KR100509924B1 - Method of multiple payment based on electronic cash using a mobile phone - Google Patents

Abstract

The present invention relates to an electronic money-based multi-payment method using a mobile terminal. The mobile terminal user requests a withdrawal of money from the broker after the registration process of establishing an account with the broker, and the broker gives the user the right to pay. After the withdrawal step in which the user generates the actual payment and the mutual authentication process in which the user accesses the wireless Internet with the payment generated through the withdrawal step and establishes mutual authentication and key with the seller, the user wants the information or service. To receive the payment, the seller pays the monetary value, the seller provides the corresponding information or service, and after the payment, the seller requests the broker to make a payment. Justify and verify the actual amount from your account to your account It includes a goody payment stage.

The present invention provides a mobile terminal user with mobility and convenience in the wireless Internet while using the information or service desired by the user without limitation of the environment, and does not require an intermediary server interworking the existing Internet network and the mobile terminal. Therefore, there is an advantage that can be efficient and quick trading.

Description

Electronic money-based multi-payment method using mobile terminal {METHOD OF MULTIPLE PAYMENT BASED ON ELECTRONIC CASH USING A MOBILE PHONE}

The present invention relates to an electronic money-based multi-payment method using a mobile terminal, and more particularly, to an electronic money-based using a mobile terminal for performing a series of commerce processes of receiving and paying for desired information or services on the wireless Internet. It's about multiple payment methods.

In the payment system using the mobile terminal according to the prior art, as shown in the configuration of FIG. 1, payment agents are taking a way to play an intermediate role between the buyer and the seller (service provider) by building their own server.

Looking at the series of processes, when a user possessing a mobile terminal requests agents to purchase electronic money (S1), the agent goes through an authentication process (S2 and S3) with the carrier and approves the purchase of electronic money (S4). do.

The user requests the purchase of the desired product to the seller affiliated with the agency using electronic money (S5), and the seller approves the payment for the purchase of the product through the payment process (S6, S7) with the agency (S8). The purchase of the product is made.

The fee for the product purchased by the user is charged together with the mobile terminal fee through the mobile terminal bill, and when the user pays the purchase price (S9), the electronic money settlement process (S10) is performed between the carrier and the agency and the seller. .

However, the conventional payment system as described above has a problem of requiring an intermediary company that handles payment processing between a mobile carrier and a financial institution such as a bank or a card company.

In addition, there is a problem that a service provider or a content provider that can be used by a user having a mobile terminal is limited to a company that is affiliated with an agency that has its own server. In other words, the user purchases goods and receives services through the Internet, and the mobile terminal serves only as a means of paying for them. This is merely a replacement of the existing offline payment method or payment method through the Internet with a payment method called a mobile terminal.

The present invention has been proposed to solve such a conventional problem, and the object of the present invention is to reflect the concept of money used in real life by making the subject of payment for transmitting electronic money become a user having a terminal.

Another object of the present invention is to apply a hidden signature technique to satisfy the non-traceability and discontinuity of the paid electronic money, and the user generates a direct payment using the payment rights received from the broker and corresponds to the value paid. It is about following the prepayment mechanism for receiving information or services.

Another object of the present invention is to enable a user to perform payments with multiple service providers in one hashchain generation.

An electronic money-based multi-payment method using a mobile terminal according to the present invention for realizing the above-mentioned objects is performed by a user who owns a mobile terminal as a subject who uses information or a service and pays the same. An electronic money based multiple payment method applied to a payment system that includes a seller (service provider) that produces and sells appropriate information or services to the user and a broker that handles authentication and payment between the user and the seller. In claim 10, after the mobile terminal user establishes an account with the broker, the user requests to withdraw money from the broker, the broker grants the user the right to pay, and the user makes an actual payment. A withdrawal step to generate, and through the withdrawal step After a mutual authentication process in which the user accesses the wireless Internet and establishes mutual authentication and key with the seller with payment, the user pays the money value to the seller to receive the desired information or service, and the seller then A payment step for providing information or a service, and after the payment step, the seller requests the broker to make a payment, and the broker verifies the validity of the currency for the payment requested by the seller and checks the account from the user's account. A payment and confirmation step of transferring the actual amount to the seller's account, wherein the withdrawal step is performed by the broker through a security negotiation with the user to enable the user to make a payment with the plurality of sellers. Steps to create as many new hashchains as possible Setting a number of hash chains to be created by the user and a monetary unit of the generated hash values to specify the withdrawal amount of the user, and granting the broker the authority to generate payments. Generating a payment authority certificate that is valid only for a specific user that is issued to the user; transmitting, by the broker, a withdrawal response message to the user along with the certificate and hash chain; and from the withdrawal response message that the user receives from the broker Obtaining the certificate and hash chain.

