KR101842678B1 - Payment control apparatus and payment server - Google Patents

Abstract

The present invention provides a technique for blocking a smart phone which is not allowed to pay from requesting payment in a state of being connected to a Wi-Fi network. According to an embodiment of the present invention, a computer program stored in computer readable recording medium performed by a microprocessor included in a terminal comprises a command which is programmed to perform the following steps of: obtaining terminal identification information identifying the terminal from the terminal, when receiving an inquiry whether payment is permitted from an application installed in the terminal; transmitting the terminal identification information to a payment server determining whether payment is permitted; and transmitting a response to the application when receiving the response whether payment is permitted from the payment server.

Description

[0001] PAYMENT CONTROL APPARATUS AND PAYMENT SERVER [0002]

The present invention relates to a payment control apparatus and a payment server. More specifically, by using the terminal identification information for identifying the terminal and the user identification information for identifying the user of the terminal in the mobile phone settlement in the terminal, the generation process of the authenticator used for authenticating the user of the terminal is not exposed to the user, And a payment control device and a payment server for preventing mobile phone settlement from being performed by a lost terminal.

As smart phones become more popular, payment using mobile phones is becoming more frequent in addition to existing card payments and account transfers. Mobile phone settlement can be utilized, for example, when shopping using a smart phone or purchasing content for a fee through an application installed in a smart phone. Such mobile phone payment requires high security just like existing payment. For example, payment by a legitimate user should be allowed, and payment attempts on a lost smartphone should be blocked.

Conventional mobile payment methods include MT (Mobile Termination) OTP and MO (Mobile Origination) SMS. In the MT OTP scheme, an authentication number is used to authenticate a user. For example, a user must request an authentication number to a payment server using a payment means (e.g., a PC), and if the authentication number is received from a payment server via SMS, the user must input the received authentication number to the payment means. On the other hand, in the MO SMS method, an authenticator (Operator User Token, OUT) is used to authenticate a user. For example, the contents provider (CP server) stores an authenticator for authenticating the user of the smartphone in advance, and verifies whether or not the user of the smartphone requesting settlement matches the authenticator stored in advance do. Here, the providing server refers to a server that provides content to a smart phone in cooperation with an application installed in the smart phone.

However, the MT OTP method has a troublesome aspect. According to the MT OTP scheme, the user has to request an authentication number to the payment server, and then, when the authentication number is received via the SMS, it must be input to the payment means.

On the other hand, in the MO SMS method, there is no need to request an authentication number or enter an authentication number into the payment means as in the MT OTP method. However, if the authenticator is not stored in advance in the provision server, that is, if the user attempts to make a payment for the mobile phone for the first time, the process of generating the authenticator is displayed (exposed) to the user's smartphone. More specifically, if the providing server does not have an authenticator in advance, the smartphone must transmit its telephone number to the providing server. This is because the providing server uses the user's telephone number when creating the authenticator. The user's telephone number is transmitted from the smart phone to the payment server via SMS. Here, if the operating system of the smartphone is Android JellyBean 4.3 or earlier, when the smartphone sends an SMS in the background, the transmitted details are not displayed on the user's smartphone. However, since version 4.3, even if SMS is sent in the background in the operating system policy, the transmitted details are displayed on the user's smartphone. Accordingly, a user of a smartphone having an operating system starting from version 4.3 has seen a transmission of an SMS even though he / she did not intend to do so, resulting in a case where questions or complaints are raised to a communication company or a manufacturer.

On the other hand, if a smartphone requesting payment for a mobile phone is a lost smartphone, such mobile phone payment should be blocked. The above-mentioned MO SMS method and MT OTP method can block such a request when a lost smart phone requests settlement while accessing a mobile communication network such as 3G or 4G. However, regarding the request for settlement while the lost smartphone is connected to a network such as Wi-Fi, the above-mentioned SMS method and MT OTP method can not block such a request.

