KR102140708B1 - Method and server for providing financial service - Google Patents

Abstract

A method for providing financial services according to an embodiment includes the steps of receiving third-party name information input by a user from a user terminal, encoding a unique number of financial service application information related to the user terminal and third-party name information to a URL address. Generating a third-party information providing consent message including a URL address to the user terminal, and providing a web page with a name of the third party in advance to a third-party terminal accessing the URL address. Include.

Description

Financial service provision method and server {METHOD AND SERVER FOR PROVIDING FINANCIAL SERVICE}

The present disclosure relates to a method and a server for providing financial services, and more particularly, to a method and a server for providing financial services using third party authentication.

With the recent development of information and communication technology, mobile terminals such as smartphones are widely spread, so that individuals tend to receive financial services mainly using their own mobile terminals.

An individual can use a financial service requiring identity authentication by performing identity authentication through a mobile terminal and providing personal information necessary for using financial services to a bank server.

However, in the case of some financial services, information of third parties related to the person is used in addition to identification of the person, so an individual who intends to use such financial services may visit a bank branch with a third party related to the person, or a third party related to the person There was a problem of having to ask for consent to use information individually. The technology that serves as the background of the present invention is disclosed in Korean Patent Publication No. 1587475.

An object of the present disclosure is to provide a financial service providing method and a server capable of conveniently obtaining information of a third party related to a user receiving financial services.

A method for providing financial services according to an embodiment includes the steps of receiving third-party name information input by a user from a user terminal, encoding a unique number of financial service application information related to the user terminal and third-party name information to a URL address. Generating a third-party information providing consent message including a URL address to the user terminal, and providing a web page with a name of the third party in advance to a third-party terminal accessing the URL address. Include.

Providing a web page with a name of a third party in advance to a third party terminal accessing the URL address, decoding the unique number and third party name information encoded in the URL address, and the decoded third party The method may further include generating a web page in which a third party name of the name information is previously described.

Before receiving the third party name information, performing a login procedure with the user terminal, when the login procedure is completed, checking whether financial service application information related to the user terminal is stored in the service application information database, financial services Determining whether third-party authentication is completed using the application information, and if it is determined that third-party authentication is not completed, providing a screen for third-party authentication to the user terminal may be further included. .

After the step of providing a web page with the name of the third party in advance, receiving a third-party information provision consent completion message from the third-party terminal including the success value and authentication value for the third party's identity authentication, and It may further include the step of including the success value and the authentication value for the third party's identity authentication in the application information corresponding to the number and storing it in the service application information database.

The financial service providing server according to an embodiment includes a communication unit that communicates with a user terminal and a third-party terminal through a communication network, a service request information database that stores financial service application information, and a communication unit that is input by the user from the user terminal. Upon receiving the third-party name information, the financial service application information related to the user terminal is read from the service application information database, the unique number of the read financial service application information and the third-party name information are encoded to generate a URL address, and the URL address And a control unit that transmits a third-party information provision consent message including a to the user terminal through the communication unit, and provides a web page with a name of the third party in advance to a third-party terminal accessing the URL address.

The controller may decode the unique number and third-party name information encoded in the URL address, and generate a web page in which the third-party name of the decoded third-party name information is previously described.

The control unit performs a login procedure with the user terminal, and when the login procedure is completed, checks whether financial service application information related to the user terminal is stored in the service application information database, and third-party authentication is completed using the financial service application information. If it is determined whether or not, and if it is determined that the third-party authentication has not been completed, a screen for third-party authentication may be provided to the user terminal.

The communication unit receives a third-party information provision consent completion message including the success value for the third party's identity authentication and the authentication value from the third-party terminal, and the control unit sends the application information corresponding to the unique number to the third party's identity authentication. It can be stored in the service request information database by including the success value and authentication value for.

A method of providing a financial service and an effect of a server according to the present disclosure will be described as follows.

According to at least one of the embodiments, there is an advantage that a user can conveniently request information necessary for using a financial service.

According to at least one of the embodiments, the bank can conveniently acquire information of a third party related to the user.

According to at least one of the embodiments, since the user is conveniently provided with financial services, there is an effect of attracting bank customers.

Further scope of applicability of the present invention will become apparent from the following detailed description. However, since various changes and modifications within the spirit and scope of the present invention can be clearly understood by those skilled in the art, specific embodiments such as the detailed description and preferred embodiments of the present invention should be understood as being given by way of example only.

