Method and system for providing electronic financial services using one-time password

Abstract

The present invention relates to a method and system for providing electronic financial services using an OTP, comprising: a remittance terminal that transmits payment request information including location information of a remittance terminal and receives and transmits OTP information; a collection terminal that receives the OTP information, transmits the OTP information and location information of a collection terminal, and inputs a payment amount or withdrawal account information; a service server that generates the OTP information according to the payment request information of the remittance terminal and transmits it to the remittance terminal, receives the location information of the collection terminal from the collection terminal and determines whether the location information of the remittance terminal and the location information of the collection terminal are identical, requests the collection terminal to confirm the payment amount or withdrawal account information, and transmits a transfer request information including the withdrawal account information; and an institution server that executes a transfer of the collection terminal according to the transfer request information.

Description

Technology Field

[0001] The present invention relates to an electronic financial system, and more specifically, to a method and system for providing electronic financial services using an OTP. Background Technology

[0003] With the 활성화 (activation / growth) of electronic financial transactions and the occurrence of hacking incidents, anxiety regarding electronic financial transactions is escalating. Consequently, various types of security solutions are being provided, including OTP (One-Time Password) that generates a new one-time password for each transaction, keyboard security that encrypts keyboard input information, web encryption that encrypts information transmitted between the customer's web browser and the financial institution's web server, and DB security to protect the customer information database itself.

[0004] Recently, the government has been preparing comprehensive measures to strengthen the safety of electronic financial transactions in four areas: prevention of hacking, electronic finance, e-commerce, and accredited certificates. In this regard, the Financial Supervisory Service has announced the introduction of OTP terminals as a recommendation.

[0005] OTP is a security system that generates a new password every time a user requests authentication. While this one-time password is referred to as OTP, the device that generates it is also sometimes called an OTP in a broader sense. By utilizing OTP, electronic financial transactions can be protected from hacking by eliminating the possibility of password exposure during the user authentication process.

[0006] However, the existing OTP system requires each financial institution to individually provide OTPs and related devices, which causes inconvenience for users who must store multiple OTPs, and places a burden on financial institutions in terms of the cost of issuing OTPs and related devices to each customer.

[0007] Accordingly, the Financial Supervisory Service is encouraging the establishment of integrated authentication centers to enable transactions with multiple financial institutions using a single OTP, thereby enhancing user convenience and preventing redundant investment; however, this approach currently faces many problems, such as the possibility of internal customer information leakage, the sharing of implementation costs, and the concentration of financial transaction information. Prior art literature

[0009] Domestic Registered Patent No. 10-0862960, Domestic Published Patent No. 10-2016-0123087, Domestic Published Patent No. 10-2009-0037168 The problem to be solved

[0010] This specification was devised to solve the problems described above, and its purpose is to provide a method and system for providing electronic financial services using OTP that enables transactions with multiple financial institutions in a simplified manner.

[0011] In addition, another objective of the present invention is to provide a method and system for providing electronic financial services using an OTP with enhanced security features and without leaking internal customer information. means of solving the problem

[0013] According to a first embodiment of the present specification for achieving the above purpose, an electronic financial service providing system using an OTP according to the present specification comprises: a remittance terminal that transmits payment request information including remittance terminal location information and receives and transmits OTP information; a collection terminal that receives the OTP information, transmits the OTP information and collection terminal location information, and inputs a payment amount or withdrawal account information; a service server that generates the OTP information according to the payment request information of the remittance terminal and transmits it to the remittance terminal, receives the collection terminal location information from the collection terminal and determines whether the remittance terminal location information and the collection terminal location information are identical, requests the collection terminal to confirm the payment amount or withdrawal account information, and transmits a transfer request information including the withdrawal account information; and an institution server that executes a transfer of the collection terminal according to the transfer request information.

[0014] Preferably, the service server selects either non-face-to-face or face-to-face as the OTP complexity, and if non-face-to-face is selected, generates link-type OTP information, and if face-to-face is selected, generates password-type OTP information.

[0015] Preferably, the service server determines that if the remittance terminal location information and the collection terminal location information are the same, it is a face-to-face interaction and requests the collection terminal to confirm the withdrawal account information; if the remittance terminal location information and the collection terminal location information are not the same, it determines that it is a non-face-to-face interaction and requests the collection terminal to confirm the payment amount; and if the payment amount entered from the collection terminal matches a preset payment amount, it requests the collection terminal to confirm the withdrawal account information.

