An apparatus for providing user confirmation information relaying services and a method for operating it

Abstract

A method of operation of a service providing device according to an embodiment of the present invention comprises: receiving a request for identity verification information from a first user terminal from a second user terminal; receiving identity verification relay request information from the first user terminal via a mobile communication network, the information including pre-processed financial authentication information and a distributed encryption message of personal information; performing possession authentication by comparing terminal identification information obtained by decrypting the distributed encryption message of personal information with the sending terminal identification information of the message verified via the mobile communication network; and configuring identity verification information relay data including the pre-processed financial authentication information and possession authentication information according to the possession authentication, and transmitting it to the second user terminal.

Description

Technology Field

[0001] The present invention relates to a service providing device and a method of operation thereof. More specifically, the present invention relates to a device for providing a service that relays identity verification information between users and a method of operation thereof. Background Technology

[0002] With the development of communication and network technologies, services that allow individuals to connect directly through wired and wireless internet (networks) are diversifying and evolving.

[0003] In particular, due to the development of smartphones and the internet, as well as the development of various services and platforms, people trade used goods, game currency, or game items with each other, and recently, even investments and loans are being conducted through this peer-to-peer (P2P) method.

[0004] While these P2P services have the advantage of high autonomy and the ability to provide flexible services, unlike centrally controlled transaction methods, they have drawbacks such as vulnerability to fraudulent transactions between individuals.

[0005] Accordingly, various identity verification and authentication methods are being developed and applied; however, since they utilize technologies previously used in the financial sector, the authentication process is generally not only complex but also time-consuming.

[0006] In particular, due to the recent abolition of accredited certificates, authentication procedures for each financial institution have become diversified. Consequently, authentication must be performed individually using combinations of mutually different authentication methods without a common or standardized authentication process. As a result, it is becoming increasingly difficult to borrow these technical elements from the financial sector and use them for identity verification purposes during transactions between individuals.

[0007] Furthermore, in the case of person-to-person transactions, existing transaction methods and patterns vary individually, making it very difficult to implement a simple and uniform identity verification process.

[0008] Furthermore, since financial authentication information specific to each financial institution can only be possessed by the individual and its storage and management are blocked by separate transaction service agencies to protect personal information, there are limitations in terms of security and privacy protection when developing simple authentication services using the technology of financial institutions. The problem to be solved

[0009] The present invention is devised to solve the problems described above, and aims to provide a device for providing a relay service for identity verification information between users and a method of operation thereof, which can grant reliability regarding identity verification to the counterparty without performing a separate authentication process for each financial institution for identity verification at every transaction, by providing a relay service for identity verification information for identity verification between user terminals, wherein the identity verification information includes data combining pre-processed financial authentication information and possession authentication information based on a distributed encryption message of personal information. means of solving the problem

[0010] A method of operation of a service providing device according to an embodiment of the present invention for solving the problem described above comprises: receiving a request for identity verification information from a first user terminal from a second user terminal; receiving identity verification relay request information from the first user terminal via a mobile communication network, the information including pre-processed financial authentication information and a distributed encryption message of personal information; performing possession authentication by comparing terminal identification information obtained by decrypting the distributed encryption message of personal information with the sending terminal identification information of the message verified via the mobile communication network; and configuring identity verification information relay data including the pre-processed financial authentication information and possession authentication information according to the possession authentication, and transmitting it to the second user terminal.

[0011] A service providing device according to an embodiment of the present invention for solving the problem described above comprises: a communication unit that receives a request for identity verification information from a first user terminal from a second user terminal and receives identity verification relay request information including pre-processed financial authentication information and a personal information distributed encryption message from the first user terminal via a mobile communication network; an occupancy authentication verification unit that performs occupancy authentication by comparing terminal identification information obtained by decrypting the personal information distributed encryption message with the sending terminal identification information of the message verified via the mobile communication network; and a verification result information relay processing unit that configures identity verification information relay data including the pre-processed financial authentication information and occupancy authentication information according to the occupancy authentication and transmits it to the second user terminal.

