KR20080010476A - Method for payment - Google Patents

Abstract

A method for processing payment is provided to calculate a final calculated amount and to perform an accurate account of the final calculated amount for the mobile member shop. A message receiving unit(105) receives a specified payment certification request message created by a payment terminal device(150). A message processing unit(115) replaces mobile member shop information with payment agency information, demands a payment certification by transmitting the payment certification request message to a specified payment server(135), and receives a payment certification message. An information storage unit(120) stores calculated amount information in a specified storing medium(130). A message transmitting unit(110) transmits the payment certification message to the mobile payment terminal device.

Description

Payment Method {Method for Payment}

1 is a diagram illustrating a card payment system configuration for a mobile affiliate store according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating a functional configuration of a wireless payment terminal that provides a card settlement agent service for a mobile affiliate store according to an exemplary embodiment of the present invention.

3 is a view illustrating a payment approval request professional structure for the card payment agent of the mobile merchant in accordance with one embodiment of the present invention.

4 is a diagram illustrating an operation process of a wireless payment terminal according to an embodiment of the present invention.

5 is a diagram illustrating an operation process of the relay server 100 of the payment agency for the card payment agent of the mobile merchant according to an embodiment of the present invention.

FIG. 6 is a diagram illustrating a method of encrypting and transmitting a full payment approval request in a wireless payment terminal using a symmetric key (or secret key) method according to an embodiment of the present invention.

7 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a relay server by a symmetric key (or secret key) method according to an embodiment of the present invention.

8 is a diagram illustrating a method for encrypting and transmitting a full payment approval request in a wireless key terminal according to an embodiment of the present invention in a public key infrastructure.

9 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server in a public key infrastructure according to an embodiment of the present invention.

10 is a diagram illustrating a method of encrypting and transmitting a full payment approval request message in an electronic envelope method in a wireless payment terminal according to an embodiment of the present invention.

FIG. 11 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server according to an embodiment of the present invention using an electronic envelope method.

12A and 12B illustrate a method of encrypting and transmitting a full payment approval request message in a key exchange method in a wireless payment terminal according to an embodiment of the present invention.

13A and 13B are diagrams illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server according to an embodiment of the present invention using a key exchange method.

14 is a diagram illustrating a payment approval request specialized structure processed for the card payment agent of the mobile merchant according to an embodiment of the present invention.

15 is a diagram illustrating a payment server operating process of a card company according to an embodiment of the present invention.

FIG. 16 is a diagram illustrating a relay server operation process of a payment agency for card settlement agency and settlement processing of a mobile affiliate store according to an embodiment of the present invention.

17 is a diagram illustrating a process of settlement of a card payment amount to a mobile affiliate store according to one embodiment of the present invention.

18 is a diagram illustrating a card payment system configuration for a mobile affiliate store according to another embodiment of the present invention.

19 is a diagram illustrating a functional configuration of a portable card terminal for providing a card settlement agent service for a mobile affiliate store according to another exemplary embodiment of the present invention.

20 is a view illustrating a payment approval request professional structure for the card payment agent of the mobile merchant according to another embodiment of the present invention.

21 is a view showing an operation process of a portable card terminal according to an embodiment of the present invention.

FIG. 22 is a diagram illustrating a relay server operation process of a payment agency for a card payment agent of a mobile merchant according to another embodiment of the present invention.

FIG. 23 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in a symmetric key (or secret key) method in a portable card terminal according to an embodiment of the present invention.

FIG. 24 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at a relay server using a symmetric key (or secret key) method according to an embodiment of the present invention.

25 is a diagram illustrating a method for encrypting and transmitting a full payment approval request message in a portable key terminal in a public key based structure according to an embodiment of the present invention.

FIG. 26 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server in a public key infrastructure according to an embodiment of the present invention.

FIG. 27 is a diagram illustrating a method of encrypting and transmitting a full payment approval request message in an electronic envelope method in a portable card terminal according to an embodiment of the present invention.

FIG. 28 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server according to an embodiment of the present invention using an electronic envelope method.

29A and 29B illustrate a method of encrypting and transmitting a payment approval request message in a key exchange method in a portable card terminal according to an embodiment of the present invention.

30A and 30B illustrate a method of decrypting a payment approval request message encrypted and received at a relay server by a key exchange method according to an embodiment of the present invention.

31 is a diagram illustrating a payment approval request specialized structure processed for the card payment agent of the mobile merchant according to another embodiment of the present invention.

32 is a diagram illustrating a payment server operating process of a card company according to another embodiment of the present invention.

33 is a diagram illustrating an operation of a relay server of a payment agency for card settlement agency and settlement processing of a mobile affiliate store according to another embodiment of the present invention.

FIG. 34 is a diagram illustrating a process of settlement of a card payment amount to a mobile affiliate store according to another embodiment of the present invention.

<Description of main parts of drawing>

100: relay server 105: professional receiver

110: professional transmission unit 115: professional processing unit

120: information storage unit 125: settlement processing unit

130: storage medium 135: bill

140: payment approval unit 145: payment settlement

150: wireless payment terminal

The present invention comprises the steps of receiving a payment approval request message including payment means information, payment information and mobile merchant information from a terminal or a device at a server, and a mobile payment agent for a mobile merchant information included in the full payment approval request message at a server. Replacing the information with the server; transmitting the payment approval request text in which the mobile merchant information is replaced with payment agency information to a predetermined payment server; and in the purchase document settlement amount corresponding to the payment approval request text in the server, And calculating a final settlement amount to be settled at the mobile affiliate store, and processing the calculated final settlement amount to the mobile affiliate store.

In order to provide a card payment service in an offline store, conditions such as a business registration certificate, a fixed store / store and a value added network (VAN) must be satisfied.

However, stores are temporarily opened in peak seasons and / or in specific areas, and / or stores open at specific times in special places (eg stalls, stalls, flea markets, market streets, etc.), and / or Stores that sell various goods on a street and / or a specific location (e.g., street discount temporary stores, etc.), and / or stores that always move and provide goods and / or services (e.g., vehicle-type stores, etc.) ) And / or all commercial transactions (e.g., door-to-door sales, etc.) occurring temporarily at specific places and / or streets, and / or businesses that deliver on demand from various buyers and / or stores that need to be delivered (e.g., food) Mobile stores (and / or flowable stores) that include at least one or more delivery services, and the like, do not meet the conditions for providing such a card payment service. Give up and only offer payment by cash.

Such payment by cash includes the problem of failing to maintain a card payment customer at the mobile store (and / or flowable store) position, and the customer position using the mobile store (and / or flow store). Including a problem that causes inconvenience by not providing a card payment.

An object of the present invention is to receive a payment approval request text including payment means information, payment information and mobile merchant information from a terminal or a device at a server, and the mobile merchant information included in the full text of the payment approval request at a server. Replacing with payment agency information; transmitting, by a server, a payment approval request text in which the mobile affiliate information is replaced with payment agency information to a predetermined payment server; and setting up a purchase slip corresponding to the payment approval request text by a server; The present invention provides a payment processing method of calculating a final settlement amount to be settled by the mobile affiliate store and processing the calculated final settlement amount to the mobile affiliate store.

The payment processing method according to the present invention comprises the steps of: receiving a payment approval request message including payment means information, payment information, and mobile affiliate information from a terminal or a device at a server; and a mobile affiliate store included in the payment approval request message at a server. Replacing the information with predetermined payment agency information; transmitting, by a server, a payment approval request text in which the mobile affiliate information is replaced with payment agency information to a predetermined payment server; and corresponding to the payment approval request text by a server. Calculating a final settlement amount to be settled to the mobile affiliate store among the settlement document settlement amounts to be settled; and processing the calculated final settlement amount to the mobile affiliate store.

According to the invention, the terminal is characterized in that the wireless terminal.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the present invention.

In addition, preferred embodiments of the present invention to be carried out below are provided in each system functional configuration to efficiently describe the technical components constituting the present invention, or system functions that are commonly provided in the technical field to which the present invention belongs. The configuration will be omitted, and described mainly on the functional configuration to be additionally provided for the present invention. If those skilled in the art to which the present invention pertains, it will be able to easily understand the function of the components that are conventionally used among the omitted functional configuration not shown below, and also the configuration omitted as described above The relationship between the elements and the components added for the present invention will also be clearly understood.

In addition, the following examples will be used to appropriately modify the terms so that those skilled in the art to clearly understand the technical features of the present invention to effectively understand, but the present invention It is by no means limited.