There may be a plurality of embodiments of the present invention. Hereinafter, preferred embodiments will be described in detail with reference to the accompanying drawings. This embodiment allows for a better understanding of the objects, features and advantages of the present invention.

In the payment system to which the electronic money-based multiple payment method using the mobile terminal according to the present invention is applied, as shown in the configuration diagram of FIG. 2, a user, a seller (service provider) and a broker owning the mobile terminal on the wireless Internet are provided. It consists of three participants.

A user owns a mobile terminal with a smart card or chip as a subject that uses and pays for information or services.

Sellers (service providers) produce information or services suitable for wireless or mobile environments and sell them to users.

The broker grants the user the right to set up accounts with the user and generate electronic money, and acts as a trusted authority that handles authentication and payment between the user and the seller.

Referring to the withdrawal step between the user and the broker, the registration process (S101) in which the mobile terminal user establishes an account with the broker and transmits the user's personal information on the wireless Internet and requests the user to withdraw money from the broker (S102). And issuance (withdrawal) process of receiving actual payment (S103) and generating actual payment (S104).

In this withdrawal phase, the user who owns the mobile terminal must first obtain his account through mutual authentication with the broker and open an account linked with the bank. In addition, the user withdraws the amount as much as he / she wants from the broker to receive any information or service from the seller through his terminal, and the user performs the withdrawal protocol with the broker as shown in the flowchart of FIG. 3. .

Looking at the process of performing the fetch protocol, first, the user owns the secret session key (K) through the key exchange process for registration with the broker. Therefore, the messages exchanged between the user and the broker are securely transmitted because they are encrypted with the secret session key K (S301 to S303).

In addition, the user can specify the maximum number (N) and random number (r _U ) of the seller (service provider) that can trade, the number of hash chains (k) and the generated hash values to be created by the user to specify the withdrawal amount. Set monetary unit (d). Here, N and d may be selectively set by the user and the broker through mutual security negotiation (S304 to S305).

For the withdrawal request, the user processes the values set above with a time stamp (TS) and broker's identity (ID _B ) as a hash function, digitally signs them, encrypts them with a secret session key (K), and sends them to the broker. send. At this time, the withdrawal request message sent from the user to the broker is transmitted in the form of {Sig _U (h (N∥k∥d ∥TS ∥ r _U ∥ ID _B )) ∥N ∥k ∥d ∥TS ∥r _U } _K (S306 to S309).

Next, the broker decrypts the withdrawal request message received from the user and verifies the digital signature (S310 to S311).

When the verification is completed, an identifier TN _U for a specific user is calculated using the user's identity ID _U , a random number r _U , and a secret session key K (S312). Here, TN _U = h (ID _U ∥r _U ∥K), which is an element added together when creating a new hash chain (PayRoot). PayRoot therefore guarantees that only brokers can calculate and issue, and is valid only for the issued user. Further, the PayRoot values are i = N,... For, 0, T _i = h (T _{i + 1} , TN _u ).

The broker then creates a public key pair (PK _U , SK _U ) for the user and uses his identity (ID _B ), the identifier for the specific user (TN _U ), and the user's public key (PK _U ). A signed certificate, that is, a certificate (PayCert) valid only for a specific user, is generated (S313 to S314). Here, PayCert is a broker's identity (ID _B ), an identifier for a specific user (TN _U ), a timestamp (TT) indicating when the PayCert was generated, and an authenticated public key (PK _U ) that can verify the user's signature. It is configured and signed by the broker. In other words, the _{PayCert = {Sig B (h (} ID B ∥TN U ∥TT∥PK U)) ∥ID B ∥TN U ∥TT∥PK U}.