[0016] According to a second embodiment of the present specification, a method for providing an electronic financial service using an OTP according to the present specification comprises: a step in which a remittance terminal transmits payment request information including remittance terminal location information to a service server; a step in which the service server generates OTP information according to the payment request information of the remittance terminal and transmits it to the remittance terminal; a step in which the remittance terminal transmits the OTP information to a collection terminal; a step in which the collection terminal transmits the OTP information and collection terminal location information to the service server; a step in which the service server determines whether the remittance terminal location information and the collection terminal location information are identical, and then requests the collection terminal to confirm a payment amount or withdrawal account information; a step in which the collection terminal inputs the payment amount or withdrawal account information; a step in which the service server transmits transfer request information including the withdrawal account information to an institution server; and a step in which the institution server executes a transfer of the collection terminal according to the transfer request information of the service server.

[0017] According to a third embodiment of the present specification, an electronic financial service providing system using an OTP according to the present specification comprises: a remittance terminal that transmits remittance request information including remittance terminal location information and receives and transmits OTP information; a collection terminal that receives the OTP information, transmits the OTP information and collection terminal location information, and inputs a remittance amount or withdrawal account information; a service server that generates the OTP information according to the remittance request information of the remittance terminal and transmits it to the remittance terminal, receives the collection terminal location information from the collection terminal and determines whether the remittance terminal location information and the collection terminal location information are identical, requests the collection terminal to confirm the remittance amount or withdrawal account information, and transmits the remittance request information including the withdrawal account information; and an institution server that executes a remittance by the collection terminal according to the remittance request information.

[0018] Preferably, the service server determines that if the location information of the remittance terminal and the location information of the collection terminal are the same, it is a face-to-face interaction and requests the collection terminal to confirm the withdrawal account information; if the location information of the remittance terminal and the location information of the collection terminal are not the same, it determines that it is a non-face-to-face interaction and requests the collection terminal to confirm the remittance amount; and if the remittance amount entered from the collection terminal matches a preset remittance amount, it requests the collection terminal to confirm the withdrawal account information.

[0019] According to a fourth embodiment of the present specification, a method for providing an electronic financial service using an OTP according to the present specification comprises: a step in which a remittance terminal transmits remittance request information including remittance terminal location information to a service server; a step in which the service server generates OTP information according to the remittance request information of the remittance terminal and transmits it to the remittance terminal; a step in which the remittance terminal transmits the OTP information to a collection terminal; a step in which the collection terminal transmits the OTP information and collection terminal location information to the service server; a step in which the service server determines whether the remittance terminal location information and the collection terminal location information are identical, and then requests the collection terminal to confirm the remittance amount or withdrawal account information; a step in which the collection terminal inputs the remittance amount or withdrawal account information; a step in which the service server transmits the remittance request information including the withdrawal account information to an institution server; and a step in which the institution server executes the remittance of the collection terminal according to the remittance request information of the service server. Effects of the invention

[0021] As explained above, according to the present specification, in providing financial transactions such as payment or remittance, by providing a method and system for providing electronic financial services using an OTP that compares location information between a remittance terminal and a collection terminal as a first authentication and compares amount information as a second authentication, internal customer information is not leaked and electronic financial services can be provided in a simplified manner. Brief explanation of the drawing

[0023] FIG. 1 is a block diagram showing the schematic configuration of an electronic financial service provision system according to an embodiment of the present invention. FIG. 2 is a block diagram showing the schematic configuration inside a service server according to an embodiment of the present invention. FIG. 3 is a block diagram illustrating an example of hardware capable of realizing the functions of a service server according to an embodiment of the present invention, FIG. 4 is a signal flowchart illustrating a payment processing process using OTP according to an embodiment of the present invention, and FIG. 5 is a signal flow diagram showing a remittance processing process using OTP according to an embodiment of the present invention. Specific details for implementing the invention

[0024] It should be noted that technical terms used in this specification are used merely to describe specific embodiments and are not intended to limit the invention. Furthermore, unless specifically defined otherwise in this specification, technical terms used in this specification should be interpreted in the sense generally understood by those skilled in the art to which the invention pertains, and should not be interpreted in an overly broad or overly narrow sense. Additionally, if a technical term used in this specification is an incorrect technical term that fails to accurately express the spirit of the invention, it should be understood as being replaced by a technical term that can be correctly understood by those skilled in the art. Moreover, general terms used in this invention should be interpreted according to their prior definitions or the context, and should not be interpreted in an overly narrow sense.

