KR100791269B1 - System and Method for Processing Information and Recording Medium - Google Patents

Abstract

The present invention relates to an information processing method and system and a program recording medium therefor, wherein the information processing method according to the present invention comprises a unique authentication code (and / or an encryption key) corresponding to merchant information in a predetermined information generation / extraction means. Generating or extracting the data, and encrypting any one or more of the information to be included in the payment authorization request text of the affiliate store by the generated or extracted unique authentication code (and / or encryption key) in a predetermined encryption processing means; A unique authentication code (and / or corresponding to the encryption key) generated or extracted in a predetermined information storage means before or after providing the payment specialized processing program including the encrypted information to the terminal of the affiliated store. Decryption key) payment information processing provided to any one or more of the merchant information and / or the merchant terminal And storing the data in a predetermined storage medium in association with the program specific information, and transmitting the predetermined payment approval request message including the encrypted information by using the program from the affiliated store terminal. Receiving this and in connection with the storage medium (or storage medium operating means) in a predetermined specialized processing means, any one or more information of the merchant information and / or program specific information for payment specialized processing provided to the merchant terminal and Extract the unique authentication code (and / or decryption key corresponding to the encryption key) stored in association with each other, and use the extracted unique authentication code (and / or decryption key corresponding to the encryption key) to approve the payment. After decrypting the encrypted information included in the request text, the payment approval request through the decrypted information confirmation Authenticating the full text.

Merchant, verification code, encryption

Description

Information processing method and system and program recording medium therefor {System and Method for Processing Information and Recording Medium}

1 is a view showing a general functional configuration of a conventional payment terminal.

2 is a diagram illustrating a configuration of a payment terminal emulator providing system for downloading and remotely mounting a payment terminal emulator (CAT emulator) for emulating payment terminals to a client terminal according to an embodiment of the present invention.

3A and 3B illustrate a process of downloading and remotely mounting a payment terminal emulator for emulating the payment terminal to a client terminal according to an embodiment of the present invention.

4 is a diagram illustrating a payment terminal emulator function configuration according to an embodiment of the present invention.

5 is a diagram illustrating a payment approval request specialized structure generated through a payment terminal emulator according to an embodiment of the present invention.

6 is a diagram illustrating a configuration of an electronic payment system using a payment terminal emulator according to an embodiment of the present invention.

7 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in a symmetric key (or secret key) method in a payment terminal emulator according to an embodiment of the present invention.

8 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a payment server using a symmetric key (or secret key) method according to an embodiment of the present invention.

9 is a diagram illustrating a method of encrypting and transmitting a payment approval message in a symmetric key (or secret key) method in a payment server according to an embodiment of the present invention.

FIG. 10 is a diagram illustrating a method for decrypting a payment approval message encrypted and received in a payment terminal emulator using a symmetric key (or secret key) method according to an embodiment of the present invention.

FIG. 11 is a diagram illustrating a method for encrypting and transmitting a full payment approval request in a payment terminal emulator according to an embodiment of the present invention in a public key infrastructure.

12 is a diagram illustrating a method for decrypting a full payment approval request message encrypted and received by a payment server according to an embodiment of the present invention using a public key infrastructure.

FIG. 13 is a diagram illustrating a method for encrypting and transmitting a payment approval message in a public key infrastructure structure in a payment server according to an embodiment of the present invention.

FIG. 14 is a diagram illustrating a method of decrypting a received payment approval text encrypted in a payment terminal emulator in a public key based structure according to an embodiment of the present invention.

FIG. 15 is a diagram illustrating a method of encrypting and transmitting a full payment approval request in an electronic envelope method in a payment terminal emulator according to an embodiment of the present invention.

FIG. 16 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a payment server according to an embodiment of the present invention by an electronic envelope method.

17 is a diagram illustrating a method of encrypting and transmitting a payment approval message in an electronic envelope method in a payment server according to an embodiment of the present invention.

FIG. 18 is a diagram illustrating a method of decrypting a payment approval message that is encrypted and received in a payment terminal emulator according to an embodiment of the present invention by an electronic envelope method.

19A and 19B are diagrams illustrating a method of encrypting and transmitting a payment approval request message in a key exchange method in a payment terminal emulator according to an embodiment of the present invention.

20A and 20B illustrate a method of decrypting a full payment approval request message encrypted and received by a payment server according to an embodiment of the present invention by a key exchange method.

21A and 21B illustrate a method of encrypting and transmitting a payment approval message in a key exchange method in a payment server according to an embodiment of the present invention.

22A and 22B are diagrams illustrating a method of decrypting a payment authorization message received encrypted by a payment terminal emulator according to an embodiment of the present invention by a key exchange method.

23A and 23B illustrate an operation process of a payment terminal emulator according to an embodiment of the present invention.

24A and 24B illustrate a payment processing process according to an embodiment of the present invention.

25A and 25B illustrate an operation process of a payment terminal emulator according to another exemplary embodiment of the present invention.

26A and 26B illustrate a payment processing process according to another exemplary embodiment of the present invention.

<Description of main parts of drawing>

400: payment terminal emulator 405: control unit

410: card reader module 415: screen output module

420: key input module 425: print output module

430: input and output interface 435: validity authentication unit

440: card reader 445: screen output unit

450: key input unit 455: print output unit

460: storage unit 465: security application module

470: professional generation unit 475: password processing unit

480: professional transmitter 485: professional receiver

490: professional processing unit 495: communication module

The present invention is to perform the function of the payment terminal in a computer including at least one or more of a personal computer (PC) and / or notebook (Notebook) provided in at least one credit card / check card / debit card merchant It relates to an embodiment of the payment terminal emulator provided.

At least one merchant (eg, credit card merchant, check card merchant, debit card merchant, etc.) is equipped with at least one payment terminal including a credit authorization terminal (CAT) for the electronic payment processing, the payment The terminal connects a communication channel for at least one professional transmission and reception with a bansa server (and / or payment server) through at least one payment network including a Value Added Network (VAN), and through the communication channel. The electronic payment is made by transmitting a predetermined payment approval request message to the bansa server (and / or payment server), and receiving a payment approval message corresponding to the payment approval request message from the bansa server (and / or payment server). Process.

1 is a view showing a general functional configuration of a conventional payment terminal 100.

In more detail, FIG. 1 illustrates a functional configuration of a general conventional payment terminal 100 including a credit authorization terminal (CAT).

Referring to FIG. 1, a general payment terminal 100 basically includes a control unit 105, a memory unit 150, a card reader unit 110, a key input unit 120, a screen output unit 115, and a communication processing unit 130. ) And a security application module 135, a print output unit 140, and a power supply unit 125 for supplying power to the payment terminal 100, at least one terminal functional unit according to the intention of those skilled in the art ( Omission).

The control unit 105 controls the overall operation of the payment terminal 100 in the functional configuration, and manages the flow of information or data between each component, and hardware (Central Processing Unit) / MPU ( At least one processor including a micro processing unit, an execution memory (for example, a register and / or random access memory (RAM)), and a bus (BUS) for inputting and outputting predetermined data. In general, a predetermined program routine and / or program data loaded from a predetermined recording medium into the execution memory for performing a function specific to the payment terminal 100 and processed by the processor may be included. Characterized in that made.

The memory unit 150 is input and output when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the payment terminal 100 is performed. General term of non-volatile memory for storing information or data), at least one of which includes EEPROM (Electrically Erasable and Programmable Read Only Memory) and / or Flash Memory (FM) and / or Hard Disk Drive (HDD) in hardware. It includes the above storage means, the predetermined program routine and the program data (for example, data input or output for the program routine to perform a predetermined function) is required for the control unit to perform a predetermined control function is stored Characterized in that it is, in particular stores the terminal information necessary to generate a predetermined payment approval request full text.

The card reader 110 may be a customer-owned card (eg, an MS (Magnetic Stripe) card based on the ISO / IEC 7810 standard, and / or a contact IC card based on the ISO / IEC 7816 standard) for the electronic payment processing. (Or wireless IC chip), and / or at least one payment method information (card information) is read from a contactless IC card (or wireless IC chip) based on the ISO / IEC 14443 standard. Characterized in that.

In general, the card reader unit 110 is an MS reader unit providing an interface between the MS card and the payment terminal 100, and / or a contact providing an interface between the contact IC card and the payment terminal 100. And at least one or more of an expressionless IC reader and / or a contactless IC reader that provides an interface between the contactless IC card and the payment terminal 100.

For example, the MS reader unit is a card reader unit 110 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetization). When the MS card on which the binary data is recorded is moved in close contact with the magnetic head (or the magnetic head moves in close contact with the MS card on which predetermined information is recorded), It is characterized in that the predetermined information or data is interfaced to the payment terminal 100 from at least one or more tracks provided in the MS of the MS card by using an electrical signal loaded.

In addition, the contact IC reader is a card reader based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in a contact IC card. A terminal for supplying power to the IC chip of the IC card through the contact point, and payment information or data from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized by interfacing to (100).

In addition, the non-contact IC reader is a card reader based on ISO / IEC 14443, and includes at least one contactless electrical contact with the non-contact IC card by using capacitive coupling and / or inductive coupling. It comprises an antenna, and supplies power to the IC chip of the IC card through the antenna, and a predetermined information or data from the IC chip through the half-duplex transaction using the APDU payment terminal ( Interfacing to 100).

The key input unit 120 includes at least one key button including at least one numeric key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the payment terminal 100 controlled by the controller 105. When predetermined information (or signal) is input from the key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller. The control unit 105 obtains predetermined key data corresponding to the key event in the current input mode and / or operation mode of the payment terminal 100 and / or is a predetermined device defined in accordance with the key event. Characterized in that for obtaining a command to run. The key input unit 120 and the key input device having at least one key button interwork with each other to perform a function of key input means provided in the payment terminal 100.

The key input device interoperating with the key input unit 120 may include a keypad device having at least one numeric key and a function key, and / or at least one numeric key and a character key (eg, English character key, and / or Korean character). Key) and / or a keyboard device having a function key, and / or having at least one numeric key and a function key in conjunction with the screen output means, and / or having at least one numeric key, a character key and a function key. It is preferable to include at least one touch screen device.

The screen output unit 115 is a liquid crystal display (LCD) and / or by the control unit 105 in the process of the payment terminal 100 performs a predetermined function (for example, the electronic payment processing function using a card) And outputting at least one or more information or data which are predefined or defined in real time to be output to a predetermined display device including a cathode ray tube (CRT) through a predefined interface screen. The 115 and the screen output device interoperate with each other to perform a function of the screen output means provided in the payment terminal 100.

The predefined information or data to be output from the payment terminal 100 to the screen output device may include key data input through the key input unit 120 and / or components provided in the payment terminal 100. Information (or data) stored or generated by the information, information (or data) transmitted / received through the communication processing unit 130, and / or information (or data) corresponding to a predetermined operation result performed by the payment terminal 100. ) At least one or more.

According to a preferred embodiment of the present invention, the screen output unit 115 is a screen for outputting the electronic payment processing screen according to each electronic payment step to the screen output device for the electronic payment service defined in the payment terminal 100 It is preferable to perform the function of the output means.

The communication processor 130 may include a bansa server on a payment network (eg, a value added network (VAN)) while the payment terminal 100 performs a predetermined function (eg, an electronic payment processing function using a card). And / or a communication channel for transmitting / receiving at least one or more telegrams for electronic payment processing, and a predetermined payment approval request telegram to the bansa server (and / or payment server) via the communication channel. And receiving a payment approval message corresponding to the payment approval request message from the bansa server (and / or payment server).

The communication processing unit 130 may include a predetermined wired network including the Value Added Network (VAN) or a financial common network or high-speed Internet (eg, ADSL / VDSL / Cable Network /.../ satellite communication). Or at least one modem or network interface card (NIC) for connecting a communication channel with a bansa server (and / or payment server) on a wired or wireless network through a predetermined wireless network including a mobile communication network or a wireless data communication network. It comprises a communication protocol and / or a driver for connecting the payment terminal 100 to the wired or wireless network by software.

The Secure Application Module (SAM) 135 is a confidentiality and / or authentication required by the payment terminal 100 in the process of performing the electronic payment and / or electronic payment using the card. And / or security requirements, including integrity and / or nonrepudiation, are secure within the payment terminal 100 without using a bansa server (and / or payment server) on the payment network. As a safety device for performing in a reliable structure, a predetermined message (information or data) processed in the process of the payment terminal 100 performs a predetermined security request function (for example, electronic payment and / or electronic payment function). Encrypt or decrypt, add an authenticator that prevents forgery (or tampering) of the message, or provide important information in the process of performing the security request function. It characterized in that it performs the function of Chapter.

In general, the security application module 135 is preferably composed of a predetermined security application module inserter and a security application module chip, the security application module chip is a chip containing at least 8-bit CPU or more 2MPS (Million Instructions Per Second) It is preferable to include an application specific integrated circuit (ASIC) chip (for example, a PLCC 44-pin chip) and / or an IC chip (for example, an IC card in the form of a subscriber identity module).

In addition, the security application module 135 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value, etc.) required for the payment terminal 100 to perform a predetermined security request function ) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, previous transaction cancellation protocols, collection protocols, SAM issuance protocols, (e-money company / card company) Registration protocol, authorization protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / disposal / initialization) / Reprocessing / cancellation command).

The print output unit 140 may process the payment terminal 100 to perform a predetermined function (eg, an electronic payment processing function using a card) and / or predetermined information or data (eg, payment) generated as a result. A printing protocol for printing the print information or data through a predetermined printing device in accordance with a predetermined printing form, characterized in that the processing result information or data) is output to a predetermined printing device (for example, a receipt printing machine). And a driver.

The electronic payment processing using the payment terminal 100 as described above has a relatively reliable advantage in terms of security, because the transmission and reception is made through a closed payment network (VAN), while the full text is transmitted through the payment network. Due to this, there is a problem in cost of paying a van fee and a problem in that the full text transmission and reception is not suitable for a large amount of payment processing because one transaction occurs per payment (except for some prepaid card payment).

An object of the present invention is to generate or extract a unique authentication code (and / or encryption key) corresponding to the merchant information in the predetermined information generation / extraction means, and the generated or extracted unique authentication code (and / or encryption key) Before or after providing the payment professional processing program containing the terminal to the merchant, the unique authentication code (and / or decryption key corresponding to the encryption key) generated in a predetermined information storage means to the merchant Cooperative processing with any one or more information of information and / or program specific information for payment specialty processing provided to the affiliated store terminal, stored in a predetermined storage medium, and using the program in the affiliated store terminal using the unique authentication code (and / Or a predetermined payment approval request message encrypted with an encryption key), received by the predetermined message receiving means, Definition The specialized processing means is stored in association with the storage medium (or storage medium operating means), the processing information associated with any one or more of the merchant information and / or program specific information for payment specialized processing provided to the affiliated store terminal is stored in advance Extract an authentication code (and / or a decryption key corresponding to the encryption key), and decrypt the encrypted payment authorization request full text using the extracted unique authentication code (and / or decryption key corresponding to the encryption key). After that, the present invention provides an information processing method and system for processing a text message that authenticates the validity of the payment approval request text message through a decrypted text message.

An information processing system according to the present invention comprises: information generating means for generating or extracting a unique authentication code (and / or encryption key) corresponding to merchant information; Information storage means for processing the generated or extracted unique authentication code (and / or decryption key corresponding to the encryption key) in association with any one or more of the affiliated store information to store in a predetermined storage medium; Encryption processing means for encrypting any one or more of the information to be included in the payment authorization request full text of the affiliated store with the generated or extracted unique authentication code (and / or encryption key); Program providing means for providing a payment specialized processing program including the encrypted information to the terminal of the affiliated store; Full message receiving means for receiving a predetermined payment approval request message including the encrypted information by using the program from the affiliated store terminal; And in association with the storage medium (or storage medium operating means), extracting a unique authentication code (and / or a decryption key corresponding to the encryption key) stored in advance in connection with any one or more of the merchant information. After decrypting the encrypted information included in the payment approval request message using the extracted unique authentication code (and / or decryption key corresponding to the encryption key), the payment approval request specialist through the decrypted information confirmation It characterized in that it comprises a; professional processing means for authenticating the validity.

An information processing system according to the present invention comprises: information generating means for generating or extracting a unique authentication code (and / or encryption key) corresponding to merchant information; Encryption processing means for encrypting any one or more of the information to be included in the payment authorization request full text of the affiliated store with the generated or extracted unique authentication code (and / or encryption key); Before or after providing the payment specialized processing program containing the encrypted information to the terminal of the affiliated store, the merchant information generated by the unique authentication code (and / or decryption key corresponding to the encryption key) Information storage means for cooperatively processing with any one or more of the information and / or the program specific information for payment specialized processing provided to the merchant terminal to store in a predetermined storage medium; Full message receiving means for receiving a predetermined payment approval request message including the encrypted information by using the program from the affiliated store terminal; And in connection with the storage medium (or storage medium operating means), any one or more of the merchant information and / or program specific information for payment specialized processing provided to the affiliated store terminal is processed in association with the stored unique authentication code (and And / or extracts a decryption key corresponding to the encryption key) and uses the extracted unique authentication code (and / or decryption key corresponding to the encryption key) to encrypt the encrypted information included in the full text of the payment approval request. After decryption, the specialized processing means for authenticating the validity of the payment approval request full text through the decrypted information check; characterized in that it comprises a.

In addition, the information processing system according to the present invention, information generating means for generating or extracting a unique authentication code (and / or encryption key) corresponding to the merchant information; Information storage means for processing the generated or extracted unique authentication code (and / or decryption key corresponding to the encryption key) in association with any one or more of the affiliated store information to store in a predetermined storage medium; Program providing means for providing a payment specialized processing program including the generated or extracted unique authentication code (and / or encryption key) to the terminal of the affiliated store; Specialized receiving means for receiving a predetermined payment approval request message encrypted with the unique authentication code (and / or encryption key) by using the program in the affiliated store terminal; And extracting a unique authentication code (and / or a decryption key corresponding to the encryption key) stored in advance in association with any one or more of the affiliated store information in association with the storage medium (or storage medium operating means), and A message that decrypts the encrypted payment approval request text using the extracted unique authentication code (and / or a decryption key corresponding to the encryption key), and then authenticates the validity of the payment approval request text through the decrypted text confirmation. Processing means; characterized in that comprises a.

