KR20090022682A - Method and system for providing banking service using behavioral pattern based on keystroke - Google Patents

Method and system for providing banking service using behavioral pattern based on keystroke Download PDF

Info

Publication number
KR20090022682A
KR20090022682A KR1020070088239A KR20070088239A KR20090022682A KR 20090022682 A KR20090022682 A KR 20090022682A KR 1020070088239 A KR1020070088239 A KR 1020070088239A KR 20070088239 A KR20070088239 A KR 20070088239A KR 20090022682 A KR20090022682 A KR 20090022682A
Authority
KR
South Korea
Prior art keywords
information
financial transaction
keystroke
authentication
user
Prior art date
Application number
KR1020070088239A
Other languages
Korean (ko)
Inventor
장민
Original Assignee
주식회사 비원플러스
주식회사 비즈니스인텔리전스시스템즈
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 주식회사 비원플러스, 주식회사 비즈니스인텔리전스시스템즈 filed Critical 주식회사 비원플러스
Priority to KR1020070088239A priority Critical patent/KR20090022682A/en
Publication of KR20090022682A publication Critical patent/KR20090022682A/en

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
    • G06Q40/02—Banking, e.g. interest calculation or account maintenance
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • Economics (AREA)
  • Signal Processing (AREA)
  • Development Economics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Marketing (AREA)
  • Strategic Management (AREA)
  • Technology Law (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

The present invention relates to a method and system for providing a financial transaction service using keystroke-based behavior pattern information, wherein the financial transaction server receives authentication request information of a user from a terminal for financial transaction, and includes account information and account included in the authentication request information. Secondary authentication by performing primary authentication based on password information, keystroke authentication server extracts keystroke based behavior pattern information from keystroke information, and compares the keystroke based behavior pattern information with the authentication information of a user who has previously stored the information. The present invention provides a method and system for performing a user authentication to enable a user to receive a financial transaction service.

Description

Method and system for providing financial transaction service using keystroke-based behavior pattern information {METHOD AND SYSTEM FOR PROVIDING BANKING SERVICE USING BEHAVIORAL PATTERN BASED ON KEYSTROKE}

The present invention relates to a method and system for providing a financial transaction service using keystroke-based behavior pattern information. More particularly, the present invention relates to a key of authentication information input by a user when performing a financial transaction using a financial transaction terminal such as an ATM. A method and system for providing a financial transaction service using stroke based behavior pattern information.

When conducting financial transactions using ATM devices installed in financial institutions such as banks, as well as e-commerce services such as Internet-based online banking, securities trading and payment services, whether the user is a true user The user authentication process is required to determine. When conducting a financial transaction using an ATM device, the user reads the bankbook or card to the ATM device to authenticate the user's account information, and enters a 4-digit number registered in advance by the user to authenticate the user. Performing is a widely used user authentication process. This conventional user authentication method is widely used in that it is simple, inexpensive, and relatively easy to implement, but this method uses numbers such as social security numbers, phone numbers, or birthdays of users or family members, which are likely to be associated with passwords. In many cases, there is a problem that a password is easily exposed.

On the other hand, in order to compensate for this problem, a user authentication scheme based on biometrics has been proposed. Biometrics refers to a method of recognizing a person based on a person's physiological characteristics or behavioral characteristics. Such recognition methods include: 1) The person to be recognized must be physically present at the recognition site. , 2) It has an advantage over the conventional password input method in that no password is required. In general, biometrics is achieved by using the user's unique biometric features, such as fingerprints, facial features, irises, palm prints, etc., which are unique to each individual. And because it is consistently preserved over time, it can be a highly reliable and accurate recognition method. However, biometrics based on biological characteristics are highly dependent on the input device used for the recognition because the accuracy of the recognition is very important.In order to increase the recognition accuracy, an input device capable of performing precise and precise recognition is required. The disadvantage is that the overall cost increases.

On the other hand, since behavioral characteristics based biometrics have various advantages such as low cost, user convenience, and remote access control possibility, user authentication methods using the same have been proposed in various ways. In particular, a method of extracting a user's behavior pattern (behavior characteristics) based on a user's keystroke input through an input means such as a keyboard or a keypad and using the same in advance for user authentication has been discussed. Accordingly, there is a demand for a specific method for reliably and efficiently performing financial transactions with a bank or securities company through a terminal for financial transactions such as an ATM device using the user's keystroke.

The present invention has been made in view of the above-described problems, and a method for reliably and efficiently performing a financial transaction with a bank or securities company through a financial transaction terminal such as an ATM device using a user's keystroke; It is an object to provide a system.

Another object of the present invention is to provide a method and system for improving the security of financial transactions by receiving a user's keystroke through a financial transaction terminal and extracting a behavior pattern therefrom to perform user authentication. It is done.