Korean Unexamined Patent Publication No. 10-2015-0094354 (published on Aug. 19, 2015)

Disclosure of Invention Technical Problem [8] The present invention provides a technique for blocking a payment request when a smartphone that is not allowed to settle is connected to a Wi-Fi network.

Further, the present invention provides a technique for preventing the generation process of an authenticator used when authenticating a user of a smart phone from being exposed to a user.

It is to be understood that both the foregoing general description and the following detailed description of the present invention are exemplary and explanatory and are intended to provide further explanation of the invention as claimed. will be.

When a computer program stored in a computer-readable recording medium executed by a microprocessor included in a terminal according to an exemplary embodiment receives an inquiry about whether payment is permitted from an application installed in the terminal, The method comprising the steps of: acquiring, from the terminal, the terminal identification information to the payment server for determining whether the payment is permitted; and receiving, when receiving a response from the payment server, And to cause the response to be delivered.

The payment server according to an embodiment includes a storage unit for storing terminal identification information for identifying each of a plurality of terminals and payment permission information indicating whether settlement is allowed in the terminal corresponding to each of the terminal identification information, A communication unit for receiving a request for settlement of first terminal identification information and a fee for identifying a first terminal, and a communication unit for accepting a payment requested by the first terminal based on the stored terminal identification information and the stored settlement permission information And a settlement unit that performs settlement requested by the first terminal or does not perform settlement requested by the first terminal according to a result of the check.

According to one embodiment, the process of generating the authenticator used when authenticating the user of the terminal may not be exposed to the user. Also, if the mobile terminal is connected to a network such as Wi-Fi and the mobile phone is requested to be paid, the mobile terminal can recognize whether the terminal that requested the payment is a lost terminal and block the payment request accordingly.

1 is a view showing a billing system to which a billing control apparatus and a billing server are applied in an embodiment.
2 is a diagram showing a configuration of a settlement control apparatus according to an embodiment.
3 is a diagram illustrating a configuration of a payment server according to an exemplary embodiment.
4 is a diagram illustrating a procedure in which payment is performed by a payment control apparatus and a payment server according to an embodiment of the present invention.
5 is a diagram illustrating a procedure in which settlement is performed according to another embodiment.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention, and the manner of achieving them, will be apparent from and elucidated with reference to the embodiments described hereinafter in conjunction with the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. To fully disclose the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The following terms are defined in consideration of the functions in the embodiments of the present invention, which may vary depending on the intention of the user, the intention or the custom of the operator. Therefore, the definition should be based on the contents throughout this specification.

1 is a view showing a billing system to which a billing control apparatus and a billing server are applied in an embodiment. However, since this is an example, the concept of the present invention is not construed to be limited to the billing system 10 as shown above.

Referring to FIG. 1, the billing system 10 includes a terminal 100, a providing server 200, and a payment server 300. These components may be connected through a network 400 comprised of wired or wireless communication to communicate with each other.

First, the terminal 100 can be utilized as a payment means. For example, when the user has to make a payment on the terminal 100 or his PC, the user can use the terminal 100 as a payment means. The terminal 100 may be a smart device such as a smart phone or a smart pad.

The terminal 100 includes an application 110 and a payment control device 120. [ The application 110 is a kind of computer program installed in the terminal 100 and providing information to the user. In providing information to the user, the application 110 may operate in conjunction with the providing server 200. [ For example, the information provided by the application 110 may be information that the providing server 200 streams to the terminal 100. The information that the application 110 provides to the user may be either paid or free.

The application 110 notifies the providing server 200 of the user to which information provided by the user is provided. For example, when the user A streamed the paid music through the application 110, the user A can notify the providing server 200 of the fact that the user A is streaming specific music that is paid. At this time, the application 110 may use an ID used when the user A logs in the application 110 to identify the user A.

When the user intends to make a payment to pay for the fee information provided by the application 110, the payment control apparatus 120 performs and controls the procedure related to such payment. 2 will be described in more detail.

