KR20140112785A - Financial service system and method thereof, and apparatus applied to the same - Google Patents

Abstract

The present invention discloses a financial service providing system, a method thereof, and a device applied thereto. That is, it is confirmed that the user device based on the trust zone (TrustZone) technology is required to approve the settlement related to the financial service provision in the service device, and judges that the financial service is the settlement approval object The service providing apparatus receives the settlement related information to perform the settlement related approval and provides the financial service only with the result of the payment related permission execution without receiving the settlement related information from the service apparatus, A combination of isolated execution environments and hardware security technologies can provide secure financial services.

Description

TECHNICAL FIELD [0001] The present invention relates to a financial service providing system, a financial service providing system,

The present invention relates to a method for providing a payment service related to a financial service based on a trust zone (TrustZone) technology in a user device itself and a method for providing a normal financial service by checking only a payment- .

In recent years, smartphones have been expanding explosively due to the development of hardware such as application processors and displays, the emergence of mobile operating systems, and the revitalization of the open market.

However, in the case of a mobile terminal such as the above-mentioned smart phone, the risk of leakage of personal information (such as address book, text message, financial information, certificate, etc.) due to openness of the operating system, open market ecosystem that anyone can develop and participate in, There is a new type of security threat in a wireless communication environment as well as being able to reproduce a security threat on an existing PC such as a malfunction of a terminal due to a malfunction of the mobile communication network,

Accordingly, there is a need for a security platform technology capable of providing reliability in a mobile environment in order to protect users and network assets from security threats caused by malicious attacks.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and an object of the present invention is to confirm that a user device based on TrustZone technology is required to approve settlement related to financial service provision in a service device And if the financial service is determined to be a settlement approval object capable of performing the settlement related approval, the settlement related information is received to perform the settlement related approval, and without receiving the settlement related information from the service apparatus, By providing the financial service solely with the result of the related approval, by providing a secure financial service through a combination of isolated execution environment and hardware security technology that are not exposed from security threats.

According to a first aspect of the present invention, there is provided a user device comprising: a confirmation unit for confirming that a payment related authorization is required in connection with providing a financial service in a service device; And when the financial service is determined to be a settlement approval object capable of performing the settlement related approval, the settlement related information is received to perform the settlement related approval, and without receiving the settlement related information from the service apparatus, And an approval unit for providing the financial service only with the result of the related approval execution.

More specifically, the user device may further include a determination unit that determines whether the financial service is an object of the payment approval, and the determination unit determines that the financial service is included in the service list previously designated as the payment approval object, The financial service is judged to be an object of the approval.

More specifically, when the approval request message is received from the service apparatus, the confirmation unit confirms that the payment related approval is required in connection with the financial service provision.

More specifically, the user device further includes a storage unit for storing predetermined payment approval information related to the payment related authorization, and the approval unit determines whether the payment related information is information suitable for the payment approval information And the payment related approval is performed.

More specifically, the payment approval information is set to correspond to each of the two or more financial services, or set to correspond to both of the two or more financial services, when the financial service is two or more.

More specifically, the user apparatus further includes a first operating system and a second operating system for respectively supporting the settlement-related approval confirmation and the settlement-related approval execution, wherein the first operating system is associated with the financial service provision A general operating system that provides an open application program interface (API) for supporting the payment related approval to confirm the payment authorization; and the second operating system is a general operating system that provides an Open Application Program Interface And an API (Application Programmer Interface) for supporting the payment related approval in connection with the financial service determined to be the payment approval object.

More specifically, the approval unit displays an information input screen for receiving the settlement related information when the financial service is determined as the settlement approval object, and displays the settlement related information input from the user on the information input screen Is received.

More specifically, the settlement-related information may include at least one of a bank security card code number, a credit card password, a security card password, and a credit card password when the financial service is one of an online remittance service, a credit card settlement service, A secure password, a secure password, and an authorized certificate password.

