KR20020092481A - Method for providing service for integrating and managing shopping-mall using smart card - Google Patents

Abstract

PURPOSE: A shopping mall management service method is provided to perform a user authentication at an affiliated web site and to integrate and manage the milage accumulated at each affiliated web site by using a smart card. CONSTITUTION: The method comprises steps of a user accessing an affiliated web site and transmitting authentication data, stored at a smart card, to the web site(100), the user inputting a PIN(Personal Identification Number) of the smart card on a web page offered by the web site(110), the web site starting to authenticate the user by using the authentication data and the PIN(120), the web site transmitting an error message and rejecting an access request in a case that the PIN is wrong(130), the web site offering a web service and enabling the user to accumulate a milage in a case that the user is normally authenticated(140), the web site transmitting the accumulated milage data to the smart card(150), and the smart card integrating the transmitted milage by using an integration application program(160).

Description

How to provide integrated shopping mall management service using smart card {METHOD FOR PROVIDING SERVICE FOR INTEGRATING AND MANAGING SHOPPING-MALL USING SMART CARD}

The present invention relates to a method for providing a shopping mall integrated management service using a smart card. More specifically, the present invention relates to a web site using a smart card, stores related information in a smart card, and authenticates each other when accessing the web site. It relates to a shopping mall integrated management service providing method using a smart card to exchange the.

A smart card can contain more information than a magnetic tape type card, and because it has its own microprocessor, it can perform arithmetic functions and can be programmed for various uses. Currently, smart cards are widely used in Europe and are expected to be active in Korea. The purpose of developing a service using a smart card is to utilize the characteristics of the smart card. Information is an important source in every industrial activity and life, as the term of the information age comes to mind. However, due to the vulnerability of information handling, information leakage, alteration, and destruction occur frequently. In other words, the unauthorized destruction of information, the leakage and leakage of personal information, etc. are happening without knowing. Therefore, the protection of information is an important issue.

Smart cards can protect against this leakage of information. This is because forgery, tampering, or duplication is impossible due to the structural characteristics of smart cards. Therefore, since the personal information can be protected as much as possible and the smart card medium itself can be possessed by the individual, the personal authentication information can be protected from the access of another person because it does not provide an opportunity for others to use.

Hereinafter, a structure of a smart card will be described with reference to the accompanying drawings.

The structure of the smart card is shown in FIGS. 1 is a structural diagram of a smart card, FIG. 2A is an internal block diagram of a chip embedded in a smart cart, and FIG. 2B is a block diagram showing a structure of hardware and software inside the smart card.

A smart card is an ID card size that has a microprocessor and a memory, and implements a function of transmitting and receiving information and an information processing function with an external integrated information system using a semiconductor integrated circuit.

Certificates, such as personal authentication information, or developed applications are stored in EEPROM. Simple computational functions can be performed through the CPU.

Smart cards provide a security block feature that allows smart card manufacturers, card issuers, service providers, and cardholders to have separate secret codes from each other to differentiate their access to specific portions of memory. The security block is located in the memory of the smart card and is only accessed by the card operating system COS. Put one security block in each directory to control file access in the directory. The security block consists of a secret code portion and a secret code descriptor that defines access conditions for whether the secret code is encrypted, whether the card is initialized, the number of times the code is restricted, the type of command associated with the secret code, and the like.

The smart card provides a mechanism for authenticating the holder's legitimacy. The card is authenticated by the terminal by entering a PIN (Personal Identification Number), and performs a self-locking function if a PIN is incorrectly input for a certain number of times specified in the standard. .

Each file stored in memory has a variety of information, including a unique identifier, file format, security variables, and access conditions for the file. Each file has different access conditions according to the security level of the stored information, and the security variables include the use of the digital signature required by the file and the security mode value for verification.

Security mechanisms must provide confidentiality, authentication, integrity, and non-repudiation. Smart cards use symmetric / aspmmetric algorithms for data encryption in the communication between the card and the reader for confidentiality. The symmetric key algorithm has a high performance, but a low level of security. The asymmetric algorithm has a high level of security, but it is somewhat slow to execute the algorithm in a smart card. Smart card is basically the cardholder authentication, authentication between the card reader and the smart card, and has the appropriate security information and mechanism for authentication of the participants of the service system using the smart card. The cardholder is usually authenticated using a PIN, and the authentication between the reader and the card is usually performed by the reader performing one-way authentication to verify the validity of the card.The cryptographic algorithm such as random number generator, hash algorithm, cryptographic algorithm, Use digital signatures. By using the MAC (Message Authentication Code) integrity mechanism defined in 9797 in ISO / IEC, it protects the change of transmitted data and also uses a hash algorithm or digital signature.