As a result, the technical spirit of the present invention is determined by the claims, and the following examples are one means for efficiently explaining the technical spirit of the present invention to those skilled in the art to which the present invention pertains. It is only.

1 is a diagram illustrating a card payment system configuration for a mobile affiliate store according to an embodiment of the present invention.

In more detail, Figure 1 is a mobile merchant that is difficult to provide a card payment service, when the card payment through a predetermined wireless payment terminal 150 provided in the mobile merchant, the payment approval request for the card payment processing is predetermined When the transmission server is provided to the relay server 100 provided in the payment agency through a wireless communication network, the payment processing by replacing the mobile merchant information included in the full payment approval request message with the payment agency information in the relay server 100 As a mobile merchant-based card payment system characterized in that, those skilled in the art to which the present invention belongs, it will be able to infer a variety of card payment system configuration for the mobile merchant by referring to and / or modified in the drawing. As will be appreciated, the present invention includes all such inferred implementation methods, whereby the present invention is not limited thereto. .

Referring to Figure 1 according to an embodiment of the present invention, the card payment system for the mobile merchant, the wireless payment terminal 150 provided to at least one or more mobile merchants, the wireless payment terminal 150 and a predetermined wireless A relay server 100 connected through a communication network, receiving a payment approval request message transmitted from the wireless payment terminal 150 and replacing mobile affiliate store information included in the payment approval request message with the payment agency information; A payment network for transmitting the payment approval request text including the payment agency information replaced by the relay server 100 to a predetermined payment server 135, and a payment server for performing the payment approval procedure included in the payment approval request text. It is characterized by comprising (135).

In this case, the mobile affiliate store does not have any requirements for providing a conventional card payment service (eg, a business registration certificate, a fixed store / store, a communication means for connecting with a Value Added Network (VAN), etc.), and offline. Characterized in that it comprises at least one or more stores and / or stores and / or stalls.

For example, the mobile franchise may be a store temporarily opened in a high season and / or a specific area, and / or a store open at a specific time in a special place (eg, a food stall, a street stall, a flea market, a street market, etc.) , And / or stores that sell various goods on a street and / or in a particular location (e.g., street bargain temporary stores, etc.), and / or stores that always move and provide goods and / or services (e.g., Vehicle-type stores, etc.), and / or all commerce (e.g., door-to-door sales, etc.) that occur temporarily at specific places and / or streets, and / or businesses that deliver and / or deliver to the needs of various buyers. (Eg, food delivery, etc.) may be included.

In addition, the payment agency is characterized in that for the at least one or more mobile merchants for the card payment service according to the present invention, for this purpose, the payment agency concludes a franchise contract for at least one mobile merchant and the card payment agency. Characterized in that.

In the franchise contract process between the payment agency and the at least one mobile merchant, the payment agency is unique to the wireless payment terminal 150 corresponding to the wireless payment terminal 150 provided to the mobile merchant, and the wireless payment terminal 150 It characterized in that the mobile merchant financial account information for the settlement of the amount processed through the process of linking and storing in a predetermined database (not shown).

According to the embodiment of the present invention, the payment agency is characterized in that the card payment service requirements for the card payment agency as described above, the card payment generated in the wireless payment terminal 150 through the franchise agreement It is characterized by acting on the basis of the card payment service requirements of the payment agency.

That is, the payment agency corresponds to a bansa that must transmit the full payment approval request generated in the wireless payment terminal 150, when viewed from the wireless payment terminal 150 provided in the mobile merchant, and from the bansa perspective It corresponds to a special corporation corresponding to a merchant that has a card payment service requirement and transmits a predetermined payment approval request message to the bansa.

According to the exemplary embodiment of the present invention, the payment agency may be a bansa or a special corporation established by the bansa for the card settlement agency as described above, in which case the relay server 100 is the bansa It is preferable to include a bansa server for processing the card payment agent according to the present invention.

According to another exemplary embodiment of the present invention, the payment agency is a special merchant (for example, a merchant that provides a payment agent service for at least one mobile merchant) contracted with a predetermined bansa for the card settlement agency as described above, or It is preferable to correspond to a special corporation (for example, a corporation that provides a billing service for at least one mobile merchant), in this case, the relay server 100 is connected to the bansa through a predetermined dedicated communication network, and / Or, it is preferable to be connected through a secure communication network that provides an encryption / decryption function.

The wireless payment terminal 150 provided in the mobile merchant has a predetermined card reader (eg, an MS (Magnetic Stripe) reader and / or an integrated circuit (IC) reader, etc.), key input means, and wireless communication in hardware. Means, and the like, predetermined payment means information (e.g., card information read from a customer card) read through the card reader, and payment information (e.g., payment amount, And a predetermined payment approval request message including an installment month, and transmits the generated payment approval request message to the relay server 100 through the wireless communication means. .

According to the implementation method of the present invention, the wireless payment terminal 150 is preferably provided (or leased) to the mobile merchant from the payment agency in the process of the mobile merchant concludes a franchise agreement with the payment agency, The payment approval request text generated by the wireless payment terminal 150 by the relay server (not the bansa server (for example, a bansa side server that receives and processes the payment approval request text transmitted from one or more normal merchants) 100).

According to an embodiment of the present invention, the full text of the payment approval request generated by the wireless payment terminal 150 may include payment means information, payment information (eg, payment amount and installment months, etc.) obtained from a predetermined customer card, and the Mobile merchant information (eg, wireless payment terminal 150 unique information) is preferably included.

The payment approval request text generated by the wireless payment terminal 150 may further include a predetermined serial number for the payment approval request text.

Preferably, the wireless payment terminal 150 and the relay server 100 are connected through a predetermined wireless communication network, and when the wireless communication network is an open network (eg, a third party access to a transmission / reception packet). The payment approval request text generated by the wireless payment terminal 150 is preferably encrypted and transmitted to the relay server 100. The encrypted payment approval request text is preferably decrypted by the relay server 100. Do.

According to one embodiment of the invention, the wireless communication network preferably comprises a mobile communication network operating based on CDMA (Code Division Multiple Access), in this case the wireless communication means provided in the wireless payment terminal 150 The mobile communication network preferably has a function of connecting a communication channel for at least one professional transmission and reception with the relay server 100 through the mobile communication network.

According to another embodiment of the present invention, the wireless communication network preferably comprises a portable Internet operating based on IEEE 802.16x, in this case, the wireless communication means provided in the wireless payment terminal 150 is the portable It is preferable to have a function of accessing the Internet, and a function of connecting a communication channel for at least one professional transmission and reception with the relay server 100 through the portable Internet.

According to another embodiment of the present invention, the wireless communication network preferably comprises a wireless LAN operating based on IEEE 802.11x, in this case the wireless communication means provided in the wireless payment terminal 150 is It is preferable to have a function of accessing a wireless LAN, and a function of connecting a communication channel for at least one professional transmission and reception with the relay server 100 through the wireless LAN.

Referring to FIG. 1, the relay server 100 receives a full text message for receiving a predetermined payment approval request message generated by the wireless payment terminal 150 through a wireless communication network connected to the wireless payment terminal 150. 105, and the mobile merchant information included in the received payment approval request text is replaced with the payment agency information, and the payment approval request text replaced with the payment agency information is transferred to the predetermined payment server 135 through the bansa. A special processing unit 115 for transmitting a payment approval request and receiving a payment approval text including a payment processing history corresponding to the payment approval request from the payment server 135 through the bansa; An information storage unit 120 for linking the mobile affiliate information and the settlement amount information corresponding to the payment approval and storing the information in the predetermined storage medium 130; By having a specialized transmission unit 110 for transmitting to the wireless payment terminal 150 through a communication network characterized in that formed.

In addition, the relay server 100 when a predetermined settlement amount is deposited to the settlement agency through a predetermined financial system to settle the settlement amount corresponding to the settlement approval in the card company provided with the settlement server 135, And a settlement processing unit 125 configured to settle the settlement amount to the mobile affiliate store through a predetermined financial system based on the mobile affiliate store information and the settlement amount information stored in the storage medium 130.

The specialized receiving unit 105 is connected to a predetermined wireless communication network to which the wireless payment terminal 150 is connected, and receives at least one full payment approval request message from the at least one wireless payment terminal 150 through the wireless communication network. Characterized in that it comprises a functional configuration, if the payment approval request text generated in a predetermined wireless payment terminal 150 is transmitted through the wireless communication network, characterized in that for receiving it.

According to the exemplary embodiment of the present invention, when the payment approval request message transmitted from the wireless payment terminal 150 is encrypted through at least one encryption method, the specialized receiving unit 105 receives the received payment approval request message. It is preferable to decrypt through a decryption method corresponding to the encryption method.

