KR20060117631A - Portable usb memory stick having payment function, and payment system using usb memory stick, and method therefor - Google Patents

Abstract

A portable USB(Universal Serial Bus) memory stick equipped with a settlement function, and a system and a method using the same are provided to offer convenience for carrying no credit card by adding a settlement tool storing account information like a serial number of a credit card or a smart card to the USB memory stick. A biometric information detector(300) detects biometric information such as a fingerprint from a user. An authentication information memory(306) stores the original biometric information of the user. A settlement information memory(312) stores settlement information. A biometric information authenticator(302) determines whether the biometric information received from the biometric information detector is matched with the original biometric information stored in the authentication information memory. A settlement processor(310) reads the settlement information from the settlement information memory in case that the detected biometric information is matched. A controller(308) transmits the settlement information to an external terminal(210) through a transceiver(304).

Description

Portable USB Memory Stick Having Payment Function, and Payment System Using USB Memory Stick, and Method Therefor}

1 is a block diagram of a conventional fingerprint authentication USB memory stick;

2 is a block diagram of a payment system including a user authentication USB memory stick with a payment function according to a preferred embodiment of the present invention;

Figure 3 is a block diagram of a user authentication USB memory stick with a payment function according to an embodiment of the present invention,

4 is a flowchart illustrating a method of operating a payment system including a user authentication USB memory stick with a payment function according to a preferred embodiment of the present invention;

Figure 5 is a block diagram of a user authentication USB memory stick with a payment function according to another embodiment of the present invention,

6 is a flowchart illustrating a method of operating a payment system including a user authentication USB memory stick with a payment function according to another embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

100: fingerprint authentication USB memory stick 102: fingerprint sensor unit

104: authentication data memory unit 106: fingerprint authentication processing unit

108: USB interface unit 110: main memory unit

112: disk control unit

200: user authentication USB memory stick 210: payment request terminal

220: payment approval server 230: Internet

300: biometric information detection unit 302: biometric information authentication unit

304: transceiver unit 306: authentication information memory unit

308: control unit 310: payment processing unit

312: payment information memory unit 500: RF tag processing unit

The present invention relates to a portable USB memory stick having a payment function, a payment system using the same, and a method thereof. More specifically, a payment sensor is attached to a USB memory stick that is used as an authentication means by attaching a fingerprint sensor to enable simultaneous authentication and payment transactions, and has a payment function that provides safety, security, and convenience. A portable USB memory stick, a payment system using the same, and a method thereof are provided.

Recently, USB (Universal Serial Bus) memory sticks are widely used as portable data storage devices with high capacity. USS memory sticks are as small as a finger and light in weight. And, due to its robust design, there is very little risk of damaging the product when using it on the go. In addition, the internal stability of the design is very good, it has the advantage that can be stored for a long time.

The USB memory stick as described above has been in the spotlight as a user authentication means having a fingerprint sensor with excellent durability, security, and portability compared to a conventional data storage device.

The operation method of the USB memory stick used as a conventional user authentication means is as follows.

First, insert your fingerprint authentication USB card into your computer. When the computer recognizes the memory stick, it drives a fingerprint authentication software with a fingerprint processing algorithm. The computer then requests the fingerprint authentication USB memory stick of the user's fingerprint data stored in the memory. Then, the fingerprint authentication UBS memory stick transmits the stored user's fingerprint data to the computer through the UBS hub (Hub).

The computer then requests fingerprint data input through the fingerprint sensor of the fingerprint authentication USB memory stick. Fingerprint authentication When the USB memory stick receives the fingerprint data through the fingerprint sensor, the fingerprint data is transmitted to the computer through the USB hub. The computer then compares the two fingerprint data with a built-in fingerprint processing algorithm to determine whether they match. If the two fingerprint data match, the computer authenticates the current user as a genuine user and allows access of the fingerprint authentication USB memory stick.

However, such fingerprint authentication USB memory stick is entirely dependent on the computer having a fingerprint processing algorithm or a system having a corresponding configuration for authentication of the fingerprint input to the memory stick. Then, the memory stick has a limitation in being used for various purposes and is not effective in preventing hacking by merely performing a function as a memory. In addition, the fingerprint data may be hacked when fingerprint data is temporarily transferred to the computer or the system.

The configuration of the USB memory stick used as a conventional user authentication means for solving such a problem is as follows.

1 is a block diagram of a conventional fingerprint authentication USB memory stick.

As shown in FIG. 1, the conventional fingerprint authentication UBS memory stick 100 includes a fingerprint sensor 102, an authentication data memory 104, a fingerprint authentication processor 106, a USB interface 108, a main And a memory controller 110 and a disk controller 112.

The fingerprint sensor 102 performs a function of recognizing a fingerprint from a user's finger in a manner of detecting a fingerprint by using an area sensor or a swipe sensor. The area sensor, which is an optical sensor, detects a fingerprint in a wide area so that more accurate extraction of fingerprint data is possible. In addition, the swipe sensor is a sensor that performs the same function as the area sensor and is about one third the size of the area sensor.

The authentication data memory unit 104 is configured as a flash memory to store fingerprint data of a user.

The fingerprint authentication processing unit 106 drives a fingerprint processing algorithm to compare the fingerprint data input from the fingerprint sensor unit 102 with the fingerprint data stored in the authentication data memory unit 104 to perform user authentication.

The USB interface unit 108 transmits and receives data to and from the computer through the USB port.

The main memory unit 110 is configured as a flash memory to store data that can be transmitted and received with the computer.