According to a second aspect of the present invention, there is provided a method for providing a financial service, the method comprising: a confirmation step of confirming that a payment related authorization is required for providing a financial service in a service device; An information receiving step of receiving settlement related information when the financial service is determined to be a payment approval object capable of performing the settlement related approval; An approval performing step of performing the settlement related approval based on the settlement related information; And a service providing step in which the service device provides the financial service solely based on a result of performing the settlement related authorization.

According to a third aspect of the present invention, there is provided a method of operating a user device, the method comprising: a confirmation step of confirming that a payment related authorization is required in connection with a financial service provision in a service device; An information receiving step of receiving settlement related information when the financial service is determined to be a payment approval object capable of performing the settlement related approval; And an approval performing step of performing the settlement related approval based on the settlement related information and providing the financial service only by the settlement related permission execution result without receiving the settlement related information from the service apparatus .

More specifically, in the confirming step, when an approval request message is received from the service apparatus, it is confirmed that the payment related approval is required in connection with the financial service provision.

More specifically, the method may further include a determining step of determining whether the financial service is an object of the settlement approval before the information receiving step, and the determining step may include: And if the financial service is included, the financial service is determined as the approval execution target.

More specifically, the information receiving step may include: a display step of displaying an information input screen for receiving the settlement related information when the financial service is determined as the settlement approval object; And a receiving step of receiving the settlement related information input from the user through the information input screen.

More specifically, the method may further include a storing step of storing the payment approval information previously set in association with the payment related authorization before the confirmation step, and the approval performing step may include: Determining whether the information is information suitable for the information, and performing the payment related approval.

More specifically, the payment approval information is set to correspond to each of the two or more financial services, or set to correspond to both of the two or more financial services, when the financial service is two or more.

More specifically, the settlement-related information may include at least one of a bank security card code number, a credit card password, a security card password, and a credit card password when the financial service is one of an online remittance service, a credit card settlement service, A secure password, a secure password, and an authorized certificate password.

According to a fourth aspect of the present invention, there is provided a financial service providing system comprising: a service providing apparatus for providing a financial service requiring payment approval; And when the service apparatus is confirmed that the settlement related approval is required, and when the financial service is determined as the settlement approval object capable of performing the settlement related approval, the settlement related information is received and the settlement related approval is performed And a user device for providing the financial service based on the settlement related approval result without receiving the settlement related information in the service device.

Accordingly, according to the financial service providing system and method of the present invention, and the apparatuses applied thereto, authorization for settlement required for a financial service based on TrustZone technology is performed in the user device itself, , It is possible to provide secure financial services through a combination of isolated execution environment that is not exposed from security threats and hardware security technology by providing only normal financial service by confirming the result of settlement related authorization.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic configuration diagram of a financial service providing system according to an embodiment of the present invention; FIG.
2 is a configuration diagram of a user apparatus according to an embodiment of the present invention;
FIG. 3 is a block diagram of a user apparatus employing a TrustZone technology according to an embodiment of the present invention. FIG.
FIG. 4 is a schematic flowchart illustrating an operation flow in a financial service providing system according to an embodiment of the present invention; FIG.
5 is a schematic flow diagram illustrating operation of a user device according to an embodiment of the present invention;

Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings.

1 is a diagram illustrating a financial service providing system according to an embodiment of the present invention.

1, a financial service providing system according to an embodiment of the present invention includes a service apparatus 100 for providing a financial service, and a user apparatus 100 for performing a payment related approval required for providing the financial service, (200).

The service apparatus 100 refers to a service server that provides various financial services requiring approval for settlement related to a user, and may be provided only for a financial service, or may be provided with other services (for example, an online shopping mall service) And can be additionally provided.

Here, the financial service may be, for example, an electronic money transfer service, a credit card payment service, a secure payment service (ISP) service, and a secure payment service.

Accordingly, payment approval required in the financial service is performed by a method of confirming a bank security card code number, a credit card password, a secure payment password, a secure click password, and an authorized certificate password.

The user device 200 refers to a mobile device for performing a payment related approval required in a financial service. For example, the user device 200 may be a smart phone, a tablet PC, a PDA, and the like, And a device capable of communicating with the non-service device 100 may all be included.