[0012] Meanwhile, a method according to an embodiment of the present invention for solving the problem described above may be implemented by a computer-readable recording medium having a program recorded thereon for executing the method on a computer, and a program stored on the recording medium. Effects of the invention

[0013] According to an embodiment of the present invention, a relay service for identity verification information between user terminals is provided, wherein the identity verification information includes data combining pre-processed financial authentication information and possession authentication information based on a distributed encryption message of personal information, thereby providing a device for providing a relay service for identity verification information between users and a method of operation thereof that can grant reliability regarding identity verification to the other party without performing a separate authentication process for each financial institution for identity verification at every transaction and without storing individual financial authentication information on a server.

[0014] In addition, according to an embodiment of the present invention, fraud history information retrieved in real time can be mapped to the identity verification information, thereby enabling identity verification and tracking of fraud history, which can provide a more reliable peer-to-peer transaction service. Brief explanation of the drawing

[0015] FIG. 1 is a conceptual diagram schematically illustrating the entire system according to an embodiment of the present invention. FIG. 2 is a block diagram illustrating a service providing device according to an embodiment of the present invention in more detail. FIGS. 3 and 4 are flowcharts for explaining the operation of a service providing device according to an embodiment of the present invention. Specific details for implementing the invention

[0016] The following description merely illustrates the principles of the present invention. Therefore, those skilled in the art may invent various devices that embody the principles of the present invention and are included within the concept and scope of the present invention, even though they are not explicitly described or illustrated in this specification. Furthermore, all conditional terms and embodiments listed in this specification are, in principle, explicitly intended only for the purpose of understanding the concept of the present invention and should be understood not as being limited to the embodiments and conditions specifically listed as such.

[0017] Furthermore, it should be understood that all detailed descriptions enumerating specific embodiments, as well as the principles, aspects, and embodiments of the present invention, are intended to include structural and functional equivalents thereof. In addition, it should be understood that such equivalents include not only currently known equivalents but also equivalents to be developed in the future, that is, all elements invented to perform the same function regardless of structure.

[0018] Accordingly, for example, the block diagrams in this specification should be understood as representing a conceptual view of an exemplary circuit embodying the principles of the present invention. Similarly, all flowcharts, state transition diagrams, pseudocode, etc., should be understood as representing various processes that can be substantially represented on a computer-readable medium and are performed by a computer or processor, regardless of whether the computer or processor is explicitly depicted.

[0019] Furthermore, the explicit use of terms presented as processor, control, or similar concepts should not be interpreted as exclusively referring to hardware capable of executing software, but should be understood to implicitly include, without limitation, digital signal processor (DSP) hardware, ROM, RAM, and non-volatile memory for storing software. Other commonly known hardware may also be included.

[0020] The aforementioned objectives, features, and advantages will become clearer through the following detailed description in conjunction with the attached drawings, and accordingly, a person skilled in the art to which the present invention pertains will be able to easily implement the technical concept of the present invention. Furthermore, in describing the present invention, if it is determined that a detailed description of known technology related to the present invention may unnecessarily obscure the essence of the present invention, such detailed description will be omitted.

[0021] Hereinafter, a preferred embodiment according to the present invention will be described in detail with reference to the attached drawings.

[0023] FIG. 1 is a schematic diagram illustrating the entire system according to an embodiment of the present invention.

[0024] Referring to FIG. 1, a system according to one embodiment of the present invention may include a first user terminal (110), a second user terminal (120), a service providing device (200), a mobile communication operator server (310), a fraud history lookup server (330), and a financial authentication server (320). Here, the fraud history lookup server (330) may include one or more fraud history lookup servers, and the financial authentication server (320) may include one or more financial business operator servers.

[0025] More specifically, the first user terminal (110), the second user terminal (120), the service providing device (200), the financial authentication server (320), the mobile communication operator server (310), and the fraud history lookup server (330) can be connected via a network via wired or wireless connections.

