device and transmit it to the transaction interlock device through the designated user device. The transaction interlinking device informs the user of the received transaction result and stores the transaction result, thereby preventing the financial institution server from denying the transaction. Through this process, the financial institution server can provide mutual authentication between the designated user device and the transaction interlocking device, and the transaction information by the third party can be prevented from being tampered or altered. In addition, anchor and uniqueness are supported because the value of key is changed by each session and time synchronization every transmission, and it is safe for eavesdropping attack, replay attack, spoofing attack, and denial of service attack.

4 is a conceptual diagram illustrating a registration process according to an embodiment of the present invention.

A channel between a financial institution server, a user device, and a transaction interworking device may be assumed to be an unsecured channel. In offline authentication, it is assumed that the financial institution server and the transaction interlock share a seed value (SS, Shared Seed), and the financial institution server and the user apparatus share a session key (SK, Session Key). The terms used in the registration process are shown in Table 1 below.

Terms Explanation BS Banking Server C Client / user equipment TLD Transactions Linkage Device ID IDentification HWUI Hardware Specific Information (HardWare Unique Information) SDTD Service of Designated Terminal Device SK Session key shared between BS and C SS The seed value shared between the BS and the TLD (Shared Seed) M1 Encryption of ID and HWUI based on SK E _K () Key-based cryptographic operations D _K () Key K-based decoding operation

Referring to FIG. 4, the user equipment can request a terminal-designated service to a financial institution server (Step 1. C? BS: Request SDTD) (Step S400).

The user device C requests the use terminal designating service (SDTD) to the financial institution (BS).

The financial institution server can request hardware specific information of the user equipment to be used as the user equipment (Step 2. BS → C: Request HWUI) (Step S410).

The user equipment transmits the result (M1) and the ID information obtained by encrypting based on the ID information and the hardware specific information (HWUI) to the financial institution server (BS) based on the session key shared with the financial institution server → BS: ID, M1) (step S420).

The financial institution server (BS) decrypts the received M1 based on the session key shared with the user device (C), extracts the ID and hardware unique information (HWUI), and verifies whether or not it matches the received ID. When the ID verification is completed, the hardware unique information HWUI is stored in the database in order to utilize the HWUI in the authentication process (Step 4. ID, HWUI = D _SK (M1)) (Step S430).

The financial institution server BS generates a seed value SS for sharing with the TLD and transmits the generated seed value SS and the received hardware specific information HWUI to the transaction interlock device (TLD) (Step 5. Generate SS) (Step S440).

(TLD) in which a shared seed value (SS) shared between a financial institution server (BS) and a transaction interlocking device (TLD) and hardware specific information (HWUI) of a designated terminal specified by the user is stored 6. Issue TLD) (step S450).

5 is a conceptual diagram illustrating an authentication process according to an embodiment of the present invention.

In the authentication process, as in the registration process, the channel between the financial institution server and the user device, the user device, and the transaction interworking device is assumed to be an unsecure channel, and the seed value SS and the hardware unique information (HWUI) Can be assumed to be shared. Also, it is assumed that the time stamp (TS, Timestamp) is synchronized by the time synchronization between the financial institution server and the transaction interlock device, and the financial institution server and the user device share the session key (SK).

The terminology used in the authentication process is shown in Table 2 below.

Terms Explanation BS Banking Server C Client / user equipment TLD Transactions Linkage Device ID IDentification HWUI Hardware Specific Information (HardWare Unique Information) I _PAY Information of PAYMENT i The i-th generated information (index) TSi i th time stamp SK Session key shared between BS and C SS The seed value shared between the BS and the TLD (Shared Seed) Ki The key index (key index) generated through HMAC based on TSi and SS M2 Encryption of ID, I _PAY , and HWUI based on SK M3 Encryption of ID, I _PAY , and HWUI based on Ki M4 Result of ID encryption based on SK M5 Encryption of ID, I _PAY , and HWUI based on Ki + 1 M6 Encryption of ID and I _PAY based on Ki + 2 E _K () Key-based cryptographic operations D _K () Key K-based decoding operation HMAC (A, B) Result of hashing B based on key A

Referring to FIG. 5, the user device C encrypts the ID, transaction information I _PAY , and hardware unique information HWUI based on the session key SK shared with the financial institution server (BS) And ID to the financial institution server BS (Step 1. C? BS: ID, M2) (Step S500).