The providing server 200 is a server operating in cooperation with the application 110. [ For example, the providing server 200 can provide information desired by the user through the application 110 in a streaming manner and can also update the information stored in the application 110.

The providing server 200 receives a payment request from the application 110. [ At this time, the providing server 200 can receive payment information, for example, an ID for identifying an application that requested payment, an ID for identifying a user who requested payment, an item to be paid, or a payment amount from the application 110.

When the providing server 200 receives the payment request from the application 110, the providing server 200 determines whether the authenticator for the user of the terminal 100 requesting settlement is stored in the providing server 200. [ The providing server 200 transmits the authenticator to the payment server 300 to proceed with the payment procedure. However, if the authenticator is not stored, the providing server 200 returns at least one of the above-mentioned payment information (hereinafter, referred to as material information) to the application 110, and then the payment server 300 sends the authenticator Upon receipt of the authenticator, the authenticator is received and stored from the payment server 300, and then the authenticator is transmitted to the payment server 300 to proceed with the payment procedure.

The payment server 300 is a server that performs mobile phone settlement. The payment server 300 can perform payment according to the payment request from the providing server 200 and return the result to the providing server 200. The payment server 300 can also transmit the result to the terminal 100 according to the embodiment have.

The payment server 300 generates an authenticator and transmits the generated authenticator to the providing server 200. [ Here, the operation of the payment server 300 to generate an authenticator may be performed when there is a request from the providing server 200. [

The payment server 300 can return to the providing server 200 or the terminal 100 whether the terminal 100 requesting settlement is a lost terminal. The payment server 300 will be described in more detail with reference to FIG.

In addition, the communication company server 500 can perform a part of the functions performed by the payment server 300 according to the embodiment. The communication company server 500 will be described later.

2 is a diagram showing a configuration of a settlement control apparatus according to an embodiment. 2, the payment control apparatus 120 includes a connection unit 121, an acquisition unit 122, and a control unit 123, but is not limited thereto.

First, the billing control apparatus 120 may be a computer program stored in a computer-readable recording medium and driven by a microprocessor. In this case, the configuration of each of the billing control apparatuses 120 shown in FIG. And the like.

The payment control apparatus 120 may be installed in the terminal 100 in the process of updating the application 110 after the application 110 is installed in the terminal 100 but is not limited thereto.

The connection unit 121 is connected to the application 110. Through the connection unit 121, the settlement control device 121 can exchange data with the application 110.

The connection unit 121 is connected to a communication unit (not shown) of the terminal 100. The payment control apparatus 120 can send and receive data to and from the payment server 300 in a state of being connected to the communication unit of the terminal 100 through the connection unit 121. In this case, Lt; / RTI > That is, the settlement control device 120 can transmit and receive data to and from the settlement server 300 through the TCP / IP method.

The acquisition unit 122 acquires terminal identification information for identifying the terminal 100 from the terminal 100. The terminal identification information may be, for example, International Mobile Equipment Identity (IMEI). The terminal identification information is information used when the payment server 300 determines whether the terminal 100 is a lost terminal or a terminal that is not allowed to be paid.

The acquisition unit 122 acquires user identification information for identifying the user of the terminal 100 from the terminal 100. The user identification information may be, for example, an International Mobile Station Identity (IMSI). The user identification information is used to create an authenticator that authenticates the user.

The control unit 123 requests the user to obtain the user identification information from the terminal 100 and allows the user to grant such authority to the payment control apparatus 120. [ More specifically, in order to acquire user identification information from the terminal 100, the payment control apparatus 120 requests the payment server 300 to obtain the agreement of the user. The request procedure is transmitted to the control unit 123 . On the other hand, the request at this time is made by the TCP / IP communication method between the payment control apparatus 120 and the payment server 300. [

When the terms are received from the payment server 300 in response to the request, the terminal 100 displays the terms to the user and authorizes the user. This procedure is performed by the control unit 123.