In addition, the present invention improves the reproducibility of the authentication information by using an interval assist means for easily referencing the pre-registered keystroke-based behavior pattern when the user inputs the keystroke to request user authentication. It is another object to provide a method and system that can maximize convenience.

The present invention for achieving the above object, the financial transaction service coupled to the financial transaction terminal and the network, the financial transaction service using the keystroke-based behavior pattern information in the financial transaction system including a financial transaction server and a keystroke authentication server In the method for providing, wherein the financial transaction server receives the authentication request information of the user from the financial transaction terminal, wherein the authentication request information includes the user's account information, account password information and keystroke information -; After the financial transaction server performs the first authentication based on the account information and the account password information included in the authentication request information, the keystroke authentication server includes the keystroke information included in the received authentication request information when the first authentication succeeds. Transmitting to; Extracting, by the keystroke authentication server, keystroke based behavior pattern information from the received keystroke information; Performing second authentication by the keystroke authentication server by comparing the extracted keystroke-based behavior pattern information with authentication information of a user previously stored; Transmitting the result of performing the second authentication to the financial transaction server; And transmitting, by the financial transaction server, the result of performing the second authentication to the financial transaction terminal, wherein the financial transaction server performs the financial transaction requested through the financial transaction terminal when the second authentication is successful. It provides a financial transaction service providing method characterized in that.

Here, in the financial transaction server receiving the authentication request information of the user from the financial transaction terminal, the keystroke information is the account password of the user input through the keystroke input means of the financial transaction terminal At least one of input duration information, pressure information, and interval information between keystrokes for each keystroke of information may be included.

In addition, the terminal for financial transactions may be provided with an interval assist means for allowing a user to input by referring to the interval between their keystrokes.

In addition, the interval assistance means may be displayed on the display unit of the financial transaction terminal.

In addition, the interval assist means may be displayed in a form that can determine the passage of time.

In addition, the interval assistance means may be activated by the user's selection.

The extracting of the keystroke based behavior pattern information from the received keystroke information by the keystroke authentication server may include at least one of input duration information, pressure information, and interval information between keystrokes included in the keystroke information. Keystroke-based behavior pattern information for any one or more may be extracted.

In addition, keystroke based behavior pattern information may be extracted by performing a predetermined operation on at least one of input duration information, pressure information, and interval information between keystrokes included in the keystroke information.

In addition, keystroke-based behavior pattern information may be extracted by assigning a weight to at least one of input duration information, pressure information, and interval information between keystrokes included in the keystroke information.

According to another aspect of the present invention, in a financial transaction system using keystroke-based behavior pattern information that provides a financial transaction service by combining through a network and a financial transaction terminal, authentication request information from the user through a financial transaction terminal Receiving and performing the first authentication by the account information and account password information included in the authentication request information, and when the first authentication is successful, the banking to transmit the keystroke information included in the received authentication request information to the keystroke authentication server A transaction server, wherein the authentication request information includes user account information, account password information and keystroke information; And performing second authentication by extracting keystroke-based behavior pattern information from the keystroke information received from the financial transaction server and comparing the authentication information with the user's previously stored information, and then transmitting the second authentication result to the financial transaction server. And a keystroke authentication server, wherein the financial transaction server transmits a result of performing second authentication received from the keystroke authentication server to the financial transaction terminal and, if the second authentication is successful, through the financial transaction terminal. A financial transaction system can be provided that performs a requested financial transaction.

Here, the financial transaction terminal is provided with a keystroke input means for receiving account password information from the user, and continues inputting each of the keystrokes of the account password information of the user input through the keystroke input means. Keystroke information including at least one of time information, pressure information, and interval information between keystrokes may be configured and transmitted to the financial transaction server.

In addition, the financial transaction terminal may include an interval assistance means for allowing a user to input by referring to the interval between the keystrokes.

The interval assisting means may be displayed on a display unit of the financial transaction terminal.

In addition, the interval assistance means may be displayed in a form that can determine the passage of time.

In addition, the interval assistance means may be activated by the user's selection.

According to the present invention, it is possible to provide a method and system for reliably and efficiently performing a financial transaction with a bank or a securities company through a terminal for financial transactions such as an ATM device using a user's keystroke.

In addition, according to the present invention it is possible to improve the security of the financial transaction by receiving the user's keystroke through the financial transaction terminal to extract the behavior pattern from the user authentication.

In addition, according to the present invention, when the user inputs a keystroke to request user authentication, the reproducibility of the authentication information is improved by using an interval assist means for easily referring to a pre-registered keystroke-based behavior pattern. It is possible to provide a method and system that can maximize user convenience.