For the withdrawal response, the broker sends a random number (r _U ), the user's new secret signing key (SK _U ), a timestamp (TS), and his identity (ID _B ) along with PayCert and PayRoot to the secret session key (K). Encrypt it and send it to the user. At this time, the withdrawal response message transmitted from the broker to the user is transmitted in the form of {PayCert∥r _U ∥SK _U ∥TS ∥ID _B ∥ (T ₁ ,…, T _N )} _K (S315-S316). After the user transmits the withdrawal request message to the broker (S309), the process of receiving the withdrawal response message from the broker (S316) may be referred to as a payment authorization process. In this process, a payment authorization certificate (PayCert, which is a certificate valid only for a specific user) ) Is granted the right to pay.

Thereafter, the user decrypts the withdrawal response message received from the broker and checks the random number r _U and the time stamp TS (S317 to S318). When the verification process is completed, the user acquires a certificate (PayCert), a hash chain (PayRoot), and a secret signing key (SK _U ) (S319).

Where h (x) represents the result of applying the one-way hash function to the input x, Sig _A (x) represents the value x signed by A, and {} _K represents the notation encrypted using K. . When a user views outlining the mutual authentication process for establishing a seller and the mutual authentication and the key, the user generates a random number (r _U) and calculates a session public key (g ^rU), sent to a broker together with the identity of the certification authority Next, the broker generates a random number (r _B ), computes (g ^rU ) ^rB , and generates a session key (K _B = h (r _B ∥ (g ^rU ) ^rB )) with the user. The broker encrypts information (h (K _B ∥r _B ∥ID _B )) consisting of its session key (K _B ), identity (ID _B ), and random number (r _B ), which is the random number (r _B ), broker Next, the user extracts the public key and identity from the broker's certificate and calculates the session key (K _U = h (r _B ∥ (g ^rB ) ^rU )). . Verify that the values of h (K _B ∥r _B ∥ID _B ) and h (K _U ∥r _B ∥ID _B ) obtained by decrypting the encrypted information received from the broker with the generated session key (K _U ) are the same. . If the two values match, each session key (K = K _B = K _U ) matches, and mutual authentication is established.

Looking at the payment step between the user and the seller (service provider), the process of performing mutual authentication between the user and the seller (S105) and the user performs the payment (S106) and provides the user with the information or service requested by the seller. It includes a process (S107).

In this payment step, the user can not only verify the seller by decrypting the message received from the seller with his private key, but also generate a session key with the seller.

If you look at the details of the payment protocol process, you can create and use as many hash chains as you have withdrawn by obtaining a Payment Certificate from the broker, and deal with as many sellers as specified in the created PayRoot. You can do Therefore, in order to receive information or services from the seller, the user transmits a payment certificate (PayCert) and a generated hash chain (PayRoot) to prove that he is a legitimate subject of payment, and the seller pays the electronic money paid after verifying it. Provide information or services to users.

The user signs a message for the first merchant and payment, including the root of the hash value and the first argument of the generated hashchain (PayRoot). The process of generating electronic money by the user follows PayWord technique. I = n-1,... A hash chain value is generated with respect to, 0 as ω _i = h (ω _{i + 1} ) (S401).

Then, the root value (ω ₀ ) of the hash value for T ₁ is signed with the secret signing key (SK _U ) together with the seller's identity (ID _V ) and timestamp (TD), and then the payment authorization certificate (PayCert) is signed. Send the included message to the seller. At this time, from the user certificate that is transmitted to the seller _{{Sig U (h (ω 0} ∥h (ω 0 ∥T 1) ∥ID V ∥TD)) ∥ω 0 ∥h (ω 0 ∥T 1) ∥ID V ∥ The TD is transmitted in the form of PayCert (S402 to S403). The seller then provides the user with information or services corresponding to the payment received from the user.

On the other hand, the seller receiving the above message verifies the certificate (PayCert) with the broker's public key (S404), and by validating the user's signature with the user's public key extracted here, the user is guaranteed the legitimacy of the electronic money to be paid (S405). ).

Seller authenticates the hash value (ω ₁ ,…, ω _l ) that is paid afterwards through the hash function and provides the service (S406 ~ S408), and the last paid hash value ( P _l = (ω _l , l). )) And ω ₀ , h (ω ₀ ∥T ₁ ), PayCert and save the transaction with the user (S409).

5 is a flow chart illustrating a payment step performed between a user and a kth seller in accordance with the present invention.