On the other hand, the information processing method according to the invention, the information generation / extraction step of generating or extracting a unique authentication code (and / or encryption key) corresponding to the merchant information in the predetermined information generation / extraction means; An encryption processing step of encrypting any one or more of the information to be included in the payment approval request text of the affiliate store by the generated or extracted unique authentication code (and / or encryption key) in a predetermined encryption processing means; Before or after providing the payment specialized processing program containing the encrypted information to the terminal of the merchant, a unique authentication code (and / or decryption corresponding to the encryption key generated or extracted in a predetermined information storage means) Storing information in a predetermined storage medium by cooperatively processing the key) with any one or more information of the affiliated store information and / or program specific information for payment specialty processing provided to the affiliated store terminal; A specialized receiving step of receiving a predetermined payment approval request message including the encrypted information using the program in the affiliated store terminal, by a predetermined message receiving means; And in connection with the storage medium (or the storage medium operating means) in a predetermined specialized processing means, any one or more of the merchant information and / or program specific information for payment specialized processing provided to the affiliated store terminal. Extract a stored unique authentication code (and / or a decryption key corresponding to the encryption key) and include the extracted unique authentication code (and / or a decryption key corresponding to the encryption key) in the preamble of the payment approval request. And a specialized processing step of authenticating the validity of the payment approval request full text through the decrypted information after decrypting the encrypted encrypted information.

In addition, the information processing method according to the present invention, information generation / extraction step of generating or extracting a unique authentication code (and / or encryption key) corresponding to the merchant information in the predetermined information generation / extraction means; Before or after providing the payment specialized processing program containing the generated or extracted unique authentication code (and / or encryption key) to the terminal of the merchant, the unique authentication code (generated or extracted in a predetermined information storage means ( And / or a decryption key corresponding to the encryption key) is stored in a predetermined storage medium in association with one or more of the merchant information and / or program specific information for payment specialized processing provided to the merchant terminal. step; A specialized receiving step of receiving a predetermined payment approval request message encrypted by the unique authentication code (and / or encryption key) using the program in the affiliated store terminal, by a predetermined text receiving unit; And in connection with the storage medium (or the storage medium operating means) in a predetermined specialized processing means, any one or more of the merchant information and / or program specific information for payment specialized processing provided to the affiliated store terminal. Extract the stored unique authentication code (and / or decryption key corresponding to the encryption key) and use the extracted unique authentication code (and / or decryption key corresponding to the encryption key) to complete the encrypted payment authorization request And after decrypting, a professional processing step of authenticating the validity of the payment approval request full text through the decrypted full text verification.

On the other hand, the present invention includes a computer-readable recording medium characterized by recording a program for executing the above-described information processing method.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

2 is a diagram illustrating a configuration of a payment terminal emulator providing system for downloading and remotely mounting a payment terminal emulator (CAT emulator) for emulating payment terminals to a client terminal according to an embodiment of the present invention.

In more detail, FIG. 2 shows a remote terminal which downloads and remotely mounts a predetermined payment terminal emulator for emulating a payment terminal from a predetermined server provided on a network to which the client terminal is connected (or communicated with). The present invention relates to a payment terminal emulator providing system configuration in which the payment terminal emulator information mounted on the client terminal and a predetermined authentication code (and / or encryption key) are processed in association with each other and stored in a predetermined storage medium 245. Those skilled in the art may infer various implementation methods for downloading and remotely loading a predetermined payment terminal emulator for emulating the payment terminal to the client terminal by referring to and / or modifying the drawing 2. While the present invention may be carried out, the present invention encompasses all the inferred methods of implementation. In addition, it is not limited by the implementation method shown in FIG.

For example, a person of ordinary skill in the art to which the present invention pertains may refer to and / or modify this drawing 2 so that a predetermined merchant customer may provide a branch (or branch, Or an affiliated company) to create a predetermined merchant confirmation form in place of the affiliated store registration information, and the predetermined counter terminal provided at the branch (or branch, or affiliated company) of the card company (or financial company) included in the merchant confirmation. By providing affiliated store registration information to the server, an implementation method of providing the payment terminal emulator to the client terminal may be inferred, but the present invention includes all the above implementation methods.

Hereinafter, in FIG. 2, a server for downloading and remotely mounting the payment terminal emulator for emulating the payment terminal to the client terminal is referred to as an "ESD (Electronic Software Delivery) server" for convenience.

Referring to FIG. 2 according to an embodiment of the present invention, the payment terminal emulator providing system connects to the ESD server 200 through a predetermined network means to download a predetermined payment terminal emulator for emulating the payment terminal. A client terminal for recording on a predetermined recording medium, and an ESD server 200 connected with the client terminal through a predetermined network means to provide a predetermined payment terminal emulator for emulating the payment terminal to the client terminal; Is done.

The client terminal may be connected to a wired network based on Transmission Control Protocol / Internet Protocol (TCP / IP) (eg, Asymmetric Digital Subscriber Line (ADSL) / Very High-Data Rate Digital Subscriber Line (VDSL) and / or cable communication network). A mobile communication terminal including at least one wired terminal including a desktop computer and / or a notebook computer connected to the ESD server 200 and / or connected to a code division multiple access (CDMA) based mobile communication network, And / or at least one wireless terminal including at least one portable internet terminal connected to IEEE 802.16 based high speed wireless internet, and / or a wireless data communication terminal connected to a DataTAC / Mobitex based wireless data communication network. Characterized in that, the client terminal is at least one provided by the ESD server 200 A function configuration for outputting an interface screen, inputting and / or selecting predetermined merchant registration information for downloading and remotely mounting the payment terminal emulator through the interface screen and transmitting the same to the ESD server 200 (eg, Browser program and communication function).

Those skilled in the art to which the present invention pertains will be able to easily infer the characteristics of the client terminal corresponding to at least one or more wired terminal and / or wireless terminal, detailed description thereof is omitted for convenience. do.

According to an embodiment of the present invention, when the client terminal is a wired terminal, the network means comprises the TCP / IP based wired network, and when the client terminal is a wireless terminal, the network means is the CDMA based And at least one or more mobile communication networks, and / or IEEE 802.16 based high speed wireless internet, and / or DataTAC / Mobitex based wireless data communication networks.

According to the present invention, the ESD server 200 is an interface unit 205 for connecting and managing a predetermined communication channel with the client terminal through the network means, in order to provide a web interface corresponding to the client terminal and the network means. In this case, the ESD server 200 has a function of a web server that is communicatively connected to the client terminal through a wired network and / or a wireless network.

According to an embodiment of the present invention, when the client terminal is a wired terminal to which a communication channel is connected through a TCP / IP-based wired network, the interface unit 205 may connect to the client terminal with a Hyper-Text Transfer Protocol (HTTP). A predetermined communication channel is connected based on a protocol, and the interface screen and / or information providing screen in the form of a Hyper-Text Markup Language (HTML) compatible document is transmitted to the client terminal through the communication channel, and outputted. It is preferable to perform a function of receiving and processing predetermined affiliate store registration information input (or selected) from the terminal through the interface screen.

According to another exemplary embodiment of the present invention, when the client terminal is a wireless terminal to which a communication channel is connected through a CDMA-based wireless network, the interface unit 205 may connect to the client terminal with a WAP and / or a wireless application protocol. Connect a predetermined communication channel based on the ME (Mobile Explorer) protocol, and transmit an interface screen and / or an information providing screen in the form of a WML (Wireless Markup Language) and / or HTML compatible document to the client terminal through the communication channel. It is preferable to perform a function for outputting and receiving and processing predetermined affiliate store registration information corresponding to the interface screen from the client terminal.

According to another exemplary embodiment of the present invention, when the client terminal is a wireless terminal to which a communication channel is connected through an IEEE 802.16 based wireless network, the interface unit 205 may correspond to the client terminal and the IEEE 802.16 standard. Connect a predetermined communication channel based on a wireless protocol, transmit and output a predetermined interface screen and / or information providing screen to the client terminal through the communication channel, and output the predetermined interface screen corresponding to the interface screen from the client terminal. It is preferable to perform a function for receiving and processing affiliate store registration information, and / or when the client terminal is a wireless terminal to which a communication channel is connected through a DataTAC / Mobitex-based wireless network, the interface unit 205 is configured to perform the client's operation. Terminal and wireless corresponding to the DataTAC / Mobitex standard A predetermined affiliate store connects a predetermined communication channel based on a protocol, transmits and outputs a predetermined interface screen and / or information providing screen to the client terminal through the communication channel, and the predetermined affiliate store corresponding to the interface screen from the client terminal. It is preferable to perform a function of receiving and processing registration information.

According to the present invention, when the predetermined client terminal is connected to the ESD server 200 through the interface unit 205, the ESD server 200 in conjunction with the interface unit 205 is predetermined in the client terminal An interface provider 210 which generates (or extracts) a predetermined interface screen for inputting (or selecting) and transmitting affiliated store registration information; and a merchant that is input (or selected) through the interface screen from the client terminal; An information receiving unit 215 for receiving registration information, an authentication information generating unit 225 for generating a predetermined authentication code (and / or an encryption key) corresponding to the affiliated store registration information, and a predetermined corresponding to the affiliated store registration information. Characterized in that it comprises an information generation unit 220 for generating the professional generation information of.

The interface providing unit 210 has a functional configuration (for example, a browser program provided in the client terminal) provided in the client terminal when a predetermined client terminal is connected to the ESD server 200 through the interface unit 205. In response to the predetermined merchant registration information (or selected) to generate a predetermined interface screen that can be transmitted to the ESD server 200 via the network means, and / or from a predetermined database (not shown) And extract the generated (or extracted) interface screen in cooperation with the interface unit 205 to the client terminal through the network means.

Thereafter, the client terminal inputs (or selects) predetermined merchant registration information based on the interface screen, and transmits the input (or selected) merchant registration information to the ESD server 200 through the network means. The affiliated store registration information is received through the information receiving unit 215.

Here, the affiliated store registration information is for registering the affiliated store equipped with the client terminal as an affiliated store to perform a predetermined electronic payment process through a payment server provided in the card company (or financial company) operating the ESD server 200. The information includes at least one of merchant name information, representative information, merchant number information, business registration number information, business status information, item information, telephone number information, and merchant location information.

Merchant store mutual information of the affiliated store registration information is a business name on a business registration certificate for an affiliated store affiliated with the card company (or financial company) and an electronic payment service, and the payment server provided at the card company (or financial company) is provided to the merchant. It is included in the payment approval message sent to the terminal device.

The representative information of the affiliated store registration information includes a representative name and a representative resident registration number on a business registration certificate for an affiliated store affiliated with the card company (or financial company) and an electronic payment service, and is taxable for the merchant sales corresponding to the payment amount. Corresponds to

The merchant number information of the affiliated store registration information is at least one of a terminal unique number corresponding to a payment terminal device provided in the affiliated store, and / or an affiliate store unique number provided to a bansa or a card company (or a financial company) by matching the terminal unique number. It consists of the above unique number, and generally consists of 6 to 16 digits. If the affiliate store number is 6 digits, up to 999,999 unique affiliate store numbers may be displayed.

The business registration number information of the affiliated store registration information is a business registration number written on the business registration certificate for the affiliated store affiliated with the card company (or financial company), and is issued by the tax office having jurisdiction over the location of the affiliated store, and the business registration number A tax is imposed on the merchant sales as a basis.

The business status information and the item information of the affiliated store registration information are the business status and the item on the business registration certificate for the affiliated store affiliated with the card company (or financial company) and the electronic payment service, and the commission rate for the payment amount based on the business status information and the item information. This is determined.

The telephone number information of the affiliated store registration information includes a wired telephone number provided in the affiliated store, and the affiliated store location information includes the affiliated store address.

When the affiliated store registration information is received as described above, the authentication information generation unit 225 generates a predetermined authentication code (and / or encryption key) corresponding to the affiliated store registration information.

Here, the authentication code is an authentication code for encrypting the professional generation information (for example, virtual terminal information, etc.) to be included in the payment approval request full text when generating a predetermined payment approval request full text in the payment terminal emulator. Even if the terminal emulator is hacked, the information to be included in the full payment approval request is not exposed.

According to an embodiment of the present invention, the authentication code is preferably generated in the form of a hash code by applying a predetermined one-way hash function to the affiliated store registration information, thereby generating a unique authentication code that is not duplicated.

Thereafter, the authentication code is used by the payment server to verify and authenticate at least one or more pieces of information included in the full payment approval request message received from the payment terminal emulator.

The encryption key may be a key value for encrypting at least one payment approval request message generated in the payment terminal emulator, and / or a key value for decrypting at least one encrypted payment approval message received by the payment terminal emulator. It is made to include, whereby the telegram transmitted and received with the payment server through the payment terminal emulator is stably protected.

In this case, the encryption key is encrypted through the authentication code can be included in the payment terminal emulator, thereby maintaining a higher security.

According to one embodiment of the invention, the encryption key is preferably generated in the form of a hash code by applying a predetermined one-way hash function to the merchant registration information, thereby generating a unique encryption key that is not duplicated.

According to another exemplary embodiment of the present invention, it is preferable that the encryption key is generated by using some of the information included in the affiliated store registration information as a seed.

Thereafter, the encryption key is used by the payment server to decrypt and confirm the authentication of the payment approval request message received from the payment terminal emulator.

The information generating unit 220 is included in the payment terminal emulator to generate at least one or more professional generation information (for example, virtual terminal information, etc.) to be provided to the customer terminal, the professional generation information is the authentication It is preferable to encrypt through a code.

According to the present invention, the ESD server 200 stores the payment terminal emulator D / B for storing at least one payment terminal emulator source and / or payment terminal emulator file to be provided to the client terminal, and the information receiver 215. When the affiliated store registration information is received from the customer terminal through the interface unit 205 by extracting and / or dynamically generating a predetermined payment terminal emulator corresponding to the affiliated store registration information from a predetermined payment terminal emulator D / B. It characterized in that it comprises a payment terminal emulator providing unit 230 provided to the client terminal through.

According to an embodiment of the present invention, the payment terminal emulator D / B stores a predetermined payment terminal emulator file capable of operating in an operating system (and / or terminal platform) provided in the client terminal. When the affiliated store registration information is received from the client terminal through the information receiving unit 215, the payment terminal emulator providing unit 230 matches a predetermined payment terminal with the affiliated store registration information from the payment terminal emulator D / B. Extracts an emulator file, and encrypts the professional generation information generated by the information generator 220 in the extracted predetermined payment terminal emulator file through an authentication code generated by the authentication information generator 225. And / or at least one encryption key generated by the authentication information generator 225 By including it, it is characterized in that to generate a predetermined payment terminal emulator to be provided to the client terminal.

According to another exemplary embodiment of the present invention, the payment terminal emulator D / B stores a predetermined payment terminal emulator source capable of operating in an operating system (and / or terminal platform) provided in the client terminal. When the affiliated store registration information is received from the client terminal, the payment terminal emulator providing unit 230 extracts a predetermined payment terminal emulator source matching the affiliated store registration information from the payment terminal emulator D / B. And encrypting the professional generation information generated by the information generation unit 220 in the extracted predetermined payment terminal emulator source through an authentication code generated by the authentication information generation unit 225, and / or the authentication. After including at least one encryption key generated by the information generating unit 225, the payment stage Compile (Compile) the emulator source is characterized in that for generating a predetermined billing to the terminal emulator available in the client terminal.

Subsequently, the payment terminal emulator providing unit 230 provides the extracted (and / or dynamically generated) payment terminal emulator through the network unit to the client terminal through the network unit to remotely mount the present terminal. Those skilled in the art will be familiar with the method of remotely mounting the payment terminal emulator (for example, the method of remotely mounting the client terminal with a program provider certificate). Detailed description is omitted for convenience.

When the payment terminal emulator is downloaded and remotely mounted to the client terminal as described above, the client terminal initiates the payment terminal emulator for the first time and starts the payment terminal emulator diagnostic mode for authenticating the validity of the payment terminal emulator. To this end, the ESD server 200 is characterized in that it comprises a diagnostic unit 235 for diagnosing the validity of the payment terminal emulator in cooperation with the payment terminal emulator provided in the client terminal.

According to an embodiment of the present invention, the payment terminal emulator diagnosis mode may generate a virtual payment approval request message including the professional generation information encrypted with the authentication code through a payment terminal emulator provided in the client terminal, and And / or encrypt and transmit the payment approval request text in a predetermined encryption manner through the encryption key, decrypt the received virtual payment approval request text in the diagnosis unit 235, and / or the decrypted text. And decrypting the professional generation information included in the payment approval request message through the authentication code, thereby confirming that the payment terminal emulator provided in the client terminal operates normally.

According to the present invention, the ESD server 200 associates a predetermined authentication code (and / or encryption key) with the payment terminal emulator information downloaded and remotely mounted to the client terminal to a predetermined storage medium 245. And an information storage unit 240 for storing, wherein the payment terminal emulator information includes remote mounting date information and / or version information of the payment terminal emulator remotely mounted to the client terminal.

According to the exemplary embodiment of the present invention, the information storage unit 240 may be downloaded to the client terminal and the remotely mounted payment terminal emulator information when the validity of the payment terminal emulator is confirmed as a result of the diagnosis of the diagnosis unit 235. Preferably, the authentication code (and / or encryption key) identified from the affiliated store registration information is cooperatively processed and stored in a predetermined storage medium 245. Then, the payment terminal stored in the storage medium 245 is stored. The emulator information and the authentication code (and / or encryption key) are used for the electronic payment processing using the payment terminal emulator in the electronic payment system using the payment terminal emulator according to the present invention.

3A and 3B illustrate a process of downloading and remotely mounting a payment terminal emulator for emulating the payment terminal to a client terminal according to an embodiment of the present invention.

In more detail, FIGS. 3A and 3B download a predetermined payment terminal emulator for emulating the payment terminal from the ESD server 200 to the client terminal through the payment terminal emulator providing system configuration shown in FIG. As a person having ordinary knowledge in the technical field to which the present invention pertains, a predetermined method for emulating the payment terminal to the customer terminal by referring to and / or modifying the drawings 3a and 3b is provided. Although various implementation methods of downloading and remotely mounting a payment terminal emulator may be inferred, the present invention includes all of the inferred implementation methods and is not limited to the implementation methods shown in FIGS. 3A and 3B.

3A and 3B, the client terminal shown in FIG. 2 is referred to as " terminal " for convenience, and the ESD server 200 shown in FIG. 2 is referred to as " server " for convenience.

Referring to FIG. 3A, the terminal accesses the server through a predetermined network means, requests the server to download and remotely mount a predetermined payment terminal emulator for emulating the payment terminal (300), and correspondingly. In operation 305, the server extracts (or generates) a predetermined merchant registration information input interface screen for providing the payment terminal emulator to the client terminal.

Thereafter, the terminal inputs (and / or selects) predetermined merchant registration information 310 through the affiliated store registration information input interface screen, and inputs the entered (and / or selected) affiliated store registration information through the network means. Transmitting to the server (315), and correspondingly, the server generates a predetermined authentication code (and / or encryption key) matching the received merchant registration information (320), and also matches the merchant registration information. After generating predetermined professional creation information (325), the professional creation information is encrypted with the authentication code (330).