The financial institution server BS extracts the ID, the transaction information I _PAY and the hardware specific information HWUI by decoding the received M2 on the basis of the session key SK shared with the user device C, ID and the hardware specific information (HWUI) stored in the database during the registration process. When the verification of the ID and the hardware specific information HWUI is completed, the transaction is not temporarily processed but temporarily stored (Step 2. ID, I _PAY , HWUI = D _SK (M2)) (Step S510).

The financial institution server BS generates the key Ki through the HMAC operation based on the transaction linker TLD and the shared seed value SS and the time-synchronized time stamp TSi. Encrypts (M3) the ID, transaction information (I _PAY ) and hardware specific information (HWUI) based on the generated key (Ki), encrypts the ID based on the session key (SK) shared with the user device (Step S320), and transmits the encrypted result (M3 and M4) and ID to the user C (step 3. BS → C: ID, M3, M4).

The user device C decrypts the received M4 based on the session key (SK) shared with the financial institution server (BS), extracts the ID, and verifies whether it matches the transmitted ID. When the ID verification is completed, the ID and M3 are transmitted to the TLD (Step 4. C? TLD: ID, M3) (Step S530).

The transaction linker TLD generates a key Ki through HMAC operation based on a seed value SS shared with a financial institution server BS and a time stamp TSi time-synchronized with the seed value SS. Extracts ID, transaction information (I _PAY ), and hardware unique information (HWUI) by decoding the received M3 based on the generated key (Ki), verifies whether the received ID matches the extracted ID, (Step 540). The HWUI and the extracted hardware specific information HWUI are identical to each other (Step 5. ID, I _PAY , HWUI = D _Ki (M3)).

When the verification of the ID and the hardware specific information (HWUI) is completed, it is temporarily stored for comparison with the approval result, and the extracted transaction information (I _PAY ) is output to a separate output device and confirmed to the user. After confirming that the user agrees with the transaction information inputted by the user, the user can transmit approval or disapproval through direct action such as pressing a button. In this process, since the user directly confirms the transaction information inputted by the user, it is possible to detect even if the transaction information is fluctuated in the previous process.

The transaction linker TLD generates a key Ki + 1 through HMAC operation based on a seed value SS shared with the server BS and a time-stamped time stamp TSi + 1. Transmits the ID, the transaction information I _PAY approved by the user and the hardware specific information HWUI to the user device C based on the generated key Ki + 1 and transmits the encrypted information MW to the user device C, (Step 6. TLD? C? BS: ID, M5) (Step S550).

The financial institution server BS generates the key Ki + 1 through the HMAC operation based on the TLD, the shared seed value SS and the time-synchronized time stamp TSi + 1. The M5 decrypts the received M5 based on the generated key (Ki + 1), extracts the ID, transaction information (I _PAY ) approved by the user, hardware unique information (HWUI), verifies whether the received ID matches the extracted ID (Step 7. ID, I _PAY , HWUI = D _{Ki + 1} (M5)) (step S560).

Also temporarily the extracted transaction information (I _PAY) and step S510 (step 2) the hardware is consistent verifies whether the extracted that the transaction information (I _PAY) temporarily stored in the unique information (HWUI) and step S510 (step 2) It is possible to verify that the stored hardware specific information (HWUI) matches. When the ID, transaction information (I _PAY ), and hardware specific information (HWUI) are verified, the transaction is finally approved and the transaction result is stored so that the user can not deny the transaction.

The financial institution server BS generates the key Ki + 2 through the HMAC operation based on the TLD, the shared seed value SS and the time-synchronized time stamp TSi + 2. (M6) the ID and the transaction result (I _PAY ) approved by the server (BS) to the user device (C) based on the generated key (Ki + 2) To the interworking device TLD (Step 8. BS → C → TLD: ID, M6) (Step S570).