1 is an exemplary view illustrating a financial service providing server and a financial service providing system including the same according to an embodiment.
2 is a block diagram showing a financial service providing server according to an embodiment.
3 is a flowchart illustrating a method for providing a financial service according to an embodiment.
4 is an exemplary diagram showing a screen displayed on a user terminal according to the financial service method of FIG. 3.
5 is an exemplary view showing a screen displayed on a third party terminal according to the financial service method of FIG. 3.

Hereinafter, the disclosed embodiments will be described in detail with reference to the accompanying drawings, but the same or similar components are assigned the same or similar reference numerals, and redundant descriptions thereof will be omitted. The suffixes "modules" and "parts" for components used in the following description are given or mixed only considering the ease of writing the specification, and do not have meanings or roles distinguished from each other in themselves. In addition, in describing the disclosed embodiments, when it is determined that a detailed description of related known technologies may obscure the subject matter of the disclosed embodiments, the detailed description thereof will be omitted. In addition, the accompanying drawings are for easy understanding of the disclosed embodiments, and the disclosed technical idea is not limited by the accompanying drawings, and all changes, equivalents, or substitutes included in the spirit and scope of the present invention It should be understood to include.

Terms including ordinal numbers, such as first and second, may be used to describe various elements, but the elements are not limited by the terms. The terms are used only for the purpose of distinguishing one component from other components.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected or connected to the other component, but other components may exist in the middle. It should be understood that there is. On the other hand, when a component is referred to as being "directly connected" or "directly connected" to another component, it should be understood that there is no other component in the middle.

Singular expressions include plural expressions unless the context clearly indicates otherwise.

In the present application, terms such as "comprises" or "have" are intended to designate the presence of features, numbers, steps, actions, components, parts, or combinations thereof described in the specification, but one or more other features. It is to be understood that the presence or addition of elements or numbers, steps, actions, components, parts, or combinations thereof does not preclude in advance.

1 is an exemplary view illustrating a financial service providing server and a financial service providing system including the same according to an embodiment.

As shown, the payment service providing system may include a financial service providing server 10, terminals 20 and 21, and an authentication server 20.

The financial service providing server 10 is provided by all financial companies that open and operate predetermined financial accounts, such as commercial banks, savings banks, and securities companies, and issue electronic bankbooks, cash cards, and debit cards corresponding thereto. It includes a server for providing financial services to be used, and is not limited to a server that provides financial services of a specific financial institution. Hereinafter, it is assumed that the financial service providing server 10 is a bank server.

The terminals 20 and 21 described in the present specification are a personal computer (PC) or notebook equipped with a wired Internet connection and browsing function, a notebook or mobile terminal equipped with a wireless LAN/portable Internet connection and browsing function, and a mobile communication network. PCS (Personal Communication System), GSM (Global System for Mobile) terminal, PDA (Personal Digital Assistant), smart phone or telematics, kiosk, ATM (automated) with access and browsing functions teller machine), etc.

The terminals 20 and 21 are connected to the bank server 10 and the authentication server 20 through a wired/wireless communication network 40. In addition, the terminals 20 and 21, the bank server 10, and the authentication server 20 agree to provide third-party information required for the user of the user terminal 20 to receive financial services from the bank server 10. You can perform procedures related to

For example, the user terminal 20 displays a screen for consent to provide third party information provided by the bank server 10. Then, the user terminal 20 receives the name of a third party that needs to consent to provide information from the user, and transmits it to the bank server 10. The bank server 10 generates a third party information provision consent message and transmits it to the user terminal 20. When a message recipient and a transmission method are selected by the user, the user terminal 20 transmits a third party information provision consent message to the message recipient in the selected transmission method. Upon receiving the message, the third party terminal 21 transmits a third party information provision agreement completion message to the bank server 10 by performing a third party authentication procedure with the authentication server 30. Then, the bank server 10 stores third-party authentication data and information provision consent data in a database, and provides a subsequent service to the user terminal 20.

The authentication server 30 includes a personal information database for personal authentication, and may be provided inside or outside the bank server 10. For example, the authentication server 30 can perform procedures related to user authentication with the terminals 20 and 21 through a mobile phone authentication method, a public certificate authentication method, a biometric authentication method, etc., and used for identification The way to be done is not limited thereto.

The bank server 10, terminals 20 and 21, and the authentication server 30 may be connected through the communication network 40. The bank server 10 provides at least one financial service through the terminals 20 and 21.