EMBODIMENT OF THE INVENTION Hereinafter, the Example by this invention is described in detail with reference to an accompanying drawing.

1 is a diagram showing the overall configuration of a system for performing a method for providing a financial transaction service using keystroke based behavior pattern information according to the present invention.

Referring to FIG. 1, a financial transaction service system (hereinafter referred to as a financial transaction service system) using keystroke-based behavior pattern information according to the present invention includes a financial transaction server 20 and a keystroke authentication server 30. They are connected to a financial transaction terminal (ATM) 10 via a network.

The financial transaction terminal 10 is connected to the financial transaction server 20 through a network to receive authentication information from a user, transmit the received authentication information to the financial transaction service system side, and receive a signal that the user authentication is successful from the financial transaction service system side. In one case, it refers to a terminal device that enables a user to perform a desired financial transaction. The financial transaction terminal 10 according to the present invention not only functions as a terminal for performing such a general financial transaction, but also generates keystroke information based on the keystroke of authentication information input when authentication information is input from a user. In addition to the authentication process for determining whether the user's account information and passwords, such as those conventionally used in the financial transaction service system, are transmitted to the financial transaction service system, the authenticity of the user is again verified by keystroke information. .

The financial transaction service system includes a financial transaction server 20 and a keystroke authentication server 30 as described above, and the financial transaction server 20 is a financial transaction terminal 10 such as an online banking server such as a bank. It is connected to the server refers to a server to perform a financial transaction requested from the financial transaction terminal (10). The financial transaction server 20 in the present invention extracts the keystroke information included in the authentication request information transmitted from the user in addition to the general functions of the conventional financial transaction server 20, and then extracts the keystroke information from the keystroke authentication server 30. And transmit the authentication result to the financial transaction terminal 10 according to the authentication result at the keystroke authentication server 30, and perform the financial transaction requested from the financial transaction terminal 10 when the authentication is successful. It performs the function that makes it possible. Of course, the financial transaction server 20 also includes a function of determining whether or not, for example, account information, passwords, etc. included in the information transmitted from the financial transaction terminal 10.

The keystroke authentication server 30 extracts keystroke behavior pattern information from the keystroke information transmitted from the financial transaction server 20 and compares it with information previously registered in the database to authenticate the user based on the keystroke. By performing the operation and transmitting the result to the financial transaction server 20, the financial transaction can be performed between the financial transaction server 20 and the financial transaction terminal 10.

2 is a flowchart of an embodiment of a method for providing a financial transaction service using keystroke based behavior pattern information according to the present invention.

Referring to FIG. 2, first, a user inputs authentication target information through the financial transaction terminal 10 (S100). The authentication target information refers to information such as, for example, a password, which the user inputs through the financial transaction terminal 10 to start a financial transaction, and is referred to as authentication target information in that it is subject to authentication.

When the authentication target information is input, the financial transaction terminal 10 configures authentication request information from the input authentication target information. The authentication request information includes the user's account information, account password information and keystroke information, which is generally obtained by reading the user's account or card into the financial transaction terminal 10 in a step before the step S100. , The account password is obtained from the authentication target information input in the step (S100). Of course, the account information may be obtained by a user inputting directly through the financial transaction terminal 10.

On the other hand, the keystroke information means at least one or a combination of input duration information, pressure information, and interval information between keystrokes for each keystroke of the user's account password information. Here, the input duration refers to the time when each keystroke for the account password input by the user is pressed, and the pressure information means the pressure at which each keystroke of the account password input by the user is pressed. The interval information refers to a time interval between each keystroke in which the user inputs an account password. For example, when the user inputs the password "1234" as the authentication target information, the numeric keys "1", "2", "3", and "4" are sequentially input, where each key "1" is input. The input duration information of "," 2 "," 3 ", and" 4 "is generated by calculating the time when each key is pressed, and the pressure information of each key is calculated by means of a pressure sensor or the like. Is generated. Interval information, on the other hand, is generated by calculating the time interval between each key being pressed.

For example, as shown in FIG. 3, when the password "1234" is sequentially input, the input duration for "1" is 200 ms, the input duration for "2" is 300 ms, and the input for "3". It can be seen that the duration is 200ms, and the input duration for "4" is 400ms, and the intervals between inputs between these keystrokes are 600ms, 500ms and 500ms, respectively. Although pressure information is omitted in FIG. 3 for convenience, pressure information when each key is pressed can be similarly generated for each key such as 700 Pa, 550 Pa, 600 Pa, 650 Pa, and the like.

When the authentication request information including the account information, the account password and the keystroke information is configured through the above process, the financial transaction terminal 10 transmits the authentication request information to the financial transaction server 20 (S110).