Meanwhile, according to an embodiment of the present invention, the user device 200 adopts a hardware security solution as a security platform technology for providing high security from a security threat element caused by a malicious attack in a mobile service environment.

In this regard, there are UICC (Universal Integrated Circuit Card), Mobile TPM (Trusted Platform Module), and the like as a hardware security solution that provides high security in a mobile terminal such as the user device 200.

Here, the UICC is a smart card for storing personal information such as messages, e-mail and address book as well as subscriber, network and authentication information in 3G mobile network, and is generally called a 'Universal Subscriber Identity Module (USIM) card'.

The Mobile TPM is a Mobile TPM that enables the TPM (Trusted Platform Module) defined by TCG (Trusted Computing Group), a standardization organization developing business standards for hardware-based trusted computing and security technologies, to be used in mobile terminals as well. Algorithm, and provides user, terminal authentication and terminal integrity verification, and user data protection.

UICC, however, can not satisfy the Trusted Execution Environment (TEE), which defines security hardware and software functions that provide a secure execution environment for security-related applications on mobile terminals due to limited performance processors and low transfer rates.

In addition, in the case of Mobile TPM, it has a disadvantage that cost increase due to the use of a separate chip and application code protection are difficult.

Therefore, in an embodiment of the present invention, a TrustZone technology that provides a hardware isolated environment from security threats, rather than using a separate hardware security chip such as the UICC and the Mobile TPM, I want to apply.

Here, as shown in FIG. 3, the trust zone is divided into hardware such that 'Normal World' and 'Secure World' exist in one CPU, and general application is operated in 'Normal World' It will provide an execution environment that will work in 'Secure World'.

That is, the 'Normal World' and the 'Secure World' are isolated from each other in hardware and operate only by the respective operating systems (the first operating system and the second operating system), and the 'Normal World' Even in situations, applets and stored data on 'Secure World' will be securely managed and run from malicious code.

In other words, 'Normal World' can not guarantee security against various security threats because it operates based on a general-purpose operating system (first operating system) disclosed to others. However, 'Secure World' (Second Operating System), which is different from 'Normal World' and is not disclosed to others in a hardware-isolated environment. Therefore, various security threats existing in 'Normal World' You will be assured of safety.

As described above, in the embodiment of the present invention, the trust zone technology is applied as described above. Hereinafter, the settlement related authorization required for the financial service based on the trust zone technology is performed in the user device itself, We propose a method for providing normal financial services by checking only the result of the payment related authorization.

The service apparatus 100 performs a function of requesting a settlement related authorization required for a financial service.

More specifically, when the financial service is requested from the connected user, the service device 100 requests the approval of the payment related to the financial service with respect to the designated user device 200.

At this time, the service apparatus 100 provides the service screen related to the financial service to the user, and receives the identification number (e.g., telephone number) of the user apparatus 200 to perform the payment related approval from the user through the service screen .

In addition, the service apparatus 100 transmits to the user apparatus 200 an approval request message for requesting permission to perform settlement based on the received identification number, thereby allowing the user apparatus 200, which has received the approval request message, Allow relevant approvals to be carried out.

Here, in the case of the approval request message, for example, it may have the form of a short message (SMS) or various other types of push messages.

In addition, the service apparatus 100 performs a function of providing a financial service to the user apparatus 200. [

More specifically, the service apparatus 100 receives only the settlement-related authorization result from the user apparatus 200, and confirms the authenticated user or the state in which the normal settlement processing is completed from the settlement-related authorization execution result, Make normal financial services available.

This is because, when the payment related authorization related to the financial service is directly performed in the service apparatus 100, the payment related information (e.g., bank security card code number, credit card password, secure payment password, secure password, Certificate password, etc.) from being exposed to risks such as hacking.

That is, the service apparatus 100 allows the user apparatus 200 to perform the settlement related affirmation by itself so that the settlement related information is not directly received from the user, The results of the approval process will provide the normal financial services.

The user device 200 performs a function of confirming that a payment related authorization is required in relation to a financial service provision in the service apparatus 100. [

More specifically, the user device 200 receives an approval request message for requesting a settlement related approval from the service apparatus 100, and requests the settlement related authorization regarding the financial service provision in the service apparatus 100 .