The transaction linker TLD generates a key Ki + 2 through HMAC operation based on a seed value SS and a time-synchronized time stamp TSi + 2 shared with a financial institution server BS. Decrypts the received M6 based on the generated key (Ki + 2), extracts the ID and the transaction result (I _PAY ) approved by the financial institution server (BS), verifies whether the received ID matches the extracted ID, It is verified whether the transaction information I _PAY temporarily stored in S540 (step 5) matches with the extracted transaction information I _PAY (Step 9. ID, I _PAY = D _{Ki + 2} (M6)) S580).

When verification of the ID and the transaction information I _PAY is completed, the transaction result (I _PAY ) approved by the financial institution server (BS) may be outputted to a separate output device so that the user can recognize whether the transaction has been normally processed. Also, a transaction result (IPAY) may be stored in a storage space in the apparatus such that the financial institution server (BS) can not deny the transaction.

A transaction interlocking method combined with a usage terminal designation according to an embodiment of the present invention provides mutual authentication and is secure against eavesdropping attacks, replay attacks, spoofing attacks, and denial of service attacks. By detecting the hardware specific information of the designated designated user device, it is possible to detect that the unauthorized user device attempts to deal with it. Security can also be evaluated by verifying that the proposed protocol meets security requirements using AVISPA (Automated Validation of Internet Security Protocols and Applications), a formal verification tool.

Mutual authentication is the process of verifying whether all entities involved in communication are legitimate. The protocol for the transaction interlocking method combined with the usage terminal specification according to the embodiment of the present invention allows the server to authenticate the user according to the M2 message and the user to authenticate the server according to the M4 message. Also, the financial institution server can authenticate the transaction interlocking device by the M5 message, and the transaction interlocking device can authenticate the financial institution server by the M6 message. Accordingly, the financial institution server, the user device, and the transaction interlocking device can satisfy the mutual authentication by such a message. In the communication process, only the authorized user device uses the key generated based on the seed value SS and the time stamp TS without directly exposing the transaction information I _PAY and the hardware unique information HWUI, (I _PAY ) and hardware specific information (HWUI). The authentication and decryption is performed by generating Ki, Ki + 1, and Ki + 2 based on the shared seed value (SS) and the time stamp (TS) between the financial institution server and the transaction interlock device. Decryption can be performed using the session key SK.

An eavesdropping attack is an attack that takes information related to transactions by eavesdropping information transmitted between media. In the protocol for the transaction interlocking method combined with the usage terminal designation according to the embodiment of the present invention, only ID, M1, M2, M3, M4, M5, M6 can be eavesdropped, SK and SS, TSi, TSi + +2, Ki, Ki + 1, Ki + 2 can not be intercepted. Therefore, transaction information (I _PAY ) and hardware specific information (HWUI) can not be obtained on the network. Even if I _PAY and HWUI are exposed or falsified / altered to the attacker by the session key SK by reverse engineering, Ki and Ki + 1 and Ki + 2 are acquired in the interception between the user and the transaction interlock device Can not be. Thus, forgery / altered information alone can cause any attack on the transaction to fail. Therefore, the proposed protocol can be secure against eavesdropping attacks.

A retransmission attack may be an attack in which an attacker uses the communication information again in the next session after the eavesdropping of the communication information between the financial institution server, the user device, and the transaction interlocking device in the previous session and approves the normal transaction. In the protocol for the transaction interlocking method combined with the usage terminal specification according to the embodiment of the present invention, the ID and M1, M2, M3, M4, M5, and M6 can be eavesdropped. However, messages other than ID are encrypted / decrypted by Ki, Ki + 1, Ki + 2, and shared session key generated based on SS and TSi, TSi + 1, TSi + 2, And Ki, Ki + 1, and Ki + 2 are newly created for each time in the session, so even if retransmission is performed, it is not authenticated as a correct user device. Therefore, the proposed protocol is safe for retransmission attack because it can detect the attacker in re-attack attack.