[0025] Additionally, singular expressions used in this specification include plural expressions unless the context clearly indicates otherwise. In this application, terms such as "composed of" or "comprising" should not be interpreted as necessarily including all of the various components or steps described in the specification, and should be interpreted as meaning that some of the components or steps may not be included, or that additional components or steps may be included.

[0026] Furthermore, the suffixes "module" and "part" for components used in this specification are assigned or used interchangeably solely for the sake of ease of drafting the specification, and do not inherently possess distinct meanings or roles.

[0027] Additionally, terms including ordinal numbers, such as first, second, etc., used herein may be used to describe various components, but said components should not be limited by said terms. Such terms are used solely for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be named the second component, and similarly, the second component may be named the first component.

[0028] Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the attached drawings. Identical or similar components are given the same reference number regardless of the drawing symbols, and redundant descriptions thereof will be omitted.

[0029] Furthermore, in describing the present invention, detailed descriptions of related prior art are omitted if it is determined that such descriptions could obscure the essence of the invention. Additionally, it should be noted that the attached drawings are intended only to facilitate an understanding of the concept of the present invention and should not be interpreted as limiting the concept of the invention.

[0030] FIG. 1 is a block diagram showing the schematic configuration of an electronic financial service provision system according to an embodiment of the present invention.

[0031] Referring to FIG. 1, the electronic financial service providing system according to the present invention may include a remittance terminal (110), a collection terminal (120), a service server (130), an institution server (140), and a network (150).

[0032] The remittance terminal (110) and the collection terminal (120) may be fixed terminals or mobile terminals implemented as computer devices. Examples of the remittance terminal (110) and the collection terminal (120) include smartphones, mobile phones, navigation systems, computers, laptops, digital broadcasting terminals, PDAs (Personal Digital Assistants), PMPs (Portable Multimedia Players), tablet PCs, etc. For example, the remittance terminal (110) may communicate with the collection terminal (120) and / or the service server (130) via a network (150) using a wireless or wired communication method.

[0033] The communication method is not limited and may include not only communication methods utilizing communication networks (e.g., mobile communication networks, wired internet, wireless internet, broadcasting networks) that the network (150) may include, but also short-range wireless communication between devices. For example, the network (150) may include any one or more networks such as a PAN (personal area network), LAN (local area network), CAN (campus area network), MAN (metropolitan area network), WAN (wide area network), BBN (broadband network), and the Internet. Additionally, the network (150) may include any one or more network topologies such as a bus network, star network, ring network, mesh network, star-bus network, tree or hierarchical network, but is not limited thereto.

[0034] The service server (130) may be implemented as a computer device or a plurality of computer devices that communicate with the remittance terminal (110) and the collection terminal (120) through the network (150) to provide commands, codes, files, content, services, etc.

[0035] For example, the service server (130) may provide a file for installing an application to a remittance terminal (110) and a collection terminal (120) connected via a network (150). In this case, the remittance terminal (110) and the collection terminal (120) may install the application using the file provided by the service server (130). Additionally, each of the remittance terminal (110) and the collection terminal (120) may connect to the service server (130) under the control of an operating system (OS) and at least one program (e.g., a browser or an installed application) and receive the service or content provided by the service server (130). For example, if the remittance terminal (110) transmits payment request information or remittance request information for the collection terminal (120) to the service server (130) via the network (150) under the control of the application, the service server (130) may instruct the institution server (140) to execute the transfer or remittance of the collection terminal (120) according to the request information. As another example, the service server (130) may establish a communication session for data transmission and reception and route data transmission and reception between the remittance terminal (110) and the collection terminal (120) through the established communication session.

[0036] The institution server (140) refers to a server operated by an institution or by a third-party institution entrusted by the institution, and can process information regarding clients using the service server (130), information regarding the service server (130), client security authentication information, and financial transaction information. Here, the institution may be any one of a company or public institution providing financial services, such as a bank, insurance company, securities company, credit card company, investment financial company, comprehensive financial company, mutual credit union, credit cooperative investment trust company, a portal site capable of using financial transaction functions, or an e-commerce site.

[0037] <결제 서비스>

[0038] The remittance terminal (110) transmits payment request information including remittance terminal location information to the service server (130), receives OTP information from the service server (130), and transmits the received OTP information to the collection terminal (120).

[0039] The collection terminal (120) receives OTP information from the remittance terminal (110) and transmits the OTP information and the collection terminal location information to the service server (130). Additionally, the collection terminal (120) inputs the payment amount or withdrawal account information in response to a request from the service server (130) to verify the payment amount or withdrawal account information.