The disk controller 112 controls the computer to transmit data stored in the main memory 110 when the fingerprint authentication processor 106 authenticates the user. In addition, the computer controls the data to be stored in the main memory unit (110).

The operation method of the conventional fingerprint authentication USB memory stick 100 configured as described above is as follows.

First, the fingerprint authentication UBS memory stick 100 is inserted into a USB port of a computer. Then, when the computer is powered on, the fingerprint authentication USB memory stick 100 receives power from the computer. Then, the fingerprint authentication USB memory stick 100 receives fingerprint data from the user through the fingerprint sensor unit 102. The fingerprint sensor 102 transmits the input fingerprint data of the user to the fingerprint authentication processor 106.

The fingerprint authentication processing unit 106 drives an embedded fingerprint processing algorithm. Then, the fingerprint authentication processing unit 106 compares the fingerprint data of the transmitted user with the fingerprint data stored in the authentication data memory unit 104 and determines whether or not it matches.

If the fingerprint data of the user matches the stored fingerprint data, the fingerprint authentication processing unit 106 authenticates the user. Then, the fingerprint authentication processing unit 106 transmits the user authentication fact to the disk control unit 112. On the other hand, if the fingerprint data of the user does not match the stored fingerprint data, the fingerprint authentication processing unit 106 authenticates the user, and transmits the user non-authentication fact to the disk control unit 112.

The disk controller 112 transmits the data to the computer through the USB interface unit 108 when the computer requests data stored in the main memory unit 110 from the user authentication fact. In addition, the disk controller 112 receives the data through the USB interface unit 108 when the computer requests to store the data in the main memory unit 110 and stores it in the main memory unit 110.

On the other hand, the disk controller 112 controls the fingerprint authentication UBS memory stick 100 to be inoperable when the user authentication is transmitted, so that the computer is stored in the main memory unit 110 of the fingerprint authentication UBS memory stick 100. The data is not received or transmitted to and stored in the main memory unit 110.

However, the above conventional fingerprint authentication USB memory stick has the following problems.

The fingerprint authentication UBS memory stick includes a fingerprint sensor device on the memory stick, which functions to increase security by blocking access of stored data to a user. That is, the fingerprint authentication USB memory stick merely performs a storage function for storing data. Therefore, in case of making a payment using the fingerprint authentication USB memory stick, after authenticating the user through a fingerprint, input additional account information such as a serial number of a credit card or a separate credit card besides the fingerprint authentication USB memory stick. Or, it is inconvenient to possess a payment method such as a smart card.

In addition, in addition to an authentication terminal device for transmitting and receiving data to and from the fingerprint authentication USB memory stick to authenticate a user, a payment terminal device for requesting payment approval of a user is additionally generated for the payment terminal device. do. In addition, if the terminal devices are not provided, it causes inconvenience in use.

In addition, in the case of a public certificate, since it is possible to know personal account information, there is no need to input account information separately, but there is a possibility of misuse by hacking or illegal copying of another person. It can also be fraudulently used in electronic commerce, resulting in many financial losses.

In order to solve the above problems, the present invention, by adding a payment means for storing account information such as a serial number, such as a credit card or smart card, has a payment function that provides the convenience of not having to carry the card, etc. It is an object of the present invention to provide a portable USB memory stick and a method thereof.

In addition, the present invention is provided with both the authentication means for authenticating the user and the payment means for requesting the user's payment approval to solve the cost problem that occurs when the payment means separately, the user authentication process is made inside the fingerprint and An object of the present invention is to provide a portable USB memory stick having a payment function that provides safety and security for preventing the same user authentication data from being leaked to the outside by hacking, and a method thereof.

In addition, an object of the present invention is to provide a portable USB memory stick having a payment function which can be used as a transportation fee payment means after authenticating itself by an authentication means by embedding an RF chip.

In order to achieve the above object, the present invention provides a portable USB memory stick for transmitting payment information, which is payment means information such as serial number of a built-in credit card, to an external terminal after authenticating a user using a fingerprint. Biometric information sensing unit 300 for sensing the same user biometric information; An authentication information memory unit 306 for storing biometric information of the original user; A payment information memory unit 312 for storing the payment information; A biometric information authentication unit (302) for determining whether the user biometric information transmitted from the biometric information detection unit (300) matches the original user biometric information stored in the authentication information memory unit (306); A payment processing unit 310 reading out the payment information stored in the payment information memory unit 312 when the biometric information authentication unit 302 determines that the user biometric information matches; And a control unit 308 which transmits the payment information to the external terminal through the transmission and reception unit 304 and controls the overall operation.

In addition, the present invention, electronic money payment information for recording the electronic money information or the amount and time of use to charge a certain amount of money embedded after authenticating the user using a fingerprint, and then add up the amount of use for a certain period of time. A portable USB memory stick for transmitting user smart card information such as an external terminal, comprising: a biometric information sensing unit 300 for sensing user biometric information such as the fingerprint; An authentication information memory unit 306 for storing biometric information of the original user; A payment information memory unit 312 storing the user smart card information; A biometric information authentication unit (302) for determining whether the user biometric information transmitted from the biometric information detection unit (300) matches the original user biometric information stored in the authentication information memory unit (306); An RF tag processing unit 500 for reading the user smart card information stored in the payment information memory unit 312 when the biometric information authentication unit 302 determines that the user biometric information matches; And transmitting the user smart card information to the external terminal through an RF antenna provided in the transmission and reception unit 304, changing and storing the user smart card information from the payment details of the user transmitted from the external terminal, and overall operation. It provides a portable USB memory stick with a payment function including a control unit 308 for controlling the.