Subsequently, the server extracts a payment terminal emulator file matching the affiliated store registration information from the payment terminal emulator D / B (335), and encrypts the professional generation information encrypted with the authentication code in the extracted payment terminal emulator file. A payment terminal emulator source including a key (340) or matching the affiliated store registration information from the payment terminal emulator D / B (335), and encrypting the full text encrypted with the authentication code in the extracted payment terminal emulator source Compiling with the generated information and the encryption key (340) generates a payment terminal emulator to be provided to the terminal.

Referring to FIG. 3B, when a predetermined payment terminal emulator is provided to the terminal through the process illustrated in FIG. 3A, the server provides the payment terminal emulator to the terminal through the network means to remotely mount the payment terminal emulator. (345).

If the payment terminal emulator is remotely mounted to the terminal (350), the terminal executes the payment terminal emulator to initiate a diagnostic mode for the payment terminal emulator (355), and correspondingly, the terminal determines the payment terminal. Generates validity diagnosis information through an emulator and transmits the validity diagnosis information to the server through the network means (360), and the server receives and reads the received validity diagnosis information to confirm the validity of the payment terminal emulator. (365).

According to an embodiment of the present invention, the diagnostic mode for the payment terminal emulator generates a full payment approval request message including a professional generation information encrypted with the authentication code through a payment terminal emulator provided in the terminal, And / or encrypt the payment approval request text in a predetermined encryption manner through the encryption key to transmit to the server, decrypt the received virtual payment approval request text in the server, and / or the decrypted content. By decrypting the professional generation information included in the payment approval request full text through the authentication code, it is included to check whether the payment terminal emulator provided in the terminal operates normally.

If the validity of the payment terminal emulator is not confirmed (370), the server generates a predetermined payment terminal emulator diagnostic error information and transmits it to the terminal through the network means (375), and then the payment to the terminal. Repeat the process of remotely mounting the terminal emulator.

On the other hand, if the validity of the payment terminal emulator is confirmed (370), the server associates the payment terminal emulator information mounted on the terminal with a predetermined authentication code (and / or encryption key) to a predetermined storage medium 245 The payment terminal emulator information and authentication code (and / or encryption key) are stored in the storage medium 245 in the electronic payment system using the payment terminal emulator according to the present invention. It is used for electronic payment processing.

4 is a diagram illustrating a functional configuration of a payment terminal emulator 400 according to an embodiment of the present invention.

In more detail, FIG. 4 illustrates a function of a payment terminal in a computer including at least one of a personal computer (PC) and / or a notebook (notebook) provided in at least one credit card / debit card / debit card merchant. As one embodiment of the payment terminal emulator 400 provided to perform the present invention, those skilled in the art to which the present invention pertains, the general conventional payment terminal function configuration shown in Figure 1 The payment terminal emulator 400 shown in FIG. 4 is added to the payment terminal emulator 400 according to the additional service function configuration additionally provided to the payment terminal shown in FIG. Various additional service function configurations may be inferred, but the present invention encompasses all of the inferred implementation methods. , It is not limited to the exemplary method shown in the figure 4.

Referring to FIG. 4, at least one client terminal on which the payment terminal emulator 400 is mounted is connected between the payment terminal emulator 400 and at least one or more peripheral devices in association with an operating system provided in the client terminal. An input / output interface 430 for processing input / output of the above information (or data), a card reader module for inputting / outputting at least one information (or data) with the payment terminal emulator 400 by the input / output interface 430, and And / or a screen output module, and / or a key input module 420, and / or a print output module and a predetermined payment approval request text generated by the payment terminal emulator 400 are connected (or Communication to the payment server through at least one communication network, and from the payment server to the full payment approval request Characterized in that obtained by having a communication processing section for receiving a payment authorization response professional.

The input / output interface 430 is characterized in that it comprises at least one or more I / O bus, and / or Peripheral Component Interconnect (PCI) bus, and / or Universal Serial Bus (USB), etc. provided in the client terminal In this way, at least one information (or data) is input and output between the payment terminal emulator 400 and at least one or more device modules provided in the client terminal.

According to an embodiment of the present invention, the card reader module 410 is a customer-owned card (eg, magnetic stripe (MS) card based on ISO / IEC 7810 standard, and / or contact type based on ISO / IEC 7816 standard). An interface module for reading at least one payment means information (card information) from an IC card (or a wireless IC chip) and / or a contactless IC card (or a wireless IC chip) based on the ISO / IEC 14443 standard. The interface module is preferably provided in the client terminal through a predetermined USB, in which case the input and output interface 430 comprises a USB controller.

In addition, the screen output module 415 is an interface module for outputting predetermined video information (or data) to at least one screen output device including a liquid crystal display (LCD) monitor and / or a cathode ray tube (CRT) monitor. And at least one video card (and / or graphics card), wherein the input / output interface 430 is a PCI for processing the video card (and / or graphics card) as a peripheral of the client terminal. It includes a bus (and / or an Accelerated Graphics Port (AGP)) to operate in No Wait mode while accelerating a PCI bus operating at 33MHz to 60-133MHz.

In addition, the key input module 420 may include at least one key button including at least one number key and / or a character key and / or a function key. An interface module for receiving at least one key data from a predetermined key input device, and preferably provided to the client terminal through a predetermined PS2 method and / or USB. In this case, the input / output interface 430 may be It includes a PS2 port and / or a USB controller.

Further, the print output module 425 is at least one print output device including at least one dot printer, and / or ink jet printer, and / or bubble jet printer, and / or laser printer. Data module), which is preferably provided to the client terminal through a predetermined LPT (Line PrinTer) method and / or USB. In this case, the input / output interface 430 is the LPT port and / or the USB controller. It is made, including.

According to an embodiment of the present invention, the communication module 495 is a communication interface module that connects (and / or connects) the client terminal to at least one wired and / or wireless communication network. At least one network interface card (NIC) for connecting (and / or communicating) to a wired communication network, and / or a wireless communication device for connecting the client terminal to an IEEE 802.11x based WLAN and / or an IEEE 802.16x based portable Internet It is preferable to comprise as mentioned above.

According to a preferred embodiment of the present invention, it is preferable that the communication module 495 is also processed in association with the payment terminal emulator 400 provided in the client terminal through the input / output interface 430 (eg, a PCI bus). Do.

Hereinafter, a preferred functional configuration of the payment terminal emulator 400 according to the present invention will be described in detail through an Object Oriented Programming (OOP) method based on Microsoft Foundation Class (MFC) of Microsoft Corporation.

Referring to FIG. 4, the payment terminal emulator 400 manages the overall functions of the payment terminal emulator 400 and controls the operation, and the input / output interface 430 in association with the card reader module. A card reader unit that reads predetermined payment means information (and / or card information) from a predetermined card reader provided in the client terminal, and is provided to the client terminal in association with the screen output module through the input / output interface 430 A screen output unit for outputting a payment processing screen to a predetermined screen output device; and a payment processing from a predetermined key input device provided in the client terminal in association with the key input module 420 through the input / output interface 430 Connected to the print output module 425 through a key input unit 450 for receiving the key data required for the and the input and output interface 430 And it provided with a print output section 455 for outputting payment processing history to a predetermined print output device provided in the client terminal and characterized in that formed.

The control unit is a mainframe (CMainFrame) class of the MFC, the object of at least one or more functional configuration unit (e.g., class) provided in the payment terminal emulator 400 for emulation of the payment terminal is assigned, each function configuration It controls the flow of information (or data) between the two, characterized in that the role of obtaining at least one or more handles required for the emulation of the payment terminal from the client terminal.

The card reader unit 440 is a work class assigned to the controller 405 and includes at least one input / output interface defined to connect the card reader module among the input / output interfaces 430 provided in the client terminal. Search 430 to identify the card reader module, initialize the card reader provided in the client terminal through the identified card reader module 410, and set the card reader module to the screen output unit through the controller 405. Request reading of a customer-owned card equipped with a payment means, confirming that predetermined payment means information (and / or card information) is read through the card reader, and if the payment means information (and And / or the card information is read, the payment means information (and / or car) through the input / output interface 430 using the card reader module. Characterized in that to read the information).

When the card reader is connected to a USB port provided in the client terminal according to an embodiment of the present invention, the card reader unit checks the card reader module 410 by searching for at least one or more USBs provided in the client terminal. The card reader module 410 initializes the card reader provided in the client terminal, and the customer-owned card provided with a predetermined payment means to the screen output unit 445 through the control unit 405. Request to read

If predetermined payment means information (and / or card information) is read through the card reader, the payment means information (and / or card information) is read through the USB using the card reader module.

According to an embodiment of the present invention, the card reader is an MS card reader for reading predetermined payment means information (and / or card information) from an MS (Magnetic Stripe) card based on ISO / IEC 7810 standard, and / or ISO Based on a contact IC card reader that reads certain payment instrument information (and / or card information) from a contact IC card (or wireless IC chip) based on the / IEC 7816 standard, and / or based on the ISO / IEC 14443 standard. It is preferable to include at least one or more of a contactless IC card reader for reading predetermined payment means information (and / or card information) from the contactless IC card (or wireless IC chip).

The MS card reader is a card reader based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is loaded on the magnetic head. It is characterized in that reading the predetermined payment means information (and / or card information) from at least one track (Track) provided in the MS of the MS card.

In addition, the contact IC card reader is a card reader based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in the contact IC card. It provides a power supply to the IC chip of the IC card through the contact point, and through the half-duplex transaction using the APDU (Application Protocol Data Unit) through the half-duplex transaction of the predetermined payment means information (and And / or card information) to the payment terminal.

In addition, the contactless IC card reader unit is a card reader based on ISO / IEC 14443, and at least one of which makes contactless contact with the contactless IC card by using capacitive coupling and / or inductive coupling. The antenna includes the above antenna, and supplies power to the IC chip of the IC card through the antenna, and provides predetermined payment means information (and / or information) from the IC chip through the half duplex transaction using an APDU. Or card information) to a payment terminal.

The screen output unit 445 is a view class assigned to the control unit 405, and is provided to the client terminal through the screen output module 415 corresponding to the payment terminal emulator 400. Define a predetermined payment terminal screen interface for outputting a payment processing screen processed during emulation of the payment terminal on a predetermined window output to an output device, and use the payment terminal screen to perform electronic payment according to each electronic payment step. A process screen is output.

In addition, the screen output unit 445 receives a predetermined key data according to each electronic payment step in conjunction with the key input unit during the emulation of the payment terminal on the window corresponding to the payment terminal emulator 400 An interface may be defined and key data for electronic payment processing according to each electronic payment step may be input through the user interface in association with the key input unit 450.

The screen output device may include a liquid crystal display (LCD) monitor and / or a cathode ray tube (CRT) monitor.

The key input unit 450 is connected to the view class corresponding to the screen output unit 445 through the control unit 405 through the input / output interface 430 based on a user interface for emulating the payment terminal. In connection with the key input module 420, it is characterized in that for receiving the key data for the electronic payment processing according to each electronic payment step from the key input device provided in the client terminal.

The key input apparatus may include a keyboard including at least one key button including at least one number key and / or a character key and / or a function key. Device, or / or comprises a mouse device with a predetermined pointer.

According to the exemplary embodiment of the present invention, the key input unit 450 may input key data corresponding to payment information including at least one payment amount information and / or installment months.

The print output unit is a document class assigned to the controller 045 and / or a job class for print output. The print output unit outputs a predetermined payment process to the input / output interface 430. The module 425 is checked, and the payment processing details are output to a predetermined print output device through the identified print output module 425.

Here, the print output device includes at least one or more dot printers, and / or ink jet printers, and / or bubble jet printers, and / or laser printers.

According to the present invention, the payment terminal emulator 400, if the card reader provided in the client terminal through the card reader module 410 corresponds to a contact / contactless IC card reader, a predetermined personal identification number (Personal Identification Number (PIN), according to certain financial IC card standards (e.g., ISO / IEC 7816, and / or EMV (Europay, Master, VISA) standards) for the validity (e.g., confidentiality, Characterization (Authentication), Integrity (Integrity) and non-repudiation (Nonrepudiation, etc.) is characterized in that it further comprises a validity authentication unit for verifying and authenticating.

Those skilled in the art will be familiar with the method of authenticating the IC card validity through the personal identification number, so a detailed description thereof will be omitted.

According to the present invention, the payment terminal emulator 400 is characterized in that it comprises a storage unit for storing the professional generation information (eg, virtual terminal information) required to generate a predetermined payment approval request full text, wherein the full text The generation information may include unique information that is not duplicated with the professional generation information stored in the storage unit of the payment terminal emulator 400 provided in the client terminal provided in another affiliated store. It is characterized by being encrypted with a predetermined authentication code.

According to an embodiment of the present invention, the payment approval request message may include at least one of merchant information for identifying a specific merchant among a plurality of merchants and / or terminal information for identifying a payment terminal provided in the merchant at the payment server. Including the above, the storage unit 460 is characterized in that for storing the predetermined professional creation information for emulating the merchant information (and / or terminal information).

According to an exemplary embodiment of the present invention, the storage unit 460 is a document class assigned to the control unit 405 and stores the professional generation information in a predetermined file managed by the payment terminal emulator 400. desirable.

According to another exemplary embodiment of the present invention, the storage unit 460 is a member variable (and / or structure) is assigned to the control unit 405, and / or is assigned to the control unit 405 It is preferable to store in the form of member variables (and / or structures) and / or predetermined global variables (and / or structures) of a predetermined work class, and in this case, the storage unit stores the professional creation information in a file form. Rather, it is stored in the payment terminal emulator 400 in the form of a predetermined variable (and / or structure).

According to another exemplary embodiment of the present invention, the text generation information may include encrypting at least one or more texts generated by the payment terminal emulator 400, and / or decrypting a text message encrypted and received from the predetermined payment server. It may include at least one encryption key for, or the professional-generated information itself may perform the function of the encryption key, whereby the present invention is not limited.

According to the present invention, the payment terminal emulator 400 encrypts at least one or more payment approval request messages generated in the electronic payment process by a predetermined encryption method, and / or is encrypted and received from a predetermined payment server. And a security application module unit 465 for storing at least one encryption key for decrypting the full text of the authorization, wherein the encryption key is provided in a payment terminal emulator 400 provided in a client terminal provided in another affiliate store. It is characterized by consisting of a unique key value that is not duplicated with the encryption key stored in the security application module.

According to one embodiment of the invention, the security application module unit 465 is a document class assigned to the control unit 405, by storing the encryption key in a predetermined file managed by the payment terminal emulator 400 It is preferable to provide.

According to another exemplary embodiment of the present invention, the security application module unit 465 may be a member variable (and / or structure) assigned to the control unit 405, and / or a predetermined value assigned to the control unit. It is preferable to store in the form of member variables (and / or structures) of work classes, and / or predetermined global variables (and / or structures), and in this case, the security application module unit may include the encryption key in the form of a file. Rather, it is provided in the payment terminal emulator 400 in the form of a predetermined variable (and / or structure).

According to another exemplary embodiment of the present invention, the security application module unit 465 may dynamically generate the encryption key in the form of one time password (OTP) without storing the encryption key, in which case the security application The module unit 465 has a function of dynamically generating a predetermined encryption key through at least one or more OTP generation methods of a time synchronization method and / or a challenge-response method. It is done.

Those skilled in the art will be familiar with how to dynamically generate a predetermined encryption key through at least one OTP generation method of the time synchronization method and / or the challenge-response method. Therefore, detailed description thereof will be omitted for convenience.

According to an embodiment of the present invention, the encryption key encrypts the payment approval request text in a symmetric key (or secret key) manner, and / or decrypts the payment approval text in a symmetric key (or secret key) manner. Or an encryption key that includes an encryption key and / or encrypts the full text of the payment authorization request in a public key manner, and / or decrypts the full text of the payment authorization request in a public key fashion, and / or An encryption key for encrypting the full text of the payment approval request and / or decrypting the full text of the payment approval request in an electronic envelope method, and / or encrypting the full text of the payment approval request in a key exchange method Or, and / or an encryption key for decrypting the full payment authorization in a key exchange manner.

Those skilled in the art to which the present invention pertains, the encryption key encrypts the payment approval request full text, and / or the method of decrypting the payment approval full text is the symmetric key (or secret key) method, And / or it will be apparent that other encryption / decryption schemes exist in addition to the public key scheme, and / or the electronic envelope scheme, and / or the key exchange scheme, and the present invention provides for all encryption / decryption schemes other than the above-mentioned encryption scheme. And the invention is not limited thereby.

According to the present invention, the payment terminal emulator 400 stores payment means information (and / or card information) read through the card reader unit, payment information input through the key input unit, and stored in the storage unit 460. A text generation unit 470 for generating at least one payment approval request text including the text creation information, and encrypting the payment approval request text with an encryption key (or dynamically generated) provided in the security application module; A cryptographic processing unit 475 and a specialized transmission unit 480 for transmitting the encrypted payment approval request telegram through the communication processing unit.

The full text generation unit 470 reads predetermined payment means information (and / or card information) through the card reader 440, and enters predetermined payment information through the key input unit 450. After extracting the specialized generation information (eg, virtual terminal information) from the storage unit 460 and generating a predetermined document serial number, the payment means information (and / or card information), payment information, professional creation information, Characterized in that a predetermined payment approval request full text including the document serial number.

When the payment means information (and / or card information) corresponding to the credit card payment means according to an embodiment of the present invention, the full text of the payment approval request generated by the full text generation unit to the full payment approval request using the credit card It is preferable to correspond.

In addition, when the payment means information (and / or card information) corresponding to the check card payment means, the full text of the payment approval request generated by the full text generation unit 470 corresponds to the full text of the payment approval request using the check card It is preferable.

In addition, when the payment means information (and / or card information) corresponding to the debit card payment means, the full text of the payment approval request generated by the full text generation unit 470 corresponding to the full payment approval request using the debit card It is preferable.

In addition, when the payment means information (and / or card information) corresponds to the prepaid card payment means, it is preferable that the full payment approval request generated by the full text generation unit corresponds to the full payment approval request using the prepaid card.

According to another exemplary embodiment of the present invention, when the payment means information (and / or card information) corresponds to the bank transfer payment means, the payment approval request text generated by the full text generation unit is a payment approval request using the account transfer. It is possible to correspond to the full text, whereby the present invention is not limited.

The cryptographic processing unit 475 extracts an encryption key (or dynamically generated) provided in the security application module unit when at least one full payment approval request message is generated by the full text generation unit, and through the encryption key. Encrypting the entire payment authorization request using at least one of a symmetric (or secret) encryption method, and / or a public key encryption method, and / or an electronic envelope encryption method, and / or a key exchange encryption method. It features.

According to an embodiment of the present invention, the payment approval request text encrypted by the symmetric key (or secret key) encryption method through the encryption key is the symmetric key (or secret key) in a predetermined payment server that receives the payment approval request text. ) Is preferably decrypted by a decryption method corresponding to the encryption method.