3, an application (APP) installed in the 'Normal World' is executed to receive an approval request message transmitted from the service apparatus 100. By analyzing the received approval request message, It is confirmed that the payment related authorization for financial service provision is requested by the apparatus 100. [

In addition, the user device 200 performs a function of determining whether payment approval can be performed.

More specifically, when it is confirmed that the payment related authorization is required with respect to the financial service, the user device 200 determines whether the financial service is a payment approval object capable of performing payment related authorization.

To this end, the user device 200 previously designates and manages a service list corresponding to a payment approval object. When it is confirmed that the financial service for which payment approval is requested is included in the service list, It is judged as an object.

3, an application on the 'Normal World', which confirms that the service apparatus 100 is required to be approved for settlement, requests the 'Secure World' to perform settlement related approval. Upon receiving the request, In the applet of the 'Secure World', the service list to be approved for payment is checked, thereby determining whether the financial service is a payment approval object.

In addition, the user device 200 performs a payment related authorization.

More specifically, when the user equipment 200 determines that the financial service requiring payment related approval is an object of payment approval, the user device 200 receives payment related information from the user and performs payment related approval based on the received payment related information .

To this end, the service apparatus 100 sets and stores payment approval information for each financial service to be approved for payment, and confirms whether the payment related information received from the user is suitable for the payment approval information, .

3, by displaying an information input screen for receiving settlement related information through execution of an applet mounted on the 'Secure World', the settlement related information is received from the user through the displayed information input screen And it is determined whether it is information suitable for the payment approval information pre-stored in the storage area of the 'Secure World', so that payment approval is performed.

Here, the payment approval information is payment related information designated to correspond to each financial service. For example, when the financial service is a credit card payment service including a secure payment (ISP) service and a secure payment service, The expiration date, and the password. In addition, in the case of the online remittance service of the corresponding financial service, information such as account information, a bank security card, and an official certificate may be applicable.

Accordingly, in the case of payment related information from the user in connection with the settlement related authorization, the bank security card code number, the credit card password, the secure settlement password, the secure click password, and the authorized certificate password corresponding to each financial service .

In addition, the user device 200 performs a function of delivering a settlement-related authorization execution result to the service apparatus 100.

More specifically, when the payment related authorization related to the financial service is completed, the user device 200 transmits the settlement related authorization execution result to the service apparatus 100, thereby allowing the service apparatus 100 to perform the payment related authorization execution result So that it can provide normal financial services.

In other words, referring to FIG. 3, by transmitting the settlement related approval result through the applet installed in the 'Secure World' to the application executing in 'Normal World', the application receiving the settlement related approval And transmits the result to the service apparatus 100 or transmits the result of the settlement related authorization directly to the service apparatus 100 so that the service apparatus 100 can provide a normal financial service.

Hereinafter, the configuration of the user apparatus 200 according to an embodiment of the present invention will be described in more detail with reference to FIG.

That is, the user device 200 according to an exemplary embodiment of the present invention includes a checking unit 210 for checking approval of payment related to a financial service, a determination unit 220 for determining a payment approval object, A storage unit 230 for storing approval information, and an approval unit 240 for performing payment related approval.

The confirmation unit 210 described above corresponds to an application (APP) installed in the 'Normal World' among the 'Normal World' classified in hardware and the 'Normal World', and calls the open API provided by the first operating system And the like.

Here, the first operating system refers to a general-purpose operating system that provides an Open Application Program Interface (API) to support the operation of the verification unit 210 located in the 'Normal World'.

In the case of each of the determination unit 220, the storage unit 230, and the approval unit 240, a software module type that operates by calling an API provided by the second operating system as a configuration corresponding to an applet installed in the 'Secure World' .

Here, the second operating system refers to a dedicated operating system that provides an API for supporting only the operations of the determination unit 220, the storage unit 230, and the approval unit 240 located in the 'Secure World' .

The confirmation unit 210 performs a function of confirming that payment approval is required in connection with the provision of the financial service in the service apparatus 100. [

More specifically, the confirmation unit 210 receives an approval request message for requesting a settlement related approval from the service apparatus 100, and requests the approval of settlement related to the financial service provision in the service apparatus 100 .