The financial transaction server 20 receives the authentication request information and uses the account information and the account password included in the authentication request information to perform the first authentication operation based on whether they match the user's account information and password stored in advance. Perform (S120).

After performing the first authentication operation, if authentication fails, a signal indicating that authentication has failed is transmitted to the financial transaction terminal 10 (S140), and the financial transaction terminal 10 notifies the user of the corresponding signal through the display unit. By again inputting the authentication target information to perform again from step S100. If the primary authentication is successful, the financial transaction server 20 transmits the keystroke information included in the authentication request information to the keystroke authentication server 30 (S150).

The keystroke authentication server 30 extracts keystroke based behavior pattern information from the keystroke information received from the financial transaction server 20 (S160). Extracting the keystroke based behavior pattern information is to be compared with the keystroke based behavior pattern information registered in advance by the user. The keystroke behavior pattern information is at least one of the above-described input duration information, pressure information, and interval information. It may be extracted by a method such as performing a predetermined operation or weighting. Of course, the extracted keystroke behavior pattern should be the same way as when registering the keystroke based behavior pattern.

For example, when the user selects to use only the input duration information and the interval information among the input duration information, the pressure information, and the interval information as the keystroke-based behavior pattern information, the keystroke behavior pattern extraction is performed from the keystroke information transmitted accordingly. Only input duration information and interval information are extracted.

When the keystroke-based behavior pattern information is registered, if a predetermined operation is performed on the keystroke information, the keystroke-based behavior pattern information is extracted by performing the same operation accordingly. For example, when the keystroke information described in the example of FIG. 3 is transmitted to the keystroke authentication server 30, the input duration information is "200, 300, 200, 400", and these may be replaced by a predetermined threshold. For example, when the threshold value is 300 and 300 or more, and 1 or 300 or less, and 0 is substituted, the input duration information may be extracted as "0, 1, 0, 1".

In addition, keystroke-based behavior pattern information may be extracted by weighting the input duration information, the pressure information, and the interval information, respectively. For example, weights such as weight 1 for input duration information, weight 0.5 for pressure information, weight 1.5 for interval information, etc. may be assigned. Such a technique uses various statistical characteristics, and according to the user's environment and user's level, It can be a way to increase the accuracy and reliability of authentication.

Through this process, when the keystroke authentication server 30 extracts the keystroke-based behavior pattern information by using the keystroke information input in the same manner as the keystroke-based behavior pattern information registered in advance by the user, the previously stored information. The second authentication operation is performed by determining whether they match with each other (S170). In this case, it is preferable that the user authentication succeeds if the user falls within the error range with an appropriate error range in determining the match, and the user authentication fails if the error is out of the error range. Too wide a margin of error can make reproducibility of authentication difficult, and too narrow a margin of error can compromise security, so you must determine the margin of error within the appropriate range.

After performing the second authentication, the keystroke authentication server 30 transmits a signal indicating the result of the second authentication, that is, the authentication success or the authentication failure, to the financial transaction server 20 (S180). The financial transaction server 20 transmits the second authentication result to the financial transaction terminal 10 again (S190).

When the second authentication succeeds in the keystroke authentication server 30, the financial transaction server 20 transmits a signal indicating that the second authentication is successful to the financial transaction terminal 10, and the financial transaction terminal 10 Accordingly, if necessary, the mobile terminal outputs a message indicating that the user authentication is completed successfully and proceeds to the step of allowing the user to perform a financial transaction (S200). It becomes (S220). Of course, when the financial transaction server 20 transmits it to the financial transaction terminal 10 when the second authentication fails, the financial transaction terminal 10 outputs a message informing of the fact. This step is performed by informing the user and inputting the authentication information again (S100).

4 is a block diagram showing the configuration of an embodiment of a financial transaction terminal 10 connected to the financial transaction service system according to the present invention.

Referring to FIG. 4, the financial transaction terminal 10 of the present embodiment includes a keystroke input means 11, an interval assist means 12, an authentication request information configuration unit 13, and a data transmission unit 14.

The keystroke input means 11 is a means for receiving authentication target information from a user. Since the present invention extracts a behavior pattern based on a keystroke and uses it for user authentication, the keystroke input means 11 is a means for acquiring a keystroke of a user, for example, a keyboard, a keypad, or a touch screen in which a keypad is implemented. The display device.