In addition, the payment approval request text encrypted with the public key encryption method through the encryption key is preferably decrypted by a decryption method corresponding to the public key encryption method in a predetermined payment server that receives the payment approval request message.

In addition, the payment approval request text encrypted by the electronic envelope encryption method through the encryption key is preferably decrypted by a decryption method corresponding to the electronic envelope encryption method in a predetermined payment server that receives the payment approval request message.

In addition, the payment approval request text encrypted with the key exchange encryption method through the encryption key is preferably decrypted by a decryption method corresponding to the key exchange encryption method in a predetermined payment server that receives the payment approval request message.

According to the embodiment of the present invention, the encryption processing unit 475 is the payment means information (or card) included in the full payment approval request through the encryption key (or dynamically generated) provided in the security application module unit 465 Information) and / or payment information may optionally be further encrypted, whereby a higher level of security for the payment means information (or card information) and / or payment information is realized.

In addition, the payment means information (or card information) and / or payment information encrypted as described above is decrypted by the payment server receiving the full payment approval request.

The specialized transmission unit 480 is a payment corresponding to the payment means information (and / or card information) included in the payment approval request full message through the communication processing unit encrypted payment authorization request by the encryption processing unit 475 Characterized in that the transmission to the server.

Subsequently, the payment server receiving the encrypted payment approval request message decodes the payment approval request message through a predetermined decryption method corresponding to the encryption method applied to the payment approval request message, and restores the predetermined payment approval request message. .

According to a preferred embodiment of the present invention, it is preferable that the decrypted payment approval request full text is matched with the payment approval request full text generated by the conventional payment terminal and received by the payment server through a predetermined bansa server, whereby The server can easily perform a payment processing procedure corresponding to the full payment approval request.

Of course, according to the intention of the person skilled in the art, the decrypted payment approval request full text may not correspond to the payment approval request text received by the payment server through a predetermined bansa server, and the present invention is not limited thereto.

Thereafter, the payment server performs a payment processing procedure corresponding to the decrypted payment approval request full text, thereby generating a payment processing history including a predetermined payment approval history or a payment error history, and including the payment processing history. After generating the payment approval message of, the generated payment approval message is selected from among symmetric key (or secret key) encryption method, and / or public key encryption method, and / or electronic envelope encryption method, and / or key exchange encryption method. Encrypt using at least one encryption method.

According to the present invention, the payment terminal emulator 400 is a specialized receiving unit for receiving a payment approval message corresponding to the payment approval request full text through the communication processing unit, and if the received payment approval full text is encrypted, the encrypted An encryption processing unit for decrypting a payment approval message using an encryption key (or dynamically generated) provided in the security application module unit, extracting a predetermined payment processing detail from the payment approval message, and included in the payment processing history; Characterized in that it comprises a specialized processing unit for performing a payment processing procedure corresponding to the payment approval details or payment error details.

The specialized receiving unit periodically transmits a predetermined payment approval request message to the payment server through the communication processing unit, and then periodically receives a payment approval message corresponding to the payment approval request message through the communication processing unit. Characterized in that the check, characterized in that for receiving the payment approval full text corresponding to the payment approval request full text through the communication processing unit.

Thereafter, the full-text receiver checks whether the received payment approval text is encrypted. If the full-text payment approval text is encrypted, it is preferable that the full-text receiver provides the received payment approval text to the encryption processing unit. When the payment approval message is not encrypted, the message receiving unit preferably provides the received payment approval message to the message processing unit.

According to an embodiment of the present invention, when the received payment approval message is always received encrypted, it is preferable that the message receiving unit always provides the received payment approval message to the encryption processing unit.

The encryption processing unit extracts a decryption key (or dynamically generated) provided in the security application module unit when the encrypted payment approval message is received through the specialized receiving unit, and converts the payment approval message into a symmetric key through the decryption key. (Or secret key) decryption method and / or public key decryption method, and / or electronic envelope decryption method, and / or key exchange decryption method, characterized in that the decryption through at least one or more.

According to an embodiment of the present invention, the payment approval text encrypted by the symmetric key (or secret key) encryption method in the payment server is decrypted by a decryption method corresponding to the symmetric key (or secret key) encryption method in the encryption processing unit. It is desirable to be.

In addition, the payment approval message encrypted by the public key encryption method in the payment server is preferably decrypted by the decryption method corresponding to the public key encryption method in the encryption processing unit.

In addition, the payment approval message encrypted by the electronic envelope encryption method in the payment server is preferably decrypted by the decryption method corresponding to the electronic envelope encryption method in the encryption processing unit.

In addition, the payment approval message encrypted by the key exchange encryption method in the payment server is preferably decrypted by a decryption method corresponding to the key exchange encryption method in the encryption processing unit.

The specialized processing unit receives a payment approval text corresponding to the payment approval request text through the specialized receiving unit, and / or the encrypted payment approval text is decrypted through the encryption processing unit, and then the payment approval details from the payment approval text. Or it may be characterized by extracting the payment processing history including any one of the payment error details.

When the extracted payment processing details correspond to payment approval details according to an embodiment of the present invention, the specialized processing unit outputs the payment approval details to the payment terminal screen interface through the screen output unit, and / or the It is preferable to output a receipt corresponding to the payment approval details through a print output device provided in the client terminal through a print output unit.

According to another exemplary embodiment of the present invention, when the extracted payment processing details correspond to payment error details, the specialized processing unit outputs the payment error details to the payment terminal screen interface through the screen output unit, and / or It is preferable to output a receipt corresponding to the payment error history through a print output device provided in the client terminal through the print output unit.

The specialized processor may further include a function of storing the payment processing details (for example, payment approval details or payment error details) in a storage device (not shown) provided in the client terminal.

5 is a diagram illustrating a payment approval request specialized structure generated by the payment terminal emulator 400 according to an embodiment of the present invention.

In more detail, FIG. 5 illustrates a case where payment means information read from a customer-owned credit card corresponds to credit card payment means information on a payment system using the payment terminal emulator 400 shown in FIG. The credit card payment approval request generated on the basis of the means information structure, if the person of ordinary skill in the art to which the present invention belongs, the reference to and / or modifying the Figure 5 in addition to the credit card payment means information The payment approval request specialized structure corresponding to other payment means information may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

Referring to Figure 5, the payment approval request full-text structure is at least one or more specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and the end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text includes a transaction classification item (eg, credit approval request, credit approval cancellation, etc.), a terminal_ID item, a POS entry mode item, and a card provided in the payment terminal emulator 400 related to the credit card payment. TRACK II Data items (e.g., Primary Account Number (PAN) and Additional Data (AD) and / or Discretionary Data (DD) areas of TRACK II of the MS card corresponding to the payment method information obtained from the predetermined card through the reader. Credit card information obtained from the credit card information obtained from the credit card file of the IC card, or from the IC card, and the installment months item corresponding to the credit card payment information after a predetermined FS (File Separator, 0X1C) and It includes the total amount item and service charge item, and also includes the Working Key Index item, password item, product code item, and document serial number item. Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

The Terminal_ID item of the information on the payment approval request specialist is virtual terminal information corresponding to the professional generation information provided in the payment terminal emulator 400, and the virtual terminal information is encrypted through a predetermined authentication code. It is done.

In addition, the total amount item of the information item of the payment approval request is a payment amount information to be processed through the payment approval request message, it is preferable that it is input through a predetermined key input device, the document serial number is Corresponds to the serial number assigned by the payment terminal emulator 400 to manage the electronic payment process.

In addition, the TRACK II Data item of the information on the payment approval request specialist is payment means information (and / or card information) read from a predetermined customer-owned card through a predetermined card reader provided in the payment terminal emulator 400. In FIG. 5, this corresponds to credit card information.

6 is a diagram showing the configuration of an electronic payment system using the payment terminal emulator 400 according to the embodiment of the present invention.

In more detail, Figure 6 relates to an electronic payment system configuration for processing electronic payment using at least one credit card / check card / debit card based on the payment terminal emulator 400 shown in Figure 4, the present invention Those skilled in the art may refer to the payment terminal emulator 400 function configuration shown in FIG. 4 and the electronic payment system configuration using the payment terminal emulator 400 shown in FIG. Or it may be modified to infer the configuration of various forms of electronic payment system according to the intention of those skilled in the art, the present invention includes all the inferred implementation method, it is not limited to the implementation method shown in FIG.

Referring to FIG. 6 according to an embodiment of the present invention, an electronic payment system using the payment terminal emulator 400 includes a client terminal having a payment terminal emulator 400 shown in FIG. 4, and the payment terminal emulator ( 400) and a payment server connected through a predetermined communication network.

According to an embodiment of the present invention, a communication network connecting the payment terminal emulator 400 and the payment server provided in the client terminal is a wired communication network based on TCP / IP according to technical features of the communication module provided in the client terminal. (Eg, an Asymmetric Digital Subscriber Line (ADSL) / Very High-Data Rate Digital Subscriber Line (VDSL) and / or a cable communication network).

According to another exemplary embodiment of the present invention, a communication network connecting the payment terminal emulator 400 provided in the client terminal and the payment server is wireless based on TCP / IP according to technical features of the communication module provided in the client terminal. A communication network (eg, IEEE 802.11x-based wireless LAN, and / or IEEE 802.16x-based portable Internet, etc.) or at least one or more, or CDMA (Code according to the technical characteristics of the communication module provided in the client terminal) Division Multiple Access) based mobile communication network can be made,

According to another exemplary embodiment of the present invention, a communication network connecting the payment terminal emulator 400 and the payment server provided in the client terminal operates based on the wired communication network and / or the wireless communication network according to the intention of a person skilled in the art. It may be a predetermined payment network (eg, Value Added Communication Network (VAN)), whereby the present invention is not limited.

Referring to Figure 6, the payment server is a specialized receiving unit for receiving a predetermined payment approval request message transmitted from the payment terminal emulator 400 through the communication network, and if the received payment approval request message is encrypted, And an encryption unit for decrypting the encrypted payment approval request text, and a payment approval unit for reading the payment approval request text and performing a payment approval procedure corresponding to the payment approval request text.

The specialized receiver periodically checks whether at least one payment approval request message is received from the payment terminal emulator 400 through the communication network, thereby transmitting from the payment terminal emulator 400 through the communication network. Receiving at least one full payment approval request message.

Thereafter, the full-text receiver checks whether the received payment approval request text is encrypted. If the full text of the payment approval request is encrypted, it is preferable that the full-text receiver provides the received payment approval request text to the encryption unit. If the payment approval request text is not encrypted (for example, when the payment approval request text is received through a payment network (VAN)), the text receiving unit provides the received payment approval request text to the payment approval unit. It is desirable to.

According to an embodiment of the present invention, when the received payment approval request message is always received encrypted, it is preferable that the message receiving unit always provides the received payment approval request message to the encryption unit.

The encryption unit extracts a predetermined decryption key for decrypting the payment approval request message from the storage medium 245 shown in FIG. 1 when the encrypted payment approval request message is received through the message receiving unit. Decrypt the payment approval request text through at least one or more of a symmetric key (or secret key) decryption scheme, and / or public key decryption scheme, and / or electronic envelope decryption scheme, and / or key exchange decryption scheme Characterized in that.

According to an embodiment of the present invention, the payment approval request message encrypted by the symmetric key (or secret key) encryption method in the payment terminal emulator 400 corresponds to the symmetric key (or secret key) encryption method in the encryption unit. It is preferable to decode by the decoding method.

In addition, the full payment approval request message encrypted by the public terminal encryption method in the payment terminal emulator 400 may be decrypted by the decryption method corresponding to the public key encryption method in the encryption unit.

In addition, the payment approval request message encrypted by the electronic device encryption method in the payment terminal emulator 400 is preferably decrypted by the decryption method corresponding to the electronic envelope encryption method in the encryption unit.

In addition, the payment approval request full text encrypted in the key exchange encryption method in the payment terminal emulator 400 is preferably decrypted by the encryption unit in a decryption method corresponding to the key exchange encryption method.

The payment approval unit receives an unencrypted payment approval request text through the specialized receiving unit and / or decrypts a payment approval request text encrypted through the encryption unit, and then performs a payment approval procedure corresponding to the payment approval request text. The method may further include generating a predetermined payment processing history including payment approval details or payment error details corresponding to the payment approval procedure.

If one of ordinary skill in the art to which the present invention pertains, a payment approval procedure corresponding to the payment approval request full text (for example, credit card payment means information is included in the payment approval request text, credit) Since you will be familiar with the process of determining whether to approve payment through the credit limit inquiry, the detailed description thereof will be omitted for convenience.

According to the present invention, the payment server may include a full text generation unit for generating a payment approval text including a payment processing history generated by the payment approval unit, and the encryption key stored in the storage medium 245 in the payment approval text. It characterized in that it comprises an encryption unit for encrypting using, and a specialized transmission unit for transmitting the full payment approval to the payment terminal emulator 400 through the communication network.

The full text generation unit performs a predetermined payment approval procedure corresponding to the full text of the payment approval request, and when the predetermined payment processing history including the payment approval details or payment error details is generated, the payment processing details are generated. Characterized by generating a predetermined payment approval full text.

According to an embodiment of the present invention, when the payment means information (and / or card information) included in the payment approval request text corresponding to the credit card payment means, the payment approval text generated by the full text generation unit generates the credit card. It is preferable to correspond to the full payment approval used.

Also, when the payment means information (and / or card information) included in the payment approval request text corresponds to the check card payment means, the payment approval text generated by the text generation unit corresponds to the payment approval text using the check card. It is desirable to.

Also, when the payment means information (and / or card information) included in the payment approval request text corresponds to the debit card payment means, the payment approval text generated by the special text generation unit corresponds to the payment approval text using the debit card. It is desirable to.

Also, when the payment means information (and / or card information) included in the payment approval request text corresponds to the prepaid card payment means, the payment approval text generated by the text generation unit corresponds to the payment approval text using the prepaid card. It is desirable to.

According to another exemplary embodiment of the present invention, when the payment means information (and / or card information) included in the full payment approval request message corresponds to the transfer payment method, the payment approval text generated by the full text generation unit is the account. It is possible to correspond to the full payment approval using a transfer, by which the present invention is not limited.

The encryption unit extracts an encryption key stored in association with the payment terminal emulator 400 information stored in the storage medium 245 when at least one payment approval message is generated by the message generation unit, and through the encryption key. Encrypting the payment authorization text through at least one of a symmetric key (or secret key) encryption method, and / or a public key encryption method, and / or an electronic envelope encryption method, and / or a key exchange encryption method. It is done.

According to one embodiment of the present invention, the payment approval message encrypted by the symmetric key (or secret key) encryption method through the encryption key is the symmetric key (or a predetermined payment terminal emulator 400 for receiving the payment approval message). Secret key) It is preferably decrypted by a decryption method corresponding to the encryption method.

In addition, it is preferable that the payment approval message encrypted by the public key encryption method through the encryption key is decrypted by a decryption method corresponding to the public key encryption method in a predetermined payment terminal emulator 400 that receives the payment approval message. .

In addition, it is preferable that the payment approval message encrypted by the electronic envelope encryption method through the encryption key is decrypted by a decryption method corresponding to the electronic envelope encryption method in a predetermined payment terminal emulator 400 that receives the payment approval message. .

In addition, it is preferable that the payment approval message encrypted by the key exchange encryption method through the encryption key is decrypted by a decryption method corresponding to the key exchange encryption method in a predetermined payment terminal emulator 400 that receives the payment approval message. .

The specialized transmitter transmits the payment approval message to the payment terminal emulator 400 through the communication network, and the payment terminal emulator 400 receiving the encrypted payment approval message is applied to the payment approval message. The payment approval full text is decrypted by a predetermined decryption method corresponding to an encryption method, and the payment approval full text generated by the full text generation unit is restored.

7 is a diagram illustrating a method for encrypting and transmitting a payment approval request message in a symmetric key (or secret key) manner in a payment terminal emulator 400 according to an embodiment of the present invention.

In more detail, FIG. 7 illustrates an embodiment of the present invention in which a payment terminal emulator 400 having an encryption function as shown in FIG. 4 encrypts and transmits the full payment approval request in a symmetric key (or secret key) manner. According to the related art, the present invention may be encrypted with the symmetric key (or secret key) method by referring to and / or modifying the drawing 7 in the payment terminal emulator 400 on the communication network. Various implementation methods may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 7 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the security application module unit provided in the payment terminal emulator 400, the security application module unit is the payment terminal It is preferably provided in the emulator 400, and / or the symmetric key (or secret key) is stored in a predetermined file managed by the payment terminal emulator 400 (e.g., in a storage device provided in the client terminal). Storage) is possible.

In addition, when a predetermined public certificate is provided in the client terminal provided with the payment terminal emulator 400, the symmetric key (or secret key) may be provided in the public certificate, thereby limiting the present invention. No.

Referring to FIG. 7, a predetermined payment approval request message including a predetermined payment means information (and / or card information), payment information, and at least one special text generation information may be generated by the full text generation unit of the payment terminal emulator 400. When it is generated, it is provided to the encryption processing unit (700), if the payment approval request is provided, the encryption processing unit for encrypting the payment approval request full text from the security application module unit provided in the payment terminal emulator (400) A predetermined symmetric key (or secret key) is read (705), and the payment approval request full text is encrypted using the read symmetric key (or secret key) (710).

Herein, the encryption function of the encryption processing unit is referred to as E (Encryption), the symmetric key (or secret key) is k (key), the full payment authorization request is P (Plaintext), and the symmetric key (or secret key). When the full payment approval request encrypted with C is Ciphertext, the encryption function of the encryption processing unit may be expressed by an expression such as "Ek (P) = C".

According to an embodiment of the present invention, the encryption processing unit encrypts the payment approval request message through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( It is preferable to include at least one or more of the International Data Encryption Algorithm, and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment approval request message is encrypted through the symmetric key (or the secret key) as described above, the specialized transmission unit transmits the encrypted payment approval request message to the payment server through a communication protocol defined on the communication network (715). ).

8 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a payment server by a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, FIG. 8 illustrates a symmetric key (or secret key) method of the full payment approval request received from the payment terminal emulator 400 having the encryption function as shown in FIG. 4 in the payment server as shown in FIG. As an embodiment of the present invention, if the present invention belongs to a general knowledge, the encrypted payment approval request is made by the payment terminal emulator 400 on the communication network by referring to and / or modifying this drawing. Various implementation methods for decrypting the full text in a symmetric key (or secret key) manner may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 8 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the storage medium 245 storing a predetermined authentication code (and / or encryption key) in FIG. .

Referring to FIG. 8, the full text receiving unit of the payment server receives the encrypted payment approval request text through the communication network and provides the encrypted text to the encryption unit (800). The full text of the payment approval request message is defined in the communication protocol stack. It is preferably received via.