[0040] The service server (130) generates OTP information based on the payment request information of the remittance terminal (110) and transmits the generated OTP information to the remittance terminal (110). Here, when generating the OTP information, the service server (130) selects either non-face-to-face or face-to-face as the OTP complexity, and if non-face-to-face is selected, it generates link-type OTP information, and if face-to-face is selected, it generates password-type OTP information.

[0041] Additionally, as a first authentication, the service server (130) determines whether the location information of the remittance terminal and the location information of the collection terminal are the same, and if the location information of the remittance terminal and the location information of the collection terminal are the same, it requests the collection terminal (120) to confirm the withdrawal account information and receives the withdrawal account information from the collection terminal (120). If the location information of the remittance terminal and the location information of the collection terminal are not the same, as a second authentication, the service server (130) requests the collection terminal (120) to confirm the payment amount and receives the payment amount from the collection terminal (120), and determines whether the received payment amount matches the pre-set payment amount, and if the payment amount matches the pre-set payment amount, it requests the collection terminal (120) to confirm the withdrawal account information. Here, the pre-set payment amount may be a payment amount entered in advance from the remittance terminal (110).

[0042] Additionally, the service server (130) stores the withdrawal account information and then transmits the transfer request information including the withdrawal account information to the institution server (140).

[0043] After the institution server (140) approves the payment, it stores the payment record and executes the transfer of the collection terminal (120) according to the transfer request information of the service server (130).

[0044] <송금 서비스>

[0045] The remittance terminal (110) transmits remittance request information including remittance terminal location information to the service server (130), receives OTP information from the service server (130), and transmits the received OTP information to the collection terminal (120).

[0046] The collection terminal (120) receives OTP information from the remittance terminal (110) and transmits the OTP information and the collection terminal location information to the service server (130). Additionally, the collection terminal (120) inputs the remittance amount or withdrawal account information in response to a request from the service server (130) to verify the remittance amount or withdrawal account information.

[0047] The service server (130) generates OTP information based on the remittance request information of the remittance terminal (110) and transmits the generated OTP information to the remittance terminal (110). Here, the service server (130) can generate OTP information in the form of a password input.

[0048] Additionally, as a first authentication, the service server (130) determines whether the location information of the remittance terminal and the location information of the collection terminal are the same, and if the location information of the remittance terminal and the location information of the collection terminal are the same, it requests the collection terminal (120) to confirm the withdrawal account information and receives the withdrawal account information from the collection terminal (120). If the location information of the remittance terminal and the location information of the collection terminal are not the same, as a second authentication, the service server (130) requests the collection terminal (120) to confirm the remittance amount and receives the remittance amount from the collection terminal (120), and determines whether the received remittance amount matches the pre-set remittance amount, and if the remittance amount matches the pre-set remittance amount, it requests the collection terminal (120) to confirm the withdrawal account information. Here, the pre-set remittance amount may be a remittance amount entered in advance from the remittance terminal (110).

[0049] Additionally, the service server (130) stores the withdrawal account information and then transmits the remittance request information including the withdrawal account information to the institution server (140).

[0050] After the institution server (140) approves the remittance, it stores the remittance record and executes the remittance of the collection terminal (120) according to the remittance request information of the service server (130).

[0051] FIG. 2 is a block diagram showing the schematic configuration inside a service server according to an embodiment of the present invention.

[0052] Referring to FIG. 2, the service server (130) according to the present invention may include an OTP generation unit (210), a location comparison unit (220), an amount comparison unit (230), and a financial processing unit (240).

[0053] The OTP generation unit (210) generates OTP information according to the payment request information or remittance request information of the remittance terminal (110). Here, the OTP generation unit (210) can generate OTP information using a link method or a password input method.

[0054] The location comparison unit (220) receives location information of the remittance terminal (110) and location information of the collection terminal (120) respectively from the remittance terminal (110) and the collection terminal (120), and compares the location information of the remittance terminal and the location information of the collection terminal as a first authentication. That is, if the remittance terminal (110) and the collection terminal (120) are equipped with a GPS (Global Positioning System) module (not shown), the location comparison unit (220) compares the location coordinates extracted by the said GPS module to determine whether the location of the remittance terminal (110) and the location of the collection terminal (120) are within the same range.