The interval assistance means 12 is a means for referring to the interval between keystrokes when a user inputs authentication target information through the keystroke input means 11. The interval assistance means 12 may be activated and displayed by the user's selection on the display unit of the financial transaction terminal 10, for example, and has a constant rhythm or cycle, such as a metronome, an hourglass, or a hammer moving at a constant cycle. As a result, the user can grasp the elapse of time when the user inputs the keystroke, and input authentication target information while adjusting the interval according to a predetermined pattern. Of course, the user may not activate the interval assisting means 12, in which case the interval assisting means 12 will not operate and the user will enter a keystroke without special assistance. The interval assistance means 12 may preferably use the same one used when the user initially registers his keystroke based behavior pattern information.

The authentication request information configuring unit 13 configures authentication request information from the authentication target information input through the keystroke input unit 11. Here, the authentication request information includes the user's account number, account password and keystroke information as described above. As described above, the keystroke information also includes any one of input duration information, interval information, and pressure information, or a combination thereof. As described above, the account number can be obtained through a user's bankbook or card, or obtained by user input, the account password is obtained through the keystroke input means 11, and the keystroke information is obtained from the keystroke input means. Obtained by the input duration information, the pressure information, and the interval information of the keystroke of the account password inputted through 11.

The data transmission unit 14 is a means for transmitting the authentication request information configured from the authentication request information configuration unit 13 to the financial transaction server 20. When the authentication request information is transmitted to the financial transaction server 20 through the data transmitter 14, the financial transaction server 20 performs the primary authentication according to the procedure described with reference to FIG. 2 and keystrokes the keystroke information. By performing the second authentication by transmitting to the authentication server 30, it is verified whether the user is a true user.

Meanwhile, the financial transaction terminal 10 of FIG. 4 may be, for example, a device such as an ATM device, a computer, or a mobile communication terminal. It should be noted that FIG. 4 shows only components directly related to the present invention. That is, the financial transaction terminal 10 includes other obvious components for performing the functions of the device itself, in addition to the components shown in FIG. 4, and these components, for example, display means, a processor, a memory, and an input / output device. It should be noted that elements such as the above are not directly related to the present invention and thus the description thereof is omitted and not to exclude such elements.

Figure 5 is a block diagram showing the configuration of an embodiment of a financial transaction server 20 of the financial transaction service system according to the present invention.

Referring to FIG. 5, the financial transaction server 20 of the present embodiment includes a data receiver 21, a primary authentication performer 22, a keystroke information extractor 23, and a data transmitter 24.

The data receiver 21 is a means for receiving authentication request information transmitted from the financial transaction terminal 10 and receives the authentication request information and transmits the authentication request information to the primary authentication performer 22.

The primary authentication performing unit 22 is a means for performing primary authentication by account information and account password information of the user included in the authentication request information. The primary authentication is performed by whether the account information and the account password of the transmitted authentication request information match the information registered in advance. If the first authentication is successful, the first authentication performing unit 22 transmits the keystroke information included in the received authentication request information to the keystroke authentication server 30 through the data transmitter 24. If the primary authentication fails, the financial transaction terminal 10 notifies the primary transaction that the primary authentication has failed.

6 is a block diagram showing the configuration of an embodiment of the keystroke authentication server 30 of the financial transaction service system according to the present invention.

Referring to FIG. 6, the keystroke authentication server 30 according to the present embodiment includes a data receiver 31, a keystroke based behavior pattern information extractor 32, a secondary authentication performer 33, and a data transmitter 34. Include.

The data receiver 31 is a means for receiving data transmitted from the financial transaction server 20. As described above, the data receiver 31 receives keystroke information transmitted when the first authentication succeeds in the financial transaction server 20. It transmits to the stroke-based behavior pattern information extraction unit 32.

The keystroke based behavior pattern information extractor 32 is a means for extracting the keystroke based behavior pattern information from the received keystroke information. Extraction of the keystroke-based behavior pattern information is performed in the same manner as described with reference to FIGS. 2 and 3, and uses the same method as that used when generating keystroke-based behavior pattern information of a user who has been registered in advance. .

When the keystroke based behavior pattern information is extracted, it is transmitted to the secondary authentication unit 31, and the secondary authentication unit 32 receives the keystroke based behavior pattern according to the procedure described with reference to FIGS. Secondary authentication is performed by comparing the information with information previously registered and stored. When the authentication is completed, the second authentication performing unit 32 transmits the result of authentication, that is, the result of authentication success or authentication failure, to the financial transaction server 20 through the data transmission unit 34.

7 to 9 illustrate an example of a process in which an actual user inputs authentication target information through the financial transaction terminal 10 used in the present invention.

The financial transaction terminal 10 of FIG. 7 is an ATM device implemented in a touch screen manner, and it can be seen that the keystroke input means 11 and the interval assistance means 12 are implemented through a display screen.