Thereafter, the encryption unit extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment approval request message from the storage medium 245 provided in the payment server (805), and extracts the extracted symmetric key ( Or decrypts the encrypted payment authorization request full text through a private key (810).

Here, the decryption function of the encryption unit is referred to as D (Decryption), the full text of the payment approval request encrypted with the symmetric key (or secret key) k (key), the symmetric key (or secret key) C (Ciphertext), And if the decrypted payment approval request full text P (Plaintext), the function of decrypting the encrypted payment approval request full message encryption unit is a formula such as "Dk = P, or Dk (Ek (P)) = P" It can be expressed as

According to the method of the present invention, the algorithm for decrypting the encrypted payment authorization request full message through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA It is preferable to include at least one or more of the (International Data Encryption Algorithm), and in addition, various forms of decryption algorithms can be used, but the decryption algorithm is matched with the encryption algorithm used in the payment terminal emulator 400. The present invention is not limited by the specific decoding algorithm.

When the payment approval request message encrypted through the symmetric key (or secret key) is decrypted as described above, the encryption unit provides the decrypted payment approval request message to the payment approval unit (815), and the payment approval unit is the payment approval. By performing a payment approval procedure defined in the payment server by using the full request, generating a predetermined payment processing history including any one of a predetermined payment approval history or a payment error history, and then including the payment processing history. Generate a predetermined payment approval full text.

9 is a diagram illustrating a method of encrypting and transmitting a payment approval message in a symmetric key (or secret key) method in a payment server according to an embodiment of the present invention.

In more detail, FIG. 9 is an embodiment of the present invention for encrypting and transmitting the payment approval text in a symmetric key (or secret key) manner in a payment server equipped with an encryption function as shown in FIG. 6. In the art, various embodiments of the present invention may be inferred by referring to and / or modifying the drawing of FIG. 9 to encrypt the payment approval message in a symmetric key (or secret key) manner in a payment server on the communication network. The present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In this figure 9 according to the method of the present invention, the symmetric key (or secret key) is preferably read from the storage medium 245 storing the authentication code (and / or encryption key) shown in Figure 1 .

Referring to FIG. 9, when a predetermined payment approval text including a predetermined payment processing details (eg, payment approval details or payment error details) is generated in the full text generation unit of the payment server, the predetermined text is provided to the encryption unit. 900, if the payment approval message is provided, the encryption unit reads a predetermined symmetric key (or secret key) for encrypting the payment approval message from the storage medium 245 provided in the payment server (905). The payment approval text is encrypted using the read symmetric key (or secret key) (910).

Herein, the encryption function of the encryption unit is referred to as E (Encryption), the symmetric key (or secret key) is encrypted by k (key), the payment approval full text by P (Plaintext), and the symmetric key (or secret key). When the full payment approval is referred to as C (Ciphertext), the encryption function of the encryption unit may be expressed by an expression such as "Ek (P) = C".

According to an embodiment of the present invention, the algorithm for encrypting the payment authorization text through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data) It is preferable to include at least one or more of the Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment approval message is encrypted through the symmetric key (or the secret key) as described above, the specialized transmission unit transmits the encrypted payment approval message to the payment terminal emulator 400 through a communication protocol defined on the communication network. (915).

10 is a diagram illustrating a method of decrypting a payment authorization message encrypted and received by a payment terminal emulator 400 using a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, FIG. 10 is a symmetric key (or secret key) method for the payment approval message received from the payment server with encryption function as shown in FIG. 6 in the payment terminal emulator 400 as shown in FIG. As a method for decrypting, the present invention has ordinary knowledge in the technical field to which the present invention pertains. Referring to FIG. 10 and / or modified, the symmetric key (or Various implementation methods for decrypting using a secret key) method may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In FIG. 10 according to an embodiment of the present invention, the symmetric key (or secret key) is preferably read from the security application module provided in the payment terminal emulator 400, and / or the payment terminal emulator ( When a predetermined authentication certificate linked to the payment terminal emulator 400 is mounted on the client terminal on which 400 is mounted, it may be read from the authentication certificate, and the present invention is not limited thereto.

Referring to FIG. 10, the full text receiver of the payment terminal emulator 400 receives the encrypted payment approval text through the communication network and provides the encrypted payment text to the cryptographic processor 1000, wherein the full text of the payment approval is defined in the communication network. It is preferably received via a communication protocol stack.

Thereafter, the encryption processing unit extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment authorization message from the security application module provided in the payment terminal emulator 400 (1005), and extracts the extracted symmetric key. The encrypted payment authorization message is decrypted through a symmetric key (or secret key) (1010).

Here, the decryption function of the encryption processing unit is referred to as D (Decryption), and the full text of the payment approval encrypted with the symmetric key (or secret key) by k (key) and the symmetric key (or secret key) by C (Ciphertext), If the decrypted payment approval message is P (Plaintext), the function of decrypting the encrypted payment approval message by the encryption processing unit is a formula such as "Dk = P, or Dk (Ek (P)) = P". I can express it.

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment authorization text through the symmetric key (or secret key), SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA It is preferable to include at least one or more of (International Data Encryption Algorithm), and in addition, various forms of decryption algorithms can be used, but the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the payment server, The present invention is not limited by the specific decoding algorithm.

When the payment approval text encrypted through the symmetric key (or secret key) is decrypted as described above, the encryption processing unit provides the decrypted payment approval text to the specialized processing unit (1015), and the specialized processing unit provides the payment approval text. Using the payment approval professional processing procedure defined in the payment terminal emulator 400 using.

11 is a diagram illustrating a method for encrypting and transmitting a full payment approval request in a payment terminal emulator 400 in a public key based structure according to an embodiment of the present invention.

In more detail, Figure 11 is an embodiment of a method for encrypting and transmitting the full payment approval request message in a public key infrastructure structure in a payment terminal emulator 400 having an encryption function as shown in FIG. If one of ordinary skill in the art can refer to and / or modify this drawing, various implementation methods for encrypting the full payment approval request message in a public key manner in the payment terminal emulator 400 on the communication network can be inferred. It will be appreciated that the present invention encompasses all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

In this figure 11 according to an embodiment of the present invention, the server-side public key is preferably read from the security application module unit provided in the payment terminal emulator 400, and the security application module unit is the payment terminal emulator 400. ), And / or the server-side public key may be stored in a predetermined file managed by the payment terminal emulator 400 (eg, stored in a storage device provided in the client terminal). .

In addition, when a predetermined public certificate is provided in the client terminal provided with the payment terminal emulator 400, the server-side public key may be provided in the public certificate, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by the certification authority issuing the public certificate, and the present invention is not limited thereto.

Referring to FIG. 11, a predetermined payment approval request message including a predetermined payment means information (and / or card information), payment information, and at least one special text generation information may be generated by a full text generation unit of the payment terminal emulator 400. When it is generated, it is provided to the encryption processing unit (1100). When the payment approval request message is provided, the encryption processing unit extracts a predetermined server-side public key for encrypting the payment approval request message from the security application module unit. In operation 1105, the payment approval request message is encrypted using the extracted server-side public key (1110).

Herein, the encryption function of the encryption processing unit is referred to as E (Encryption), the server-side public key is k1 (key), the payment approval request message is P (Plaintext), and the server-side public key is encrypted. If C (Ciphertext), the encryption function of the encryption processing unit can be expressed by a formula such as "Ek1 (P) = C".

According to an embodiment of the present invention, the encryption processing unit encrypts the payment approval request message through the server-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH. (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, at least one of the ECDH is preferably included. In addition to the various encryption algorithms may be used, the present invention by a specific encryption algorithm It is not limited.

For example, in the case of encrypting the full payment approval request message through the RSA encryption algorithm among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by the different prime factors of n is a. And b, if the published index (e.g., 3 or 216+) is e, and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a -1) (b-1) ", wherein the encryption function of the encryption processing unit can be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval request message is encrypted through the server-side public key as described above, the specialized transmission unit transmits the encrypted payment approval request message to the payment server through a network component on the communication network (1115).

12 is a diagram illustrating a method for decrypting a full payment approval request received encrypted by a payment server according to an embodiment of the present invention using a public key infrastructure.

In more detail, FIG. 12 illustrates the decryption of the payment approval request message received from the payment terminal emulator 400 having the encryption function as shown in FIG. 4 in a public key infrastructure scheme in the payment server as shown in FIG. As to a method of implementation, if the present invention has a common knowledge in the art, payment approval encrypted with the server-side public key in the payment terminal emulator 400 on the communication by referring to and / or modifying the present Figure 12 It is possible to infer various implementation methods for decrypting the request text in a public key infrastructure structure, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 12 according to the embodiment of the present invention, the server-side private key for decrypting the full payment approval request message encrypted with the server-side public key in a public key infrastructure structure may include a predetermined authentication code (and / or encryption) in FIG. Key) is read from the storage medium 245 storing the key.

Referring to FIG. 12, the full text receiving unit of the payment server receives the encrypted payment approval request text through the communication network and provides the encrypted text to the encryption unit (1200). The full text of the payment approval request text message is defined in the communication network. It is preferably received via.

Thereafter, the encryption unit extracts a server-side private key for decrypting the encrypted payment authorization request full text from the storage medium 245 provided in the payment server (1205), and encrypts the extracted server-side private key through the extracted server-side private key. The decoded payment approval request text is decoded (1210).

Here, the decryption function of the encryption unit is called D (Decryption), and the server-side private key is k2 (key), and the full payment approval request encrypted with the server-side public key is decrypted with C (Ciphertext) and the server-side private key. When the payment approval request message is P (Plaintext), the function of decrypting the encrypted payment approval request message may be expressed by a formula such as "Dk2 = P, or Dk2 (Ek (P)) = P". have.

According to an embodiment of the present invention, an algorithm for decrypting a payment approval request message encrypted by the payment terminal emulator 400 with the server-side public key through the server-side private key includes RSA (Ron Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. The decryption algorithm may be matched with the encryption algorithm used in the payment terminal emulator 400, and the present invention is not limited to the specific decryption algorithm.

For example, in the case of decrypting the full payment approval request message through the RSA decryption algorithm, the public method (Modulus) used in the decryption process is not disclosed with n and different prime factors of n. If the prime is a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", wherein the decryption function of the encryption unit may be expressed as" P = Dk2 = Cd mod n ".

When the payment approval request message encrypted with the server-side public key is decrypted by the payment terminal emulator 400 through the server-side private key, the encryption unit provides the decrypted payment approval request message to the payment approval unit (1215). ), The payment approval unit generates a predetermined payment processing history including either a predetermined payment approval history or a payment error history by performing a payment approval procedure defined in the payment server using the full payment approval request message. Thereafter, a predetermined payment approval text including the payment processing details is generated.

FIG. 13 is a diagram illustrating a method for encrypting and transmitting a payment approval message in a public key infrastructure structure in a payment server according to an embodiment of the present invention.

More specifically, FIG. 13 is a method for encrypting and transmitting the payment approval text in a public key infrastructure structure in a payment server equipped with an encryption function as shown in FIG. 6. If the knowledge of the present invention can be inferred by referring to and / or modifying this figure 13, various implementation methods of encrypting the full payment approval in a public key method in a payment server on the communication network can be inferred. It includes all implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 13 according to the embodiment of the present invention, the terminal-side public key is preferably read from the storage medium 245 that stores the authentication code (and / or encryption key) shown in FIG.

Alternatively, when a predetermined authentication certificate is mounted on a client terminal on which the payment terminal emulator 400 is mounted, the terminal-side public key is operated and managed by an authentication authority that issues the authentication certificate to the payment terminal emulator 400. It is possible to extract from a predetermined directory (not shown), thereby limiting the present invention.

Referring to FIG. 13, when a predetermined payment approval text including a predetermined payment processing history (for example, payment approval history or payment error history) is generated in the full text generation unit of the payment server, it is provided to the encryption unit ( 1300, if the payment approval full text is provided, the encryption unit extracts a predetermined terminal side public key for encrypting the payment approval full text from the storage medium 245 (1305), and extracts the extracted terminal side public key. The payment approval is encrypted through the full text 1310.

Herein, the encryption function of the encryption unit is referred to as E (Encryption), the terminal-side public key is k1 (key), the payment approval message is P (Plaintext), and the payment authorization message encrypted with the terminal-side public key is C ( Ciphertext), the encryption function of the encryption unit can be expressed by a formula such as "Ek1 (P) = C".

According to an embodiment of the present invention, the algorithm for encrypting the payment approval full text through the terminal-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie) , Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above, and may be used. In addition, various types of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm. No.

For example, in the case of encrypting the payment authorization text using the RSA encryption algorithm among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by different prime factors of n and a b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the encryption function of the encryption unit can be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval message is encrypted through the terminal-side public key as described above, the specialized transmission unit transmits the encrypted payment approval message to the payment terminal emulator 400 through a network component on the communication network (1315).

14 is a diagram illustrating a method for decrypting a payment authorization message encrypted and received by a payment terminal emulator 400 using a public key based structure according to an embodiment of the present invention.

In more detail, FIG. 14 is an embodiment in which the payment approval message received encrypted from a payment server having an encryption function as shown in FIG. 6 is decrypted in a public key infrastructure in the payment terminal emulator 400 as shown in FIG. As to a method, if the present invention has a common knowledge in the technical field to which the present invention belongs, public key based on the full text of the payment approval encrypted with the terminal-side public key in the payment server on the communication network by referring to and / or modifying this figure 14 Various implementation methods of decoding in a structured manner may be inferred, but the present invention includes all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

According to the embodiment of the present invention, the terminal-side private key for decrypting the payment approval text encrypted with the terminal-side public key in a public key infrastructure structure is provided in the payment terminal emulator 400. It is preferable to read from the bubbu, and / or when a predetermined authentication certificate linked to the payment terminal emulator 400 is mounted on the client terminal on which the payment terminal emulator 400 is mounted, even if it is read from the authentication certificate. The present invention is not limited thereto.

Referring to FIG. 14, the full text receiver of the payment terminal emulator 400 receives the encrypted payment approval text through the communication network and provides the encrypted text to the cryptographic processing unit (1400). The payment approval text is a communication defined in the communication network. It is preferably received via a protocol stack.

Thereafter, the encryption processing unit extracts a terminal-side private key for decrypting the encrypted payment authorization message from the security application module provided in the payment terminal emulator 400 (1405), and extracts the extracted terminal-side private key. The encrypted payment approval full text is decrypted (1410).

Here, the decryption function of the encryption processing unit is referred to as D (Decryption), and the terminal-side private key is k2 (key), and the payment approval text encrypted with the terminal-side public key is decrypted with C (Ciphertext) and the terminal-side private key. When the payment approval message is P (Plaintext), the function of decrypting the encrypted payment approval message may be expressed by a formula such as "Dk2 = P, or Dk2 (Ek (P)) = P". .

According to an embodiment of the present invention, an algorithm for decrypting a payment approval message encrypted by the payment server with the terminal-side public key through the terminal-side private key is RSA (Ron Rivest, Adi Shamir, Len Adleman). , Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of decoding algorithms may be used. The decryption algorithm is matched with an encryption algorithm used in the payment server, and the present invention is not limited to a specific decryption algorithm.

For example, in the case of decrypting the full payment authorization message through an RSA decryption algorithm among the public key-based decryption algorithms, a public method (Modulus) used in the decryption process is n, a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e, the undisclosed index is d, the n satisfies "n = a * b", d is "de = 1 mod (a-1) (b-1) ", wherein the decryption function of the encryption processing unit may be expressed as" P = Dk2 = Cd mod n ".

As described above, when the payment approval text encrypted with the terminal-side public key is decrypted by the payment server through the terminal-side private key, the encryption processing unit provides the decrypted payment approval text to the specialized processing unit (1415). The payment approval professional performs a payment approval specialized processing procedure defined in the payment terminal emulator 400 by using the full text of the payment approval.

FIG. 15 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in an electronic envelope method in a payment terminal emulator 400 according to an embodiment of the present invention.

More specifically, Figure 15 relates to an embodiment of the present invention encrypting and transmitting the payment approval request full message in an electronic envelope method in the payment terminal emulator 400 with the encryption function as shown in Figure 4, the present invention If there is a general knowledge in the Figure 15, and / or modified with reference to this figure 15 it can be inferred from the various implementation methods for encrypting the full payment authorization request in the electronic envelope method in the payment terminal emulator 400 on the communication network. The present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In this figure 15 according to an embodiment of the present invention, the server-side public key is preferably read from the security application module unit provided in the payment terminal emulator 400, and the security application module unit is the payment terminal emulator 400. ), And / or the server-side public key may be stored in a predetermined file managed by the payment terminal emulator 400 (eg, stored in a storage device provided in the client terminal). .

In addition, when a predetermined public certificate is provided in the client terminal provided with the payment terminal emulator 400, the server-side public key may be provided in the public certificate, and the present invention is not limited thereto.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority issuing the certificate to the payment terminal emulator 400, thereby limiting the present invention. No.

Referring to FIG. 15, a predetermined payment approval request message including a predetermined payment means information (and / or card information), payment information, and at least one special text generation information may be generated by the full text generation unit of the payment terminal emulator 400. When it is generated, it is provided to the cryptographic processing unit (1500). When the payment approval request text is provided, the cryptographic processing unit randomly encrypts the payment approval request text in a secret key (symmetric key) manner. A secret secret key is generated (1505), and the payment approval request text is encrypted using the generated secret key (1510).

Herein, the encryption function of the encryption processing unit is referred to as E (Encryption), the secret key is r (random secret key), the payment approval request full text P (Plaintext), and the payment approval request text encrypted with the secret key C In the case of (Ciphertext), the encryption function of the encryption processing unit can be expressed by an expression such as "Er (P) = C".

According to the embodiment of the present invention, the encryption processing unit encrypts the payment approval request message through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption Algorithm) It is preferable to include at least one of the above, and in addition to the encryption algorithm of various forms may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption processing unit encrypts the secret key (random secret key) used to encrypt the full payment approval request message. To this end, the encryption processing unit extracts a predetermined server-side public key from the security application module unit (1515). In operation 1520, the secret key is encrypted using the server-side public key.

Herein, the encryption function of the encryption processing unit is called E (Encryption), the server-side public key is k1 (key), the secret key is r (random Secret key), and the server-side public key is encrypted with the C-key. In the case of (Ciphertext), the encryption function of the encryption processing unit can be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key through the server-side public key is RRI (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie). , Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above, and may be used. In addition, various types of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm. No.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption processing unit may be expressed as" C = Ek1 (r) = re mod n ".

If the payment approval request is encrypted with the secret key and the secret key is encrypted with the server-side public key, the encryption processing unit encrypts the payment approval request message with the secret key and the server-side public key. Generate transaction data in association with and provide the transaction data to the specialized transmission unit (1525). The specialized transmission unit transmits the transaction data to the payment server through a network component on a communication network (1530).

