스마트OTP 공동앱

금융결제원(KFTC)

About this app

1. Smart OTP issuance and registration of other organizations

1) Issuance
-Visit a financial company capable of issuing smart OTP
-Fill out the application for issuance of Smart OTP and submit ID card
* Issuable customers: Individual banking customers among NFC-enabled smartphone holders (including individual business owners)

2) Smart OTP registration by other organizations
-Bring your ID card and OTP generator to a financial company, or
-Connect to a financial company such as Internet banking or WTS, select the “Register OTP other institution” menu, enter the serial number and vendor code of the corresponding smart OTP, and register another institution through an accredited certificate, etc.

2. How to use

1) Device registration
-(What is device registration?) The procedure of registering a smartphone with the KFTC so that OTP is generated only on the smartphone where the customer has registered the device.
-Device registration can be used without additional registration after registering only once for the first time.
* However, if you reinstall the joint app or change your smartphone, you need to register the device again.
-More than one device can be registered (however, only one smart OTP device can be registered per issuing financial company)

2) Lee Yong
-OTP is created by running a joint app when OTP is requested in the process of electronic financial transactions such as fund transfer and reissuance of public certificates
① Input transaction information to financial companies' internet banking, smartphone banking, WTS, etc.
② Joint app execution (Touch the push message delivered to the smartphone or run it directly)
③ IC card contact
④ Contact IC card after confirming transaction information
⑤ OTP creation
-When the OTP is created, the joint app is automatically closed, and the generated OTP screen is displayed as a floating screen*. After that, the OTP screen automatically closes after about 1 minute.
* Floating screen: Displayed on top of other apps, and freely moved screen composition method (simultaneous execution with apps such as financial companies' smart banking)

-App information added
[Required Access Permission Guide]
ㅇ Phone: Mobile phone number is used for customer identification and device information is used to enhance security.
ㅇ Storage space: Used to enhance security, such as determining whether there is a malicious program with access rights to the device's photos, media, and files.
* Required access rights are required to use the Smart OTP service, and service use is restricted if the authority is denied.

[Selective Access Permission Guide]
ㅇ Allow display on other apps: Used to activate and display the created OTP on top of other apps.
ㅇ You can use the app service even if you do not allow optional access rights.

* If the Android operating system version is less than 6.0, you cannot individually control the access rights of the app. Operating system upgrade is required for access control.

Ratings and reviews

Buggy. Half the time, the app stuck at the start-up screen. Also, it is dumb to restrict the OTP to only one registered phone model and phone number. Isn't it enough that the user has to present the physical OTP card and has to enter the 4-digit code on the web site? These unnecessary restrictions make it really complicated to set up the OTP feature.

Keeps stopping with no chance to know what's wrong.

1번 인증에 1번 재부팅이 필요한 어플은 처음봤습니다. 별 1개도 아깝네요.

What’s new

최신 보안정책 반영