The specialized processing unit 115 replaces the mobile affiliate store information included in the payment approval request message received (and / or received and decrypted) by the specialized receiving unit 105 with the payment agency information.

Here, the mobile affiliate store information included in the full payment approval request is a wireless agency provided in the wireless payment terminal 150 provided to the mobile affiliate store by entering into a franchise contract with the mobile affiliate store in the payment agency, the contract conclusion The payment terminal 150 is characterized by including the unique information.

According to the exemplary embodiment of the present invention, the mobile affiliate store information included in the full payment approval request message may include the same data structure as the affiliate store information included in the conventional payment approval request message.

In addition, the payment agency information that replaces the mobile merchant information included in the payment approval request text is the information for the payment approval request for the payment approval request text is processed as the payment approval request from the payment agency, the payment The agency information is characterized in that it comprises the same data structure as the merchant information included in the conventional payment approval request full text, whereby the payment server 135 (or bansa server) receiving the payment approval request text is the payment approval The request is recognized as requested by the payment agency.

* That is, the card company provided with the payment server 135, when the payment approval corresponding to the full payment approval request by the payment agency information replaced as described above, the settlement corresponding to the payment amount included in the full payment approval request An amount (for example, an amount excluding a card company fee among payments) is settled and deposited into the payment agency.

According to an exemplary embodiment of the present invention, if a predetermined document serial number is included in the full payment approval request, but the document serial number is not valid for the card payment agent (eg, the wireless payment terminal 150 is If the document serial number included in the payment approval request text is used only for the settlement processing between the mobile merchant and the payment agency), the specialized processing unit is valid for the card settlement agent (for example, the payment agency is used for settlement between card companies). It is preferable to generate a predetermined document serial number and replace the document serial number (eg, the document serial number included in the wireless payment terminal 150) previously included in the full payment approval request.

If the document serial number previously included in the full payment approval request is valid for the card settlement agent, the specialized processing unit 115 may skip the process of replacing the document serial number, and the present invention is not limited thereto. No.

According to another exemplary embodiment of the present invention, when a predetermined document serial number is not included in the payment approval request text, the specialized processing unit 115 is effective for the card settlement agent (eg, the payment agency settles between card companies). It is preferable to generate a predetermined document serial number, which will be used for processing, to prescribe the payment approval request.

The specialized processing unit 115 transmits the payment approval request text that replaces the mobile affiliate information with the payment agency information to a predetermined payment server 135 through a ban, and requests payment approval.

According to an exemplary embodiment of the present invention, the specialized processing unit 115 transfers the payment approval request message replaced with the payment agency information to a predetermined bansa server (for example, a payment approval request message transmitted from a payment terminal provided in a conventional normal merchant). Receiving and transmitting to a predetermined payment server (135) relayed to the bansa server, and the bansa server after the payment approval request received the payment approval request received from the payment terminal provided in the conventional normal merchants Through the same professional processing as the full text, the payment approval request message may be relayed to the payment server 135 provided in the card company corresponding to the payment means information included in the full payment approval request message.

According to another exemplary embodiment of the present invention, the specialized processing unit 115 is the payment approval to the payment server 135 provided in the card company corresponding to the payment means information included in the payment approval request message replaced with the payment agency information. It is possible to transmit the full text request, in this case the relay server 100 is to perform the function of the bansa server provided in the bansa.

The specialized processor 115 may receive a payment approval message including a payment processing history corresponding to the payment approval request from the payment server 135 through the bansa.

According to an embodiment of the present invention, the payment approval request message replaced with the payment agency information is received by a predetermined bansa server (for example, a payment approval request message transmitted from a payment terminal provided in a conventional normal affiliated predetermined payment server ( In the case of transmitting to the payment server 135 through the bansa server relaying to (135), the professional processing unit 115 is a payment processing corresponding to the payment approval request from the payment server 135 through the bansa server It is desirable to receive the full payment approval statement including the details.

According to another embodiment of the present invention, when the payment approval request message replaced with the payment agency information is directly transmitted from the relay server 100 to the payment server 135, the specialized processing unit 115 is the payment server. It is preferable to receive a payment approval text including a payment processing details corresponding to the payment approval request from 135.

According to the exemplary embodiment of the present invention, the payment processing details included in the received payment approval text may include payment approval details or payment error details.

If the payment processing details included in the payment approval text includes the payment approval details, the information storage unit 120 stores the mobile approval information (for example, the payment approval request message received through the specialized receiving unit 105). Mobile affiliate store information included in the) and the predetermined settlement amount information is characterized in that the storage in the predetermined storage medium 130.

According to the exemplary embodiment of the present invention, the mobile affiliated store information preferably includes unique information of the wireless payment terminal 150 included in the full payment approval request message received through the specialized receiving unit 105.

In addition, the mobile merchant information is a document serial number that is included in the full payment approval request in the wireless payment terminal 150, and / or the specialized processing unit 115 replaced (or included) in the full payment approval request. It is preferable that the serial number is further included.

According to the exemplary embodiment of the present invention, the settlement amount information stored in the storage medium 130 in association with the mobile affiliate store information includes payment amount information included in the full payment approval request, and / or The payment amount includes the amount excluding the card company fee, and / or the payment amount includes the amount excluding the bansa fee, and / or the payment amount includes the amount excluding the payment agency fee. desirable.

By purchasing a document corresponding to the full payment approval request from a card company (or a purchase agent) equipped with a payment server 135 that has approved the card payment (for example, by confirming a document serial number corresponding to the full payment approval request) ), When the card company (or the purchase company) has settled a predetermined settlement amount (for example, the amount excluding the card company fee among the settlement amount) for the settlement amount included in the full payment approval request, the settlement amount is the document Deposits are made to the payment agency through a predetermined financial system including a serial number.

The financial system is a financial computer system in which the credit card company (or slip purchase company) financial account and the settlement agency financial account are opened for the settlement processing, and the settlement amount is set by the credit card company (or through the financial system). Document purchase company) characterized in that the withdrawal from the financial account is processed (or account transfer) to the payment agency financial account.

In the technical field to which the present invention pertains, a process in which the settlement amount is settled through the financial system (for example, the settlement amount is withdrawn from the credit card company (or slip purchase company) financial account and the settlement agency) The process of depositing directly (or account transfer) into a financial account, or the settlement amount is withdrawn from the credit card company (or voucher purchaser) financial account and directly deposited into the payment agency financial account (or account transfer) through the bansa account. Etc.), so a detailed description thereof will be omitted for convenience.

When the settlement amount according to the card settlement agent is deposited to the settlement agency, the settlement processing unit performs the settlement through mobile merchant information (for example, the document serial number included in the settlement approval request) stored in the storage medium 130. It is characterized by checking the mobile merchant corresponding to the amount.

If the mobile merchant corresponding to the settlement amount is confirmed, the settlement processing unit 125 is processed from the storage medium 130 to the mobile affiliate store based on the settlement amount information stored in association with the mobile affiliate store information. A predetermined settlement amount to be settled is identified, and the settlement settlement amount is settled to the mobile affiliated store through a predetermined financial system.

According to the embodiment of the present invention, the settlement amount processed by the settlement processing unit 125 to the mobile merchant stores the card company fee, the bansa fee, and the payment agency fee from the payment amount included in the payment approval request. Corresponding.

For example, when the settlement amount information stored in the storage medium 130 includes the amount of the card company fee, the bansa fee, and the payment agency fee in the payment amount included in the full payment approval request, the settlement processing unit 125 may be configured. By extracting the settlement amount information linked to the mobile merchant information from the storage medium 130, the payment agency checks the predetermined settlement amount to be settled to the mobile merchant.

Alternatively, when the settlement amount information stored in the storage medium 130 does not include an amount limiting the card company fee, the bansa fee, and the payment agency fee from the payment amount included in the full payment approval request, the settlement processing unit 125 Extracts settlement amount information linked to the mobile affiliate store information from the storage medium 130 and subtracts at least one fee from the extracted settlement amount information to perform settlement processing from the settlement agency to the mobile affiliate store. Confirm the predetermined settlement amount.

Thereafter, the settlement processing unit 125 processes the settlement amount to the mobile affiliate store through a predetermined financial system based on the mobile merchant financial account information secured in the franchise contract process between the settlement agency and the mobile affiliate store. It is done.