The present invention also provides a USB memory stick having authentication information and payment payment information for authenticating a user using a fingerprint, a payment request terminal into which the USB memory stick is inserted, and a payment connected to the payment request terminal through the Internet. In a method of operating a payment system including an approval server, (a) when the USB memory stick 200 is inserted into a USB port provided in the payment request terminal 210, the payment request terminal 210 user payment Receiving a detail; (b) receiving biometric information such as a fingerprint from a user by the biometric information detecting unit 300 of the USB memory stick 200; (c) the biometric information authentication unit 302 driving the biometric information authentication algorithm to determine whether the biometric information matches the biometric information stored in the authentication information memory unit 306; (d) When the biometric information matches, the biometric information authentication unit 302 transmits the user authentication fact to the payment processing unit 310 through the control unit 308, and when the biometric information mismatch occurs, the biometric information authentication unit 302 Transmitting a user unauthorized fact to the payment request terminal (210) through the control unit (308); (e) When the biometric information is matched, the payment processing unit 310 reads out user payment information stored in the payment information memory unit 312 and transmits the user payment information to the payment request terminal 210 through the control unit 308, and transmits the biometric information. Notifying the user that payment is impossible by the payment request terminal 210 when the information is inconsistent; And (f) the payment request terminal 210 transmitting the user payment details and the user payment information to a payment approval server 220. Provide a method.

The present invention also provides a USB memory stick having authentication information and payment payment information for authenticating a user using a fingerprint, a payment request terminal into which the USB memory stick is inserted, and a payment connected to the payment request terminal through the Internet. In a method of operating a payment system including an authorization server, (a) when the USB memory stick 200 is approached to the payment request terminal 210 within a certain distance, the payment request terminal 210 user smart card information Requesting; (b) receiving biometric information such as a fingerprint from a user by the biometric information detecting unit 300 of the USB memory stick 200; (c) the biometric information authentication unit 302 driving the biometric information authentication algorithm to determine whether the biometric information matches the biometric information stored in the authentication information memory unit 306; (d) The biometric information authentication unit 302 transmits the user authentication fact to the RF tag processing unit 500 through the control unit 308 when the biometric information matches, and the biometric information authentication unit 302 when the biometric information mismatch occurs. Transmitting a user unauthorized fact to the payment request terminal 210 through the controller 308; (e) When the biometric information matches, the RF tag processing unit 500 reads user smart card information stored in the payment information memory unit 312 and transmits the user smart card information to the payment request terminal 210 through the control unit 308, Notifying the user that payment is impossible by the payment request terminal 210 when the biometric information mismatch; (f) the payment request terminal (210) transmitting the payment details of the user to the controller (308); And (g) the control unit 308 changing the user smart card information on the payment history of the user and storing the user smart card information in the payment information memory unit 312. Provides a method of operating the payment system used.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals have the same reference numerals as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, the following will describe a preferred embodiment of the present invention, but the technical idea of the present invention is not limited thereto and may be variously modified and modified by those skilled in the art.

2 is a block diagram of a payment system including a user authentication USB memory stick with a payment function according to a preferred embodiment of the present invention.

As shown in FIG. 2, a payment system including a user authentication USB memory stick having a payment function according to an exemplary embodiment of the present invention includes a user authentication USB memory stick 200, a payment request terminal 210, and a payment. The authorization server 220 is included.

Conventional fingerprint authentication USB memory stick 100 generally includes an authentication means such as a fingerprint sensor device, and when fingerprint data is input from a user, the received fingerprint data and the fingerprint data of the user stored in the memory are compared with each other to determine whether they match. It is a device for judging and authenticating the user when mutually matched to enable the user to utilize the data stored in the memory.

However, the user authentication USB memory stick 200 according to an embodiment of the present invention includes a user authentication means such as the fingerprint sensor device and a payment means containing payment payment information such as a serial number of a credit card. Thus, after the user is authenticated using the authentication means and the payment means, the payment is performed.

That is, the user authentication USB memory stick 200 authenticates a user through the user authentication means. Then, the user authentication USB memory stick 200 transmits the payment information stored in the memory to the payment approval server 220 through the payment request terminal 210, and requests the user to approve payment. Then, the payment approval server 220 approves the user's payment and notifies the user of the approval through the payment request terminal 210 so that the user uses the payment means provided in the user authentication USB memory stick 200. To make payments possible.

The user authentication USB memory stick 200 according to the embodiment of the present invention has a combination type SIM chip (Combination Type Subscriber Identity Module Chip) therein.

Commonly used chips are a hybrid type in which contactless functions such as RF (Radio Frequency) and contact functions are separately embedded in each chip. However, the combo-type SIM chip is a form in which contactless and contact functions are integrated into one chip. The contact function reads data through direct contact with a reader so that a normal user authentication function is operated in a contact manner. In addition, the contactless function may operate the electronic payment function for the financial transaction in a non-contact manner by reading data through radio frequency without directly contacting the reader. Therefore, when contactless and contact functions are integrated into one chip, it is possible to optimize mobile financial transactions.

On the other hand, the combo-type SIM chip is capable of various functions such as user authentication, e-commerce, global roaming, and other applications such as finance, and other applications such as finance. It is also possible to have a more extended concept of Universal Subscriber Identity Module (USIM).