When the acquiring unit 122 acquires the user identification information from the terminal 100 after the user grants the authority through the agreement, the payment control device 120 transmits the user identification information and the request for generating the authenticator to the payment server 300, which is controlled by the control unit 123. [

Meanwhile, the payment server 300 can determine whether payment by the terminal 100 is permitted. For example, when the terminal 100 is a lost terminal, or when a payment limit assigned to the terminal 100 is exceeded, settlement by the terminal 100 can not be permitted. The control unit 123 causes the payment server 300 to inquire whether or not payment is allowed in the terminal 100 so that the result can be received.

Here, in one embodiment, IMEI may be used as the terminal identification information. In this case, even if the lost terminal is connected to a communication network such as Wi-Fi, the payment server 300 can compare the IMEI to determine whether the payment request is a payment request by the lost terminal. That is, according to one embodiment, even when a lost terminal accesses a communication network such as Wi-Fi, it can block a payment request by the lost terminal.

In addition, when the IMSI is used as the user identification information to generate the authenticator, the IMSI thus obtained is transmitted to the payment server 300 through the payment control device 120. The transmission method at this time is as described above TCP / IP. That is, in the conventional process of generating the authenticator, the telephone number of the terminal 100 is transmitted to the providing server 200 via SMS, whereas in one embodiment, the IMSI is transmitted to the providing server 200 through the TCP / do. Accordingly, the process of transmitting the IMSI may not be displayed to the user even in the terminal 100 to which the Android jelly bean version 4.3 or later is applied.

3 is a diagram illustrating a configuration of a payment server 300 according to an embodiment. 3, the payment server 300 may include a storage unit 310, a communication unit 330, a generation unit 350, a check unit 370, and a payment unit 390, but is not limited thereto .

The storage unit 310 may be a database for storing data. The storage unit 310 stores terminal identification information and payment permission information. The terminal identification information is information for identifying the terminal 100 as described above. The payment permission information is information indicating whether payment of a rate is allowed in the terminal 100 indicated by the terminal identification information. For example, the payment permission information includes whether the terminal 100 is a lost terminal, whether settlement in the terminal 100 is permitted according to the limit of the payment assigned to the terminal 100, Information on the type of subscription to which the terminal 100 belongs, whether the terminal 100 is a terminal registered in the corporation name, information on the communication company to which the terminal 100 is subscribed, Authenticators, and the like. The terminal identification information and the payment permission information may exist for each of the plurality of terminals 100. [

The communication unit 330 includes at least one of a wireless communication module and a wired communication module. The communication unit 330 can communicate with the providing server 200 through the wired communication module and the communication unit 330 can communicate with the payment control apparatus 120 included in the terminal 100 through the wireless communication module.

The generation unit 350 generates an authenticator. Specifically, the generating unit 350 may generate an authenticator according to a predetermined algorithm by combining user identification information such as IMSI, ID for identifying an application, ID for identifying a user, and the like. The authenticator thus generated can be stored in the storage unit 310 and can be transmitted to the providing server 200 by the communication unit 330.

The checking unit 370 checks whether or not to permit the payment requested by the terminal 100. [ More specifically, the check unit 370 determines whether the terminal 100 requesting payment is a lost terminal, whether the payment limit of the terminal 100 requesting payment has been exceeded, And based on this, it is possible to check whether or not to allow the settlement.

Here, when the check unit 370 checks whether the terminal 100 requesting settlement is a lost terminal, the check unit 370 can use IMEI as terminal identification information. Hereinafter, this will be described in more detail. The information received from the terminal 100 through the communication unit 330 includes IMEI as terminal identification information. The checking unit 370 searches the payment permission information stored in the storage unit 310 for the payment permission information corresponding to the received IMEI. The checking unit 370 checks whether the terminal 100 requesting payment is a lost terminal based on the found payment permission information. However, the process of checking whether the check unit 370 is a lost terminal in this way is merely an example, and the idea of the present invention is not limited thereto.