[0026] For mutual communication between networks, each first user terminal (110), second user terminal (120), service provider (200), financial authentication server (320), mobile communication operator server (310), and fraud history lookup server (330) can transmit and receive data through an internet network, LAN, WAN, PSTN (Public Switched Telephone Network), PSDN (Public Switched Data Network), cable TV network, WIFI, mobile communication network, and other wireless communication networks. Additionally, the first user terminal (110), second user terminal (120), service provider (200), financial authentication server (320), mobile communication operator server (310), and fraud history lookup server (330) may each include a communication module for communicating with a protocol corresponding to each communication network.

[0027] In addition, the user terminal (110, 120) described in this specification may include a mobile phone, a smartphone, a laptop computer, a digital broadcasting terminal, a PDA (Personal Digital Assistants), a PMP (Portable Multimedia Player), a navigation device, etc., but the present invention is not limited thereto and may be various other devices capable of user input and information display.

[0028] And, the service providing device (200) can be implemented as a server device that performs overall roles such as communication protocol conversion, file server, collect server, push gateway server, transmission server, account server, admin server, receiving server, conversion server, messaging server, push receiving server, push sending server.

[0029] Meanwhile, the first user terminal (110), the second user terminal (120), the fraud history lookup server (330), and the service providing device (200) may communicate through a first network for relaying identity verification information, the service providing device (200) and the mobile communication operator server (310) may communicate through a second network for transmitting possession authentication messages, and the first user terminal (110) and the financial authentication server (320) may communicate through a secured third network for issuing financial authentication information. The protocols or encryption methods of each network may differ.

[0030] And, the service providing device (200) can manage all or part of the data being processed by encrypting it as needed.

[0031] In addition, the service providing device (200) according to an embodiment of the present invention can provide various transaction service functions processed according to the identity authentication information relay service to the first user terminal (110) or the second user terminal (120), and can further perform billing processing, etc. for providing the service.

[0032] In such a system, the service providing device (200) can provide a personal transaction service between the first user terminal (110) and the second user terminal (120), and can process a relay service process for identity verification information accompanying the personal transaction service. Here, the personal transaction service may include a second-hand trading service, a game item trading service, and various other person-to-person P2P trading services.

[0033] In addition, the service providing device (200) according to an embodiment of the present invention provides only simple possession authentication via a mobile communication operator server (310) and relay processing of various pre-issued financial company authentication information, without borrowing separate financial company authentication processes for identity verification information or storing and managing centrally managed authentication information in the service providing device (200), thereby ensuring the reliability of identity verification while significantly simplifying the procedure and enabling the provision of faster and quicker transaction services.

[0034] More specifically, the service providing device (200) may receive a request for identity verification information from the first user terminal (110) from the second user terminal (120). At this time, the service providing device (200) may transmit the identity verification information request information of the second user terminal (120) to the first user terminal (110), and may receive identity verification relay request information containing pre-processed financial authentication information and personal information distributed encryption messages from the first user terminal (110) through a mobile communication network established by the mobile communication operator server (310).

[0035] And, the service providing device (200) can perform occupancy authentication by comparing the terminal identification information obtained by decrypting the personal information distributed encryption message with the sending terminal identification information of the message confirmed through the mobile communication network.

[0036] Accordingly, the service providing device (200) can configure identity verification information relay data including the pre-processed financial authentication information and the possession authentication information according to the possession authentication, and transmit it to the second user terminal (120).

[0037] Meanwhile, the first user terminal (110) may be a terminal pre-registered with the service providing device (200), and user information corresponding to the first user terminal (110) may be pre-registered, stored, and managed.

[0038] Additionally, the first user terminal (110) can pre-connect to the financial authentication server (320) through the service providing device (200) and receive financial authentication information according to the authentication process for each financial institution. For example, the first user terminal (110) can connect to the financial authentication server (320) and input authentication requirements via the service providing device (200), and can receive and receive financial authentication information provided from the financial authentication server (320) to the service providing device (200) from the service providing device (200).