The communication network 40 is a network connected to a TCP/IP-based backbone network (eg, wired Internet, or IEEE 802.11x-based wireless LAN, or IEEE 802.16x-based portable Internet, etc.), a predetermined wireless network (eg, Mobile communication network based on CDMA (Code Division Multiple Access), mobile Internet based on IEEE 802.16x, or wireless data communication network based on DataTAC/Mobitex method), predetermined wired voice communication network (e.g., Public Switched Telephone Network PSTN)), or at least one wired communication terminal (eg, a telephone), or a predetermined wireless voice communication network (eg, a CDMA-based mobile communication network).

Next, referring to FIG. 2, a detailed description will be given of the bank server of the embodiment.

2 is a block diagram showing a bank server according to an embodiment. As shown, the bank server 10 includes a communication unit 110, a control unit 120, a user information DB 130, and a service request information DB 140.

The communication unit 110 is connected to the terminals 20 and 21 to transmit and receive data. The communication unit 110 is one or more enabling communication between the bank server 10 and the terminals 20 and 21, between the bank server 10 and the authentication server 30, or between the bank server 10 and an external server. May contain modules. In addition, the communication unit 110 may include one or more modules for connecting the bank server 10 to one or more networks.

The control unit 120 typically controls the overall operation of the bank server 10. The control unit 120 includes a user authentication unit 122 and a service management unit 124.

The user authentication unit 122 performs a login process for a user of the terminal 20 by using the login information transmitted from the user terminal 20. That is, the user authentication unit 122 performs a login process for a user requesting payment in the process of providing a payment service.

Regarding the login process for the user, the user information DB 130 includes at least one of a user's ID (identifier), a user's phone number, a PIN (personal identification number), a password, and a public certificate for user authentication. Save user authentication information.

The user authentication unit 122 receives login information including at least one of an ID, a PIN, a password, and a public certificate from the terminal 20, the received login information, and the user stored in the user information DB 130 Authentication information can be compared.

The service management unit 124 acquires information necessary to provide financial services and stores it in the service request information DB 140. In addition, the service management unit 124 reads information stored in the service request information DB 140 to determine incomplete information, and generates a message, a web page, etc. to obtain the information.

The service application information DB 140 stores information necessary for financial service application. Financial services that can be provided to users include customer information inquiry, change, deposit, withdrawal, transfer, new account opening, financial product application, account addition, change, deletion, utility bill payment, service fee payment, passbook issuance, passbook transfer, financial media It may include at least one of loss registration, financial media loss registration cancellation, telebanking service subscription, online banking service application, check card issuance, credit card issuance, security card/OTP card issuance, certificate issuance, and password change.

For example, in the service application information DB 140, application information related to a loan service application from a user is assigned a unique number and stored. It is assumed that in order to provide a loan service to a user, loan information of the user's household member must be confirmed. The service management unit 124 determines that the loan information of the user's household member (i.e., a third party) is insufficient in order to provide the loan service, and sends a message to proceed with the authentication procedure for the user's household member who intends to provide the loan service. Generate. The service management unit 124 encodes the name and unique number of the household member into a URL address, includes the URL address in a corresponding message, and transmits the URL address to the user terminal 20 through the communication unit 110. Then, the service management unit 124 receives third-party authentication data and information provision consent data from the third-party terminal 21, stores it in the service application information DB 140, and provides a loan service to the user terminal 20. Provides a screen to provide.

The bank server 10 configured as described above provides financial services to the user of the terminal 20 in connection with the terminals 20 and 21. Hereinafter, a method of providing a financial service will be described with reference to FIGS. 3 to 5.

3 is a flow chart showing a method for providing a financial service according to an embodiment, FIG. 4 is an exemplary view showing a screen displayed on a user terminal according to the financial service method of FIG. 3, and FIG. 5 is a diagram illustrating the financial service method of FIG. Accordingly, it is an exemplary diagram showing a screen displayed on a third party terminal.

As shown in Figure 3, the user terminal 20 and the bank server 10 performs a login procedure and a loan service request inquiry (S301).

For example, since a banking application program is installed in the user terminal 20, the user can execute the banking application program and proceed with the login procedure by entering an ID and password. The bank server 10 compares the ID and password received from the user terminal 20 with the user authentication information stored in the user information DB 140 to determine whether or not login is successful. When it is determined that the login is successful, the bank server 10 provides a screen for providing financial services to the user terminal 20, and when it is determined that the login has failed, the bank server 10 sends information on the login failure to the user terminal ( 20).

When the menu for receiving the loan service is selected by the user of the user terminal 20, the bank server 10 can check whether the application information related to the loan service application from the user is stored in the service application information DB 140. have.