On the other hand, in the practice of the present invention, the combo-type SIM chip is not limited to integrating the contactless function and the contact function into one chip. In other words, the combo-type SIM chip can separately include contactless and contact functions in each chip. In addition, the combo-type SIM chip may be configured to perform a contactless function in a non-contact manner so that only the non-contact function is embedded in the chip.

This is because contactless has two advantages over contact. One is that the absence of a mechanical interface can eliminate wear due to contact between the device and the reader, and can prevent mechanical problems such as the device from being caught in the slot of the reader. On the other hand, since the contactless interface is faster than the contact interface, the overall speed of data-intensive operations can be improved.

On the other hand, the means for performing the contactless function is not limited to RF. That is, infrared (IrFM) or Bluetooth (Bluetooth) may be used as a means for performing a contactless function.

On the other hand, the user authentication USB memory stick 200 according to an embodiment of the present invention can also be used as a means for paying a transportation fee. In this case, after authenticating biometric information such as a fingerprint, it may be configured to pay for a transportation fee using a chip having a storage capacity. On the other hand, the user authentication USB memory stick 200 may be configured to charge the electronic money in the combo-type SIM chip to pay for transportation costs and the like.

When the payment request terminal 210 transmits the user's personal information and payment information from the user authentication USB memory stick 200 after the user authentication, the wired to the payment approval server 220 to request the user's payment approval Or a wireless terminal. In addition, the payment request terminal 210 functions to notify the user of the approval when the payment approval server 220 approves the user's payment. Therefore, the payment request terminal 210 is preferably provided with a display device so that the user visually confirms the approval.

However, in the present invention, the payment request terminal 210 is not limited to the display device as a means for notifying the user of the approval. That is, the payment request terminal 210 may be provided with a voice / sound output device or may notify the user by using an electronic mail, a fax, a wireless text information service through the Internet and a mobile phone, and the like.

The payment request terminal 210 refers to a terminal capable of transmitting and receiving data by mounting a USB. The payment request terminal 210 may be a financial terminal for a window in a financial institution, but is not limited thereto, and any communication means may be used as far as possible to transmit and receive data through the USB. For example, Automatic Tellex Machine (ATM), Digital Multimedia Broadcasting (DMB) Terminal, Set Top Box (STB), Computer, Notebook, Digital TV, Merchant Terminal, Access Control Device, Luggage Storage Device, Personal Digital Assistant (PDA) It may be a cellular phone (Cellular Phone), PCS (Personal Communication System).

The payment approval server 220 transmits the user's personal information and payment information through the payment request terminal 210, and when the user's payment approval is requested, the payment approval server 220 functions to approve the user's payment from the information. Production server.

The payment approval server 220 may have a database to store and collect payment details of the user.

The payment approval server 220 may be implemented on the Internet 230 so that one or more clients may obtain desired results through a cooperative operation between a client requesting a service and a server processing a client's request. It is a concept of a general web server that provides a request of a user computer through a wired network and a wireless network, respectively, in a distributed processing type client / server method that operates an application program in a cooperative environment.

The web servers described above are operating systems such as DOS, Windows, Linux, UNIX, Mac OS, OS / 2, Solaris, etc. It can be implemented using various web server programs that are provided according to the following. Typical examples are PWS (Personal Web Server), Internet Information Server (IIS), Website (TTPS), and Unix. There are CERN, NCSA, APPACHE used in the environment.

However, the payment approval server 220 in the form of a web server is to be understood as a broad concept including a series of application programs for providing various services according to the present invention, in addition to the web server program in a conventional sense. will be.

On the other hand, the service according to the present invention is generally performed in the wired Internet network, but can also be performed in the wireless Internet network under conditions that overcome the limitations of data transmission speed and memory.

Accordingly, the Internet 230 as a communication means for connecting the payment request terminal 210 and the payment approval server 220 is a computer network capable of transmitting and receiving various data used in the present invention. A wired internet network such as an intranet, or a wireless internet communication network interworking with a mobile communication network may be used. However, any communication means can be used as long as data transmission and reception are possible. That is, a general wired telephone network or a dedicated line such as a public switched telephone network (PSTN) network may be used.

Internet network that can be used in the wired and wireless Internet network of the present invention is a communication protocol TCP / IP (Transmission Control Protocol / Internet Protocol) and various services existing in the upper layer, that is, HTTP, Telnet, FTP (File Transfer Protocol), The global open computer network architecture that provides Domain Name System (DNS), Simple Mail Transfer Protocol (SMTP), Simple Network Management Protocol (SNMP), Network File Service (NFS), and Network Information Service (NIS).

The wired / wireless internet network may be implemented using a conventional method as it is or without difficulty, and thus detailed description thereof will be omitted.

On the other hand, the user authentication USB memory stick 200 with a payment function according to a preferred embodiment of the present invention can be configured in more detail as follows.

3 is a block diagram illustrating a user authentication USB memory stick having a payment function according to an exemplary embodiment of the present invention.

As shown in FIG. 3, the user authentication USB memory stick 200 having a payment function according to an exemplary embodiment of the present invention may include a biometric information detection unit 300, a biometric information authentication unit 302, and a transceiver unit ( 304, an authentication information memory unit 306, a control unit 308, a payment processing unit 310, and a payment information memory unit 312.

The biometric information detection unit 300 detects biometric information from a user. In addition, the biometric information detection unit 300 performs a function of transmitting the biometric information detected by the user to the biometric information authentication unit 302.