The financial system is a financial computer system in which the payment agency financial account and the engineering merchant financial account are opened for the settlement processing, and the settlement amount is withdrawn from the payment agency financial account through the financial system. It is characterized in that the deposit (or account transfer) processing to the mobile merchant financial account.

Those skilled in the art to which the present invention pertains will be familiar with the process of settlement of the settlement amount through the financial system, so a detailed description thereof will be omitted for convenience.

Referring to FIG. 1, a payment server 135 that processes payment approval for a payment approval request message transmitted from the relay server 100 may include a card company (eg, a card company corresponding to payment means information included in the payment approval request message). And a card company that issues a card having at least one payment method to the card payment customer), receives at least one full payment approval request message through a predetermined payment network, and reads the received full payment approval request message. By performing a payment approval procedure for the corresponding payment approval request, generating a payment processing history including a predetermined payment approval history or a payment error history, and generating a predetermined payment approval text including the payment processing history to generate the payment. Characterized in that it comprises a payment approval unit 140 for transmitting over a network, the payment approval unit 14 0) is credit for the credit card when predetermined card information and limit information for each card (for example, payment method information included in the full text of the payment approval request correspond to a credit card payment method) for performing the payment approval procedure. If the limit information or payment method information included in the full payment approval request corresponds to the check / debit card payment method, the financial account information (or financial account balance information) associated with the check / debit card is linked to It is characterized by managing.

According to the exemplary embodiment of the present invention, when the payment approval request requested through the full payment approval request is approved while the payment approval unit 140 performs the payment approval procedure, the payment approval unit 140 The document serial number included in the payment approval request text is managed until the document corresponding to the payment approval request text is purchased and / or the settlement amount corresponding to the payment approval request text is completed. do.

Those of ordinary skill in the art to which the present invention pertains may include credit card payment means and / or check card payment means and / or debit card payment means. Since you will be familiar with the technical features of the payment approval unit 140 performing the payment approval procedure, a detailed description thereof will be omitted for convenience.

According to the present invention, the payment server 135, if the payment approval request requested through the full payment approval request in the process of the payment approval unit 140 performs the payment approval process, the payment approval request Purchase and process a document corresponding to the payment approval request full text through the document serial number included in the text (or when a document corresponding to the document serial number is purchased through a predetermined document purchase company) and correspond to the purchased document. And a payment settlement unit 145 which calculates a predetermined settlement amount from a predetermined settlement amount, and processes the calculated settlement amount through a predetermined financial system.

If a person having ordinary knowledge in the technical field to which the present invention pertains, the document corresponding to the full text of the payment approval request is processed for purchase (or a document corresponding to the document serial number is purchased through a predetermined document purchase company), and Since you will be familiar with the technical features of the payment settlement unit 145 for processing a predetermined settlement amount corresponding to the purchased document, a detailed description thereof will be omitted for convenience.

2 is a diagram illustrating a functional configuration of a wireless payment terminal 150 that provides a card payment agent service for a mobile affiliate store according to an embodiment of the present invention.

More specifically, Figure 2 relates to an embodiment of a wireless payment terminal 150 having a payment mode for a card payment agent service for a mobile merchant, if one of ordinary skill in the art to which the present invention belongs By referring to and / or modifying FIG. 2, various wireless payment terminal 150 functional configurations for a card payment agency service for a mobile merchant may be inferred, but the technical features of the present invention are limited to this FIG. 2. It is to be understood that the present invention includes all implementation methods deduced.

Referring to FIG. 2, the wireless payment terminal 150 having a payment mode for a card payment agent service for a mobile affiliate store basically includes a control unit 205, a memory unit 250, a card reader unit 210, and a key input unit. And a power supply unit 225 for supplying power to the screen output unit 215, the wireless communication unit 230, the security application module 235, the print output unit 240, and the wireless payment terminal 150. And at least one terminal function unit (not shown) according to the intention of the skilled person.

The control unit 205 controls the overall operation of the wireless payment terminal 150 in the functional configuration, manages the flow of information or data between each component, the wireless payment terminal 150 for card payment agency processing for the mobile merchant At least one processor and an execution memory (for example, a register) including a CPU (Central Processing Unit) / MPU (Micro Processing Unit) in hardware and at least one component included in the And / or a RAM (Random Access Memory) and a bus (BUS) for inputting and outputting predetermined data, and predetermined recording for performing a function specific to the wireless payment terminal 150 by software. Certain program routines and / or programs which are loaded from the medium into the execution memory and computed by the processor. A program included in the recording medium included in the wireless payment terminal 150, and / or a function provided in the wireless payment terminal 150, including gram data. In the configuration, the components that can be processed by software are shown in the control unit 205).

According to the exemplary embodiment of the present invention, the controller 205 may be configured with components (eg, the memory unit 250, the card reader 210, the key input unit 220, and the screen) provided in the wireless payment terminal 150. The wireless payment terminal by interworking the output unit 215, the wireless communication unit 230, the security application module 235 and the print output unit 240 and / or the terminal functional unit (not shown) according to the intention of those skilled in the art) Controlling and managing the provision of the electronic payment service defined in (150), as well as interworking the components provided in the wireless payment terminal 150 for the card payment agency services for mobile merchants according to the present invention It is preferable to execute a program recorded in a recording medium provided in the wireless payment terminal 150 for controlling and / or for a card payment agent service for the mobile affiliate store.

The memory unit 250 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the wireless payment terminal 150 is performed. General term of non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It comprises one or more storage means, the control unit 205 is a predetermined program routine and program data required for performing a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

According to the exemplary embodiment of the present invention, the memory unit 250 preferably stores specific information of the predetermined wireless payment terminal 150 corresponding to the wireless payment terminal 150, and the wireless payment terminal 150 The unique information is preferably included in a predetermined payment approval request text generated by the wireless payment terminal 150.

The customer receiving a card payment agent service for the mobile merchant according to the present invention through the wireless payment terminal 150, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC 7816 standard Possesses (or owns) a contact IC card (or wireless IC chip) and / or a card including at least one contactless IC card (or wireless IC chip) based on ISO / IEC 14443 standard, The card reader unit 210 may provide an interface for reading at least one or more information or data included in the card.

According to the method of the present invention, the card reader unit 210 is an MS reader unit for providing an interface between the MS card and the wireless payment terminal 150, and / or the contact IC card and the wireless payment terminal ( 150) a contact IC reader unit for providing an interface, and / or a contactless IC reader unit for providing an interface between the contactless IC card and the wireless payment terminal 150.

The MS reader unit is a card reader unit 210 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined information or data from the at least one or more tracks provided in the MS of the MS card to the wireless payment terminal 150 by using the loaded.

The contact IC reader unit is a card reader unit 210 based on ISO / IEC 7816, and includes at least one contact point that makes electrical contact with a chip on board (COB) provided in a contact IC card. It supplies power to the IC chip of the IC card through the contact point, and the predetermined information or data from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) Characterized in that the interface to the wireless payment terminal 150.

The contactless IC reader part is a card reader part 210 based on ISO / IEC 14443. The contactless IC reader part uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It includes one or more antennas, and supplies power to the IC chip of the IC card through the antenna, and wirelessly transfers predetermined information or data from the IC chip through the half duplex transaction using APDU. Characterized in that the interface to the payment terminal 150.

According to an embodiment of the present invention, the card reader unit 210 may provide predetermined card information (for example, a card to a card) from at least one or more card reader units 210 for an electronic payment service defined in the wireless payment terminal 150. It is preferable to read the payment means information corresponding to the payment means including at least one credit card, check card, debit card, cash card, financial account provided), and also act as a card payment for mobile merchants according to the present invention It is preferable to read predetermined payment means information from at least one card for the service.

According to the exemplary embodiment of the present invention, the payment means information includes credit card payment means information including predetermined credit card information, or check card payment means information including check card information, or debit card payment including debit card information. Preferably, the method comprises at least one or more of prepaid card payment means information including means information or prepaid card information.

The key input unit 220 is provided with at least one key button including at least one number key and / or character key and / or function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or an operation mode of the wireless payment terminal 150 controlled by the controller 205. When predetermined information (or signal) is inputted from the key button, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 205. The controller 205 obtains predetermined key data corresponding to the key event in the current input mode and / or operation mode of the wireless payment terminal 150, and / or is matched with the key event and defined. Characterized in that for obtaining a command to execute a predetermined function. The key input unit 220 and the key input device having at least one key button interoperate with each other to perform a function of key input means provided in the wireless payment terminal 150.