When application information related to a loan service application is stored in the service application information DB 140, the bank server 10 may determine whether third-party authentication has been completed using the application information.

If it is determined that the third party authentication has not been completed, the bank server 10 may provide a screen for third party authentication to the user terminal 10. In this regard, reference is also made to FIG. 4A.

As shown in (a) of FIG. 4, a screen 400a for third-party authentication may be displayed on the user terminal 20.

The screen 400a for third-party authentication includes indicators 410 indicating each stage of the current third-party authentication, the name 420 of the third-party for which third-party authentication has been completed, and that the third-party authentication is completed. Indicating indicator 422, the name of a third party in which third-party authentication is in progress (430, 440), an indicator 432 indicating that third-party authentication is in progress, and an object 442 for retransmitting a message for third-party authentication , Objects 434 and 444 for canceling the third-party authentication process, input box 450 for entering the third party's name, object 452 for sending a message for third-party authentication, and authentication It may include an object 460 for adding three characters.

The user terminal 20 receives the name of a third party by the user (S303). When the user selects the object 460 for adding a third party to be authenticated, an input field 450 for inputting the name of the third party may be displayed on the user terminal 20. Then, the user can input the third party's name in the input field 450.

The user terminal 20 transmits the received third party name information to the bank server 10 (S305).

The bank server 10 generates a third party information provision consent message including the third party's name and unique number (S307). For example, the bank server 10 stores the name and unique number of a third party in the form of a URL address (for example, "http://tong.shinhan.com/gdjajdfjdfjf%245dfef%23423%2342%", etc. ) And include the encoded URL address in the third-party information provision consent message.

The bank server 10 transmits a third party information provision consent message to the user terminal 20 (S309).

The user terminal 20 receives a selection of a recipient and a transmission method for receiving the consent message for providing third-party information by the user (S311).

The user terminal 20 receiving the consent message for providing third party information from the bank server 10 may display a screen for selecting a transmission method. In this regard, reference is made to FIG. 4(b).

As shown in (b) of FIG. 4, a screen 400b for selecting a transmission method may be displayed on the user terminal 20.

The screen 400b for selecting a transmission method may include contents of the generated third party information provision consent message and objects 480, 482, and 484 corresponding to the transmission method. When one of the objects 480, 482, 484 corresponding to the transmission method is selected by the user, the user terminal 20 executes an application program related to the selected transmission method, and transmits a third-party information provision consent message. A screen for selecting a destination can be displayed.

Then, the user terminal 20 transmits a third-party information provision consent message to the terminal of the recipient selected by the user, that is, the third-party terminal 21 (S313).

For example, when the object 480 is selected by the user and the consent message for providing third-party information is delivered to the third-party terminal 21 in an SMS message method, as shown in FIG. 5A, A third-party information provision consent message 510 may be displayed on the screen of the third-party terminal 21. The user of the third-party terminal 21 may select the URL address displayed in the third-party information provision consent message 510 to proceed with the third-party information provision consent service.

The third-party terminal 21 requests the bank server 10 for a third-party information provision consent service (S315). Then, the bank server 10 provides the third party terminal 21 with a screen for requesting third party identification.

Relatedly, when a URL address is selected by the user and the third-party terminal 21 accesses the URL address, the bank server 10 decodes (decrypts) the name and unique number of the third party encoded in the URL address. Thus, by generating a screen for identity authentication, it can be provided to the third party terminal 21 accessing the URL address.

First, as shown in (b) of FIG. 5, the bank server 10 may provide the third party terminal 21 with a web page displaying a guide 520 related to third party authentication. When the user selects the service request object 522 for consenting to provide third-party information, the bank server 10 is the user of the user terminal 20, as shown in Fig. 5(c). The third-party terminal 21 is provided with a screen for requesting third-party identity authentication in which the third-party's name 530 entered by is previously described. In the screen for requesting third-party identification, an input box 540 for entering a resident registration number, a field for inputting a carrier and phone number 550 for mobile phone authentication, an input box 560 for entering an authentication number to be sent to a phone number, and a verification number An object 562 for retransmitting an object 562, an object 570 for verifying an authentication number, and an object 580 for terminating the identity authentication of a third party are displayed.

Here, the third party's name 530 previously written on the screen requesting the third party's identity authentication cannot be modified by the third party. For this reason, when the recipient selected by the user of the user terminal 20 and the third party input by the user of the user terminal 20 are different from each other, the third party terminal 21 receiving the consent message for providing third party information )'S user, i.e. the recipient, cannot proceed with third-party authentication.