[0039] More specifically, financial authentication information may include secure authentication information issued in various ways, such as accredited certificates, joint certificates, account certificates, and special purpose certificates, and may also include other certificate information that may be newly proposed in the future, and may be stored only in the first user terminal (110) and not stored in the service providing device (200).

[0040] However, since personal information included in the user information in the first user terminal (110) may be used for occupancy verification, the service providing device (200) according to the embodiment of the present invention performs distributed encryption processing of personal information for occupancy verification, and the distributed encrypted data may be transmitted to the first user terminal (110) in advance.

[0041] Accordingly, when the service providing device (200) according to an embodiment of the present invention receives a request for identity verification from the second user terminal (120), it transmits the distributed encrypted data of the personal information to the first user terminal (110) and can receive a response message from the first user terminal (110) via the mobile communication network of the mobile communication operator server (310).

[0042] Here, the above response message can be received through a mobile communication network-based text message receiving service (MO, Mobile Originated), etc., and the mobile communication operator server (310) can transmit terminal identification information, such as a phone number corresponding to the response message, to the service providing device (200).

[0043] Accordingly, the service providing device (200) according to an embodiment of the present invention can compare the terminal identification information of the response message provided by the mobile communication operator server (310) with the terminal identification information of the personal information decrypted based on the distributed encryption processed data of the personal information, and generate occupancy authentication confirmation information if they match.

[0044] Accordingly, the service providing device (200) provides a relay service for identity verification information for identity verification between user terminals, wherein the identity verification information includes data combining pre-processed financial authentication information and possession authentication information based on a distributed encryption message of personal information, thereby enabling the provision of a process that can grant reliability regarding identity verification to the other party without performing a separate authentication process for each financial institution for identity verification at every transaction, and without storing individual financial authentication information on a server for a long period.

[0045] However, even if identity is confirmed, since whether there is a history of fraud may be important information in person-to-person transactions, the service providing device (200) in the embodiment of the present invention maps the fraud history information retrieved in real time through the fraud history lookup server (330) to the identity verification information, thereby enabling identity verification and tracking of the fraud history of the verified user, so as to provide a more reliable person-to-person transaction service.

[0046] Meanwhile, a separate application may be installed on the user terminal (110, 120), and may basically include the configuration of a general portable terminal including a separate control unit (not shown), a storage unit (not shown), an output unit (not shown), and a communication unit (not shown).

[0048] FIG. 2 is a block diagram illustrating a service providing device (200) according to an embodiment of the present invention in more detail.

[0049] Referring to FIG. 2, a service providing device (200) according to an embodiment of the present invention includes a communication unit (210), a control unit (220), a database (230), a user information registration unit (240), a personal information-based distributed encryption unit (250), an occupancy authentication verification unit (260), a financial authentication verification unit (270), a fraud history verification unit (280), a verification result information relay processing unit (290), and a transaction service providing unit (295).

[0050] The control unit (220) controls the overall operation of each module and provides operation processing according to the service provision method according to an embodiment of the present invention, and may include one or more microprocessors for this purpose.

[0051] The communication unit (210) may include one or more modules that enable wired or wireless communication between a network where a first user terminal (110), a second user terminal (120), or a fraud history lookup server (330) is located. For example, the communication unit (210) may include at least one of a mobile communication module, a wired internet module, a wireless internet module, and a short-range communication module.

[0052] The user information registration unit (240) can register and manage user information in correspondence with users using the service according to the embodiment of the present invention.

[0053] User information may include user identification information, terminal identification information, etc., of users utilizing the identity verification service, and may be newly registered, updated, and managed in accordance with user information registration or update requests received from user terminals. Additionally, as all or part of the user information may include personal information, it may be stored in an encrypted form.

[0054] The database (230) can store programs for the operation of each component, can store input / output data, and can store and manage a separate database for the relay service of identity verification information.