The key input device interoperating with the key input unit 220 may include a keypad device having at least one numeric key and a function key, and / or at least one numeric key and a character key (eg, English character key, and / or Korean character). Key) and / or a keyboard device having a function key, and / or having at least one numeric key and a function key in conjunction with the screen output means, and / or having at least one numeric key, a character key and a function key. It is preferable to include at least one touch screen device.

According to the exemplary embodiment of the present invention, the key input unit 220 may use key data corresponding to the electronic payment service (eg, payment) from at least one or more key input devices for the electronic payment service defined in the wireless payment terminal 150. It is preferable to perform the function of the key input means for receiving the amount, etc., and also in the process of providing a card payment agent service for the mobile merchant from the key input device for the card payment agent service for the mobile merchant according to the present invention. It is preferable to perform the function of the key input means for receiving at least one or more key data required.

According to an exemplary embodiment of the present invention, the key input device corresponding to the key input unit 220 may include an operation mode of the wireless payment terminal 150 in the initial mode and / or the general payment mode for the mobile affiliated store according to the present invention. It is desirable to have a key button for switching to the payment mode for the card payment agency service.

The screen output unit 215 may be a liquid crystal display (LCD) and / or a CRT (or LCD) by the controller 205 while the wireless payment terminal 150 performs a predetermined function (for example, an electronic payment processing function). And at least one information or data that is predefined or defined in real time to be output to a predetermined output device including a Cathode Ray Tube) through a predefined interface screen, wherein the screen output unit 215 ) And the screen output device interoperate with each other to perform the function of the screen output means provided in the wireless payment terminal 150.

The predefined information or data to be output from the wireless payment terminal 150 to the screen output device is provided in the key data input through the key input unit 220, and / or in the wireless payment terminal 150. Corresponding to the information (or data) stored or generated by the component, the information (or data) transmitted / received through the wireless communication unit 230, and / or a predetermined operation result performed by the wireless payment terminal 150 ( Or data).

According to a preferred embodiment of the present invention, the screen output unit 215 outputs an electronic payment processing screen according to each electronic payment step to the screen output device for the electronic payment service defined in the wireless payment terminal 150. It is preferable to perform the function of the screen output means, and also for processing the card payment agency service for the mobile affiliated store according to the present invention to the screen output device corresponding to the card payment agency service providing step for the mobile merchant affiliated screen; It is preferable to perform the function of the screen output means for outputting.

The wireless communication unit 230 for the professional transmission and reception with the relay server 100 is connected through a predetermined wireless communication network in the process of performing the predetermined function (for example, electronic payment processing function) the wireless payment terminal 150 It provides a wireless communication means for connecting a communication channel, comprising a communication protocol and / or driver for connecting the communication channel (or communication session) in software.

When the wireless communication network connected to the wireless payment terminal 150 is a CDMA stack-based mobile communication network according to an embodiment of the present invention, the wireless communication unit 230 may register a location and / or a slot in association with the control unit 205. It is desirable to provide a mobile communication service including a slot mode and / or a power control and / or a hand-off and / or call processing procedure. In the process of providing a service, an RF processing function (eg, antenna control, modulation, synthesis, amplification, and / or filtering of radio frequency signals) is performed to transmit and receive radio frequency signals with a base station corresponding to an end of a mobile communication network. It is made to include more. In particular, the wireless communication unit processes the information or the signal transmitted from the wireless payment terminal 150 to the base station to provide the mobile communication service to the CDMA stack, or predetermined information or signal from the CDMA stack received from the base station. It provides a function for reading the.

At this time, the wireless payment terminal 150 connects a base station on a predetermined mobile communication network with a predetermined wireless section through the wireless communication unit, and a relay server provided in the payment agency through a predetermined wired section including the base station. It is preferable to connect the communication channel 100 with a predetermined communication channel.

Those skilled in the art to which the present invention belongs, if the wireless communication network connected to the wireless payment terminal 150 is the IEEE 802.16x-based portable Internet, or IEEE 802.11x-based wireless LAN, the portable Internet or Since the WLAN may infer a preferred method of implementing the wireless communication unit for connecting a predetermined communication channel with the relay server 100, a detailed description thereof will be omitted for convenience.

The secure application module 235 (SAM) is a confidentiality and / or authentication required in the process of performing the electronic payment and / or electronic payment by the wireless payment terminal 150 using the card ( Security requirements, including Authentication and / or Integrity and / or Nonrepudiation, may be applied within the wireless payment terminal 150 without using an authentication server (or relay server 100) on a payment network. As a safety device for performing a secure and reliable structure in the above, a predetermined message processed in the process of the wireless payment terminal 150 performs a predetermined security request function (for example, electronic payment and / or electronic payment function). During the process of encrypting or decrypting (information or data), adding an authenticator that prevents forgery (or tampering) of the message, or performing the security request function. It characterized in that it performs the function of storing the key information.

In general, the security application module 235 is preferably composed of a predetermined security application module 235 inserter and a security application module 235 chip, the security application module 235 chip is a chip containing at least 8-bit CPU Application Specific Integrated Circuit (ASIC) chips (eg, PLCC 44-pin chips) and / or IC chips (eg, IC cards in the form of subscriber identity modules (SIMs)) with performance of 2 MIPS (Million Instructions Per Second) or more. It is preferable to comprise a.

In addition, the security application module 235 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value required for the wireless payment terminal 150 to perform a predetermined security request function) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, immediate transaction cancellation protocols, collection protocols, SAM issuance protocols, (e.g. Card company) registration protocol, authorization acquisition protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / revocation) / Initialization / reprocessing / cancellation command).

The print output unit 240 may process the wireless payment terminal 150 to perform a predetermined function (for example, an electronic payment processing function) and / or predetermined information or data generated as a result (for example, payment processing result information). Or data) to a predetermined printing device (eg, a receipt printer), and a printing protocol and a driver for printing the printing information or data through the predetermined printing device in accordance with a predefined printing form. It is made to include.

Referring to FIG. 2, the wireless payment terminal 150 has an operation mode of the wireless payment terminal 150 in order to provide a card payment agent service for a mobile affiliate store according to the present invention. A mode check unit 255 for confirming whether the payment mode corresponds to a service, and if the operation mode of the wireless payment terminal 150 is the payment mode, the card reader unit 210 receives the payment from the customer card. Reading and inputting predetermined payment means information for a card payment agency service for a mobile merchant, and / or payment for a card payment agency service for the mobile merchant from a predetermined key input means through the key input unit 220. An information input unit 260 for inputting information (for example, a payment amount and an installment month, etc.), and the payment means information and payment information input through the information input unit 206; A professional generation unit 265 for generating a full payment approval request message including a beam; and a professional transmission unit 270 for transmitting the generated payment approval request full text to the relay server 100 through the wireless communication unit 230; Receiving a payment approval message including a payment processing history corresponding to the payment approval request full text from the relay server 100 through the wireless communication unit 230, and displays the payment processing details included in the payment approval full text It is characterized in that it comprises a specialized processing unit 275 for outputting the screen through the output unit 215, and / or through the print output unit 240.

The mode confirmation unit 255 checks whether the operation mode of the wireless payment terminal 150 is a payment mode corresponding to a card payment agent service for the mobile affiliate periodically (or in response to the payment mode switch key event). Characterized in that.

If the check result is that the operation mode of the wireless payment terminal 150 is not the payment mode, the wireless payment terminal 150 performs the conventional electronic payment processing function, while the operation mode of the wireless payment terminal 150 is When the payment mode is confirmed, the mode confirmation unit 255 outputs the payment mode confirmation result through the screen output unit 215 and then provides the information to the information input unit.

The information input unit 260 is a card payment agent for the mobile merchant from the customer card through the card reader 210 to process the electronic payment corresponding to the payment mode for the card payment agency service for the mobile merchant Characterized in that the predetermined payment means information for the service to read and input, the input payment means information is provided to the full text generation unit 265.

In addition, the information input unit 260 to the mobile affiliate store from the predetermined key input means through the key input unit 220 to process the electronic payment corresponding to the payment mode for the card payment agency service for the mobile affiliate store. Characterized in that the payment information for the card payment agency services for the input, the input payment information is provided to the full text generation unit 265.

The full text generation unit 265 may generate a full text of the payment approval request including the payment means information and the payment information input through the information input unit 260. Provided to the transmission unit 270.

According to an embodiment of the present invention, the full text generation unit 265 preferably includes the wireless payment terminal 150 unique information stored in the memory unit 250 as the mobile affiliate information in the full text of the payment approval request. .

In addition, the full text generation unit 265 generates a predetermined document serial number for the settlement processing for the settlement amount corresponding to the payment amount included in the payment agency and the payment information to include in the full payment approval request. desirable.