A spoofing attack is an attack in which an attacker masquerades as a legitimate entity and seizes information necessary for authentication. The attacker must be able to compute M2, M3, M4, M5, and M6 to disguise the legitimate entity. When a protocol for a transaction interlocking method combined with a usage terminal specification according to an embodiment of the present invention is used, a message can not be generated because Ki and Ki + 1, Ki + 2 can not be acquired. Therefore, the protocol for the transaction interlocking method combined with the utilization terminal designation according to the embodiment of the present invention is safe for a spoofing attack.

A denial of service attack is an asynchronous attack by hindering the normal operation of the system, and it causes asynchronism by discarding information transmitted between the respective entities and inducing inconsistency. In order to attempt an asynchronous attack in a protocol for a transaction interworking method combined with a usage terminal specification according to an embodiment of the present invention, information transmitted to the transaction interworking device must be obtained or interrupted. However, since the financial institution server and the transaction interworking apparatus according to the embodiment of the present invention are synchronized with time, the protocol for the transaction interworking method combined with the use terminal designation according to the embodiment of the present invention is safe for a denial of service attack.

According to the embodiment of the present invention, the user terminal authentication blocks the attempt of the unauthorized user device by checking the hardware specific information of the designated user device registered in the registration process by the user during the authentication process. The protocol for the transaction interlocking method combined with the use terminal designation according to the embodiment of the present invention authenticates the user apparatus designated by the financial institution server by the M2 message and authenticates the user apparatus designated by the transaction interlock apparatus according to the M3 message. Accordingly, the financial institution server and the transaction interworking device can authenticate the designated user equipment designated by the user.

Finally, we describe the results of protocol verification by AVISPA, a formal verification tool. AVISPA is a tool for evaluating safety by deriving possible threats from the protocol.

The code to which the proposed protocol is applied is shown in Fig. 6, and the result according to the code to which the proposed protocol is applied is shown in Fig.

As a result, it can be seen that SAFE is outputted in the SUMMARY, which means that the protocol for the transaction interlocking method combined with the usage terminal specification according to the embodiment of the present invention is secure.

Such a user participation-based content production method may be implemented in an application or implemented in the form of program instructions that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, alone or in combination.

The program instructions recorded on the computer-readable recording medium may be ones that are specially designed and configured for the present invention and are known and available to those skilled in the art of computer software.

Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like.

Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules for performing the processing according to the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. It will be possible.

Claims (4)

The transaction interlocking method combined with the use terminal designation,
Registering a unique designated user device for electronic transaction with a financial institution server through a registration procedure;
Sharing the seed value and time-synchronized timestamp value with the financial institution server and the transaction interworking device based on the registration procedure;
Sharing a session key for establishing a secure channel between the financial institution server and the designated user equipment based on an authentication procedure; And
The financial institution server, the designated user device, and the transaction interworking device perform the electronic transaction based on the key generated based on the seed value and the time stamp value, unique identification information of the designated user equipment, and the session key , ≪ / RTI >
The step of performing the electronic transaction comprises:
Encrypting the transaction information for the electronic transaction and the unique identification information and transmitting the encrypted transaction information and the unique identification information to the financial institution server;
Encrypting the transaction information and the unique identification information with the first key value generated based on the seed value and the first timestamp value and transmitting the encrypted transaction information and the unique identification information to the transaction interworking apparatus via the designated user equipment;
Decrypting the transaction information and the unique identification information based on the first key value, and requesting approval of the user for the transaction information;
If the approval of the user is input, the transaction interworking device encrypts the approved transaction information with a second key value generated based on the seed value and the second time stamp value, Transmitting to the server;
Comparing the approved transaction information received from the transaction interlocking device with the transaction information received from the designated user device to detect whether the electronic transaction is counterfeited or altered;
If there is no falsification and modulation, the financial institution server processes the electronic transaction and encrypts the generated final electronic transaction result information with a third key value generated based on the seed value and the third timestamp value, To the transaction interworking device via a user device;
The transaction interlinking device outputs information on the result of the electronic transaction and stores information on the result of the electronic transaction
≪ / RTI > delete The method of claim 1,
Wherein each of the first key, the second key, and the third key is configured as a hash-chain type according to the first time stamp value, the second time stamp value, and the third time stamp value, respectively Way. The method of claim 1,
Wherein the session key is changed for each session.

Images