FIG. 16 is a diagram illustrating a method of decrypting a full payment approval request received encrypted by a payment server according to an embodiment of the present invention by an electronic envelope method.

In more detail, FIG. 16 shows the transaction data in a payment server as shown in FIG. 6 that receives the transaction data including the encrypted payment approval request message from the payment terminal emulator 400 having the encryption function as shown in FIG. As an embodiment of the present invention, a method of decrypting by an envelope method, and having ordinary knowledge in the technical field to which the present invention pertains, will be described with reference to and / or modified with reference to FIG. 16 and the electronic terminal in the payment terminal emulator 400 on the communication network. Various implementation methods for decrypting transaction data encrypted in the same manner may be inferred by the same electronic envelope method, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 16 according to an embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method may include the storage medium 245 storing a predetermined authentication code (and / or encryption key) in FIG. It is preferable to read from).

Referring to FIG. 16, the full-text receiver of the payment server receives predetermined transaction data including the full-text payment approval request message through the communication network and provides the received transaction data to the encryption unit (1600). It is preferably received via a defined communication protocol stack.

Thereafter, the encryption unit extracts a server-side private key for decrypting the encrypted secret key included in the transaction data from the storage medium 245 provided in the payment server (1605), and extracts the extracted server-side private key. By decrypting the secret key encrypted with the server-side public key in the payment terminal emulator 400 (1610), a predetermined secret key for decrypting the full payment approval request message is extracted (1615), and the extracted secret key. By using the decryption of the payment approval request text (1620), the payment terminal emulator 400 extracts the payment approval request text encrypted with the secret key (1625).

Here, the decryption function of the encryption unit is called D (Decryption), the server-side private key is k2 (key), the secret key encrypted with the server-side public key C (Ciphertext), and the secret decrypted with the server-side private key If the key is r (random secret key), the function of decrypting the encrypted secret key by the encryption unit may be expressed by a formula such as "Dk2 = r, or Dk2 (Ek1 (r)) = r".

According to an embodiment of the present invention, an algorithm for decrypting the secret key encrypted by the payment terminal emulator 400 with the server-side public key through the server-side private key is RSA (Ron Rivest, Adi Shamir, Len Adleman). ), DSA (Digie Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH or at least one or more of the various forms of decoding algorithms may be used. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the payment terminal emulator 400, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", wherein the decryption function of the encryption unit can be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the encryption unit is referred to as D (Decryption), the secret key is r (random secret key), the full payment approval request encrypted with the secret key C (Ciphertext), and the decrypted payment approval request When the preamble is called P (Plaintext), the function of decrypting the encrypted payment approval request preamble can be expressed by a formula such as "Dr = P, or Dr (Er (P)) = P".

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment authorization request full text through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption Algorithm) It is preferable to include at least one or more, and in addition to the above may be used in various forms of decryption algorithm, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the payment terminal emulator 400, The present invention is not limited by the decoding algorithm.

When the payment approval request text is decrypted as described above, the encryption unit provides the decrypted payment approval request text to the payment approval unit (1630), and the payment approval unit is defined in the payment server using the payment approval request text. By performing a payment approval procedure, a predetermined payment processing history including any of the predetermined payment approval details or payment error details is generated, and then a predetermined payment approval full text including the payment processing details is generated.

17 is a diagram illustrating a method of encrypting and transmitting a payment approval message in an electronic envelope method in a payment server according to an embodiment of the present invention.

In more detail, Figure 17 is an embodiment of the method for encrypting and transmitting the payment approval full text in an electronic envelope method in the payment server with the encryption function as shown in Figure 6, it is a common knowledge in the technical field With reference to FIG. 17 and / or modified with reference to FIG. 17, various implementation methods for encrypting the payment authorization text in an electronic envelope method in a payment server on the communication network may be inferred. All are included and the present invention is not limited to the implementation method shown in FIG.

In the figure 17 according to the embodiment of the present invention, the terminal-side public key is preferably read from the storage medium 245 storing the authentication code (and / or encryption key) shown in FIG.

Alternatively, when a predetermined authentication certificate is mounted on the client terminal on which the payment terminal emulator 400 is mounted, the terminal-side public key is operated and managed by an authentication authority that issues the authentication certificate to the payment terminal emulator 400. It is possible to extract from a predetermined directory (not shown), thereby limiting the present invention.

Referring to FIG. 17, when a predetermined payment approval text including a predetermined payment processing history (eg, payment approval history or payment error history) is generated in the full text generation unit of the payment server, the predetermined text is provided to the encryption unit. 1700, when the payment approval message is provided, the encryption unit generates a random random secret key for encrypting the payment approval message in a secret key (symmetric key) manner (1705), The payment approval message is encrypted using the generated secret key (1710).

Herein, the encryption function of the encryption unit is referred to as E (Encryption), the secret key is r (random secret key), the payment approval full text P (Plaintext), and the payment approval text encrypted with the secret key C (Ciphertext) In this case, the encryption function of the encryption unit can be expressed by a formula such as "Er (P) = C".

According to an embodiment of the present invention, the algorithm for encrypting the payment approval full text through the secret key is SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption Algorithm) It is preferable to include one or more, and various forms of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm.

Thereafter, the encryption unit encrypts the secret key (random secret key) used to encrypt the payment authorization text. For this purpose, the encryption unit extracts a predetermined terminal-side public key from the storage medium 245 (1715), The secret key is encrypted using the terminal-side public key (1720).

Here, the encryption function of the encryption unit is called E (Encryption), the terminal-side public key is k1 (key), the secret key is r (random Secret key), and the secret key encrypted with the terminal-side public key is C ( Ciphertext), the encryption function of the encryption unit can be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key through the terminal-side public key is RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, and at least one of the ECDH is preferably made, including various forms of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm. .

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption unit may be expressed as" C = Ek1 (r) = re mod n ".

If the payment approval preamble is encrypted with the secret key and the secret key is encrypted with the terminal-side public key, the encryption unit associates the payment authorization text encrypted with the secret key with the secret key encrypted with the terminal-side public key. Data is generated and provided to the specialized transmission unit (1725), and the specialized transmission unit transmits the transaction data to the payment terminal emulator 400 through a network component on a communication network (1730).

FIG. 18 is a diagram illustrating a method of decrypting a payment authorization message received encrypted by the payment terminal emulator 400 in an electronic envelope method according to an embodiment of the present invention.

In more detail, FIG. 18 is an electronic envelope of the transaction data in a payment terminal emulator 400 as shown in FIG. 4, which receives transaction data including an encrypted payment authorization message from a payment server having an encryption function as shown in FIG. The present invention relates to a method of decrypting by using a method, and if the present invention belongs to a general knowledge, a transaction encrypted by the electronic envelope method in a payment server on the communication network by referring to and / or modifying the drawing 18. Various implementation methods for decoding data by the same electronic envelope method may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 18 according to the embodiment of the present invention, the terminal-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the security application module provided in the payment terminal emulator 400, and And / or a predetermined authorized certificate associated with the payment terminal emulator 400 is mounted on the client terminal on which the payment terminal emulator 400 is mounted, it may be read from the authorized certificate, and the present invention is not limited thereto. No.

Referring to FIG. 18, the full-text receiver of the payment terminal emulator 400 receives predetermined transaction data including the encrypted payment approval message through the communication network and provides the predetermined transaction data to the cryptographic processing unit (1800). Is preferably received via a communication protocol stack defined in the communication network.

Thereafter, the encryption processing unit extracts a terminal-side private key for decrypting the encrypted secret key included in the transaction data from the security application module provided in the payment terminal emulator 400 (1805), and extracts the extracted terminal. By decrypting the secret key encrypted with the terminal-side public key in the payment server through the side private key (1810), a predetermined secret key for decrypting the payment authorization text is extracted (1815), and the extracted secret key. By using (1820) to decrypt the payment approval message, the payment server extracts the payment approval message encrypted with the secret key (1825).

Here, the decryption function of the encryption processing unit is referred to as D (Decryption), the terminal-side private key is k2 (key), and the secret key encrypted with the terminal-side public key is decrypted with C (Ciphertext) and the terminal-side private key. If the secret key is r (random secret key), the function of decrypting the encrypted secret key by the encryption processing unit can be expressed by a formula such as "Dk2 = r, or Dk2 (Ek1 (r)) = r".

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted with the terminal-side public key in the payment server through the terminal-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, in addition to the various decoding algorithms may be used, but The decryption algorithm is characterized in that it matches the encryption algorithm used in the payment server, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process, n, a prime number which is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption processing unit may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the encryption processing unit is referred to as D (Decryption), the secret key is r (random secret key), the payment approval message encrypted with the secret key (C (Ciphertext)), and the decrypted payment approval message If P (Plaintext), the encryption processing unit decrypts the encrypted payment authorization can be expressed by a formula such as "Dr = P, or Dr (Er (P)) = P".

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment authorization full text through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption Algorithm) It is preferable to include at least one of), and in addition to the decryption algorithm of various forms may be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the payment server, by a specific decryption algorithm The present invention is not limited.

When the payment approval full text is decrypted as described above, the encryption processing unit provides the decrypted payment approval full text to the professional processing unit (1830), and the professional processing unit uses the payment approval full text to transmit the payment terminal emulator 400. Perform the payment approval professional process defined in.

19A and 19B illustrate a method of encrypting and transmitting a payment approval request message in a key exchange method in a payment terminal emulator 400 according to an embodiment of the present invention.

More specifically, Figure 19a and Figure 19b is an embodiment of the method for encrypting and transmitting the full payment approval request in a key exchange method in the payment terminal emulator 400 with the encryption function as shown in Figure 4, the invention belongs Those skilled in the art can refer to and / or modify this drawing 19 to infer various implementation methods for encrypting the full payment approval request message in a key exchange method in the payment terminal emulator 400 on the communication network. It will be appreciated that the present invention encompasses all of the inferred practice methods and is not limited to the practice method shown in FIG.

In this figure 19 according to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read from the security application module unit provided in the payment terminal emulator 400, wherein the security application module unit is It is preferable to be provided in the payment terminal emulator 400, and / or the terminal-side private key and the server-side public key are stored in a predetermined file managed by the payment terminal emulator 400 (eg, provided in the client terminal). Stored in a dedicated storage device).

In addition, when a predetermined public certificate is provided in the client terminal provided with the payment terminal emulator 400, the terminal private key and the server public key may be provided in the public certificate. It is not limited.

Alternatively, the terminal-side private key and the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate to the payment terminal emulator 400. The present invention is not limited.

19A and 19B, a predetermined payment approval including predetermined payment means information (and / or card information), payment information, and at least one special text generation information in the full text generation unit of the payment terminal emulator 400 When the request message is generated, the information is provided to the cryptographic processing unit (1900). When the payment approval request text is provided, the cryptographic processing unit converts the payment approval request text into a predetermined one-way hash function (for example, the payment approval request specialist). A one-way hash that generates a message digest containing a hash code of any length, regardless of length, and cannot identify (or infer) the original message via the hash code (or message digest). Hash Function: The payment terminal emulator 400 and the payment server use the same hash function to generate a predetermined message digest. And 1905, wherein the message digest encrypted by using the terminal side's private key is the digital signature (1910).

Here, the encryption function of the encryption processing unit is referred to as E (Encryption), the terminal-side private key is t1 (20erminal side key), the message digest is m (message digest), and the message digest encrypted with the terminal-side private key. Speaking of C (Ciphertext), the digital signature function of the cryptographic processing unit can be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, an algorithm for encrypting the message digest by the encryption processing unit through the terminal-side private key includes RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), and DH (Diffie). , Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above, and may be used. In addition, various types of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm. No.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption processing unit may be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption processing unit generates a predetermined random secret key for encrypting the payment approval request text in a secret key (symmetric key) manner (1915), and the payment approval request text and the The message digest encrypted with a terminal-side private key and a copy of a certificate (eg, a certificate including a terminal-side public key) provided in the security application module unit are linked to each other and encrypted through the generated secret key (1920).

Here, the encryption function of the encryption processing unit is called E (Encryption), the secret key is r (random secret key), the payment approval request and the copy of the certificate P (Plaintext), and the payment approval request encrypted with the secret key When the full text and the certificate copy are referred to as C (Ciphertext), the encryption function of the encryption processing unit may be expressed by an expression such as "Er (P) = C".

According to an embodiment of the present invention, the encryption processing unit encrypts the payment authorization request full text and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data). It is preferable to include at least one or more of the Encryption Algorithm, and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the encryption processing unit extracts a predetermined server-side public key from the security application module unit (1925) to encrypt the secret key that encrypts the payment approval request text (1925), and the payment is performed using the server-side public key. The secret key encrypting the full approval request is encrypted (1930).

Here, the encryption function of the encryption processing unit is called E (Encryption), the server side public key is s1 (server side key), the secret key is r (random Secret key), and the secret key encrypted with the server side public key. If C (Ciphertext), the encryption function of the encryption processing unit can be expressed by a formula such as "Es1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key through the server-side public key is RRI (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie). , Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above, and may be used. In addition, various types of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm. No.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). ) (b-1) ", wherein the encryption function of the encryption processing unit may be expressed as" C = Es1 (r) = re mod n ".

The payment authorization request message is encrypted with the generated private key in association with a copy of a certificate including the message digest encrypted with the terminal-side private key and the terminal-side public key, and the secret key is encrypted with the server-side public key. When encrypted via the encryption key, the encryption processing unit encrypts a copy of a certificate including the message digest encrypted with the secret key and the terminal side private key encrypted with the secret key with the server side public key. Generates predetermined transaction data in association with a secret key, provides the generated transaction data to the specialized transmission unit (1935), and the specialized transmission unit transmits the transaction data to the payment server through a network component on a communication network. (1940).

20A and 20B illustrate a method of decrypting a full payment approval request message encrypted and received by a payment server according to an embodiment of the present invention by a key exchange method.

In more detail, Figures 20a and 20b are the payment server as shown in Figure 6 that receives the transaction data including the encrypted payment authorization request full text from the payment terminal emulator 400 with the encryption function as shown in Figure 4 The present invention relates to a method of decrypting a transaction data by a key exchange method. If the present invention has a general knowledge, the payment terminal emulator 400 on the communication network may be referred to and / or modified with reference to FIG. Various implementation methods for decrypting the transaction data encrypted by the key exchange method may be inferred by the same key exchange method, but the present invention includes all of the inferred implementation methods, and according to the embodiment shown in FIG. It is not limited.

In FIG. 20 according to an embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method store a predetermined authentication code (and / or encryption key) in FIG. It is preferable to read from the storage medium 245.

20A and 20B, the full text receiver of the payment server receives the transaction data including the encrypted full text of the payment approval request through the communication network (2000), and provides the transaction data to the encryption unit (2005). Preferably, the transaction data is received through a communication protocol defined in the communication network, and / or the message digest encrypted with the private key encrypted with the secret key and the message side encrypted with the terminal side private key and the terminal side public. And a copy of the certificate containing the key and the secret key encrypted with the server-side public key.

Thereafter, the encryption unit extracts the server-side private key from the storage medium 245 provided in the payment server to decrypt the secret key encrypted with the server-side public key (2010), and through the server-side private key. By decrypting the secret key (2015), the secret key for decrypting a copy of the certificate including the message digest encrypted with the full payment approval request message and the terminal-side private key and the terminal-side public key is extracted (2020).

Here, the decryption function of the encryption unit is referred to as D (Decryption), and the server side private key is s2 (server side key), the server key public key is encrypted with C (Ciphertext) and the server side private key. When the secret key is r (random secret key), the function of decrypting the encrypted secret key by the encryption unit may be expressed by a formula such as "Ds2 = r, or Ds2 (Es1 (r)) = r".

According to an embodiment of the present invention, an algorithm for decrypting the secret key encrypted by the payment terminal emulator 400 with the server-side public key through the server-side private key is RSA (Ron Rivest, Adi Shamir, Len Adleman). ), DSA (Digie Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH or at least one or more of the various forms of decoding algorithms may be used. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the payment terminal emulator 400, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process, n, a prime number which is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption unit may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the encryption unit decrypts a copy of the certificate including the message digest encrypted with the full payment approval request message and the terminal side private key and the terminal side public key using the extracted secret key. 2025, a copy of the certificate including the full message of the payment approval request encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key is extracted.

Here, the decryption function of the encryption unit is referred to as D (Decryption), the secret key is r (random secret key), the message digest encrypted with the secret key encrypted with the secret key and the terminal side private key and the message digest encrypted with the terminal side A copy of a certificate including a public key is C (Ciphertext), and a copy of a certificate including the message digest and the terminal side public key encrypted with the full decrypted payment authorization request and the terminal side private key is P (Plaintext). The function of decrypting a copy of the certificate including the message digest encrypted with the encrypted payment authorization request message and the terminal-side private key and the terminal-side public key is "Dr = P, or Dr (Er (P)). ) = P ".

According to an embodiment of the present invention, an algorithm for decrypting a copy of a certificate including the message digest encrypted with the encrypted payment authorization request message and the terminal-side private key through the secret key, and the terminal-side public key, , SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, International Data Encryption Algorithm (IDEA) at least one or more is preferably included. In addition, various types of decryption algorithm may be used, but the decryption algorithm Is characterized in that it is matched with the encryption algorithm used in the payment terminal emulator 400, the invention is not limited by a specific decryption algorithm.

In addition, the encryption unit decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (2030), thereby generating a message digest generated and transmitted from the payment approval request message in the payment terminal emulator 400. Extract (2035).

Here, the decryption function of the encryption unit is called D (Decryption), the terminal side public key is t2 (terminal side key), and the message digest encrypted with the terminal side private key is decrypted with C (Ciphertext) and the terminal side public key. If the message digest is m (Message Digest), the function of decrypting the encrypted message digest by the encryption unit may be expressed by a formula such as "Dt2 = m, or Dt2 (Es1 (r)) = m".

According to an embodiment of the present invention, an algorithm for decrypting the message digest encrypted by the payment terminal emulator 400 with the terminal-side private key through the terminal-side public key is RSA (Ron Rivest, Adi Shamir, Len Adleman). ), DSA (Digie Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH or at least one or more of the various forms of decoding algorithms may be used. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the payment terminal emulator 400, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption unit may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the encryption unit generates a predetermined message digest using the same one-way hash function as the payment terminal emulator 400 after the received payment approval request message (2040), and generates the generated message digest and the decrypted message digest. By comparing (2045), the validity of the received payment approval request full text is confirmed.