Here, when the check unit 370 checks whether the terminal is a lost terminal by comparing the IMEI, it is determined whether the terminal is a lost terminal even if the terminal 100 attempts to make a payment while accessing a communication network such as Wi-Fi And thus it is possible to block the payment attempt. That is, according to an exemplary embodiment, a lost terminal may block a payment attempt while accessing a communication network such as Wi-Fi.

The settlement unit 390 performs settlement in response to a settlement request from the terminal 100. [ At this time, if it is determined that the settlement is not allowed by the check unit 370, the settlement unit 390 does not allow the settlement, but if it is checked that the settlement is allowed, the settlement unit 390 can perform settlement .

FIG. 4 is a flowchart illustrating a procedure for performing settlement using a settlement control apparatus and a settlement server according to an embodiment. However, FIG. 4 is illustrative and thus the spirit of the present invention is not limited thereto.

4, a user of the terminal 100 can request payment to pay for the fee information provided by the application 110. The payment request is transmitted from the application 110 to the providing server 200 (S100). If the providing server 200 stores the authenticator, that is, the authenticator for the user who requested the payment (S110), the payment procedure will be described later. Hereinafter, it is assumed that the authenticator is not stored .

If the providing server 200 does not store the authenticator (S110), the providing server 200 transmits the material information to the application 110 (S120). The material information is information used to create an authenticator, and may include, for example, an ID for identifying an application requesting settlement, an ID for identifying a user requesting settlement, and the like.

The application 110 transmits the material information to the payment control apparatus 120 (S130). Then, the payment control apparatus 120 requests the settlement server 300 for the terms and receives them (S140, S150). The terms and conditions are necessary for the payment control apparatus 120 to acquire the user identification information from the terminal 100. If the user agrees to the terms, the payment control apparatus 120 can obtain the user identification information from the terminal 100 through the acquisition unit 122. [ The user identification information may be, for example, IMSI.

The payment control apparatus 120 controls the contract to be displayed to the user through the terminal 100, and obtains agreement on the contract from the user (S160).

If the user agrees to the terms, the payment control apparatus 120 obtains the user identification information from the terminal 100 (S170). Then, the payment control apparatus 120 controls the generation of the user identification information, the material information, and the authenticator obtained in step S170 to be transmitted to the payment server 300 via the communication unit of the terminal 100 (S180). As described above, the information transmitted in step S180 can be transmitted by the TCP / IP communication method between the communication unit of the terminal 100 and the payment server 300. [

The payment server 300 generates an authenticator according to a predetermined algorithm by combining the material information and user identification information received in step S180 (S190), stores the generated authenticator, and transmits the authenticator to the providing server 200 (S200). The providing server 200 responds to the application 110 requesting settlement that an authenticator has been created (S210).

Since the creation of the authenticator has been completed, the application 110 inquires of the payment control apparatus 120 whether settlement is allowed (S220). The payment control apparatus 120 acquires terminal identification information for identifying the terminal 100 from the terminal 100 (S230). Here, the terminal identification information may be IMEI as described above.

The payment control apparatus 120 inquires of the payment server 300 whether payment of the application 110 is permitted. At this time, the payment control apparatus 120 transmits the terminal identification information, the application ID, the user ID, (S240). ≪ / RTI > The payment server 300 checks whether the payment is allowed in the terminal according to the payment permission information corresponding to the received terminal identification information in step S250 and returns the result to the payment control apparatus 120 in step S270, . Then, the payment control apparatus 120 transmits the result of whether the payment is allowed to the application 110 to the application 110 (S270).