7 is a state for inputting an account password in a state in which the terminal 10 obtains account information, for example, by reading his bankbook or card. In this state, the user configures the authentication target information by inputting his account password into the display means in the form of a touch screen and acquiring the input duration, pressure information, and interval information of the keystroke input at this time.

In the state shown in FIG. 7, when the user presses the “use safety password helper” button at the bottom of the screen, the screen goes to the screen as shown in FIG. 8, which is for selecting the interval assisting means 12 described above.

When the user selects the hammer picture on the screen of FIG. 8, the hammer picture is changed to the lower surface of the state as shown in FIG. 9. The hammer picture is displayed on the left side of FIG. do. The user can refer to the interval of the keystroke of his password by using the keypad button on the right side of the screen while watching the movement of the hammer picture of FIG.

10 illustrates a procedure for a user to register his / her keystroke-based behavior pattern information in the keystroke authentication server 30 in advance in order to implement the method for providing a financial transaction service using the keystroke-based behavior pattern information according to the present invention. It is a flow chart.

Referring to FIG. 10, first, a user inputs authentication registration information through the financial transaction terminal 10 (S300). The authentication registration information refers to information such as, for example, a password, which the user inputs through the financial transaction terminal 10 to start a financial transaction, and the authentication target information of FIG. 2 in that it is information for initial registration. This is called authentication registration information. In order to increase the reliability of authentication information registration, it is preferable to input the data about five times so as to perform the next step when the authentication information input for each number falls within a predetermined error range.

When the authentication registration information is input, the financial transaction terminal 10 configures authentication registration request information from the input authentication registration information. Since the authentication registration request information includes the user's account information, account password information and keystroke information as described in FIG. 2, the detailed description thereof will be omitted since the acquisition method and the configuration of each information are the same.

Next, the financial transaction terminal 10 transmits the configured authentication registration request information to the financial transaction server 20 (S310). The financial transaction server 20 receives the authentication registration request information and uses the account information and the account password included in the authentication registration request information to verify the primary authentication through whether they match the previously stored user's account information and password. Perform the operation (S320).

After performing the first authentication operation, if authentication fails, a signal indicating that the authentication has failed is transmitted to the financial transaction terminal 10 (S340). If the first authentication succeeds, the financial transaction server 20 requests the authentication registration. The keystroke information included in the information is transmitted to the keystroke authentication server 30 (S350).

The keystroke authentication server 30 extracts keystroke based behavior pattern information from the keystroke information received from the financial transaction server 20 (S360) and registers it in the database (S370). Since the extraction method is the same as described with reference to FIG. 2, a detailed description thereof will be omitted.

When the registration is completed, the keystroke authentication server 30 notifies the financial transaction server 20 that the authentication information has been registered (S380). The financial transaction server 20 transmits the authentication information registration result to the financial transaction terminal 10 (S390).

In this state in which the keystroke-based behavior pattern information is registered, the user later inputs his own authentication information according to the method described in FIGS. 1 to 3, and the financial transaction server 20 and the keystroke authentication. By performing the first and second authentication in the server 30 it is possible to increase the reliability and security of user authentication.

Although the present invention has been described above with reference to preferred embodiments of the present invention, the above embodiments are illustrative rather than limiting, and the embodiments are within the scope of the present invention as understood by reference to the appended claims and drawings. It should be noted that modifications, improvements and variations can be made to those skilled in the art to which the present invention pertains. For example, the financial transaction terminal 10 is mainly described as an ATM device, but in the case of Internet banking or the like, the financial transaction terminal 10 may be a computer, and in the case of mobile banking using a mobile communication network, etc. The terminal 10 may be a mobile communication terminal, and in this case, the present invention may be applied as it is without particular modification.

In addition, in the above embodiment, the financial transaction server and the keystroke authentication server have been described as being physically separated, but the financial transaction server and the keystroke authentication server may be physically integrated in one device. It will be apparent to those skilled in the art that such a case can be implemented by means capable of performing a plurality of functions as a financial transaction server and a keystroke authentication server, for example, in one single device (server) such as a computer.

1 is a diagram showing the overall configuration of a system for performing a financial transaction service providing method using keystroke-based behavior pattern information according to the present invention.

2 is a flowchart of an embodiment of a method for providing a financial transaction service using keystroke based behavior pattern information according to the present invention.

3 is a diagram illustrating an example of keystroke information.

Figure 4 is a block diagram showing the configuration of an embodiment of a terminal for financial transactions connected to the financial transaction service system according to the present invention.

Figure 5 is a block diagram showing the configuration of an embodiment of a financial transaction server of the financial transaction service system according to the present invention.

Figure 6 is a block diagram showing the configuration of an embodiment of a keystroke authentication server of the financial transaction service system according to the present invention.