Integrated management services using smart cards are one area of application of conventional smart cards. The smart card is a system that can store and process information in the card because it has a built-in CPU and memory. Such smart cards are being actively applied in electronic money, e-commerce, and finance. In the future, there are many fields of application, and development of related applications will be actively conducted.

In addition, a shopping mall integrated management service means to integrate and manage information between shopping malls affiliated with each other. However, in the case of the conventional shopping mall integrated management service, since only the user's ID and password is secured, there is a high possibility of problems such as personal information leakage.

Accordingly, there is a need for a system for accessing a website using strong security means such as smart cards, a system for storing related information, and a solution related to the type and access of information to be managed collectively. In addition, there is a demand for development of a certificate structure and a certificate transfer protocol to be exchanged when accessing a website.

The present invention is proposed to solve the above problems, and an object of the present invention is to provide a shopping mall integrated management service providing method using a smart card.

That is, an object of the present invention is to provide a method of storing personal credit information in a smart card, using a program that integrates mileage between affiliated shopping malls, and accumulates and manages mileage.

In order to achieve the above object, the method for providing a shopping mall integrated management service using a smart card according to the present invention, by using the smart card to authenticate the user of the affiliated website, and integrates the mileage that the user earns on each website A method for providing a shopping mall integrated management service using a managed smart card, the method comprising: a user accessing an affiliated website and transmitting authentication information stored in a smart card; An authentication step of the affiliated website confirming the authentication information; A mileage accrual step in which a user accumulates mileage on an affiliate website; A mileage transmission step of the affiliated website transmitting the changed mileage information to the smart card; And a mileage integration step of integrating the mileage using a predetermined program embedded in the smart card and integrating the mileage.

Advantages, features and preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a structural diagram of a smart card.

2A is an internal block diagram of a chip embedded in a smart cart.

2B is a block diagram showing the structure of hardware and software inside a smart card.

3 is a structural diagram of a certificate stored in a smart card.

4 is an exemplary view of an application rate to be applied to a shopping mall according to the present invention.

5 illustrates the location of an application stored on a smart card.

6 is a diagram illustrating a certificate issuing process of a smart card.

7 is a block diagram illustrating an authentication and mileage management process using a smart card according to the present invention.

8 is a flowchart of a process of a shopping mall integrated management service using a smart card.

3 is a structural diagram of a certificate stored in a smart card.

Personal authentication information is stored in the smart card. When you want to access a shopping mall, you can access the shopping mall by sending a certificate in a smart card. The shopping mall is accessed by transmitting a certificate in a card without inputting an ID and password required for accessing a conventional shopping mall. The mileage accumulated in each shopping mall is transferred to the card, and using the integrated service program in the card, the received mileage is summed and stored again. The accumulated mileage can be used in cash and can be used in the same way as cash. In addition to the mileage, matters related to the discount rate and funds payment according to the membership of each shopping mall are also managed through the integrated service program and stored in the smart card. Mileage is a security part because it can be converted into cash. However, due to the complete security system of the smart card, it is possible to solve the anxiety of data forgery and tampering, and the stability is increased because the mileage is integrated and managed in the program in the smart card.

To use a certificate, a certificate specification must be defined and used. The certificate specification describes the contents of all the fields of the certificate and the data formats that can be represented. All certificates conform to the X.509V3 certificate specification.

When the certificate stored in the smart card is sent to the shopping mall, each shopping mall verifies the certificate and allows access. Issuance of a certificate is issued through a certification authority.

In addition, the smart card according to the present invention is the same as the universal subscriber identity module (USIM) card of the IMT-2000. The USIM card is a new name for the smart card that will be applied to the IMT-2000. It is the core equipment to be embedded in the terminal when IMT-2000 service is used. Therefore, the solution applied to the smart card can be equally applied to the USIM card. Therefore, the integrated management service to be used in the present invention is equally applied to the USIM card.

4 is an exemplary view of an application rate to be applied to a shopping mall according to the present invention.

Currently, a website that manages mileage in shopping malls is being provided. However, the present invention is not to manage the mileage in the website, but to manage using the integrated management program in the smart card.

The program to be saved in EEPROM of smart card is written in Java language. Java is an object-oriented program, platform independent, and portable and secure. It also has the concept of multi-threading, which enables multitasking.