The specialized transmission unit 270 transmits the payment approval request message generated by the specialized generation unit to the relay server 100 through the wireless communication unit 230, and correspondingly to the relay server 100. 100 performs a predetermined payment processing procedure for providing a card settlement agent service for the mobile affiliate store through the payment approval request text, and then selects any of payment approval details or payment error details corresponding to the payment processing result. A payment processing history corresponding to one is generated, and a predetermined payment approval text including the payment processing history is generated and transmitted to the wireless payment terminal 150 through the payment network.

According to the exemplary embodiment of the present invention, when the wireless communication network connected to the wireless communication unit 230 is an open network (eg, a network accessible by a third party to a transmitted / received packet), the specialized transmission unit 270 may transmit the full text message. Preferably, the payment approval request message generated by the generation unit is encrypted by at least one or more encryption methods, and then transmitted to the relay server 100 through the wireless communication unit 230. It is preferable to decrypt at the server 100.

After the payment approval request message is transmitted to the relay server 100 through the specialized transmission unit 270, the specialized processing unit 275 transmits the relay server 100 on the payment network through the wireless communication unit 230. Periodically (or in response to a full text reception event of the wireless communication unit 230), a payment approval text including a payment processing history corresponding to the full text of the payment approval request is received.

If the payment approval message including the payment processing history corresponding to the payment approval request message is received through the wireless communication unit 230, the expert processing unit 275 may include a payment processing history (eg, included in the payment approval message). Payment approval details, or payment error details) is output through the screen output unit 215, and / or through the print output unit 240, characterized in that for outputting, thereby to the mobile affiliated store The electronic payment procedure for the card payment agent service is completed.

Figure 3 is a diagram illustrating a payment approval request professional structure for the card payment agent of the mobile merchant in accordance with one embodiment of the present invention.

In more detail, Figure 3 illustrates a payment approval request specialized structure generated for a card payment of a mobile merchant at a predetermined wireless payment terminal 150, and specifically read from a customer card in the wireless payment terminal 150. If the payment means information includes credit card information, it is for a payment approval request specialized structure generated for the card payment agent of the mobile merchant based on the credit card.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 3 to each payment means information (e.g., check card, debit card, prepaid card, etc.) as intended by those skilled in the art. Correspondingly, it is possible to infer various payment approval request specialized structures for the card payment agency of the mobile merchant, but the present invention includes all the implementation methods inferred, and the payment approval request specialized structure is illustrated in FIG. It is by no means limited.

Referring to Figure 3, the payment approval request full-text structure is at least one or more specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and the end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text includes a transaction classification item (eg, credit approval request, credit approval cancellation, etc.) related to the credit card payment, a Terminal_ID item for the wireless payment terminal 150, a POS Entry Mode item, and the wireless. TRACK II Data items (e.g., PAN (Primary Account Number) area of TRACK II of MS card and AD (Additional Data) corresponding to payment means information obtained from a predetermined card through a card reader provided in payment terminal 150) And / or credit card information obtained from a Discretionary Data (DD) area, or credit card information obtained from a credit card file of an IC card, and the credit card payment after a predetermined file separator (0X1C). It includes the installment month item, the total amount item, and the service fee item, and also the Working Key Index item, password item, product code item, and document serial number item. It is done by

Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

According to the exemplary embodiment of the present invention, the Terminal_ID item in the payment approval request message includes unique information of a predetermined wireless payment terminal 150 corresponding to the wireless payment terminal 150, and unique to the wireless payment terminal 150. The information (mobile merchant information) is replaced by payment agency information in the relay server 100 receiving the full payment approval request.

In addition, in the full text of the payment approval request, the slip serial number item includes a predetermined slip serial number generated by the wireless payment terminal 150, and is used for settlement processing between the mobile affiliate store and the payment agency, and the mobile affiliate store. It is replaced by a predetermined document serial number generated by the payment agency in the relay server 100 for the card payment agency for.

According to another exemplary embodiment of the present invention, the document serial number item of the payment approval request message generated by the wireless payment terminal 150 may include a null value, and thus the present invention is not limited thereto.

4 is a diagram illustrating an operation process of the wireless payment terminal 150 according to an embodiment of the present invention.

In more detail, Figure 4 is a wireless payment terminal 150 shown in Figure 2 on the card payment system shown in Figure 1 for a preferred operating process for the card payment agent service of the mobile merchant according to the present invention, Those skilled in the art to which the present invention pertains, various operations of the wireless payment terminal 150 for the card payment agent service of the mobile merchant according to the present invention by referring to and / or modifying the Figure 4 It may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

Referring to FIG. 4, the wireless payment terminal 150 shown in FIG. 2 for the card payment agent service of the mobile merchant according to the present invention is a payment means information (for example, credit card information) from the customer card through a predetermined card reader. Reading credit card payment method information, or check card payment method information including check card information, or debit card payment method information including debit card information, or prepaid card payment method information including prepaid card information). In operation 400, payment information including a payment amount and an installment month is input through a predetermined key input means.

Thereafter, the wireless payment terminal 150 extracts unique information of the wireless payment terminal 150 to be included in the payment approval request message shown in FIG. 3 from the memory unit, and further includes a payment approval request message shown in FIG. A document serial number to be included is generated (405).

When at least one or more information to be included in the full payment approval request is secured as described above, the wireless payment terminal 150 is the payment means information, payment information, wireless payment terminal 150 unique information and the document serial number as shown in FIG. Generate a payment approval request full text including a (410).

If encryption processing for the generated payment approval request text is not necessary (for example, if the wireless communication network to which the wireless payment terminal 150 is connected is a closed network) (415), the wireless payment terminal 150 is The full text of the payment approval request is transmitted to the relay server 100 provided in the payment agency through a wireless communication network (420).

On the other hand, if encryption processing for the generated payment approval request full text is required (for example, if the wireless communication network to which the wireless payment terminal 150 is connected is an open network (a network that can be accessed by a third party to send and receive packets)) 415) The wireless payment terminal 150 performs an encryption procedure for the full text of the payment approval request (425).

According to an embodiment of the present invention, the encryption procedure for the full payment approval request may include secret key (or symmetric key) based encryption, and / or public key based encryption, and / or electronic envelope based encryption, and / or key exchange. It is preferable to include at least one or more of the base encryption.

If the encryption procedure for the payment approval request is completed (430), the wireless payment terminal 150 transmits the encrypted payment approval request message to the relay server 100 provided in the payment agency through the wireless communication network. Transmit 435.

After transmitting the full payment approval request message to the relay server 100 provided in the payment agency as described above, the wireless payment terminal 150 includes a payment processing history corresponding to the full payment approval request message through the wireless communication network. In step 440, a predetermined payment approval message is received periodically.

If a predetermined payment approval text including a payment processing history corresponding to the payment approval request text is received through the wireless communication network (445), the wireless payment terminal 150 is a payment included in the received payment approval text. The process details are output to the screen output means provided in the wireless payment terminal 150, and / or to the print output means provided in the wireless payment terminal 150 (450).

5 is a diagram illustrating an operation process of the relay server 100 of the payment agency for the card payment agent of the mobile merchant according to an embodiment of the present invention.

In more detail, Figure 5 is a wireless payment terminal 150 shown in Figure 2 through the process shown in Figure 4 to generate the full payment approval request shown in Figure 3 through the process shown in Figure 3 card payment system shown in Figure 1 When transmitting to the relay server 100 provided in the payment agency on, receiving the full payment approval request from the relay server 100 for the preferred operating process for the card payment agency service of the mobile merchant according to the present invention, Those skilled in the art to which the present invention pertains to, by referring to and / or modifying the figure 5 infers various operations of the relay server 100 for the card payment agent service of the mobile merchant according to the present invention. Although the present invention may be implemented, the present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

Referring to Figure 5, the payment approval request shown in Figure 3 through the process shown in Figure 4 in the wireless payment terminal 150 shown in Figure 2 for the card payment agency service of the mobile merchant according to the present invention When generating and transmitting the full text, the relay server 100 receives the full text of the payment approval request through the wireless communication network and checks whether the received full text of the received payment approval request is decoded (500).

According to the embodiment of the present invention, if the received payment approval request full text is encrypted through at least one encryption method in the wireless payment terminal 150, the encrypted payment approval request full text is a predetermined corresponding to the encryption method. It is preferable to decrypt through a decoding method.