If the generated message digest and the decrypted message digest match (2050), the encryption unit provides the payment approval request full text to the payment approval unit (2055), and the payment approval unit uses the payment approval request full text. By performing a payment approval procedure defined in the payment server, after generating a predetermined payment processing history including any of the predetermined payment approval history or payment error history, the predetermined payment approval full text including the payment processing history Create

21A and 21B illustrate a method of encrypting and transmitting a payment approval message in a key exchange method in a payment server according to an embodiment of the present invention.

More specifically, Figure 21a and Figure 21b is an embodiment of the method for encrypting and transmitting the payment approval full text in a key exchange method in the payment server with the encryption function as shown in Figure 6, it is common in the art With knowledge, various implementations may be inferred by referring to and / or modifying this figure 21 to encrypt the full payment authorization in a key exchange method at a payment server on the communication network. All the methods are included, and the method is not limited to the embodiment shown in FIG.

In this figure 21 according to the embodiment of the present invention, the server-side private key and the terminal-side public key are preferably read from the storage medium 245 storing the authentication code (and / or encryption key) shown in FIG. Do.

Alternatively, when a predetermined authentication certificate is mounted on a client terminal on which the payment terminal emulator 400 is mounted, the terminal-side public key is operated and managed by an authentication authority that issues the authentication certificate to the payment terminal emulator 400. It is possible to extract from a predetermined directory (not shown), thereby limiting the present invention.

21A and 21B, when a predetermined payment approval text including a predetermined payment processing history (for example, payment approval history or payment error history) is generated in the full text generation unit of the payment server, it is sent to the encryption unit. In operation 2100, if the payment approval text is provided, the encryption unit includes a predetermined one-way hash function (eg, a hash code of a predetermined length regardless of the length of the payment approval text). A one-way hash function that generates a message digest and cannot identify (or infer) the original message through the hash code (or message digest) The payment server and payment terminal emulator 400 ) Generates a predetermined message digest (using the same hash function) (2105), and sends the message digest via the server-side private key. Luxury by the electronic signature (2110).

Here, the encryption function of the encryption unit is called E (Encryption), the server side private key is t1 (22erminal side key), the message digest is m (message digest), and the message digest encrypted with the server side private key is C. Speaking of (Ciphertext), the digital signature function of the encryption unit can be expressed by a formula such as "Et1 (m) = C".

According to an embodiment of the present invention, an algorithm for encrypting the message digest through the server-side private key includes: RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, and at least one of the ECDH is preferably made, including various forms of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm. .

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the digital signature function of the encryption unit can be expressed as" C = Et1 (m) = me mod n ".

In addition, the encryption unit generates a predetermined random secret key for encrypting the payment approval message in a secret key (symmetric key) manner (2115), the payment approval message and the server-side individual The message digest encrypted with a key and a copy of a certificate (eg, a certificate including a server-side public key) included in the storage medium 245 are linked to be encrypted using the generated private key (2120).

Herein, the encryption function of the encryption unit is referred to as E (Encryption), the secret key is r (random secret key), the payment approval certificate and the copy of the certificate P (Plaintext), and the payment approval message and certificate encrypted with the secret key If the copy is called C (Ciphertext), the encryption function of the encryption unit can be expressed by an expression such as "Er (P) = C".

According to the embodiment of the present invention, the algorithm for encrypting the payment approval full text and the certificate copy through the secret key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International Data Encryption Algorithm) It is preferable to include at least one of), and in addition to the encryption algorithm of various forms may be used, but the present invention is not limited by a specific encryption algorithm.

In addition, the encryption unit extracts a predetermined terminal-side public key from the storage medium 245 (2125) to encrypt the secret key that encrypts the payment authorization text (2125), and the payment approval using the terminal-side public key. The private key is encrypted (2130).

Here, the encryption function of the encryption unit is referred to as E (Encryption), the terminal side public key is referred to as s1 (server side key), the secret key is r (random secret key), and the secret key encrypted with the terminal side public key. Suppose C (Ciphertext), the encryption function of the encryption unit can be expressed by a formula such as "Es1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key through the terminal-side public key is RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, and at least one of the ECDH is preferably made, including various forms of encryption algorithms may be used, but the present invention is not limited by a specific encryption algorithm. .

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the encryption unit may be expressed as" C = Es1 (r) = re mod n ".

A copy of a certificate including the message digest encrypted with the payment approval message and the server-side private key and the server-side public key is linked and encrypted through the generated secret key, and the secret key is the terminal-side public key. When encrypted with the encryption unit, the encryption unit encrypts a copy of a certificate including the message digest encrypted with the secret key and the server-side public key encrypted with the secret key and the server-side public key. Generate predetermined transaction data in association with a key, and provide the generated transaction data to the specialized transmission unit (2135), and the specialized transmission unit transmits the transaction data through a network component on a communication network to the payment terminal emulator 400 And transmit (2140).

22A and 22B illustrate a method of decrypting a received payment approval message encrypted by the payment terminal emulator 400 using a key exchange method according to an embodiment of the present invention.

In more detail, FIGS. 22A and 22B illustrate the transaction in the payment terminal emulator 400 as shown in FIG. 4, which receives transaction data including an encrypted payment approval message from a payment server equipped with an encryption function as shown in FIG. 6. The present invention relates to a method of decrypting data by a key exchange method, and if the present invention belongs to one of ordinary skill in the art, refer to and / or modify this drawing 22 to perform the key exchange method in a payment server on the communication network. Various implementation methods for decrypting encrypted transaction data by the same key exchange method may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In FIG. 22 according to the embodiment of the present invention, the terminal-side private key and the server-side public key for decrypting the transaction data by key exchange are read from the security application module provided in the payment terminal emulator 400. Preferably, and / or when a predetermined authentication certificate linked to the payment terminal emulator 400 is mounted on the client terminal on which the payment terminal emulator 400 is mounted, it may be read out from the authentication certificate. The present invention is not limited.

Alternatively, when a predetermined public certificate is installed in the payment server, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the public certificate to the payment server. The present invention is not limited thereto.

Referring to FIGS. 22A and 22B, the full text receiver of the payment terminal emulator 400 receives transaction data including an encrypted payment approval message through the communication network (2200), and transmits the transaction data to the cryptographic processor. Preferably (2205), the transaction data is received via a communication protocol defined in the communication network, and / or the message digest encrypted with the private key encrypted with the secret key and the server side private key and the And a copy of the certificate including the server-side public key and the secret key encrypted with the terminal-side public key.

Thereafter, the encryption processing unit extracts the terminal-side private key from the security application module provided in the payment terminal emulator 400 to decrypt the secret key encrypted with the terminal-side public key (2210), and the terminal-side individual. By decrypting the secret key through a key (2215), the secret key for decrypting a copy of the certificate including the message digest encrypted with the full payment authorization and the server-side private key and the server-side public key is extracted ( 2220).

Here, the decryption function of the encryption processing unit is referred to as D (Decryption), and the terminal-side private key is s2 (server side key), and the secret key encrypted with the terminal-side public key is C (Ciphertext) and the terminal-side private key. When the secret key to be decrypted is r (random secret key), the function of decrypting the encrypted secret key by the encryption processing unit can be expressed by a formula such as "Ds2 = r or Ds2 (Es1 (r)) = r". have.

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted with the terminal-side public key in the payment server through the terminal-side private key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, in addition to the various decoding algorithms may be used, The decryption algorithm is characterized in that it matches the encryption algorithm used in the payment server, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption processing unit may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the encryption processing unit decrypts a copy of the certificate including the message digest and the server-side public key encrypted with the full payment authorization message and the server-side private key by using the extracted secret key. 2252, a copy of a certificate including the payment authorization message encrypted with the secret key and the message digest encrypted with the server-side private key and the server-side public key is extracted.

Here, the decryption function of the encryption processing unit is called D (Decryption), and the message digest encrypted with the secret key encrypted with the secret key (r), the secret key and the server side private key, and the server side A copy of a certificate containing a public key is C (Ciphertext), and a copy of a certificate including the message digest encrypted with the decrypted full-text authentication and the server-side private key and the server-side public key is P (Plaintext). The function of decrypting the copy of the certificate including the message digest encrypted with the encrypted payment authorization message and the server-side private key and the server-side public key is "Dr = P, or Dr (Er (P)). ) = P ".

According to an embodiment of the present invention, an algorithm for decrypting a copy of a certificate including the message digest encrypted with the encrypted payment authorization message and the server-side private key and the server-side public key through the secret key may include: , SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, International Data Encryption Algorithm (IDEA) at least one or more is preferably included. In addition, various types of decryption algorithm may be used, but the decryption algorithm Is characterized in that it matches the encryption algorithm used in the payment server, the invention is not limited by a specific decryption algorithm.

In addition, the encryption processing unit extracts the message digest generated and transmitted from the payment approval message by the payment server by decrypting the message digest encrypted with the server-side private key through the server-side public key (2230) (2235). ).

Here, the decryption function of the encryption processing unit is called D (Decryption), the server side public key is t2 (terminal side key), and the message digest encrypted with the server side private key is C (Ciphertext) and the server side public key. When the message digest to be decrypted is called m (Message Digest), the function of decrypting the encrypted message digest by the encryption processing unit may be expressed by a formula such as "Dt2 = m, or Dt2 (Es1 (r)) = m". Can be.

According to an embodiment of the present invention, the algorithm for decrypting the message digest encrypted by the server-side private key in the payment server through the server-side public key, RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature Algorithm), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, in addition to the various decoding algorithms may be used, The decryption algorithm is characterized in that it matches the encryption algorithm used in the payment server, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decryption function of the encryption processing unit may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the encryption processing unit generates a predetermined message digest using the same one-way hash function with the received payment approval message (2240), and then compares the generated message digest with the decrypted message digest. 2245, the validity of the received payment approval message is confirmed.

If the generated message digest and the decrypted message digest coincide (2250), the cryptographic processing unit provides the payment approval message to the specialty processing unit (2255), and the specialty processing unit uses the payment approval full message. A payment approval professional processing procedure defined in the payment terminal emulator 400 is performed.

23A and 23B illustrate an operation process of the payment terminal emulator 400 according to an exemplary embodiment of the present invention.

In more detail, FIGS. 23A and 23B show that the payment terminal emulator 400 shown in FIG. 4 connects a secure communication channel with a predetermined payment server using the resources of the client terminal, and through the secure communication channel. As an operation process of performing an electronic payment processing procedure, specifically, FIG. 23a relates to a process of generating a predetermined payment approval request full text using resources of the client terminal in the payment terminal emulator 400, and FIG. 23b. The payment terminal emulator 400 relates to a process of processing an electronic payment corresponding to a full payment approval request message through the payment server using the resources of the client terminal.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 23a and 23b to operate the payment terminal emulator 400 for electronic payment processing based on the resources of the client terminal. Various implementation methods may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation methods shown in FIGS. 23A and 23B.

That is, the implementation method shown in FIGS. 23A and 23B is an implementation method in which a predetermined card company (or financial company) mounts its own payment terminal emulator 400 on the client terminal. It is shown that the payment server and the secure communication channel are preferentially connected. If a person of ordinary skill in the art belongs, the payment terminal emulator 400 connects a secure communication channel with a plurality of payment servers. (For example, when the payment terminal emulator 400 is used universally), the secure communication channel connection process generates a predetermined payment approval request message in the payment terminal emulator 400 and then includes it in the payment approval request message. It will be clearly understood that it may be connected to a payment server corresponding to the payment method information (and / or card information). The name is not limited.

Hereinafter, client terminals provided with the payment terminal emulator 400 are referred to as "terminals" in FIGS. 23A and 23B.

Referring to FIG. 23A, when the terminal drives the payment terminal emulator 400 shown in FIG. 4, the payment terminal emulator 400 connects to a communication network connected to the terminal through a communication module provided in the terminal. The server accesses the payment server through a secure communication channel connection with the payment server (2300a).

Here, the secure communication channel is an end-to-end encryption / decryption that can be decrypted by the payment server in the full text encrypted in the payment terminal emulator 400, and the full text encrypted in the payment server emulator 400 The payment terminal emulator 400 encrypts a predetermined random number (or predetermined data promised between the payment terminal emulator 400 and the payment server) to connect to the secure communication channel. Decrypting the encrypted random number by the payment server and transmitting the encrypted random number by the payment server to the payment terminal emulator 400 by decrypting the encrypted random number by the payment terminal emulator 400. By performing the process, a valid species between the payment terminal emulator 400 and the payment server Liver comprises to connect the encryption / decryption communication channel.

According to another exemplary embodiment of the present invention, a process of attempting a secure communication channel connection between the payment terminal emulator 400 and the payment server may be omitted, and the present invention is not limited thereto.

If the secure communication channel connection is confirmed between the payment terminal emulator 400 and the payment server (2305a), the payment terminal emulator 400 is switched to the electronic payment processing mode (2310a), the screen output module of the terminal After requesting to read the customer card for the predetermined electronic payment processing to the card reader provided in the terminal through (2315a), the predetermined payment means information (and / or card) from the customer card through the card reader module of the terminal Information) is periodically read (or in response to a card reading event generated from the card reader module) (2320a).

If the payment means information (and / or card information) is read (2325a), the payment terminal emulator 400 is a predetermined payment information (for example, payment amount) for the electronic payment processing through the screen output module of the terminal (2330a), and whether the payment information is input through the key input module 420 of the terminal periodically (or corresponds to a key input event generated from the key input module 420). Check) (2335a).

If the payment information is input (2340a), the payment terminal emulator 400 is linked to the security application module unit provided in the payment terminal emulator 400 (for example, using an encryption key provided in the security application module unit). To encrypt the payment means information (and / or card information) and / or payment information (2345a).

According to another exemplary embodiment of the present invention, the process of encrypting the payment means information (and / or card information) and / or payment information may be omitted, and the present invention is not limited thereto.

Thereafter, the payment terminal emulator 400 is encrypted with a predetermined authentication code in the process of recording the payment terminal emulator 400 on a predetermined recording medium provided in the terminal, and is included in the payment terminal emulator 400. Extracting the generation information, and also generates a predetermined document serial number to be included in the full payment approval request (2350a).

When the information to be included in the full text of the payment approval request is secured as described above, the payment terminal emulator 400 may include the payment means information (and / or card information), payment information, professional creation information (eg, virtual terminal information), and the like. A predetermined payment approval request message including a document serial number and the like is generated (2355a).

Referring to FIG. 23B, when a predetermined payment approval request text is generated through the process illustrated in FIG. 23A, the payment terminal emulator 400 is provided in connection with the security application module unit (eg, provided in the security application module unit). By using the encrypted key) to encrypt the full payment approval request (2300b).

If the payment approval request message is encrypted (2305b), the payment terminal emulator 400 transmits the encrypted payment approval request message to the payment server through the secure communication channel using the communication module of the terminal ( 2310b) periodically, or in response to a packet reception event of the communication module, whether a payment approval message corresponding to the payment approval request message is received from the payment server through the secure communication channel using the communication module of the terminal. (2315b).

If it is confirmed that a predetermined payment approval message is received from the payment server through the secure communication channel (2320b), the payment terminal emulator 400 checks whether to decode the received payment approval message ( 2325b).

If there is no need to decrypt the payment approval text (eg, if the payment server does not encrypt the payment approval text) (2330b), the payment terminal emulator 400 receives a predetermined payment approval history or payment error from the payment approval text. The payment processing history including any one of the details is extracted (2345), and the payment processing details are output through the screen output module and / or the print output module of the terminal (2350b).

24A and 24B illustrate a payment processing process according to an embodiment of the present invention.

More specifically, FIGS. 24A and 24B are detailed descriptions of a predetermined payment approval request generated by a payment server emulator 400 shown in FIG. 4 operating as shown in FIG. 23A by the payment server shown in FIG. When the encryption is received through the same process as 23b, the payment server is a process for performing a payment approval process using the payment approval request text, specifically, Figure 24a is a payment approval request text from the payment server For the process of checking the validity of the drawings, Figure 24b is a process for performing a payment processing procedure using the full payment approval request is confirmed validity.

Those skilled in the art to which the present invention pertains can refer to various methods of performing payment processing procedures using the encrypted payment approval request text by referring to and / or modifying the drawings 24a and 24b. As will be appreciated, the present invention encompasses all of the inferred implementation methods, and is not limited to the implementation methods shown in FIGS. 24A and 24B.

Hereinafter, client terminals provided with the payment terminal emulator 400 are referred to as "terminals" in FIGS. 23A and 23B.

Referring to FIG. 24a, the payment terminal emulator 400 shown in FIG. 4 generates a predetermined payment approval request full text through the same process as in FIG. 23a, and encrypts the same through the same process as in FIG. 23b. When transmitting through, the payment server receives the encrypted payment approval request text (2400a), and extracts the authentication code and encryption key corresponding to the payment approval request text from the storage medium 245 shown in Figure 1 In operation 2405a, the validity of the received payment approval request message is verified by decrypting the payment approval request message using the encryption key (eg, a key for decrypting the payment approval request message).

According to the exemplary embodiment of the present invention, when the payment approval request text is decrypted through the encryption key, when the payment approval request text generated by the payment terminal emulator 400 is normally restored, the validity of the payment approval request text is valid. Treat it as authenticated.

If the validity of the payment approval request text is not authenticated (2415a), the payment server generates a payment approval text including a payment error history corresponding to the validity error information of the payment approval request text (2420a), The payment approval preamble is transmitted to the payment terminal emulator 400 through the secure communication channel (2465a), and then the payment terminal emulator 400 performs the payment approval professional processing procedure shown in FIG. 23B.

On the other hand, if the validity of the payment approval request text is authenticated (2415a), the payment server extracts payment means information (and / or card information) and / or payment information from the payment approval request text (2425a) and stores the data. Payment means information (and / or card information) and / or payment using an encryption key (eg, payment means information (and / or card information) and / or a key for decrypting payment information) extracted from the medium 245. By decrypting the information, the validity of the payment means information (and / or card information) and / or payment information is checked (2430a).

According to the exemplary embodiment of the present invention, the payment terminal information (and / or card information) and / or payment information are decrypted through the encryption key, so that the payment terminal emulator 400 reads through the card reader module of the terminal. If one payment means information (and / or card information), and / or payment information input through the key input module 420 of the terminal is normally restored, the payment means information (and / or card information) and / or payment The validity of the information is treated as authenticated.

If the validity of the payment method information (and / or card information) and / or payment information is not authenticated (2435a), the payment server is for the payment method information (and / or card information) and / or payment information Generate a payment approval message including payment error details corresponding to the validity error information (2440a), transmit the payment approval message to the payment terminal emulator 400 through the secure communication channel (2465a), and then the payment The terminal emulator 400 performs the payment approval specialized processing procedure shown in FIG. 23B.

On the other hand, if the validity of the payment means information (and / or card information) and / or payment information is authenticated (2435a), the payment server is at least one or more professional creation information (eg, virtual terminal information) from the full payment approval request Extract (2445a) and decrypt the professional creation information using an authentication code (for example, a key for decrypting professional creation information) extracted from the storage medium 245 to confirm the validity of the professional creation information. (2450a).