[0055] And, the personal information-based distributed encryption unit (250) obtains personal information corresponding to the first user terminal (110) in advance prior to receiving an authentication confirmation request from the second user terminal, and generates first distributed encrypted data and second distributed encrypted data corresponding to the previously obtained personal information.

[0056] Here, the personal information-based distributed encryption unit (250) can store and manage the second distributed encrypted data by mapping it to at least a part of the personal information.

[0057] In addition, the above personal information may include at least one of the user's name, date of birth, nationality (domestic or foreign), gender, mobile carrier code, terminal identification information, bank code, and account number information.

[0058] In addition, the personal information-based distributed encryption unit (250) can generate the personal information distributed encryption data using the first distributed encryption data through the communication unit (210) and pre-distribute it to the first user terminal (110). Here, the first distributed encryption data can be deleted from the database (230) of the service providing device (200), thereby maintaining the protection of personal information.

[0059] In addition, the first distributed encrypted data may include data encrypted by hashing at least a portion of the personal information.

[0060] Additionally, when a request for identity verification information from the first user terminal is received from the second user terminal through the communication unit (210), the personal information-based distributed encryption unit (250) transmits the identity verification information request to the first user terminal (110). The communication unit (210) can receive identity verification relay request information containing pre-processed financial authentication information and a personal information distributed encryption message from the first user terminal (110) via a mobile communication network.

[0061] Meanwhile, the possession authentication verification unit (260) can perform possession authentication by comparing the terminal identification information obtained by decrypting the personal information distributed encryption message in the personal information-based distributed encryption unit (250) with the sending terminal identification information of the message confirmed through the mobile communication network.

[0062] More specifically, the possession authentication verification unit (260) can decrypt the personal information distributed encryption message to obtain the first distributed encryption data, combine the first distributed encryption data and the second distributed encryption data to obtain personal information, compare the terminal identification information obtained from the obtained personal information with the sending terminal identification information of the message verified through the mobile communication network, and output the possession authentication information indicating whether they match to the verification result information relay processing unit (290).

[0063] And, the financial authentication verification unit (270) verifies the financial authentication information of the first user terminal (110) whose possession authentication information has been verified, and transmits the verified financial authentication information to the verification result information relay processing unit (290).

[0064] Here, the financial authentication information may be data that has been pre-processed and issued via the service providing device (200) at the first user terminal (110), and the financial authentication verification unit (270) primarily verifies at least one of the basic information such as the existence of financial authentication information, the issuing institution, the validity period, and the issuer, and the complex and time-consuming certificate verification procedure with the actual financial authentication server (320) may be omitted.

[0065] Accordingly, the financial authentication verification unit (270) performs only simplified financial authentication information verification processing for identity verification information relay, and the service providing device (200) includes only the first verified information in the identity verification information relay data and provides it to the second user terminal (120), and the verification of the actual financial authentication information is processed only when necessary at the second user terminal (120), thereby enabling the provision of a faster and simpler authentication service.

[0066] And, the verification result information relay processing unit (290) combines and configures identity verification information relay data including the pre-processed financial authentication information and the possession authentication information according to the possession authentication, and transmits it to the second user terminal (120).

[0067] Meanwhile, the fraud history verification unit (280) may request a fraud history inquiry corresponding to at least a part of the personal information from the fraud history inquiry server (330) and process the fraud history inquiry result information by combining it with the identity verification information relay data.

[0068] And, the transaction service provider (295) provides an interface that allows the identity verification information relay data to be output from the second user terminal (120), and enables various transaction services to be processed through the interface. As described above, the transaction services may include various other transaction services such as used goods trading services, item trading services, and financial transaction services.

[0070] FIGS. 3 and 4 are flowcharts for explaining the operation of a service providing device according to an embodiment of the present invention, FIG. 3 shows the operation when a user of the first user terminal (110) registers the service for the first time, and FIG. 4 shows the simplified operation when using the service thereafter.

[0071] First, referring to FIG. 3, a service providing device (200) according to an embodiment of the present invention receives and registers user information from a first user terminal (110) (S1001).