If the received payment approval request message is not decrypted (eg, if the received payment approval request message is not encrypted in the wireless payment terminal 150) (505), the relay server 100 may request the payment approval request. The wireless payment terminal 150 included in the full text is replaced with the payment agency information (520).

On the other hand, if it is necessary to decrypt the received payment approval request text (for example, if the received payment approval request text is encrypted through at least one encryption method in the wireless payment terminal 150) (505), the relay server 100 ) Performs the decryption procedure for the encrypted payment approval request text (510), and when the decryption procedure for the encrypted payment approval request text is completed (515), the relay server 100 is the payment approval request text The wireless payment terminal 150 included in the unique information is replaced with the payment agency information (520).

After the wireless payment terminal 150 unique information included in the payment approval request text as described above is replaced with the payment agency information, the relay server 100 replaces the document serial number included in the payment approval request text. Confirm (or add) (525).

If the verification result does not need to replace (or add) the document serial number included in the payment approval request message (530), the relay server 100 through the predetermined bansa predetermined payment for the payment approval request text And transmits to server 135 (540).

On the other hand, if the check result has to replace (or add) the document serial number included in the payment approval request text (530), the relay server 100 is a predetermined document serial to be replaced (or added) to the payment approval request text. After generating a number, and replaces (or adds) the generated document serial number with the payment approval request text (535), and transmits the payment approval request text to a predetermined payment server 135 through a predetermined bansa. (540).

According to an exemplary embodiment of the present invention, the relay server 100 transmits a payment approval request message replaced with the payment agency information to a predetermined bansa server (for example, a payment approval request message transmitted from a payment terminal provided in a conventional normal merchant). Receiving and transmitting to a predetermined payment server (135) relayed to the bansa server, and the bansa server after the payment approval request received the payment approval request received from the payment terminal provided in the conventional normal merchants Through the same professional processing as the preamble, the payment approval request preamble is relayed to the payment server 135 provided in the card company corresponding to the payment means information included in the preamble approval request preamble.

According to another exemplary embodiment of the present invention, the relay server 100 is the payment approval to the payment server 135 provided in the card company corresponding to the payment means information included in the payment approval request text replaced with the payment agency information. It is possible to transmit the full text request, in this case the relay server 100 is to perform the function of the bansa server provided in the bansa.

FIG. 6 is a diagram illustrating a method for encrypting and transmitting a full payment approval request in a wireless payment terminal 150 using a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, FIG. 6 illustrates an embodiment of the present invention for encrypting and transmitting the full payment approval request message in a symmetric key (or secret key) method in the wireless payment terminal 150 having the encryption function as shown in FIG. In the art to which the present invention pertains, the full text of the payment approval request in the wireless payment terminal 150 on the wireless communication network in the symmetric key (or secret key) method will be described with reference to FIG. 6 and / or modified. Various implementation methods of encryption may be inferred, but the present invention includes all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 6 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate (or security application module) provided in the wireless payment terminal 150, the public certificate ( Or a security application module) an IC chip of ID-000 type stored in a predetermined memory unit 250 provided in the wireless payment terminal 150 and / or mounted or detached from the wireless payment terminal 150. (Or an IC card), and / or when a predetermined IC card reader is provided in the wireless payment terminal 150, the IC card may be stored in an IC card inserted into the IC card reader. This is not limited.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 250 provided in the wireless payment terminal 150 in addition to the public certificate (or security application module), and / or relay It may be included in an interface screen provided from the server 100 to the wireless payment terminal 150, and / or embedded in a communication program communicating with the relay server 100 on the wireless payment terminal 150. By this, the semi-invention is not limited.

Referring to FIG. 6, a predetermined payment approval request including predetermined payment means information, payment information, unique information of the wireless payment terminal 150, and a serial number of the payment generation unit 265 of the wireless payment terminal 150. When the full text is generated, it is provided to the full text transmitter 270 (600). If the full text of the payment approval request is provided, the full text transmitter 270 is provided with an official certificate provided in the wireless payment terminal 150. Read a predetermined symmetric key (or secret key) for encrypting the full text of the payment approval request from the security application module (605), and encrypts the full text of the payment approval request through the read symmetric key (or secret key). 610.

Here, the encryption function of the specialized transmission unit 270 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment approval request full text P (Plaintext), and the symmetric key ( Or, if the full payment approval request encrypted with a secret key) C (Ciphertext), the encryption function of the full-text transmission unit 270 can be expressed by a formula such as "Ek (P) = C".

According to an embodiment of the present invention, the algorithm for encrypting the full text of the payment approval request via the symmetric key (or the secret key) may include SEED, DES (Data Encryption Standard), Triple-DES, At least one of Skipjack and International Data Encryption Algorithm (IDEA) is preferably included. Various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment approval request message is encrypted through the symmetric key (or secret key) as described above, the wireless communication unit 230 transmits the encrypted payment approval request message to the relay server through a communication protocol defined on the wireless communication network ( 100) (615).

7 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received by the relay server 100 using a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, Figure 7 is a symmetric key (or secret) in the relay server 100 as shown in Figure 1 to receive the entire payment approval request encrypted from the wireless payment terminal 150 having the encryption function as shown in Figure 2 The method of decrypting by a key) method, and if the present invention has a general knowledge, the encryption in the wireless payment terminal 150 on the wireless communication network by referring to and / or modified with reference to FIG. Although various embodiments of the present invention may be inferred from the full payment approval request in a symmetric key (or secret key) manner, the present invention includes all the inferred implementation methods and is limited to the implementation method shown in FIG. Not.

In this figure 7 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate (or security application module) provided in the relay server 100, the public certificate (or Security application module) is preferably stored in a predetermined database (not shown) in conjunction with the relay server 100, by which the present invention is not limited.

Referring to FIG. 7, the professional receiving unit 105 of the relay server 100 receives the encrypted payment approval request message through the wireless communication network and provides it to the professional processing unit 115 (700). The request text is preferably received via a communication protocol stack defined in the wireless communication network.

Thereafter, the specialized processing unit 115 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment approval request message from the authorized certificate (or security application module) provided in the relay server 100. In operation 705, the encrypted payment approval request message is decrypted using the extracted symmetric key (or secret key).

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), the full text of the payment approval request encrypted with the symmetric key (or secret key) k (key) and the symmetric key (or secret key). (Ciphertext) and the decrypted payment approval request full text is P (Plaintext), the function of decrypting the encrypted payment approval request full text by the specialized processing unit is "Dk = P, or Dk (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment authorization request full text through the symmetric key (or secret key) may be SEED, DES (Data Encryption Standard), Triple-DES. It is preferable to include at least one or more of, Skipjack, International Data Encryption Algorithm (IDEA), and various forms of decryption algorithms may be used, the decryption algorithm is the encryption used in the wireless payment terminal 150 Characterized by matching the algorithm, the present invention is not limited by a specific decoding algorithm.

When the payment approval request text encrypted through the symmetric key (or secret key) is decrypted as described above, the specialized processing unit 115 transmits the decrypted payment approval request text to the payment server 135 through the bansa ( 715).

8 is a diagram illustrating a method for encrypting and transmitting a full payment approval request in a wireless key terminal 150 in a public key based structure according to an embodiment of the present invention.

In more detail, FIG. 8 is an embodiment of the present invention for encrypting and transmitting the full payment approval request message in a public key infrastructure structure in a wireless payment terminal 150 having an encryption function as shown in FIG. Those skilled in the art can refer to and / or modify this drawing to infer various implementation methods for encrypting the full payment approval request message in a public key manner in the wireless payment terminal 150 on the wireless communication network. As will be appreciated, the invention encompasses all of the inferred practice methods, and is not limited to the practice method shown in FIG.

In this figure 8 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate (or security application module) provided in the wireless payment terminal 150, the public certificate (or security The application module is stored in a predetermined memory unit 250 provided in the wireless payment terminal 150, and / or IC chip of the ID-000 type (or mounted on or detached from the wireless payment terminal 150) IC card) and / or the IC card inserted into the IC card reader when the wireless payment terminal 150 is provided with a predetermined IC card reader, all of which can be limited by the present invention. Not.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate (or security application module) to the wireless payment terminal 150. The present invention is not limited by this.

Referring to FIG. 8, a predetermined payment approval request including predetermined payment means information, payment information, unique information of the wireless payment terminal 150, and a serial number of the payment is generated by the specialized generation unit 265 of the wireless payment terminal 150. When the full text is generated, it is provided to the full text transmission unit 270 (800). When the full payment approval request text is provided, the full text transmission unit 270 approves the payment from the authorized certificate (or security application module). A predetermined server-side public key for encrypting the request text is extracted (805), and the payment approval request text is encrypted using the extracted server-side public key (810).