[0055] The amount comparison unit (230) receives amount information from the collection terminal (120) and, as a second authentication, compares the received amount information with pre-set amount information. For example, the amount comparison unit (230) may receive a payment amount from the collection terminal (120) and compare the received payment amount with a pre-set payment amount. Additionally, the amount comparison unit (230) may receive a remittance amount from the collection terminal (120) and compare the received remittance amount with a pre-set remittance amount.

[0056] The financial transaction processing unit (240), based on the judgment result of the amount comparison unit (230), if the amount information and the pre-set amount information match, requests the collection terminal (120) to verify the withdrawal account information, receives the withdrawal account information from the collection terminal (120), stores the received withdrawal account information, and then transmits the transfer request information or remittance request information including the withdrawal account information to the institution server (140), thereby instructing the institution server (140) to execute a transfer or remittance, etc., of the collection terminal (120).

[0057] FIG. 3 is a block diagram illustrating an example of hardware capable of realizing the functions of a service server according to an embodiment of the present invention.

[0058] The function of the service server (130) can be realized, for example, by using the hardware resources shown in FIG. 3. That is, the function of the service server (130) is realized by controlling the hardware shown in FIG. 3 using a computer program.

[0059] As illustrated in FIG. 3, this hardware mainly has a CPU (302), ROM (Read Only Memory) (304), RAM (306), a host bus (308), and a bridge (310). Additionally, this hardware has an external bus (312), an interface (314), an input section (316), an output section (318), a memory section (320), a drive (322), a connection port (324), and a communication section (326).

[0060] The CPU (302) functions, for example, as an arithmetic processing unit or a control unit, and controls the operation of each component or part thereof based on various programs recorded in the ROM (304), RAM (306), memory unit (320), or removable recording medium (328).

[0061] ROM (304) is an example of a memory device that stores programs read by the CPU (302) or data used for calculations. RAM (306) stores, for example, programs read by the CPU (302) or various parameters that change when the program is executed, temporarily or permanently.

[0062] These elements are connected to each other, for example, through a host bus (308) capable of high-speed data transmission. Meanwhile, the host bus (308) is connected to an external bus (312) with a relatively low data transmission speed, for example, through a bridge (310). Additionally, for the input unit (316), for example, a mouse, keyboard, touch panel, touch pad, button, switch, and lever are used. Additionally, for the input unit (316), a remote controller capable of transmitting control signals using infrared or other radio waves may be used.

[0063] As the output unit (318), a display device such as a CRT (Cathode Ray Tube), LCD (Liquid Crystal Display), PDP (Plasma Display Panel), or ELD (Electro-Luminescence Display) may be used. Additionally, as the output unit (318), an audio output device such as a speaker or headphones, or a printer, may be used.

[0064] The memory unit (320) is a device for storing various data. For example, a magnetic memory device such as an HDD is used as the memory unit (320). In addition, a semiconductor memory device such as an SSD (Solid State Drive) or RAM disk, an optical memory device, or a magneto-optical memory device may be used as the memory unit (320).

[0065] The drive (322) is a device that reads information recorded on a removable recording medium (328), which is a removable recording medium, or records information on the removable recording medium (328). For example, a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory may be used as the removable recording medium (328). Additionally, a program defining the operation of the service server (130) may be stored on the removable recording medium (328).

[0066] The connection port (324) is a port for connecting an external connection device (330), such as a USB (Universal Serial Bus) port, an IEEE 1394 port, a SCSI (Small Computer System Interface), an RS-232C port, or an optical audio terminal. As an external connection device (330), for example, a printer is used.

[0067] The communication unit (326) is a communication device for connecting to a network (332). For example, a communication circuit for a wired or wireless LAN, a communication circuit for a WUSB (Wireless USB), a communication circuit for a mobile phone network, etc. may be used as the communication unit (326). The network (332) is, for example, a network connected by a wired or wireless connection.

[0068] The hardware of the service server (130) has been described above. In addition, the hardware described above is an example, and variations such as omitting some elements or adding new elements are possible.

[0069] FIG. 4 is a signal flow diagram showing a payment processing process using OTP according to an embodiment of the present invention.

[0070] Referring to FIG. 4, the remittance terminal (110) transmits payment request information including remittance terminal location information to the service server (130) (S410). At this time, the institution server (140) can store the payment record after approving the payment.

[0071] When generating OTP information, the service server (130) selects either non-face-to-face or face-to-face as the OTP complexity (S412), and if face-to-face is selected, generates OTP information in the password input method (S414), and if non-face-to-face is selected, generates OTP information in the link method (S415).