In the past, assuming that a user spent j-1 electronic money in a transaction with the k-1th seller, ω _j is set as the new root of the hash value in the transaction with the kth seller, and T _k is It serves as a supporting factor. As in the case of the first seller above, at the end of the transaction with the user, the k-th seller stores ω _j ∥h (ω _j ∥T _k ) ∥ PayCert ∥ P _{j + l} . Here, ω _j means the root value required for payment with the k-th seller, and T _k is a hash chain (PayRoot) that proves ω _j is the root value for payment.

Looking at the payment step between the seller and the broker, the seller (service provider) includes the process of requesting the payment through the broker (S108), the payment request is approved (S109) and receiving the actual amount to their account do.

In the payment step, the seller (service provider) performs the payment protocol with the broker at a certain point. The broker can verify the justification for the payment required by the seller by verifying the PayCertificate issued by the broker. Through the protocol as shown in FIG. 6, a payment protocol for repaying the price between the k-th seller and the broker is performed.

Looking at the payment protocol execution process in detail, the seller first extracts the message stored at the end of the transaction with the user and transmits it to the broker. In this case, the billing information message transmitted to the broker from the seller are transmitted in the form of _{ω j ∥h (ω j ∥T k} ) ∥PayCert∥ P j + l (S601~S602).

The broker confirms the validity of the payment by receiving the payment authority certificate (PayCert) and verifying the signature (S603).

In addition, TN _U was not forged by hashing the user's identity (ID _U ), random number (r _U ), and secret session key (K) from the identifier (TN _U ) for a particular user included in PayCert. Verifying (S604). The process of validating the currency justification is again performed by verifying the PayCert signature. The certificate of payment authority is the identity of the broker (ID _B ), the identifier for the specific user (TN _U ), the timestamp (TT) indicating when the certificate occurred, and the authenticated public key (PK _U ) to verify the signature of the user. It is configured by the broker and signed by the broker. In other words, PayCert = {Sig _B (h (ID _B ∥TN _U TT∥PK _U )) ∥ID _B ∥TN _U TT∥PK _U } Therefore, the signature verification process is performed using a broker's public key. Decode the message (Sig _B (h (ID _B ∥TN _U TT∥PK _U ))) to get the signature value (h (ID _B ∥TN _U TT∥PK _U )) and use this signature value as a hash function. The validity of the new signature is calculated based on the identity of the broker (ID _B ), the identifier for the particular user (TN _U ), and the timestamp (TT). ), And the new hash value of the user's public key (PK _U ) (h '(ID _B ∥TN _U TT∥PK _U ).

Next, when the verification is completed, the broker finds T _k for ω _j in the PayRoot table it maintains, and transfers the amount corresponding to the payment value P _{j + l} sent by the seller to the seller's account. (S606).

When the broker performs the payment protocol with the seller, the broker can verify only the payment values ω _j to ω _{j + l} for the T _k transmitted by the seller. In other words, the root value of the payment corresponding to T _k is ω _j , and only if the final received ω _{j + l} is hashed l times, it is necessary to check whether it is equal to ω _j .

In addition, the broker receives the maximum number of sellers (N) PayRoot (PayRoot) that was sent to the user in the withdrawal phase, confirms the payment values corresponding to each T _i , and is included in the certificate (PayCert) The payment protocol is completed by checking whether the payment value ω _l received from the last seller within the expiration date is less than ω _k , the maximum value of the hash chain created by the user.

In the above description, but limited to one embodiment of the present invention, it is obvious that the technology of the present invention can be easily modified by those skilled in the art. Such modified embodiments should be included in the technical spirit described in the claims of the present invention.

As described above, the present invention allows the subject of payment for transmitting actual electronic money to be a user having a terminal so that the concept of money used in real life is reflected as it is, and applying a hidden signature technique to the paid electronic money. We have satisfied the nontrace and discontinuity.

In addition, the user follows the prepaid mechanism by which payment is generated from the broker to create a direct payment and receive information or services corresponding to the value paid. In particular, the present invention allows a user to perform payments with multiple service providers in one hash chain generation.

The present invention provides a mobile terminal user with mobility and convenience in the wireless Internet, and can use the information or service desired by the user without restriction of the environment, and does not require an intermediary server interworking the existing Internet network and the mobile terminal. Effective and quick trading is effective.