At this time, the verification unit 210 calls the open API provided by the first operating system to receive and analyze the approval request message transmitted by the service device 100. As a result of the analysis, When it is confirmed that payment related approval is requested, the approval part 240 located in the 'Secure World' is requested to perform payment related approval.

The determination unit 220 performs a function of determining whether payment related approval is possible.

More specifically, the determination unit 220 determines whether or not the financial service is a payment approval object that can perform the payment related authorization, in connection with the payment related authorization request transmitted to the approval unit 210.

For this, the determination unit 220 pre-designates and manages a service list corresponding to a payment approval target, and only when it is confirmed that the financial service for which payment approval is requested is included in the service list, It is judged to be an object of approval.

At this time, the determination unit 220 calls the API provided by the second operating system and checks the list of services previously designated as a payment approval target, thereby determining whether the financial service is a payment approval object.

The approval unit 240 performs a payment related approval.

More specifically, when it is determined that the financial service requiring payment related approval is an object of payment approval, the approval unit 240 receives payment related information from the user and performs payment related approval based on the received payment related information .

To this end, the service apparatus 100 sets the settlement approval information for each of the financial services subject to settlement approval in advance and stores it in the storage unit 230. The service apparatus 100 confirms whether the settlement related information received from the user is suitable for the settlement approval information , The settlement related approval is performed.

At this time, the approval unit 240 receives the payment related information from the user through the information input screen by calling the API provided by the second operating system and displaying the information input screen for receiving the payment related information, The payment related information is determined by determining whether the payment related information is information suitable for the payment approval information stored in the storage unit 230 located in the 'Secure World'.

On the other hand, in addition to the setting of the settlement approval information for each financial service, the approval unit 240 permits one access permission information ('Secure World' ), And can be additionally managed.

Accordingly, the approval unit 240 receives the password corresponding to the access permission information from the user in order to perform the settlement related approval, preferentially confirms that the user is the authenticated user, and then adds the payment related information corresponding to each financial service To perform substantially the payment approval required by each financial service.

Here, in the case of the payment approval information, the payment approval information is stored and managed in the storage unit 230 located in the 'Secure World' rather than the general memory area located in the 'Normal World' In order to secure the payment approval information from various security threats existing in 'Normal World' through the storage management of the payment approval information based on the second operating system independent from the 'Normal World' in the isolated environment.

In addition, the approval unit 240 performs a function of transferring the settlement related approval result to the service apparatus 100. [

More specifically, the approval unit 240 transmits the settlement-related approval result to the service apparatus 100 when the payment-related authorization related to the financial service is completed, thereby allowing the service apparatus 100 to perform the settlement- So that it can provide normal financial services.

At this time, the approval unit 240 calls the API provided by the second operating system and transmits the settlement related approval result to the verification unit 210 located in the 'Normal World', thereby allowing the verification unit 210 to transmit the authentication result to the service device 100 To the service apparatus 100, or to transmit the settlement related approval result directly to the service apparatus 100 by activating the communication function on the 'Secure World' so that the service apparatus 100 provides the normal financial service.

As described above, according to the financial service providing system according to the embodiment of the present invention, when the user device 200 based on the trust zone (TrustZone) And if the financial service is determined to be a payment approval object capable of performing the settlement related approval, the settlement related information is received to perform the settlement related approval, The secure financial service can be provided by combining the isolated execution environment that is not exposed from the security threats and the hardware security technology by providing the financial service only with the result of the settlement related approval without receiving the related information.

Hereinafter, an advertisement service method according to an embodiment of the present invention will be described with reference to FIGS. 4 and 5. FIG. Here, for convenience of explanation, the configurations shown in FIGS. 1 and 2 will be described with reference to corresponding reference numerals.

First, with reference to FIG. 4, the operational flow in the financial service providing system according to an embodiment of the present invention will be described.

First, when the financial service is requested from the connected user, the service device 100 requests the approval of the payment related to the financial service with respect to the designated user device 200 (S110 - S120).