[0072] Then, the service providing device (200) requests identity verification authentication information from the first user terminal (110) (S1003).

[0073] Afterwards, the service providing device (200) receives identity verification authentication information from the first user terminal (110) and performs distributed encryption processing corresponding to personal information among the identity verification authentication information (S1005).

[0074] And, the service providing device (200) provides the first part of the distributed encrypted data to the first user terminal (110) and performs deletion processing (S1007).

[0075] Accordingly, the service providing device (200) can maintain the protection of personal information by storing and managing only the remaining partially encrypted second part data without separate storage processing for the encrypted personal information of the first user terminal (110).

[0076] And, referring to FIG. 4, the registered first user terminal (110) preprocesses identity verification authentication information, personal information and financial authentication information and stores and manages them in the first user terminal (110) (S2001).

[0077] And, the service providing device (200) according to an embodiment of the present invention receives identity verification request information from the first user terminal (110) from the second user terminal (120) (S2003).

[0078] Afterwards, the service providing device (200) receives the pre-processed financial authentication information and the first part data of the personal information from the first user terminal (110) via a mobile communication network (S2005).

[0079] Here, the mobile communication network may be a base station-based communication network such as 3G, 4G, 5G, etc., and may be a communication network operated by a mobile communication operator server (310), and the first part data of the personal information may be transmitted through a text message service system such as MO.

[0080] And, the service providing device (200) combines the first part data and the distributed encrypted second part data to process data verification decryption (S2007).

[0081] If the above first part data is normal data, personal information can be obtained through verification decoding.

[0082] And, the service providing device (200) performs possession authentication based on whether the phone number information of the decrypted personal information data matches the sender number information of the message received through the mobile communication network (S2009).

[0083] Afterwards, the service providing device (200) checks the fraud history information corresponding to the personal information through the fraud history inquiry server (330) (S2011), generates identity verification information relay data by combining the fraud history verification information, the possession authentication result information, the financial authentication information, and the verification information, and relays it to the second user terminal (120) (S2013).

[0084] Accordingly, the service providing device (200) can provide various transaction services based on user input from the second user terminal (120) that has received reliable identity verification information (S2015).

[0086] The method according to the various embodiments of the present invention described above may be implemented in the form of installation data to be executed on a terminal device and provided to each server or device in a state stored on various non-transitory computer-readable media. Accordingly, a user terminal (100) may connect to a server or device and download the installation data.

[0087] A non-transient readable medium refers to a medium that stores data semi-permanently and can be read by a device, rather than a medium that stores data for a short period of time, such as a register, cache, or memory. Specifically, the various applications or programs described above may be stored and provided on non-transient readable media such as CDs, DVDs, hard disks, Blu-ray discs, USBs, memory cards, and ROMs.

[0088] Furthermore, although preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above. Various modifications are possible by those skilled in the art without departing from the essence of the invention as claimed in the claims, and such modifications should not be understood individually from the technical spirit or perspective of the present invention.