7 to 9 are diagrams illustrating an example of a process in which an actual user inputs authentication target information through a financial transaction terminal used in the present invention.

10 is a flowchart illustrating a procedure for registering a user's keystroke based behavior pattern information with a keystroke authentication server in advance in order to implement a method for providing a financial transaction service using keystroke based behavior pattern information according to the present invention.

<Description of Signs of Major Parts of Drawings>

10 ... financial transaction terminals, 20 ... financial transaction servers,

30 ... Keystroke Authentication Server

Claims (15)

A method for providing a financial transaction service using keystroke-based behavior pattern information in a financial transaction system coupled to a financial transaction terminal and a network, the financial transaction system including a financial transaction server and a keystroke authentication server, Receiving, by the financial transaction server, authentication request information of the user from the financial transaction terminal, wherein the authentication request information includes account information, account password information, and keystroke information of the user; After the financial transaction server performs the first authentication based on the account information and the account password information included in the authentication request information, the keystroke authentication server includes the keystroke information included in the received authentication request information when the first authentication succeeds. Transmitting to; Extracting, by the keystroke authentication server, keystroke based behavior pattern information from the received keystroke information; Performing second authentication by the keystroke authentication server by comparing the extracted keystroke-based behavior pattern information with authentication information of a user previously stored; Transmitting the result of performing the second authentication to the financial transaction server; And Transmitting, by the financial transaction server, the second authentication result to the financial transaction terminal; Including; And the financial transaction server performs a financial transaction requested through the financial transaction terminal when the second authentication is successful. The method of claim 1, In the financial transaction server receiving the authentication request information of the user from the financial transaction terminal, The keystroke information may include at least one of input duration information, pressure information, and interval information between keystrokes for each of the keystrokes of the user's account password information input through the keystroke input means of the financial transaction terminal. Financial transaction service providing method comprising a. The method of claim 2, The financial transaction service providing method of the financial transaction terminal is provided with an interval assistance means for allowing a user to input the reference between the keystrokes. The method of claim 3, The interval assistance means is displayed on the display unit of the financial transaction terminal financial transaction service providing method. The method of claim 4, wherein The interval assistance means is a financial transaction service providing method characterized in that it is displayed in a form that can determine the passage of time. The method of claim 3, The interval assistance means is activated by the user's selection. The method of claim 2, The keystroke authentication server extracts keystroke based behavior pattern information from the received keystroke information. And extracting keystroke-based behavior pattern information of at least one of input duration information, pressure information, and interval information between keystrokes included in the keystroke information. The method of claim 7, wherein Providing a financial transaction service by extracting keystroke-based behavior pattern information by performing a predetermined operation on at least one of input duration information, pressure information, and interval information between keystrokes included in the keystroke information. Way. The method of claim 7, wherein A method for providing financial transaction services by extracting keystroke-based behavior pattern information by assigning a weight to at least one of input duration information, pressure information, and interval information between keystrokes included in the keystroke information. . In a financial transaction system using keystroke-based behavior pattern information that provides a financial transaction service by combining a financial transaction terminal and a network, Receive the authentication request information from the user through the financial transaction terminal, perform the first authentication by the account information and account password information included in the authentication request information and included in the received authentication request information when the first authentication is successful A financial transaction server for transmitting keystroke information to a keystroke authentication server, wherein the authentication request information includes user account information, account password information, and keystroke information; And Extracting the keystroke-based behavior pattern information from the keystroke information received from the financial transaction server and comparing the authentication information with the previously stored user authentication information to perform the second authentication and then transmit the second authentication result to the financial transaction server. Keystroke authentication server Including; The financial transaction server transmits the secondary authentication result received from the keystroke authentication server to the financial transaction terminal, and performs the financial transaction requested through the financial transaction terminal when the secondary authentication is successful. Financial trading system. The method of claim 10, The financial transaction terminal includes keystroke input means for receiving account password information from a user, input duration information for each keystroke of the account password information of the user input through the keystroke input means, A financial transaction system comprising keystroke information including at least one of pressure information and interval information between keystrokes and configured to be transmitted to the financial transaction server. The method of claim 11, The financial transaction terminal includes an interval assisting means for allowing a user to input an interval by referring to an interval between his / her keystrokes. The method of claim 12, The interval assistance means is displayed on the display unit of the financial transaction terminal. The method of claim 13, The interval assistance means is a financial transaction system, characterized in that the display in the form that can see the passage of time. The method of claim 12, The interval assistance means is activated by the user's selection.
KR1020070088239A 2007-08-31 2007-08-31 Method and system for providing banking service using behavioral pattern based on keystroke KR20090022682A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
KR1020070088239A KR20090022682A (en) 2007-08-31 2007-08-31 Method and system for providing banking service using behavioral pattern based on keystroke