As the biometric information detected by the biometric information detector 300 from a user, a fingerprint may be generally used. Therefore, the biometric information detecting unit 300 is an optical sensor that detects a user's fingerprint as a means for detecting a user's fingerprint, and a semiconductor fingerprint sensor that recognizes a fingerprint of a finger by dividing the finger into a contact method and a sliding method according to the contact method of the finger. When the input light generated from the light source forms a fingerprint image corresponding to the fingerprint of the finger through the prism, a conventional sensor such as an optical sensor that collects the light through the lens and is input to the image acquisition device may be provided.

Meanwhile, the biometric information detected by the biometric information detector 300 from the user is not limited to the fingerprint. That is, the biometric information detector 300 may detect biometric information such as an iris, vein, voice, face, or palm.

For example, when the biometric information detecting unit 300 detects a face, the biometric information detecting unit 300 includes a camera lens to capture a face of a subject through the camera lens and capture the face. The contour for each part of the face is extracted from the image signal of the face. In addition, when the biometric information detecting unit 300 detects a voice, the biometric information detecting unit 300 includes a microphone and a speaker to extract a feature point from the voice.

The biometric information authentication unit 302 operates a built-in biometric information authentication algorithm when the biometric information detected by the user is transmitted through the biometric information detection unit 300. In addition, the biometric information authentication unit 302 extracts a user biometric information template from the transmitted user biometric information through a biometric image preprocessing process.

The biometric information template is not limited to extracting distinguishable feature points of biometric information. That is, various patterns, patterns, sounds, shapes, specifications, etc., such as an image, may be extracted. However, the content to be extracted is not limited thereto.

On the other hand, the biometric information authentication algorithm is stored in the user authentication USB memory stick 200. However, the biometric authentication algorithm is not limited thereto. That is, the biometric information authentication algorithm may be embedded in the payment request terminal 210 or received from the payment approval server 220.

The biometric information authentication unit 302 reads out the user biometric information template stored in the authentication information memory unit 306. In addition, the biometric information authentication unit 302 performs a function of determining whether the extracted user biometric information template matches the user biometric information template stored in the authentication information memory unit 306.

The biometric information authentication unit 302 performs a function of authenticating the user when the extracted user biometric information template matches the user biometric information template stored in the authentication information memory unit 306. In addition, the biometric information authentication unit 302 transmits the user authentication fact to the control unit 308.

The biometric information authentication unit 302 performs a function of authenticating a user if the extracted user biometric information template does not match the user biometric information template stored in the authentication information memory unit 306. In addition, the biometric information authentication unit 302 performs a function of transmitting the user authentication fact to the control unit 308.

The transceiver 304 performs a function of transmitting the user disauthentication fact, the user's personal information and the payment information transmitted to the control unit 308 to the payment request terminal 210. The transceiver 304 includes a USB interface device due to the characteristics of the user authentication USB memory stick 200.

The authentication information memory unit 306 stores the user biometric information template compared with the user biometric information template input from the biometric information detecting unit 300.

The payment information memory unit 312 stores personal information and payment information of the user.

The personal information of the user described above is basic information that can verify the user, and may include an ID, a password, a public certification number, a name, a social security number, an address, and the like. In addition, the payment information of the user described above is the user's various payment means information, such as credit card information such as the serial number of the credit card, debit card information, cash card information, prepaid card information, gift card card information, check card information , Various earned points and mileage information, electronic money, security may be included.

Meanwhile, the authentication information memory unit 306 and the payment information memory unit 312 may be integrated into one memory unit. In addition to the user biometric template, the user's personal information and payment information, the memory may store software or data required by the user or software or data frequently used by the user.

The control unit 308 is implemented as a general microprocessor (Microprocessor Unit), and performs the function of controlling the overall operation of the user authentication USB memory stick 200. In addition, the controller 308 transmits the user authentication fact derived when the user biometric information template input from the biometric information sensing unit 300 matches the user biometric information template stored in the authentication information memory unit 306 to the payment processing unit 310. Perform the function of sending.

The controller 308 transmits / receives the user non-authentication fact derived when the user biometric information template input from the biometric information detecting unit 300 does not match the user biometric information template stored in the authentication information memory unit 306. It performs the function of transmitting to the payment request terminal 210 through.

The controller 308 transmits the user's personal information and payment information transmitted from the payment processing unit 310 to the payment request terminal 210.

The payment processor 310 performs a function of reading the user's personal information and payment information stored in the payment information memory unit 312. In addition, the payment processing unit 310 performs a function of transmitting the read user's personal information and payment information to the control unit 308.

A method of operating a payment system including a user authentication USB memory stick 200 having a payment function according to a preferred embodiment of the present invention configured as described above is as follows.

4 is a flowchart illustrating a method of operating a payment system including a user authentication USB memory stick with a payment function according to a preferred embodiment of the present invention.

As shown in FIG. 4, the user authentication USB memory stick 200 is inserted into the USB port of the payment request terminal 210 (S400). Then, when the power of the payment request terminal 210 is turned on, the user authentication USB memory stick 200 is powered from the payment request terminal 210 and driven.

On the other hand, the payment request terminal 210 requests the user to enter the payment details (S402). The payment request terminal 210 preferably includes an input means such as a keypad, a touch screen, or the like, so that a user can input a payment history.

When the user inputs biometric information such as a fingerprint through the biometric information detecting unit 300, the biometric information detecting unit 300 transmits the input biometric information to the biometric information authentication unit 302 (S404).