Claims

Claim 1 A method of operation of a service providing device comprising: receiving a request for identity verification information from a first user terminal from a second user terminal; transmitting the request for identity verification information to the first user terminal; receiving identity verification relay request information from the first user terminal via a mobile communication network, the request including pre-processed financial authentication information and a distributed encryption message of personal information; performing possession authentication by comparing terminal identification information obtained by decrypting the distributed encryption message of personal information with the sending terminal identification information of the message verified by the service providing device via a mobile communication network; performing a simplified financial authentication information verification process for identity verification information relay, which primarily verifies at least one of the presence or absence of the pre-processed financial authentication information, the issuing institution, the validity period, and the issuer; and configuring identity verification information relay data including the result of the simplified financial authentication information verification process in the possession authentication information according to the result of performing the possession authentication, and transmitting it to the second user terminal. Claim 2 A method of operation of a service providing device according to claim 1, further comprising: a step of obtaining personal information corresponding to the first user terminal in advance prior to receiving a request from the second user terminal; a step of generating first distributed encrypted data and second distributed encrypted data corresponding to the previously obtained personal information; a step of storing and managing the second distributed encrypted data by mapping it to at least a part of the personal information; and a step of generating the personal information distributed encrypted data using the first distributed encrypted data, distributing it in advance to the first user terminal, and deleting it from the service providing device. Claim 3 In paragraph 2, the above personal information includes at least one of the user's name, date of birth, distinction between domestic and foreign nationals, gender, mobile carrier code, terminal identification information, bank code, and account number information. A method of operation of a service providing device. Claim 4 In paragraph 3, the method of operation of a service providing device comprising the first distributed encrypted data, which is data encrypted by hashing at least a portion of the personal information. Claim 5 A method of operation of a service providing device comprising, in paragraph 4, the step of performing the possession authentication, the step of decrypting the personal information distributed encrypted message to obtain the first distributed encrypted data; the step of combining and decrypting the first distributed encrypted data and the second distributed encrypted data to obtain personal information; and the step of comparing terminal identification information obtained from the obtained personal information with the sending terminal identification information of the message confirmed through the mobile communication network to output the possession authentication information indicating whether they match. Claim 6 A method of operation of a service providing device according to claim 5, wherein the transmitting step further comprises: a step of requesting a fraud history lookup corresponding to at least a portion of the personal information to a fraud history lookup server; and a step of combining the fraud history lookup result information with the identity verification information relay data. Claim 7 delete Claim 8 A service providing device comprising: a communication unit that receives a request for identity verification information from a first user terminal from a second user terminal, transmits the request for identity verification information to the first user terminal, and receives identity verification relay request information including pre-processed financial authentication information and a personal information distributed encryption message from the first user terminal via a mobile communication network; a possession authentication verification unit that performs possession authentication by comparing terminal identification information obtained by decrypting the personal information distributed encryption message with the sending terminal identification information of the message verified via the mobile communication network; a financial authentication verification unit that performs a simplified financial authentication information verification process that primarily verifies at least one of the presence or absence of the pre-processed financial authentication information, the issuing institution, the validity period, and the issuer; and a verification result information relay processing unit that configures verification result information relay data including the result of the simplified financial authentication information verification process of the financial authentication verification unit and the possession authentication verification information of the possession authentication verification unit, and transmits it to the second user terminal. Claim 9 A service providing device further comprising a personal information-based distributed encryption unit that, prior to receiving a request from the second user terminal, obtains personal information corresponding to the first user terminal in advance, generates first distributed encrypted data and second distributed encrypted data corresponding to the obtained personal information in advance, maps the second distributed encrypted data to at least a part of the personal information and stores and manages it, generates the personal information distributed encrypted data using the first distributed encrypted data and distributes it in advance to the first user terminal, and deletes it from the service providing device. Claim 10 In paragraph 9, the above personal information is a service providing device comprising at least one of the following: the name, date of birth, distinction between domestic and foreign nationals, gender, mobile carrier code, terminal identification information, bank code, and account number information of the user terminal. Claim 11 In claim 10, the above-mentioned first distributed encrypted data is a service providing device comprising data encrypted by hashing at least a portion of the above-mentioned personal information. Claim 12 In claim 11, the possession authentication verification unit decrypts the personal information distributed encryption message to obtain the first distributed encryption data, combines the first distributed encryption data and the second distributed encryption data to obtain personal information, compares the terminal identification information obtained from the obtained personal information with the sending terminal identification information of the message verified through the mobile communication network, and outputs the possession authentication information indicating whether they match. Claim 13 A service providing device according to claim 12, further comprising a fraud history verification unit that requests a fraud history inquiry corresponding to at least a portion of the personal information to a fraud history inquiry server and combines the fraud history inquiry result information with the identity verification information relay data. Claim 14 delete Claim 15 A computer-readable recording medium having a program recorded thereon for executing a method described in any one of paragraphs 1 through 6 on a computer.

Images