[0072] Next, the service server (130) transmits the generated OTP information to the remittance terminal (110) (S416).

[0073] The remittance terminal (110) transmits OTP information to the collection terminal (120) (S418).

[0074] Next, the remittance terminal (110) transmits OTP information and collection terminal location information to the service server (130) (S420).

[0075] The service server (130) determines whether the transfer terminal location information and the collection terminal location information are the same (S422), and if the transfer terminal location information and the collection terminal location information are not the same, requests the collection terminal (120) to confirm the payment amount (S424). If the service server (130) determines whether the transfer terminal location information and the collection terminal location information are the same, requests the collection terminal (120) to confirm the withdrawal account information (S430).

[0076] The collection terminal (110) inputs the payment amount in response to the payment amount verification request from the service server (130) (S426).

[0077] The service server (130) determines whether the payment amount entered from the collection terminal (110) matches the pre-set payment amount (S428), and if the payment amount matches the pre-set payment amount, requests the collection terminal (120) to verify the withdrawal account information (S430). If the payment amount does not match the pre-set payment amount, the service server (130) again requests the collection terminal (120) to verify the payment amount (S424).

[0078] Next, the collection terminal (120) inputs withdrawal account information (S432).

[0079] Next, the service server (130) transmits transfer request information including withdrawal account information to the institution server (140) (S434).

[0080] The institution server (140) executes the transfer of the collection terminal (120) according to the transfer request information of the service server (130) (S436).

[0081] FIG. 5 is a signal flow diagram showing a remittance processing process using OTP according to an embodiment of the present invention.

[0082] Referring to FIG. 5, the remittance terminal (110) transmits remittance request information including remittance terminal location information to the service server (130) (S510). At this time, the institution server (140) can store the remittance record after approving the remittance.

[0083] The service server (130) generates OTP information in the password input method (S512).

[0084] Next, the service server (130) transmits the generated OTP information to the remittance terminal (110) (S514).

[0085] The remittance terminal (110) transmits OTP information to the collection terminal (120) (S516).

[0086] Next, the remittance terminal (110) transmits OTP information and collection terminal location information to the service server (130) (S518).

[0087] The service server (130) determines whether the transfer terminal location information and the collection terminal location information are the same (S520), and if the transfer terminal location information and the collection terminal location information are not the same, requests the collection terminal (120) to confirm the transfer amount (S522). If the service server (130) determines whether the transfer terminal location information and the collection terminal location information are the same, requests the collection terminal (120) to confirm the withdrawal account information (S528).

[0088] The collection terminal (110) inputs the remittance amount in response to the remittance amount confirmation request from the service server (130) (S524).

[0089] The service server (130) determines whether the remittance amount entered from the collection terminal (110) matches the pre-set remittance amount (S526), ​​and if the remittance amount matches the pre-set remittance amount, requests the collection terminal (120) to verify the withdrawal account information (S528). If the remittance amount does not match the pre-set remittance amount, the service server (130) again requests the collection terminal (120) to verify the remittance amount (S522).

[0090] Next, the collection terminal (120) inputs withdrawal account information (S530).

[0091] Next, the service server (130) transmits remittance request information including withdrawal account information to the institution server (140) (S532).

[0092] The institution server (140) executes the transfer of the collection terminal (120) according to the transfer request information of the service server (130) (S534).

[0093] The above-described method can be implemented through various means. For example, embodiments of the present invention may be implemented by hardware, firmware, software, or a combination thereof.

[0094] In the case of implementation by hardware, the method according to the embodiments of the present invention may be implemented by one or more ASICs (Application Specific Integrated Circuits), DSPs (Digital Signal Processors), DSPDs (Digital Signal Processing Devices), PLDs (Programmable Logic Devices), FPGAs (Field Programmable Gate Arrays), processors, controllers, microcontrollers, and microprocessors, etc.

[0095] In the case of implementation by firmware or software, the method according to the embodiments of the present invention may be implemented in the form of a module, procedure, or function that performs the functions or operations described above. The software code may be stored in a memory unit and executed by a processor. The memory unit may be located inside or outside the processor and may exchange data with the processor by various means already known.

[0096] The embodiments disclosed in this specification have been described above with reference to the accompanying drawings. The embodiments illustrated in each drawing should not be interpreted restrictively and may be combined with one another by those skilled in the art who have read the contents of this specification; in such cases, it may be interpreted that some components may be omitted.