Accordingly, the user device 200 receives an approval request message for requesting permission for settlement related to the service apparatus 100, and the settlement related authorization for the financial service provision is requested by the service apparatus 100 (S130).

Then, when it is confirmed that the payment related authorization is requested with respect to the financial service, the user device 200 determines whether the financial service is a payment approval object capable of performing the payment related authorization (S140).

At this time, the user device 200 pre-designates and manages a service list corresponding to a payment approval target. When it is confirmed that the financial service for which payment approval is requested is included in the service list, .

Next, when it is determined that the financial service for which settlement related approval is required is an object of settlement approval, the user device 200 receives the settlement related information from the user and performs the settlement related approval based on the received settlement related information ( S150-S160).

At this time, the service apparatus 100 sets and stores payment approval information for each financial service to be approved for payment, and confirms whether the payment related information received from the user is suitable for the payment approval information, It will be done.

Then, when the payment related authorization related to the financial service is completed, the user device 200 transmits the settlement related authorization execution result to the service apparatus 100, thereby allowing the service apparatus 100 to transmit only the payment related authorization execution result And to provide normal financial services (S170).

In this regard, the service apparatus 100 receives only the result of the settlement-related approval from the user device 200, and confirms the status of the authenticated user or the normal settlement process from the result of the settlement-related permission, So that normal financial services can be utilized (S180).

Hereinafter, the operation of the user apparatus 200 according to an embodiment of the present invention will be described in detail with reference to FIG.

First, the confirmation unit 210 receives an approval request message for requesting a settlement related approval from the service apparatus 100, and requests approval of the settlement related to the financial service provision in the service apparatus 100 (S210 - S220).

At this time, the verification unit 210 calls the open API provided by the first operating system to receive and analyze the approval request message transmitted by the service device 100. As a result of the analysis, When it is confirmed that payment related approval is requested, the approval part 240 located in the 'Secure World' is requested to perform payment related approval.

Then, the determination unit 220 determines whether the financial service is a settlement approval object that can perform settlement related authorization with respect to the settlement related permission request transmitted to the approval unit 210 (S230).

At this time, the determination unit 220 calls the API provided by the second operating system and checks the list of services previously designated as a payment approval target, thereby determining whether the financial service is a payment approval object.

Then, when it is determined that the financial service requiring payment related approval is an object of payment approval, the approval unit 240 receives payment related information from the user and performs payment related approval based on the received payment related information ( S240-S270).

At this time, the approval unit 240 receives the payment related information from the user through the information input screen by calling the API provided by the second operating system and displaying the information input screen for receiving the payment related information, The payment related information is determined by determining whether the payment related information is information suitable for the payment approval information stored in the storage unit 230 located in the 'Secure World'.

When the payment related authorization related to the financial service is completed, the approval unit 240 transmits the settlement related authorization execution result to the service apparatus 100, thereby allowing the service apparatus 100 to confirm only the payment related authorization execution result To provide a normal financial service (S280 - S290).

At this time, the approval unit 240 calls the API provided by the second operating system and transmits the settlement related approval result to the verification unit 210 located in the 'Normal World', thereby allowing the verification unit 210 to transmit the authentication result to the service device 100 To the service apparatus 100, or to transmit the settlement related approval result directly to the service apparatus 100 by activating the communication function on the 'Secure World' so that the service apparatus 100 provides the normal financial service.

As described above, according to the method of providing a financial service according to an embodiment of the present invention, when a user device 200 based on a trust zone (TrustZone) And if the financial service is determined to be a payment approval object capable of performing the settlement related approval, the settlement related information is received to perform the settlement related approval, The secure financial service can be provided by combining the isolated execution environment that is not exposed from the security threats and the hardware security technology by providing the financial service only with the result of the settlement related approval without receiving the related information.

Meanwhile, the steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, or may be embodied in a computer readable medium, in the form of a program instruction, which may be carried out through various computer means. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

According to the financial service providing system and method of the present invention, and the apparatuses applied thereto, approval of settlement required for a financial service based on TrustZone technology is performed in the user device itself, As a result of the fact that only the result of the related approval is confirmed and the normal financial service is provided, it exceeds the limit of the existing technology. Therefore, not only the utilization of the related technology but also the possibility of marketing or operating the applicable device is sufficient. This is an invention that is likely to be used in industry.