If the result of step S270 indicates that the settlement is permitted, the application 110 requests settlement to the providing server 200 (S280). Since the providing server 200 has the authenticator received from the payment server 300 in step S200, the providing server 200 requests the payment server 300 for settlement based on the authenticator (S290). The settlement server 300 compares the authenticator stored in the settlement server 300 with the authenticator received from the providing server 200 and performs settlement in the case of coincidence (S300). The settlement server 300 transmits the settlement result to the providing server 200 (S310), whereby the settlement is completed. However, if the outcome of step S270 is that the settlement is not permitted, the settlement server 300 transmits a reason why the settlement is not allowed to the providing server 200. [

Meanwhile, when the providing server 200 stores the authenticator in step S110 (S110), the procedure is sequentially performed from step S220. Since the procedures sequentially proceeding from step S220 have already been described, description thereof is omitted .

As described above, according to an exemplary embodiment, an attempt by a lost terminal to make a payment using a communication network such as Wi-Fi may be blocked. In addition, the process of generating the authenticator used when authenticating the user of the terminal may not be exposed to the user.

Meanwhile, in the above-described embodiment, in step S190 of generating an authenticator, in step S250 of checking whether the payment requested by the terminal 100 is allowed, and in step S300 of performing settlement, only the payment server 300 But the spirit of the present invention is not limited thereto. For example, each of steps S190, S250, and S300 described above according to the embodiment may be performed while the payment server 300 is linked to the communication company server 500 shown in FIG. Hereinafter, such an embodiment will be described.

5 is a diagram illustrating a procedure in which settlement is performed according to another embodiment of the present invention. 5, the communication company server 500 shown in FIG. 1 is additionally shown, which is different from that shown in FIG.

Steps S1100 to S1180 shown in FIG. 5 are the same steps corresponding to steps S100 to S180 shown in FIG. 4, respectively, so that description of these steps will be omitted.

In step S1180, the payment server 300 receives user identification information together with a request to generate an authenticator from the terminal 100. [ Accordingly, the payment server 300 transmits the user identification information received in step S1180 to the communication company server 500, requests the service management number (S1181), and receives the service management number from the communication company server 500 (S1182).

Here, the communication company server 500 is a server managed by a communication company providing a mobile communication service to the terminal 100. [ The communication company server 500 may include an ICAS (International Computer Access Service), which stores a service management number for identifying a user of the terminal 100 to another user so as to correspond to user identification information. When the payment server 300 delivers the user identification information to the communication company server 500, the communication company server 500 searches the ICAS for the service management number corresponding to the user identification information and transmits the retrieved service management number to the payment server 300 in response .

In step S1190, the payment server 300 generates an authenticator according to the predefined algorithm by combining the service management number received in step S1182 and an ID identifying the application. The subsequent steps S1200 to S1240 are the same steps corresponding to steps S200 to S240 shown in Fig. 4, respectively, so that the description of these steps will be omitted.

In step S1240, the payment server 300 receives an inquiry about whether the payment is permitted from the terminal 100 together with the terminal identification information. Accordingly, the payment server 300 transmits the inquiry to the terminal 100 in cooperation with the communication company server 500, For example, whether the terminal 100 is lost or not (S1250). More specifically, in step S1250, the communication company server 500 may include a CSP (Communication Service Provider). The CSP includes information on whether the terminal 100 is a lost terminal, terminal identification information such as IMEI So as to correspond to each other. When the check unit 370 of the payment server 300 transmits the terminal identification information to the communication company server 500 and inquires as to whether or not the terminal corresponding to the terminal identification information is lost, the communication company server 500 transmits the information stored in the CSP It is possible to determine whether the terminal corresponding to the corresponding terminal identification information is a lost terminal, and can transmit it to the payment server 300 in response.

The subsequent steps S1260 to S1290 are the same steps corresponding to the steps S260 to S1290 shown in Fig. 4, respectively, and a description of these steps will be omitted.