Then, the biometric information authentication unit 302 drives the built-in biometric information processing algorithm. Thereafter, the biometric information authentication unit 302 extracts the biometric information template from the biometric information of the user through the biometric image preprocessing process. Thereafter, the biometric information authentication unit 302 compares the extracted biometric information template with the biometric information template of the user stored in the authentication information memory unit 306 and determines whether or not it matches (S406).

If the extracted biometric information template of the user matches the stored biometric information template of the user, the biometric information authentication unit 302 authenticates the user. Thereafter, the biometric information authentication unit 302 transmits the user authentication fact to the payment processing unit 310 through the control unit 308 (S408).

On the other hand, in the practice of the present invention after inserting the user authentication USB memory stick 200 in the USB port of the payment request terminal 210 after authenticating the user, the payment request terminal 210 also requests the user to input the payment details. It is possible.

Meanwhile, if the extracted biometric information template of the user does not match the stored biometric information template of the user, the biometric information authentication unit 302 disqualifies the user. Then, the biometric information authentication unit 302 transmits the user unauthorized authentication to the control unit 308. The control unit 308 transmits the user authentication fact to the payment request terminal 210 through the transmission and reception unit 304 (S410).

The payment request terminal 210 notifies the user of the user's payment impossibility from the user's unauthorized authentication (S412). In this case, the payment request terminal 210 is preferably provided with a display device so that the user visually confirms the user unauthentication. However, in the present invention, the payment request terminal 210 is not limited to the display device as a means for notifying the user of the user disauthentication. That is, the payment request terminal 210 may be provided with a voice and sound output device so that the user can check it by hearing.

Meanwhile, the payment processing unit 310 reads out user's personal information and payment information stored in the payment information memory unit 312. Then, the payment processing unit 310 transmits the read personal information and payment information to the control unit 308. The controller 308 transmits the user's personal information and payment information to the payment request terminal 210 through the transceiver 304 (S414).

The payment request terminal 210 transmits the user's personal information and payment information to the payment approval server 220. Then, the payment request terminal 210 transmits the user's payment details input by the user to the payment approval server 220, and then requests the user's payment approval (S416).

The payment approval server 220 approves payment of the user's payment details from the user's personal information and payment information. Then, the payment approval server 220 stores the user's payment details in the database, and transmits the user's payment approval facts to the payment request terminal 210 (S418). The payment request terminal 210 notifies the user of the user's payment approval (S420). In this case, it is preferable that the payment request terminal 210 allows the user to confirm the user's payment approval using a display device or a voice / sound output device. In addition, the payment request terminal 210 may notify the user by using an electronic mail, a fax, a wireless text information service through the Internet and a mobile phone.

On the other hand, in the implementation of the present invention, it is also possible to use a built-in RF chip in the user authentication USB memory stick 200 as a means for paying traffic charges, in which case it can be prevented fraudulent use. In addition, when subsidies are provided to senior citizens or those who are eligible for welfare, subsidies may be recharged and used after they have been authenticated. Hereinafter, in consideration of the above, a user authentication USB memory stick 200 having a payment function according to another exemplary embodiment of the present invention will be described.

5 is a block diagram illustrating a user authentication USB memory stick having a payment function according to another embodiment of the present invention.

As shown in FIG. 5, the user authentication USB memory stick 200 having a payment function according to another preferred embodiment of the present invention includes a biometric information detection unit 300, a biometric information authentication unit 302, and transmission / reception. The unit 304 includes an authentication information memory unit 306, a control unit 308, a payment processing unit 310, a payment information memory unit 312, and an RF tag processing unit 500.

The payment information memory unit 312 uses an EEPROM (Electrically Erasable Programmable Read Only Memory) and stores user smart card information. The user smart card information includes electronic money information for charging a certain amount of money or electronic financial settlement information for recording and using a certain amount of time and time, and then summing the amount of use for a certain period of time.

Therefore, when the RF tag processing unit 500 transmits the smart card information to the payment request terminal 210 through the control unit 308, the payment request terminal 210 approves the payment details of the user, and from the approval, the control unit ( 308 changes and stores the user smart card information.

On the other hand, the payment information memory unit 312 is not limited to using the EEPROM. That is, the payment information memory unit 312 may use a flash memory.

The transceiver 304 has an RF antenna which is a means for transmitting the smart card information, and transmits the user smart card information transmitted from the controller 308 to the payment request terminal 210 through the RF antenna. In addition, when the payment request terminal 210 approves the payment details of the user, the payment request terminal 210 transmits the user payment details to the controller 308.

The controller 308 transmits the user authentication fact transmitted from the biometric information authentication unit 302 to the RF tag processing unit 500. In addition, the controller 308 transmits the user smart card information transmitted from the RF tag processing unit 500 to the payment request terminal 210 through the RF antenna provided in the transceiver 304. In addition, the controller 308 performs a function of changing and storing the user smart card information in the payment information memory unit 312 from the user payment history transmitted through the transceiver 304.

The RF tag processing unit 500 performs a function of reading user smart card information stored in the payment information memory unit 312. In addition, the RF tag processing unit 500 transmits the read user smart card information to the control unit 308.

A method of operating a payment system including a user authentication USB memory stick with a payment function according to another preferred embodiment of the present invention configured as described above is as follows.

6 is a flowchart illustrating a method of operating a payment system including a user authentication USB memory stick with a payment function according to another embodiment of the present invention.

As shown in FIG. 6, the user authentication USB memory stick 200 is approached to the payment request terminal 210 within a predetermined distance (S600). Then, the payment request terminal 210 requests the user smart card information to the user authentication USB memory stick 200.