[0097] Herein, terms or words used in this specification and claims should not be interpreted as being limited to their ordinary or dictionary meanings, but should be interpreted in a sense and concept consistent with the technical ideas disclosed in this specification.

[0098] Therefore, it should be understood that the embodiments described in this specification and the configurations illustrated in the drawings are merely embodiments disclosed in this specification and do not represent all technical ideas disclosed in this specification, and that various equivalents and modifications that can replace them may exist at the time of filing this application. Explanation of the symbols

[0100] 110: Transfer terminal 120: Collection terminal 130: Service Server 140: Organization Server 150: Network 210: OTP Generation Unit 220: Location Comparison Section 230: Price Comparison Section 240: Financial Transaction Processing Department

Claims

Claim 1 A remittance terminal that transmits payment request information including location information of a remittance terminal and receives and transmits OTP information; a collection terminal that receives the OTP information, transmits the OTP information and location information of a collection terminal, and inputs a payment amount or withdrawal account information; a service server that generates the OTP information according to the payment request information of the remittance terminal and transmits it to the remittance terminal, receives the location information of the collection terminal from the collection terminal and determines whether the location information of the remittance terminal and the location information of the collection terminal are identical, requests the collection terminal to confirm the payment amount or withdrawal account information, and transmits a transfer request information including the withdrawal account information; and an institution server that executes a transfer of the collection terminal according to the transfer request information.The service server includes, as an OTP complexity, selects either non-face-to-face or face-to-face, and if non-face-to-face is selected, generates link-type OTP information, and if face-to-face is selected, generates password-type OTP information. The service server includes a location comparison unit and an amount comparison unit, and performs a first authentication by comparing location coordinates extracted from GPS modules equipped in the remittance terminal and the collection terminal through the location comparison unit to determine whether they are within the same range; if the location information of the remittance terminal and the location information of the collection terminal are identical, it determines it to be face-to-face and requests confirmation of the withdrawal account information from the collection terminal; if the location information of the remittance terminal and the location information of the collection terminal are not identical, it determines it to be non-face-to-face and performs a second authentication by requesting confirmation of the payment amount from the collection terminal through the amount comparison unit; if the payment amount entered from the collection terminal matches a pre-set payment amount previously entered and stored from the remittance terminal, it requests confirmation of the withdrawal account information from the collection terminal, stores the received withdrawal account information, and then sends the above to the institution server. An electronic financial service provision system using OTP characterized by transmitting transfer request information. Claim 2 delete Claim 3 delete Claim 4 A remittance terminal that transmits payment request information including location information of a remittance terminal and receives and transmits OTP information; a collection terminal that receives the OTP information, transmits the OTP information and location information of a collection terminal, and inputs a payment amount or withdrawal account information; a service server that generates the OTP information according to the payment request information of the remittance terminal and transmits it to the remittance terminal, receives the location information of the collection terminal from the collection terminal and determines whether the location information of the remittance terminal and the location information of the collection terminal are identical, requests the collection terminal to confirm the payment amount or withdrawal account information, and transmits a transfer request information including the withdrawal account information; and an institution server that executes a transfer of the collection terminal according to the transfer request information.The service server includes, as an OTP complexity, selects either non-face-to-face or face-to-face, generates link-type OTP information if non-face-to-face is selected, and generates password-type OTP information if face-to-face is selected, and includes a location comparison unit and an amount comparison unit, and performs a first authentication by comparing location coordinates extracted from GPS modules equipped in the remittance terminal and the collection terminal through the location comparison unit to determine whether they are within the same range, wherein if the location information of the remittance terminal and the location information of the collection terminal are identical, it is determined to be face-to-face and requests confirmation of the withdrawal account information from the collection terminal, and if the location information of the remittance terminal and the location information of the collection terminal are not identical, it is determined to be non-face-to-face and requests confirmation of the payment amount from the collection terminal through the amount comparison unit, and performs a second authentication by, if the payment amount entered from the collection terminal matches a pre-set payment amount previously entered and stored from the remittance terminal, requests confirmation of the withdrawal account information from the collection terminal, and after storing the received withdrawal account information, sends the transfer request information to the institution server. A method for providing electronic financial services using an OTP using a system for providing electronic financial services using an OTP that is transmitted, comprising: a step in which a remittance terminal transmits payment request information including remittance terminal location information to a service server; a step in which the service server generates OTP information according to the payment request information of the remittance terminal and transmits it to the remittance terminal; a step in which the remittance terminal transmits the OTP information to a collection terminal; a step in which the collection terminal transmits the OTP information and the collection terminal location information to the service server; a step in which the service server determines whether the remittance