Programs written in the Java language can be made platform independent using the Java virtual machine. Conventional operating systems chose to start the operating system after exploring the system in hardware. However, Java puts a virtual machine, a miniature operating system, within a conventional operating system so that it can be executed wherever a miniature virtual machine exists. Java language creates class files by default. The generated class file is converted into a cap file through a converter. This cap file is stored in the memory of the smart card. Since the cap file is a file that compresses only necessary information, it is possible to store the cap file in the memory of the smart card. The capacity of one application can be expected to be about 2k, and a smart card can have multiple applications.

In order to use the integrated management service, first, several shopping malls must enter into an agreement. Integrated management service is possible in partnership.

Integrated management service applications are written in the Java language. Mileage is received at each shopping mall, and the mileage is integrated and accumulated using an application stored in a smart card. Even if the shopping malls are affiliated with each other, the application rate of the mileage may be different, so the card should store information about each shopping mall. Integrated management services should also be programmed for application rates in each shopping mall. The card stores each mileage of each shopping mall and the integrated mileage, and stores the memberships of each shopping mall so that the stored details can be checked even offline. Multi-ply can be applied to each shopping mall. All of this is done by the application on the card.

Mileage stored in smart cards must be cashable. You need to find a way to use it as an application such as an electronic wallet stored on a smart card. The program should be implemented to use the electronic wallet for payment or cash the mileage. Each mall has its own rate of application before cashing out the mileage. Therefore, the smart card stores the application rate for each shopping mall and calculates a value according to the incoming mileage.

If the application rate changes in each shopping mall, the change should be easily stored in the smart card in the shopping mall. Therefore, the program should be designed so that the rate of change can be easily adjusted in the application, and it is necessary to define exactly what kind of data is stored in the smart card, and the type of the stored data.

5 is a diagram illustrating a location of an application stored in a smart card. 5 is a description that can be understood by a person skilled in the art (hereinafter referred to as a person skilled in the art) to which the present invention pertains, and thus a detailed description thereof will be omitted.

6 is a diagram illustrating a certificate issuing process of a smart card.

The certificate to be stored on the smart card is issued by a certificate authority. Since the issued certificate is certified, it can be verified at any site. When the certificate is issued, the user's information is registered in the registration server. When sending a certificate from a smart card, verify the authentication based on the contents of the registration server.

7 is a block diagram illustrating an authentication and mileage management process using a smart card according to the present invention. Referring to Figure 7 describes the authentication and mileage management process using a smart card as follows.

The user sends the smart card authentication information to the affiliated website (step 1).

The affiliate website confirms the user's authentication information (step 2).

The user accesses the affiliate website and earns mileage (step 3).

The affiliate website transmits the changed mileage information to the user's smart card. (Step 4)

Smart cards integrate mileage using an integrated management service program. (Step 5)

8 is a flowchart of a process of a shopping mall integrated management service using a smart card. Referring to FIG. 8, the present invention has the following flow.

The user accesses the affiliate website and transmits the smart card authentication information. (100 levels)

The user enters the pin number of the smart card (step 110).

The affiliate website authenticates the user through the authentication information and the pin number (step 120).

If the pin number entered by the user is wrong, an error message is sent and the connection is refused (step 130).

If the user is authenticated as a legitimate user, the user accesses the affiliate website and accumulates mileage (step 140).

The affiliate website transmits the accumulated mileage information of the user to the smart card (step 150).

The smart card integrates the transmitted mileage information using the integrated management application (step 160).

As described above, the present invention has a remarkable effect of integrating, managing, and cashing the mileage accumulated on the affiliated website using a smart card.

In other words, the user's credit information can be stored in the smart card to authenticate the user, and the mileage of the affiliated website can be integrated, accumulated, and managed through an integrated program.

While the preferred embodiments of the present invention have been described using specific terms, such descriptions are for illustrative purposes only, and it is understood that various changes and modifications may be made without departing from the spirit and scope of the following claims. Should be done.

Claims (2)

A method of providing a shopping mall integrated management service using a smart card that authenticates a user of an affiliated website using a smart card, and integrates and manages the mileage that the user accumulates in each website. An access step of the user accessing the affiliated website and transmitting authentication information stored in the smart card; An authentication step of the affiliated website confirming the authentication information; A mileage accumulation step of the user accumulating mileage at the affiliated website; A mileage transmission step of transmitting the changed mileage information to the smart card by the affiliated website; And And a mileage integration step embedded in the smart card and integrating the mileage using a predetermined program integrating the mileage. The method of claim 1, The method of providing a shopping mall integrated management service using a smart card, characterized in that the website is a shopping mall site providing electronic commerce.