When the user inputs the biometric information, the biometric information authentication unit 302 determines whether the biometric information template extracted from the biometric information matches the biometric information template of the stored user, and transmits the user authentication fact to the controller 308 when the user inputs the biometric information. The process is the same as the case of the 'operation method of a payment system including a portable user authentication USB memory stick with a payment function according to a preferred embodiment of the present invention shown in FIG.

The control unit 308 transmits the user authentication fact to the RF tag processing unit 500 (S606). On the other hand, the RF antenna provided in the transceiver 304 supplies power to the RF tag processing unit 500 through the control unit 308. Then, the RF tag processing unit 500 reads user smart card information stored in the payment information memory unit 312. Then, the RF tag processing unit 500 transmits the user smart card information to the control unit 308. The controller 308 transmits the user smart card information to the payment request terminal 210 through the RF antenna provided in the transceiver 304 (S608).

On the other hand, in the practice of the present invention after accessing the user authentication USB memory stick 200 to the USB port of the payment request terminal 210 within a certain distance and authenticate the user after the payment request terminal 210 user smart card information It is also possible to request a transfer.

On the other hand, as shown above, if the extracted biometric information template does not match the stored biometric information template, the biometric information authentication unit 302 transmits the user authentication fact to the payment request terminal 210, the payment request The process of notifying the user of the fact that the terminal 210 is not authenticated by the terminal 210 may include a method of operating a payment system including a portable user authentication USB memory stick having a payment function according to the preferred embodiment of the present invention as illustrated in FIG. 4. Is the same as

The payment request terminal 210 approves payment of the user's payment details from the user smart card information. Then, the payment request terminal 210 transmits the user payment details to the control unit 308 through the transceiver 304 (S614).

The controller 308 changes and stores the user smart card information in the payment information memory unit 312 from the user payment details (S616).

The above description is merely illustrative of the technical idea of the present invention, and various modifications, changes, and substitutions may be made by those skilled in the art without departing from the essential characteristics of the present invention. will be. Accordingly, the embodiments disclosed in the present invention and the accompanying drawings are not intended to limit the technical spirit of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by the embodiments and the accompanying drawings. . The scope of protection of the present invention should be interpreted by the following claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present invention.

As described above, according to the present invention, it is possible to provide a convenience of not having to carry the card by adding a payment means for storing account information such as a serial number such as a credit card or a smart card.

In addition, according to the present invention, by providing both the authentication means for authenticating the user and the payment means for requesting the payment approval of the user to solve the cost problem caused by separately provided with the payment means, the user authentication process is made inside the fingerprint It is effective to provide safety and security to prevent the user authentication data, such as leaking to the outside by hacking.

In addition, according to the present invention, there is an effect that can be used as a means of payment of the transportation fee after authenticating the person by the authentication means by embedding the RF chip.

Claims (13)