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
KR1020070088239A KR20090022682A (en) 2007-08-31 2007-08-31 Method and system for providing banking service using behavioral pattern based on keystroke

Publications (1)

Publication Number Publication Date
KR20090022682A true KR20090022682A (en) 2009-03-04

Family

ID=40692522

Family Applications (1)

Application Number Title Priority Date Filing Date
KR1020070088239A KR20090022682A (en) 2007-08-31 2007-08-31 Method and system for providing banking service using behavioral pattern based on keystroke

Country Status (1)

Country Link
KR (1) KR20090022682A (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109243108A (en) * 2018-09-27 2019-01-18 上海理工大学 A kind of cipher-code input method
WO2020070721A1 (en) * 2018-10-05 2020-04-09 Banco Davivienda S.A. System and method for easy and secure transactions in social networks for mobile devices
WO2020176005A1 (en) * 2019-02-27 2020-09-03 Общество С Ограниченной Ответственностью "Группа Айби" Method and system for identifying a user according to keystroke dynamics
US11755700B2 (en) 2017-11-21 2023-09-12 Group Ib, Ltd Method for classifying user action sequence

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11755700B2 (en) 2017-11-21 2023-09-12 Group Ib, Ltd Method for classifying user action sequence
CN109243108A (en) * 2018-09-27 2019-01-18 上海理工大学 A kind of cipher-code input method
WO2020070721A1 (en) * 2018-10-05 2020-04-09 Banco Davivienda S.A. System and method for easy and secure transactions in social networks for mobile devices
WO2020176005A1 (en) * 2019-02-27 2020-09-03 Общество С Ограниченной Ответственностью "Группа Айби" Method and system for identifying a user according to keystroke dynamics
US11934498B2 (en) 2019-02-27 2024-03-19 Group Ib, Ltd Method and system of user identification

Similar Documents

Publication Publication Date Title
AU2017316312B2 (en) Remote usage of locally stored biometric authentication data
Tasia et al. Two novel biometric features in keystroke dynamics authentication systems for touch screen devices
US8869255B2 (en) Method and system for abstracted and randomized one-time use passwords for transactional authentication
US8836473B2 (en) Dynamic keypad and fingerprinting sequence authentication
EP2657876B1 (en) Real and virtual identity verification circuit, system thereof and electronic transaction method
US8910861B2 (en) Automatic teller machine (“ATM”) including a user-accessible USB port
US20210029112A1 (en) Taptic authentication system and method
US20060242691A1 (en) Method for carrying out a secure electronic transaction using a portable data support
US20190065919A1 (en) Payment Card With Integrated Biometric Sensor And Power Source
CN109426963B (en) Biometric system for authenticating biometric requests
US20230020600A1 (en) System, Method, and Computer Program Product for Authenticating a Transaction
EP3786820B1 (en) Authentication system, authentication device, authentication method, and program
JP5970974B2 (en) Transaction apparatus and program
KR100939820B1 (en) User terminal apparatus for obtaining keystroke information from user to perform authenticattion by using behavior pattern based on keystroke and method for obtaining keystroke information using the same
KR20090022682A (en) Method and system for providing banking service using behavioral pattern based on keystroke
Marasco et al. Biometric multi‐factor authentication: On the usability of the FingerPIN scheme
US11928199B2 (en) Authentication system, authentication device, authentication method and program
KR20090069964A (en) Method and system for analyzing keystroke pattern of authentication information inputted from user
TWI722337B (en) Transaction system, automated teller machine and method for card-less transaction
US11991180B2 (en) Authentication system, authentication device, authentication method and program
WO2017058108A1 (en) Method and system for performing an action in a branchless banking environment
JP5528504B2 (en) User authentication system, user authentication program, and user authentication method
JP6753175B2 (en) User authentication system, user authentication method and program
CN107241349B (en) Service processing system, virtual operation device, ATM and service processing method
JP2006227944A (en) Communication assist system

Legal Events

Date Code Title Description
A201 Request for examination
N231 Notification of change of applicant
E902 Notification of reason for refusal
AMND Amendment
E601 Decision to refuse application
J201 Request for trial against refusal decision
AMND Amendment
B601 Maintenance of original decision after re-examination before a trial
E801 Decision on dismissal of amendment
J301 Trial decision

Free format text: TRIAL DECISION FOR APPEAL AGAINST DECISION TO DECLINE REFUSAL REQUESTED 20100617

Effective date: 20120928

Free format text: TRIAL NUMBER: 2010101004484; TRIAL DECISION FOR APPEAL AGAINST DECISION TO DECLINE REFUSAL REQUESTED 20100617

Effective date: 20120928