1 is a block diagram of a payment system using a mobile terminal according to the prior art,

2 is a configuration diagram of a payment system to which an electronic money based multiple payment method using a mobile terminal according to the present invention is applied;

3 is a flowchart illustrating a withdrawal step performed between a user and a broker according to the present invention;

4 is a flow chart for explaining a payment step made between a user and a first seller (service provider) in accordance with the present invention;

5 is a flowchart illustrating a payment step performed between a user and a k-th seller in accordance with the present invention;

6 is a flow chart for explaining the payment step between the broker and the seller in accordance with the present invention.

Claims (9)

A user who owns a mobile terminal as an entity that uses and pays for information or services, a seller (service provider) that produces and sells information or services suitable for a wireless or mobile environment to the user, and In the electronic money-based multiple payment method applied to a payment system including a broker that handles authentication and payment between the seller, After the registration process in which the mobile terminal user establishes an account with the broker, the user requests the withdrawal of money from the broker, the broker grants payment authority to the user, and the withdrawal in which the user generates actual payment. Steps, After the mutual authentication process in which the user accesses the wireless Internet and establishes mutual authentication and key with the seller with the payment generated through the withdrawal step, the user pays the money value to the seller to receive desired information or service. In addition, the seller provides a payment step for providing corresponding information or services, After the payment step, the seller requests the broker to make a payment, and the broker verifies the validity of the currency for the payment requested by the seller and transfers the actual amount from the user's account to the seller's account; Includes a verification step, The withdrawal step Generating, by the broker, new hashchains up to the maximum number of sellers determined through security negotiations with the user to enable the user to make payments with the plurality of sellers; Setting a number of hash chains to be created by the user and a monetary unit of the generated hash values to specify the withdrawal amount of the user; Generating a payment authority certificate that is valid only for a specific user issued by the broker to authorize the user to create a payment; Sending, by the broker, a retrieval response message together with the certificate and hash chain to the user; And the user obtaining the certificate and the hash chain from the withdrawal response message received from the broker. The method of claim 1, The hash chain generation step The user and the broker possessing a secret session key through a key exchange process for registration, The certificate generation step Processing the values set by the user together with a timestamp and the identity of the broker as a hash function, digitally signing them, encrypting them with the secret session key, and transmitting them to the broker; And verifying the digital signature, calculating the identifier for a particular user using the user's identity, random number, and secret session key when the verification is completed, and the broker creates a public key pair for the user. Generating a certificate that is valid only for a particular user using his identity, the identifier for that particular user, and the user's public key, The transmitting step The broker encrypts the random number and the user's new secret signing key and timestamp and his identity with the certificate and hash chain with the secret session key and sends it to the user, The acquiring step And deciphering the withdrawal response message received by the user from the broker, checking the random number and the timestamp, and obtaining the certificate, the hash chain, and the secret signing key. The method of claim 1, The payment step Generating a hash chain as much as the user withdraws by obtaining a payment authority certificate in the withdrawal step, and using the same to purchase information or services; The user performing payments with the seller as many as specified in the withdrawal step; And transmitting the hash certificate and the generated hash chain together with the payment authority certificate proving that the user is a legitimate subject to the seller, wherein the seller provides a service to the user according to the electronic money being paid after verifying it. Electronic money based multiple payment method using one mobile terminal. The method of claim 3, wherein If the user signs a hash value with the identity and timestamp of the seller with the secret signing key, and then sends a message containing the payment authorization certificate to the seller, information or service corresponding to the payment received by the seller from the user. Electronic money-based multi-payment method using a mobile terminal, characterized in that for providing a user. The method of claim 4, wherein The seller receiving the message verifies the certificate with the public key of the broker, and verifies the validity of the electronic money to be paid by the user by verifying the signature of the user with the extracted public key of the user. Currency based multiple payment method. The method of claim 4, wherein The seller provides a service after authenticating the hash value paid from the user through a hash function, storing the last paid hash value and certificate, and ending the transaction with the user. Currency based multiple payment method. The method of claim 3, wherein The payment and confirmation steps Verifying the justification for the payment required by the seller by verifying the broker and the payment authority certificate issued by the broker; The broker verifying and transferring the amount corresponding to the payment value requested by the seller; The broker receives the hash chains from the seller as many as the number of sellers specified in the withdrawal step, checks the corresponding payment value, and checks whether the payment value received from the last seller within the expiration date is smaller than the maximum value of the hash chain generated by the user. The electronic money-based multiple payment method using a mobile terminal, characterized in that it comprises the step of completing the payment protocol after the inspection. delete delete