In the portable USB memory stick for authenticating a user using a fingerprint and transmitting payment information, which is payment method information such as a serial number of a built-in credit card, to an external terminal, A biometric information detector 300 that detects user biometric information such as the fingerprint; An authentication information memory unit 306 for storing biometric information of the original user; A payment information memory unit 312 for storing the payment information; A biometric information authentication unit (302) for determining whether the user biometric information transmitted from the biometric information detection unit (300) matches the original user biometric information stored in the authentication information memory unit (306); A payment processing unit 310 reading out the payment information stored in the payment information memory unit 312 when the biometric information authentication unit 302 determines that the user biometric information matches; And The controller 308 transmits the payment information to the external terminal through the transceiver 304 and controls the overall operation. Portable USB stick with a payment function including a. User smart card information, such as electronic money information, which is embedded after charging the user using a fingerprint, and electronic money payment information that records the amount and time of use, and then adds up the amount of use for a certain period of time. In the portable USB memory stick for transmitting to an external terminal, A biometric information detector 300 that detects user biometric information such as the fingerprint; An authentication information memory unit 306 for storing biometric information of the original user; A payment information memory unit 312 storing the user smart card information; A biometric information authentication unit (302) for determining whether the user biometric information transmitted from the biometric information detection unit (300) matches the original user biometric information stored in the authentication information memory unit (306); An RF tag processing unit 500 for reading the user smart card information stored in the payment information memory unit 312 when the biometric information authentication unit 302 determines that the user biometric information matches; And The user smart card information is transmitted to the external terminal through the RF antenna provided in the transceiver 304, the user smart card information is changed and stored from the payment details of the user transmitted from the external terminal, and the overall operation is performed. Control unit 308 to control Portable USB stick with a payment function including a. The method according to claim 1 or 2, The portable USB memory stick 200, It integrates a contact function that reads data through direct contact with a reader and a contactless function that reads the data through radio frequency without directly contacting the reader, and provides payment and payment information such as a credit card serial number or / Saves user smart card information, such as electronic money information that charges a certain amount of money or electronic financial payment information that records the amount and time of use, and then adds up the amount of use for a certain period of time, thereby enabling the user to make a payment transaction. Combo SIM Chip Portable USB stick with a payment function, characterized in that the built-in. The method of claim 3, wherein The combo type SIM chip, A SIM chip having only the contact function, or a SIM chip having only the contactless function, or a hybrid SIM chip that separates and embeds the contact function and the contactless function into each chip. Portable USB stick with payment function, characterized in that the. In a payment system that enables a financial transaction using a portable USB memory stick that transmits payment information, such as serial number of a built-in credit card and payment information, to an external terminal after authentication using a fingerprint. USS memory stick 200 according to claim 1; A payment request terminal 210 which receives a payment details from the user and requests payment approval of the user; And Payment for approving the details to be paid from the payment information transmitted from the USB memory stick 200 through the payment request terminal 210 and notifying the user of the approval through the payment request terminal 210. Authorization server (220) Payment system using a portable USB memory stick with a payment function including a. User smart card information, such as electronic money information, which is embedded after charging the user using a fingerprint, and electronic money payment information that records the amount and time of use, and then adds up the amount of use for a certain period of time. In the payment system for enabling financial transactions using a portable USB memory stick for transmitting a to a external terminal as a payment means, USS memory stick 200 according to claim 2; And The payment request terminal 210 transmits the user payment history input from the user to the USB memory stick 200 when the user smart card information is transmitted from the USB memory stick 200. Payment system using a portable USB memory stick with a payment function including a. The method according to claim 5 or 6, The portable USB memory stick 200, It integrates a contact function that reads data through direct contact with a reader and a contactless function that reads the data through radio frequency without directly contacting the reader, and provides payment and payment information such as a serial number of a credit card or / And a combo that stores the user's smart card information such as electronic money information that charges a certain amount of money or electronic financial payment information that records the amount and time of use, and then adds up the amount of use for a certain period of time. Type SIM chip Payment system using a portable USB memory stick with a payment function, characterized in that the built-in. The method of claim 7, wherein The combo type SIM chip, A SIM chip having only the contact function, or a SIM chip having only the contactless function, or a hybrid SIM chip that separates and embeds the contact function and the contactless function into each chip. Payment system using a portable USB memory stick with a payment function, characterized in that the. The method according to claim 5 or 6, The payment request terminal 210, A display device or a sound / audio output device for confirming the user biometric information mismatch fact, the user payment approval fact, and the user payment disapproval fact; And An input device for inputting a payment history of the user Payment system using a portable USB memory stick with a payment function characterized in that it comprises a. Payment including a USB memory stick having authentication information and payment payment information for authenticating a user using a fingerprint, a payment request terminal into which the USB memory stick is inserted, and a payment approval server connected to the payment request terminal through the Internet. In the operation method of the system, (a) receiving the user payment details from the payment request terminal 210 when the USB memory stick 200 is inserted into the USB port provided in the payment request terminal 210; (b) receiving biometric information such as a fingerprint from a user by the biometric information detecting unit 300 of the USB memory stick 200; (c) the biometric information authentication unit 302 driving the biometric information authentication algorithm to determine whether the biometric information matches the biometric information stored in the authentication information memory unit 306; (d) When the biometric information matches, the biometric information authentication unit 302 transmits the user authentication fact to the payment processing unit 310 through the control unit 308, and when the biometric information mismatch occurs, the biometric information authentication unit 302 Transmitting a user unauthorized fact to the payment request terminal (210) through the control unit (308); (e) When the biometric information is matched, the payment processing unit 310 reads out user payment information stored in the payment information memory unit 312 and transmits the user payment information to the payment request terminal 210 through the control unit 308, and transmits the biometric information. Notifying the user that payment is impossible by the payment request terminal 210 when the information is inconsistent; And (f) the payment request terminal 210 transmitting the user payment details and the user payment information to a payment approval server 220 Operation method of a payment system using a portable USB memory stick with a payment function comprising a. The method of claim 10, As a step after step (f), (a1) the payment approval server 220 approving the user payment details from the user payment information and transmitting the user payment approval fact to the payment request terminal 210; And (b1) the payment request terminal 210 notifying the user of the user's payment approval; Operation method of a payment system using a portable USB stick with a payment function characterized in that it comprises a. Payment including a USB memory stick having authentication information and payment payment information for authenticating a user using a fingerprint, a payment request terminal into which the USB memory stick is inserted, and a payment approval server connected to the payment request terminal through the Internet. In the operation method of the system, (a) requesting user smart card information by the payment request terminal 210 when the USB memory stick 200 approaches the payment request terminal 210 within a predetermined distance; (b) receiving biometric information such as a fingerprint from a user by the biometric information detecting unit 300 of the USB memory stick 200; (c) the biometric information authentication unit 302 driving the biometric information authentication algorithm to determine whether the biometric information matches the biometric information stored in the authentication information memory unit 306; (d) The biometric information authentication unit 302 transmits the user authentication fact to the RF tag processing unit 500 through the control unit 308 when the biometric information matches, and the biometric information authentication unit 302 when the biometric information mismatch occurs. Transmitting a user unauthorized fact to the payment request terminal 210 through the controller 308; (e) When the biometric information matches, the RF tag processing unit 500 reads user smart card information stored in the payment information memory unit 312 and transmits the user smart card information to the payment request terminal 210 through the control unit 308, Notifying the user that payment is impossible by the payment request terminal 210 when the biometric information mismatch; (f) the payment request terminal (210) transmitting the payment details of the user to the controller (308); And (g) the control unit 308 changing the user smart card information with respect to the payment details of the user and storing it in the payment information memory unit 312 Operation method of a payment system using a portable USB memory stick with a payment function comprising a. The method according to any one of claims 10 to 12, The biometric information authentication algorithm, Stored in the USB memory stick 200, or embedded in the payment request terminal 210, or transmitted from the payment approval server 220 Operation method of a payment system using a portable USB memory stick with a payment function, characterized in that receiving.

Images