100: Service device
200: User device
210: Identification unit 220:
230: storage unit 240:

Claims (15)

A confirmation unit for confirming that a payment related authorization is required in connection with the provision of a financial service in the service device; And
Wherein the service providing unit receives the settlement related information and performs the settlement related approval when the financial service is determined as the settlement approval object capable of performing the settlement related approval, And an approval unit for allowing the financial service to be provided only by a result of the approval execution. The method according to claim 1,
The user device comprising:
Further comprising a determination unit for determining whether the financial service is an object of the payment approval,
Wherein,
If the financial service is included in the service list previously designated as the payment approval target, determines the financial service as the approval execution target. The method according to claim 1,
The checking unit,
When the approval request message is received from the service apparatus, confirms that the payment related approval is required in connection with the financial service provision. The method according to claim 1,
The user device comprising:
And a storage unit for storing payment approval information previously set in association with the payment related authorization,
Wherein the approval unit comprises:
Wherein the user terminal determines whether the payment related information is information suitable for the payment approval information and performs the payment related approval. 5. The method of claim 4,
The payment approval information includes:
Wherein the financial service is set to correspond to each of the two or more financial services when the financial service is two or more, or to correspond to both of the two or more financial services. The method according to claim 1,
The user device comprising:
Further comprising a first operating system and a second operating system for supporting the payment related approval confirmation and the payment related approval approval respectively,
The first operating system,
A general-purpose operating system that provides an open application program interface (API) to support confirmation of the payment related authorization required in connection with the financial service provision,
The second operating system,
An application programmer interface (API) for providing an API (Application Programmer Interface) for determining the financial service as the payment approval object and for supporting the payment related approval with respect to the financial service determined as the payment approval object, Wherein the user device is a system. The method according to claim 1,
Wherein the approval unit comprises:
And displays the information input screen for receiving the settlement related information when the financial service is determined as the settlement approval object and receives the settlement related information input from the user through the information input screen Device. The method according to claim 1,
The payment-
If the financial service is one of an online remittance service, a credit card payment service, a secure payment service (ISP) service, and a secure payment service, a bank security card code number, a credit card password, a secure payment password, A password, and a password. A confirming step of confirming that a settlement related approval is required in relation to the provision of a financial service in the service device;
An information receiving step of receiving settlement related information when the financial service is determined to be a payment approval object capable of performing the settlement related approval; And
And an approval step of performing the payment related approval on the basis of the settlement related information and providing the financial service only by the settlement related approval execution result without receiving the settlement related information in the service apparatus Lt; / RTI > 10. The method of claim 9,
Wherein,
When the approval request message is received from the service apparatus, confirming that the payment related approval is required in connection with the financial service provision. 10. The method of claim 9,
The method comprises:
Further comprising a determining step of determining whether the financial service is the payment approval object before the information receiving step,
Wherein,
And if the financial service is included in the service list previously designated as the settlement approval target, the financial service is determined as the approval performing object. 10. The method of claim 9,
The information receiving step includes:
A display step of displaying an information input screen for receiving the settlement related information when the financial service is determined as the settlement approval object; And
And a receiving step of receiving the payment related information input from the user through the information input screen. 10. The method of claim 9,
The method comprises:
Further comprising a storing step of storing payment approval information previously set in association with the settlement related permission before the confirming step,
In the approval step,
Determining whether the payment related information is information suitable for the payment approval information, and performing the payment related approval. 14. The method of claim 13,
The payment approval information includes:
Wherein the financial service is set to correspond to each of the two or more financial services when the financial service is two or more, or to correspond to both of the two or more financial services. 10. The method of claim 9,
The payment-
If the financial service is one of an online remittance service, a credit card payment service, a secure payment service (ISP) service, and a secure payment service, a bank security card code number, a credit card password, a secure payment password, And the password is at least one of a password and a password.

Images