By the user of the third-party terminal 21, the third-party terminal 21 and the authentication server 30 perform a third-party authentication procedure (S319).

When the third-party authentication process is successfully completed, the third-party terminal 21 transmits a third-party information provision agreement completion message to the bank server 10 (S321). The third-party information provision consent completion message may include a success value and an authentication value for the third party's self-authentication, and a content for authentication.

The bank server 10 includes the success value for the third party's identity authentication, the authentication value, and the authentication information in the application information of the corresponding unique number and stores it in the service application information DB 140 (S323). At this time, the bank server 10 may image a timestamp (a stamp indicating the date and time of identity verification of the third party) on the consent to provide information to the third party and store it together in the service application information DB 140.

In the same manner as described above, the bank server 10 may obtain a consent to provide information of a third party related to the user from the third party in a non-face-to-face manner. Users can receive financial services without the need to visit bank branches with a third party or ask a third party for consent to use information individually.

It will be apparent to those skilled in the art that the present invention may be embodied in other specific forms without departing from the spirit and essential features of the present invention.

The present invention described above can be implemented as a computer-readable code on a medium on which a program is recorded. The computer-readable medium includes all kinds of recording devices in which data readable by a computer system is stored. Examples of computer-readable media include a hard disk drive (HDD), solid state disk (SSD), silicon disk drive (SDD), ROM, RAM, CD-ROM, magnetic tape, floppy disk, and optical data storage device. This includes, and is also implemented in the form of a carrier wave (eg, transmission over the Internet). In addition, the computer may include a control unit of the terminal. Accordingly, the above detailed description should not be construed as limiting in all respects, but should be considered illustrative. The scope of the present invention should be determined by reasonable interpretation of the appended claims, and all changes within the equivalent scope of the present invention are included in the scope of the present invention.

Claims (8)

The control unit performs a login procedure with the user terminal,
The control unit, upon completion of the login procedure, checking whether financial service request information related to the user terminal is stored in a service request information database,
Determining, by the control unit, whether third-party authentication has been completed using the financial service application information,
If the control unit determines that the third-party authentication has not been completed, providing a screen for third-party authentication to the user terminal,
Receiving, by the communication unit, third party name information input by the user from the user terminal,
The control unit generating a URL address by encoding a unique number of financial service request information related to the user terminal and the third party name information,
Transmitting, by the communication unit, a consent message for providing third party information including the URL address to the user terminal, and
Providing, by the control unit, a web page in which the name of the third party is previously written to a third party terminal accessing the URL address
Financial service providing method comprising a. The method of claim 1,
Providing a web page in which the name of the third party is previously written to a third party terminal accessing the URL address,
The control unit decoding the unique number and third-party name information encoded in the URL address, and
The control unit further comprising the step of generating a web page in which the third party name of the decoded third party name information is previously described,
How to provide financial services. delete The method of claim 1,
After the step of providing a web page in which the name of the third party is previously stated,
Receiving, by the communication unit, a third-party information provision consent completion message including a success value and an authentication value for identity authentication of a third party from the third-party terminal, and
The step of storing, by the control unit, in the service application information database by including a success value and an authentication value for identity authentication of the third party in application information corresponding to the unique number
A method of providing financial services further comprising a. A communication unit that communicates with a user terminal and a third party terminal through a communication network,
A service application information database that stores financial service application information, and
When the communication unit receives the third-party name information input by the user from the user terminal, the financial service application information related to the user terminal is read from the service request information database, and a unique number of the read financial service application information and A third-party terminal that encodes the third-party name information to generate a URL address, transmits a third-party information provision consent message including the URL address to the user terminal through the communication unit, and accesses the URL address A control unit that provides a web page with the name of the third party in advance
Including,
The control unit performs a log-in procedure with the user terminal, and when the log-in procedure is completed, checks whether financial service request information related to the user terminal is stored in a service request information database. Determining whether third-party authentication has been completed, and if it is determined that the third-party authentication has not been completed, providing a screen for third-party authentication to the user terminal,
Financial service provision server. The method of claim 5,
The control unit decodes the unique number and third-party name information encoded in the URL address, and generates a web page in which the third-party name of the decoded third-party name information is previously described,
Financial service provision server. delete The method of claim 5,
The communication unit receives a third-party information provision consent completion message including a success value and an authentication value for self-authentication of a third party from the third-party terminal,
The control unit stores the application information corresponding to the unique number in the service application information database by including a success value and an authentication value for identity authentication of the third party,
Financial service provision server.

Images