terminal location information and the collection terminal location information are identical, and then requests the collection terminal to confirm the payment amount or withdrawal account information; and a step in which the collection terminal inputs the payment amount or withdrawal account information.A method for providing an electronic financial service using an OTP, comprising: a step in which the service server transmits transfer request information including the withdrawal account information to an institution server; and a step in which the institution server executes a transfer of the collection terminal according to the transfer request information of the service server. Claim 5 A remittance terminal that transmits remittance request information including location information of a remittance terminal and receives and transmits OTP information; a collection terminal that receives the OTP information, transmits the OTP information and location information of a collection terminal, and inputs the remittance amount or withdrawal account information; a service server that generates the OTP information according to the remittance request information of the remittance terminal and transmits it to the remittance terminal, receives the location information of the collection terminal from the collection terminal and determines whether the location information of the remittance terminal and the location information of the collection terminal are identical, requests the collection terminal to confirm the remittance amount or withdrawal account information, and transmits the remittance request information including the withdrawal account information. An electronic financial service providing system using an OTP, comprising: an institution server that executes a remittance of the collection terminal according to the remittance request information; wherein the service server includes a location comparison unit and an amount comparison unit, and performs a first authentication by comparing location coordinates extracted from GPS modules equipped in the remittance terminal and the collection terminal through the location comparison unit to determine whether they are within the same range; wherein if the location information of the remittance terminal and the location information of the collection terminal are identical, it determines it as face-to-face and requests confirmation of the withdrawal account information from the collection terminal, and if the location information of the remittance terminal and the location information of the collection terminal are not identical, it determines it as non-face-to-face and performs a second authentication by requesting confirmation of the payment amount from the collection terminal through the amount comparison unit, and if the payment amount entered from the collection terminal matches a pre-set payment amount entered and stored in advance from the remittance terminal, it requests confirmation of the withdrawal account information from the collection terminal, stores the received withdrawal account information, and then transmits transfer request information to the institution server. Claim 6 delete Claim 7 A remittance terminal that transmits remittance request information including location information of a remittance terminal and receives and transmits OTP information; a collection terminal that receives the OTP information, transmits the OTP information and location information of a collection terminal, and inputs the remittance amount or withdrawal account information; a service server that generates the OTP information according to the remittance request information of the remittance terminal and transmits it to the remittance terminal, receives the location information of the collection terminal from the collection terminal and determines whether the location information of the remittance terminal and the location information of the collection terminal are identical, requests the collection terminal to confirm the remittance amount or withdrawal account information, and transmits the remittance request information including the withdrawal account information. A method for providing an electronic financial service using an OTP using an OTP-based electronic financial service providing system, wherein the remittance terminal, the remittance terminal location, and an institution server that executes a remittance of the collection terminal according to the remittance request information; wherein the service server includes a location comparison unit and an amount comparison unit, and performs a first authentication by comparing location coordinates extracted from GPS modules equipped in the remittance terminal and the collection terminal through the location comparison unit to determine whether they are within the same range, wherein if the location information of the remittance terminal and the location information of the collection terminal are identical, it determines it as face-to-face and requests confirmation of the withdrawal account information from the collection terminal, and if the location information of the remittance terminal and the location information of the collection terminal are not identical, it determines it as non-face-to-face and requests confirmation of the payment amount from the collection terminal through the amount comparison unit, and if the payment amount entered from the collection terminal matches a pre-set payment amount entered and stored in advance from the remittance terminal, it requests confirmation of the withdrawal account information from the collection terminal, and after storing the received withdrawal account information, transmits transfer request information to the institution server, wherein the remittance terminal A step of transmitting remittance request information including information to a service server;A method for providing an electronic financial service using an OTP, comprising: a step in which the service server generates OTP information according to the remittance request information of the remittance terminal and transmits it to the remittance terminal; a step in which the remittance terminal transmits the OTP information to a collection terminal; a step in which the collection terminal transmits the OTP information and the collection terminal location information to the service server; a step in which the service server determines whether the location information of the remittance terminal and the location information of the collection terminal are identical, and then requests the collection terminal to confirm the remittance amount or withdrawal account information; a step in which the collection terminal inputs the remittance amount or withdrawal account information; a step in which the service server transmits the remittance request information including the withdrawal account information to an institution server; and a step in which the institution server executes the remittance of the collection terminal according to the remittance request information of the service server.

Images