If the validity of the professional creation information is not authenticated (2455a), the payment server generates a payment approval full message including a payment error history corresponding to the validity error information of the professional creation information (2460a), and the security The payment approval text message is transmitted to the payment terminal emulator 400 through a communication channel (2465a), and the payment terminal emulator 400 then performs the payment approval text processing procedure shown in FIG. 23B.

On the other hand, if the validity of the professional creation information is authenticated (2455a), the payment server performs a payment approval procedure corresponding to the full text of the payment approval request.

Referring to FIG. 24B, if validity of at least one information included in the payment approval request text and / or the payment approval request text is authenticated through the same process as that of FIG. 24A, the payment server completes the payment approval request text. A predetermined payment approval procedure is performed based on the payment means information (and / or card information) included in the payment information, payment information, and professional creation information (2400b).

Those skilled in the art to which the present invention pertains, the process of performing a payment approval procedure corresponding to the payment means information (and / or card information) in the payment server (for example, the payment means information (and / Or if the card information) corresponds to the credit card, processing the payment authorization through a credit limit inquiry, or if the payment means information (and / or the card information) corresponds to the check card, linked with the check card. It will be familiar with the process of processing the payment approval through the customer account inquiry), so a detailed description thereof will be omitted for convenience.

If the payment approval procedure is completed (2405b), the payment server reads the result of performing the payment approval procedure and checks whether the payment is approved (2410b).

If the payment processing is not approved (2415b), the payment server generates a predetermined payment processing history including the payment error details corresponding to the result of the payment approval procedure (2420b).

On the other hand, if the payment processing is normally approved (2415b), the payment server generates a predetermined payment processing history including the payment approval details corresponding to the result of the payment approval procedure (2425b).

Thereafter, the payment server generates a predetermined payment approval text including the payment processing details (2430b), and extracts a predetermined encryption key (eg, a key for encrypting the payment approval text) from the storage medium 245. The generated payment approval text is encrypted (2435b).

According to another embodiment of the present invention, the process of encrypting the full payment approval may be omitted, and the present invention is not limited thereto.

If the payment approval message is normally encrypted (2440b), the payment server transmits the payment approval message to the payment terminal emulator 400 through the secure communication channel (2445b), and then the payment terminal emulator 400 The payment approval professional processing procedure shown in FIG. 23B is performed.

25A and 25B illustrate an operation process of a payment terminal emulator 400 according to another exemplary embodiment of the present invention.

25A and 25B illustrate an operation process of performing the electronic payment processing procedure through a predetermined payment network (VAN) using resources of the client terminal in the payment terminal emulator 400 shown in FIG. In detail, FIG. 25A illustrates a process of generating a predetermined payment approval request message using the resources of the client terminal in the payment terminal emulator 400, and FIG. 25B illustrates the payment terminal emulator 400. The present invention relates to a process of processing an electronic payment corresponding to a full payment approval request message through a predetermined payment network (VAN) using the resources of the client terminal.

Those skilled in the art to which the present invention pertains may refer to and / or modify the drawings 25a and 25b to operate the payment terminal emulator 400 for electronic payment processing based on the resources of the client terminal. Various implementation methods may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation methods shown in FIGS. 25A and 25B.

Hereinafter, in FIGS. 25A and 25B, a client terminal equipped with the payment terminal emulator 400 is referred to as a “terminal” for convenience, and a predetermined payment approval request text is transmitted from the payment terminal emulator 400 on the payment network. The functional component that relays to the server is called "bansa server" for convenience.

Referring to FIG. 25A, when the terminal drives the payment terminal emulator 400 shown in FIG. 4, the payment terminal emulator 400 is determined as a card reader provided in the terminal through a screen output module of the terminal. After requesting to read the customer card for the electronic payment processing (2515a), whether the predetermined payment means information (and / or card information) is read from the customer card through the card reader module of the terminal periodically (or card reader) In response to a card reading event occurring from the module) (2520a).

If the payment means information (and / or card information) is read (2525a), the payment terminal emulator 400 is a predetermined payment information (for example, payment amount) for the electronic payment processing through the screen output module of the terminal (2530a) and periodically inputs the payment information through the key input module 420 of the terminal (or corresponds to a key input event generated from the key input module 420). (2535a).

If the payment information is input (2540a), the payment terminal emulator 400 is connected to the security application module unit provided in the payment terminal emulator 400 (for example, using an encryption key provided in the security application module unit). To encrypt the payment means information (and / or card information) and / or payment information (2545a).

According to another exemplary embodiment of the present invention, the process of encrypting the payment means information (and / or card information) and / or payment information may be omitted, and the present invention is not limited thereto.

Thereafter, the payment terminal emulator 400 is encrypted with a predetermined authentication code in the process of recording the payment terminal emulator 400 on a predetermined recording medium provided in the terminal, and is included in the payment terminal emulator 400. Extracting the generation information, and also generates a predetermined document serial number to be included in the full payment approval request (2550a).

When the information to be included in the full text of the payment approval request is secured as described above, the payment terminal emulator 400 may include the payment means information (and / or card information), payment information, professional creation information (eg, virtual terminal information), and the like. A predetermined payment approval request message including a document serial number and the like is generated (2555a).

Referring to FIG. 25B, when a predetermined payment approval request text is generated through the process illustrated in FIG. 25A, the payment terminal emulator 400 is connected to the security application module unit (eg, the security application module unit). Using the provided encryption key) encrypts the full payment approval request message (2500b).

If the payment approval request message is encrypted (2505b), the payment terminal emulator 400 transmits the encrypted payment approval request message to the bansa server on the payment network using the communication module of the terminal (2510b). The communication module of the terminal periodically checks whether a payment approval message corresponding to the payment approval request message is received from the bansa server (or in response to a packet reception event of the communication module) (2515b).

If it is confirmed that a predetermined payment approval message is received from the payment server through the secure communication channel (2520b), the payment terminal emulator 400 checks whether to decode the received payment approval message ( 2525b).

If it is not necessary to decrypt the payment approval message (for example, the payment server does not encrypt the payment approval message) (2530b), the payment terminal emulator 400 receives a predetermined payment approval history or payment error from the payment approval message. The payment processing history including any one of the details is extracted (2545), and the payment processing details are output through the screen output module and / or the print output module of the terminal (2550b).

26A and 26B illustrate a payment processing process according to another exemplary embodiment of the present invention.

In more detail, FIGS. 26A and 26B show a payment server shown in FIG. 6 through a predetermined payment network (VAN), and the payment terminal emulator 400 shown in FIG. 4 operates as shown in FIG. 25A. When a predetermined payment approval request message is encrypted and received through the same process as in FIG. 25B, the payment server performs a payment approval process using the payment approval request message. Specifically, FIG. 26a illustrates the payment. The process of checking the validity of the payment approval request full text in the server, Figure 26b is a process for performing a payment processing procedure using the payment confirmation request full text validity.

Those skilled in the art to which the present invention pertains can deduce various implementation methods for performing payment processing procedures using the entire encrypted payment approval request by referring to and / or modifying the drawings 26a and 26b. As will be appreciated, the present invention encompasses all of the inferred implementation methods, and is not limited to the implementation methods shown in FIGS. 26A and 26B.

Hereinafter, in FIGS. 26A and 26B, a client terminal equipped with the payment terminal emulator 400 is referred to as a “terminal” for convenience, and the predetermined payment approval request text is transmitted from the payment terminal emulator 400 on the payment network. The functional component that relays to the server is called "bansa server" for convenience.

Referring to FIG. 26a, the payment terminal emulator 400 shown in FIG. 4 generates a predetermined payment approval request full text through the same process as in FIG. 25a, and encrypts the bansa server through the same process as in FIG. 25b. When transmitting via the Bansa server, the encrypted payment approval request message is received and relayed to the payment server, whereby the encrypted payment approval request message is received by the payment server (2600a).

Thereafter, the payment server extracts an authentication code and an encryption key corresponding to the payment approval request text from the storage medium 245 shown in FIG. 1 (2605a), and decrypts the encryption key (eg, payment approval request text). By decrypting the full text of the payment approval request using the key), the validity of the received full text of the payment approval request is checked (2610a).

According to the exemplary embodiment of the present invention, when the payment approval request text is decrypted through the encryption key, when the payment approval request text generated by the payment terminal emulator 400 is normally restored, the validity of the payment approval request text is valid. Treat it as authenticated.

If the validity of the payment approval request text is not verified (2615a), the payment server generates a payment approval text including a payment error history corresponding to the validity error information of the payment approval request text (2620a). The payment approval message is transmitted to the bansa server (2665a), and in response, the bansa server relays the payment approval message to the payment terminal emulator 400 (2670a), and then the payment terminal emulator 400 ) Performs the payment approval professional processing procedure shown in FIG. 25B.

On the other hand, if the validity of the payment approval request text is authenticated (2615a), the payment server extracts payment means information (and / or card information) and / or payment information from the payment approval request text (2625a) and stores the data. Payment means information (and / or card information) and / or payment using an encryption key (eg, payment means information (and / or card information) and / or a key for decrypting payment information) extracted from the medium 245. By decrypting the information, the validity of the payment means information (and / or card information) and / or payment information is checked (2630a).

According to the exemplary embodiment of the present invention, the payment terminal information (and / or card information) and / or payment information are decrypted through the encryption key, so that the payment terminal emulator 400 reads through the card reader module of the terminal. If one payment means information (and / or card information), and / or payment information input through the key input module 420 of the terminal is normally restored, the payment means information (and / or card information) and / or payment The validity of the information is treated as authenticated.

If the validity of the payment means information (and / or card information) and / or payment information is not authenticated (2635a), the payment server is for the payment method information (and / or card information) and / or payment information A payment approval message including a payment error history corresponding to the validity error information is generated (2640a), and the payment approval message is transmitted to the bansa server (2665a), and the bansa server correspondingly, the payment terminal emulator 400 The payment approval full message is relayed and transmitted (2670a), and then the payment terminal emulator 400 performs the payment approval professional processing procedure shown in FIG. 25B.

On the other hand, if the validity of the payment means information (and / or card information) and / or payment information is authenticated (2635a), the payment server is at least one or more professional creation information (for example, virtual terminal information) from the full payment approval request Extract (2645a) and decrypt the professional creation information using an authentication code (for example, a key for decrypting professional creation information) extracted from the storage medium 245 to confirm the validity of the professional creation information. (2650a).

If the validity of the professional creation information is not authenticated (2655a), the payment server generates a payment approval full message including a payment error history corresponding to the validity error information of the professional creation information (2660a), and the bansa The payment approval message is transmitted to a server (2665a), and in response, the bansa server relays the payment approval message to the payment terminal emulator 400 (2670a), and then the payment terminal emulator 400 The payment approval professional processing procedure shown in FIG. 25B is performed.

On the other hand, if the validity of the professional creation information is authenticated (2655a), the payment server performs a payment approval procedure corresponding to the full text of the payment approval request.

Referring to FIG. 26b, if validity of at least one information included in the payment approval request text and / or the payment approval request text is authenticated through the same process as that of FIG. 26a, the payment server completes the payment approval request text. A predetermined payment approval procedure is performed based on the payment means information (and / or card information) included in the payment information, payment information, and professional creation information (2600b).

Those skilled in the art to which the present invention pertains, the process of performing a payment approval procedure corresponding to the payment means information (and / or card information) in the payment server (for example, the payment means information (and / Or if the card information) corresponds to the credit card, processing the payment authorization through a credit limit inquiry, or if the payment means information (and / or the card information) corresponds to the check card, linked with the check card. It will be familiar with the process of processing the payment approval through the customer account inquiry), so a detailed description thereof will be omitted for convenience.

If the payment approval procedure is completed (2605b), the payment server reads the result of performing the payment approval procedure to confirm whether the payment is approved (2610b).

If the payment processing is not approved (2615b), the payment server generates a predetermined payment processing history including payment error details corresponding to a result of the payment approval procedure (2620b).

On the other hand, if the payment processing is normally approved (2615b), the payment server generates a predetermined payment processing history including the payment approval details corresponding to the result of the payment approval procedure (2625b).

Thereafter, the payment server generates a predetermined payment approval text including the payment processing details (2630b), and extracts a predetermined encryption key (eg, a key for encrypting the payment approval text) from the storage medium 245. The generated payment approval text is encrypted (2635b).

According to another embodiment of the present invention, the process of encrypting the full payment approval may be omitted, and the present invention is not limited thereto.

If the payment approval message is normally encrypted (2640b), the payment server transmits the payment approval message to the bansa server (2645b), and in response, the bansa server approves the payment to the payment terminal emulator 400. The full text is relayed (2650b), and then the payment terminal emulator 400 performs the payment approval professional processing procedure shown in FIG. 25b.

According to the present invention, a specific predetermined credit card company (or financial company) provided to a client terminal such as a personal computer and / or a laptop provided in at least one or more affiliate stores (for example, credit card merchant, check card merchant, debit card merchant, etc.). The payment terminal emulator is mounted, and the payment terminal emulator encrypts and transmits a predetermined electronic payment process so that the electronic payment can be processed without passing through the payment network.

According to the present invention, a specific predetermined credit card company (or financial company) provided to a client terminal such as a personal computer and / or a laptop provided in at least one or more affiliate stores (for example, credit card merchant, check card merchant, debit card merchant, etc.). Equipped with a payment terminal emulator, the payment terminal emulator has the advantage of processing a plurality of full text for a plurality of payment processing in a single transaction through the payment terminal emulator.

Claims (6)

Information generating means for generating or extracting a unique authentication code (or encryption key) corresponding to the affiliated store information; Information storage means for processing the generated or extracted unique authentication code (or decryption key corresponding to the encryption key) in association with the affiliated store information to store in a predetermined storage medium; Encryption processing means for encrypting the information to be included in the payment authorization request full text of the affiliated store with the generated or extracted unique authentication code (or encryption key); Program providing means for providing a payment specialized processing program including the encrypted information to the terminal of the affiliated store; Full message receiving means for receiving a predetermined payment approval request message including the encrypted information by using the program from the affiliated store terminal; And The unique authentication code (or decryption key corresponding to the encryption key) is stored in association with the affiliate store information in association with the storage medium (or storage medium operation means), and the extracted unique authentication code (or the A professional processing means for decrypting the encrypted information included in the payment approval request text using a decryption key corresponding to an encryption key, and then authenticating the validity of the payment approval request text by confirming the decrypted information. Information processing system, characterized in that made. Information generating means for generating or extracting a unique authentication code (or encryption key) corresponding to the affiliated store information; Encryption processing means for encrypting the information to be included in the payment authorization request full text of the affiliated store with the generated or extracted unique authentication code (or encryption key); Before or after providing the payment specialized processing program containing the encrypted information to the terminal of the merchant, the merchant information or the unique authentication code (or decryption key corresponding to the encryption key) generated or extracted; Information storage means for storing the data in a predetermined storage medium in association with the program specific information for the payment specialized processing provided to the merchant terminal; Full message receiving means for receiving a predetermined payment approval request message including the encrypted information by using the program from the affiliated store terminal; And A unique authentication code (or a decryption key corresponding to the encryption key) is stored in association with the storage medium (or storage medium operating means) in association with the merchant information or program specific information for payment specialized processing provided to the merchant terminal. ), And decrypts the encrypted information included in the payment approval request text using the extracted unique authentication code (or decryption key corresponding to the encryption key), and then confirms the payment through decrypted information. Information processing system comprising a; professional processing means for authenticating the validity of the request. Information generating means for generating or extracting a unique authentication code (or encryption key) corresponding to the affiliated store information; Information storage means for processing the generated or extracted unique authentication code (or decryption key corresponding to the encryption key) in association with the affiliated store information to store in a predetermined storage medium; Program providing means for providing a payment specialized processing program including the generated or extracted unique authentication code (or encryption key) to the terminal of the affiliated store; Specialized receiving means for receiving a predetermined payment approval request message encrypted by the unique authentication code (or encryption key) using the program in the affiliated store terminal; And The unique authentication code (or decryption key corresponding to the encryption key) is stored in association with the affiliate store information in association with the storage medium (or storage medium operation means), and the extracted unique authentication code (or the And a specialized processing means for authenticating the validity of the payment approval request message by decrypting the encrypted payment approval request message using a decryption key corresponding to an encryption key). Information processing system. An information generation / extraction step of generating or extracting a unique authentication code (or encryption key) corresponding to the affiliated store information in the predetermined information generation / extraction means; An encryption processing step of encrypting the information to be included in the payment approval request text of the affiliate store in the predetermined encryption processing unit with the generated or extracted unique authentication code (or encryption key); Before or after providing the payment specialized processing program containing the encrypted information to the terminal of the affiliated store, the unique authentication code (or decryption key corresponding to the encryption key) generated or extracted by a predetermined information storage means. Storing information in a predetermined storage medium by linking and processing the program specific information provided to the affiliated store information or the payment specialty program provided to the affiliated store terminal; A specialized receiving step of receiving a predetermined payment approval request message including the encrypted information using the program in the affiliated store terminal, by a predetermined message receiving means; And In connection with the storage medium (or the storage medium operating means) in a predetermined specialized processing means, the stored special authentication code (or the encryption) is processed in association with the merchant special information or program specific information for payment specialized processing provided to the merchant terminal Extract the decryption key corresponding to the key, decrypt the encrypted information included in the full text of the payment approval request using the extracted unique authentication code (or decryption key corresponding to the encryption key), and then decrypt the information. And a specialized processing step of authenticating the validity of the payment approval request message through confirmation. An information generation / extraction step of generating or extracting a unique authentication code (or encryption key) corresponding to the affiliated store information in the predetermined information generation / extraction means; Before or after providing the payment specialized processing program containing the generated or extracted unique authentication code (or encryption key) to the terminal of the affiliated store, the generated or extracted unique authentication code (or the An information storage step of processing the decryption key corresponding to an encryption key) in association with the affiliated store information or the program specific information for payment specialized processing provided to the affiliated store terminal and storing it in a predetermined storage medium; A specialized reception step of receiving a predetermined payment approval request message encrypted by the unique authentication code (or encryption key) using the program in the affiliated store terminal, by a predetermined message receiving means; And In connection with the storage medium (or the storage medium operating means) in a predetermined specialized processing means, the stored special authentication code (or the encryption) is processed in association with the merchant special information or program specific information for payment specialized processing provided to the merchant terminal Extract a decryption key corresponding to a key), decrypt the encrypted payment authorization request message using the extracted unique authentication code (or decryption key corresponding to the encryption key), A professional processing step of authenticating the validity of the payment approval request full text; information processing method comprising a. A computer-readable recording medium having recorded thereon a program for executing the method of claim 4.

Images