In step S1290, the payment server 300 receives the payment request of the terminal 100 from the providing server 200. Accordingly, the payment server 300 transmits the payment requested by the terminal 100 in cooperation with the communication company server 500 (S1300). More specifically, in step S1300, the communication company server 500 includes a server for performing a charging procedure in the terminal 100 requesting settlement, a server for subtracting the settlement limit from the terminal 100 according to the requested payment, and the like . In step S1300, a process of charging the terminal 100 by these servers and deducting the settlement limit of the terminal 100 may be performed.

The subsequent step S1310 is the same step corresponding to the step S310 shown in FIG. 4, and a description thereof will be omitted.

As described above, according to embodiments of the present invention, an attempt by a lost terminal to make a payment using a communication network such as Wi-Fi can be blocked. In addition, the process of generating the authenticator used when authenticating the user of the terminal may not be exposed to the user.

Combinations of each step of the flowchart and each block of the block diagrams appended to the present invention may be performed by computer program instructions. These computer program instructions may be loaded into a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus so that the instructions, which may be executed by a processor of a computer or other programmable data processing apparatus, And means for performing the functions described in each step are created. These computer program instructions may also be stored in a computer usable or computer readable memory capable of directing a computer or other programmable data processing apparatus to implement the functionality in a particular manner so that the computer usable or computer readable memory It is also possible for the instructions stored in the block diagram to produce a manufacturing item containing instruction means for performing the functions described in each block or flowchart of the block diagram. Computer program instructions may also be stored on a computer or other programmable data processing equipment so that a series of operating steps may be performed on a computer or other programmable data processing equipment to create a computer- It is also possible that the instructions that perform the processing equipment provide the steps for executing the functions described in each block of the block diagram and at each step of the flowchart.

Also, each block or each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing the specified logical function (s). It should also be noted that in some alternative embodiments, the functions mentioned in the blocks or steps may occur out of order. For example, two blocks or steps shown in succession may in fact be performed substantially concurrently, or the blocks or steps may sometimes be performed in reverse order according to the corresponding function.

The above description is merely illustrative of the technical idea of the present invention, and various modifications and changes may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

According to one embodiment, an attempt by a lost terminal to make a payment using a communication network such as Wi-Fi may be blocked. In addition, the process of generating the authenticator used when authenticating the user of the terminal may not be exposed to the user.

100: terminal 110: application
120: Payment control device
200: Provided server
300: Payment Server

Claims (10)

A computer program stored in a computer-readable recording medium executed by a microprocessor included in a terminal,
Controlling the requesting server providing the predetermined service to the terminal to request payment for the service;
And a payment server for receiving and processing the settlement from the providing server, wherein a response from the providing server to the providing server indicating that the authenticator of the terminal, which is required when the providing server requests the payment server, Controlling the user of the terminal to request consent when it is received;
Acquiring, from the terminal, user identification information set to be obtainable only when the agreement is received from the user;
Controlling the payment server so that the user identification information is transmitted through a data communication method other than an SMS method;
And controlling the payment server to request the providing server storing the authenticator when the payment server generates the authenticator based on the user identification information and receives a response indicating that the authenticator is transmitted to the providing server,
A computer program stored on a computer readable recording medium. delete delete The method according to claim 1,
The user identification information is an International Mobile Station Identity (IMSI)
A computer program stored on a computer readable recording medium. delete A payment server for receiving a payment for a predetermined service provided from a providing server to a terminal and receiving the request from the providing server,
When the providing server communicates with the terminal or the providing server and the authenticator of the terminal requested when the providing server requests the settlement server is not stored in the providing server, A communication unit for receiving user identification information that can be obtained only by agreement, through a data communication method other than an SMS method;
A generator for generating an authenticator of the terminal based on the received user identification information;
If a payment request for the service is received together with the authenticator from the providing server after the generated authenticator is transmitted to the providing server via the communication unit, identifies the user of the terminal corresponding to the authenticator, And a settlement unit for performing the settlement in response to the request
Payment server. delete delete The method according to claim 6,
The user identification information is an International Mobile Station (IMSI)
Payment server. delete

Images