Here, the encryption function of the specialized transmission unit 270 is called E (Encryption), the server-side public key is encrypted with k1 (key), the payment approval request full-text P (Plaintext), and the server-side public key. If the full text of the payment approval request is referred to as C (Ciphertext), the encryption function of the full text transmission unit 270 may be expressed by a formula such as "Ek1 (P) = C".

According to an embodiment of the present invention, the algorithm for encrypting the full text of the payment approval request through the server-side public key is RSA (Ron Rivest, Adi Shamir, Len Adleman), DSA (Digital Signature). Algorithm, DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more, and various forms of encryption algorithms may be used, but in a specific encryption algorithm The present invention is not limited by this.

For example, in the case of encrypting the full payment approval request message through the RSA encryption algorithm among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by the different prime factors of n is a. And b, if the published index (e.g., 3 or 216+) is e, and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a -1) (b-1) ", wherein the encryption function of the specialized transmission unit may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval request message is encrypted through the server-side public key as described above, the wireless communication unit 230 transmits the encrypted payment approval request message to the relay server 100 through a network component on the wireless communication network. (815).

9 is a diagram illustrating a method for decrypting a full payment approval request received encrypted by the relay server 100 in a public key based structure according to an embodiment of the present invention.

In more detail, FIG. 9 is a public key infrastructure structure of the payment approval request message received from the wireless payment terminal 150 having the encryption function as shown in FIG. 2 in the relay server 100 as shown in FIG. The present invention relates to an embodiment of the present invention, which has ordinary skill in the art to which the present invention pertains. Referring to FIG. 9 and / or modified to the server-side public key from the wireless payment terminal 150 on the wireless communication network. Various implementation methods for decrypting the entire encrypted payment approval request in a public key infrastructure scheme may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG. .

In this figure 9 according to an embodiment of the present invention, the server-side private key for decrypting the full payment approval request message encrypted with the server-side public key in a public key infrastructure structure is the public certificate (e.g., provided in the relay server 100). Or it is preferably read from the security application module, the official certificate (or security application module) is preferably stored in a predetermined database (not shown) in conjunction with the relay server 100, thereby the present invention This is not limited.

Referring to FIG. 9, the professional receiving unit 105 of the relay server 100 receives the encrypted payment approval request full message through the wireless communication network and provides the full text to the professional processing unit 115 (900). The full text is preferably received via a communication protocol stack defined in the wireless communication network.

Thereafter, the specialized processing unit 115 extracts a server-side private key for decrypting the encrypted payment approval request message from the authorized certificate (or security application module) provided in the relay server 100 (905). The encrypted payment approval request message is decrypted through the extracted server-side private key (910).

Herein, the decryption 115 function of the specialized processing unit is referred to as D (Decryption), the server-side private key is k2 (key), and the payment approval request message encrypted with the server-side public key is C (Ciphertext) and the server. When the payment approval request text decrypted with the side private key is P (Plaintext), the function of decrypting the encrypted payment approval request text by the specialized processing unit 115 is "Dk2 = P, or Dk2 (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the algorithm for decrypting the payment approval request text encrypted with the server-side public key in the wireless payment terminal 150 through the server-side private key is RSA (Ron Rivest). , Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. A decryption algorithm may be used, but the decryption algorithm is matched with an encryption algorithm used in the wireless payment terminal 150, and the present invention is not limited to a specific decryption algorithm.

For example, in the case of decrypting the full payment approval request message through the RSA decryption algorithm, the public method (Modulus) used in the decryption process is not disclosed with n and different prime factors of n. If the prime is a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", where the decoding function of the specialized processor may be expressed as" P = Dk2 = Cd mod n ".

As described above, when the payment approval request message encrypted with the server-side public key is decrypted by the wireless payment terminal 150 through the server-side private key, the specialized processing unit 115 transmits the decrypted payment approval request message through the bansa. It transmits to the payment server 135 (915).

FIG. 10 is a diagram illustrating a method of encrypting and transmitting a full payment approval request message in an electronic envelope method in a wireless payment terminal 150 according to an embodiment of the present invention.

More specifically, FIG. 10 is an embodiment of the present invention for encrypting and transmitting the full payment approval request message in an electronic envelope method in the wireless payment terminal 150 having the encryption function as shown in FIG. 2, to which the present invention pertains. In the art, various embodiments of the present invention can be inferred by referring to and / or modifying the drawing of FIG. 10 to encrypt the full text of the payment approval request in an electronic envelope method in the wireless payment terminal 150 on the wireless communication network. However, the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 10 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate (or security application module) provided in the wireless payment terminal 150, the public certificate (or security application) Module) is an IC chip (or IC) of ID-000 type stored in a predetermined memory unit 250 provided in the wireless payment terminal 150 and / or mounted or detached from the wireless payment terminal 150. Card) and / or stored in an IC card inserted into the IC card reader when the wireless payment terminal 150 is provided with a predetermined IC card reader, and the present invention is not limited thereto. No.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate (or security application module) to the wireless payment terminal 150. The present invention is not limited by this.

Referring to FIG. 10, a predetermined payment approval request including predetermined payment means information, payment information, unique information of the wireless payment terminal 150, and a serial number of the payment generation unit 265 of the wireless payment terminal 150 is provided. When a full text is generated, the text is provided to the full text transmitter 270 (1000). When the full text of the payment approval request is provided, the full text transmission part 270 sends the full text of the payment approval request to a secret key (symmetric). A predetermined random secret key for encrypting using a key method is generated (1005), and the full text of the payment approval request is encrypted using the generated secret key (1010).

Here, the encryption function of the specialized transmission unit 270 is referred to as E (Encryption), the secret key is r (random secret key), the payment approval request full text P (Plaintext), and the payment approval encrypted with the secret key When the request message is called C (Ciphertext), the encryption function of the message transmission unit 270 may be expressed by an expression such as "Er (P) = C".

According to an embodiment of the present invention, the algorithm for encrypting the full text of the payment approval request via the private key, SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA (International) It is preferable to include at least one or more of Data Encryption Algorithm, and in addition, various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

Thereafter, the specialized transmission unit 270 encrypts the secret key (random secret key) used to encrypt the full payment approval request message. For this purpose, the specialized transmission unit 270 is the authorized certificate (or security application module). A predetermined server-side public key is extracted from the server (1015), and the secret key is encrypted using the server-side public key (1020).

Here, the encryption function of the specialized transmission unit 270 is called E (Encryption), the server-side public key is encrypted with k1 (key), the secret key is r (random Secret key), and the server-side public key. When the secret key is C (Ciphertext), the encryption function of the specialized transmission unit 270 may be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key by the specialized transmission unit 270 through the server-side public key includes RSA (Ron Rivest, Adi Shamir, Len Adleman) and DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", where the encryption function of the specialized transmission unit 270 may be expressed as" C = Ek1 (r) = re mod n ".

When the payment approval request text is encrypted with the secret key, and the secret key is encrypted with the server-side public key, the specialized transmission unit 270 uses the payment approval request text and the server-side public key encrypted with the secret key. Generate and transmit transaction data associated with an encrypted secret key to the wireless communication unit 230 (1025), and the wireless communication unit transmits the transaction data to the relay server 100 through a network component on a wireless communication network ( 1030).

FIG. 11 is a diagram illustrating a method for decrypting a full text of a payment approval request received encrypted by the relay server 100 in an electronic envelope method according to an embodiment of the present invention.

In more detail, FIG. 11 shows the transaction in the relay server 100 as shown in FIG. 1, which receives transaction data including the encrypted payment approval request message from the wireless payment terminal 150 having the encryption function as shown in FIG. As an embodiment of the present invention for decoding data using an electronic envelope method, the present invention has ordinary skill in the art. Referring to FIG. 11 and / or modified in the wireless payment terminal 150 on the wireless communication network, Various implementation methods for decrypting the transaction data encrypted by the electronic envelope method may be inferred by the same electronic envelope method, but the present invention includes all the inferred implementation methods and is limited to the implementation method shown in FIG. Not.

In this figure 11 according to the embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate (or security application module) provided in the relay server 100. In addition, the public certificate (or security application module) is preferably stored in a predetermined database (not shown) in conjunction with the relay server 100, by which the present invention is not limited.

Referring to FIG. 11, the specialized receiving unit 105 of the relay server 100 receives predetermined transaction data including the encrypted payment approval request message through the wireless communication network and provides the predetermined transaction data to the specialized processing unit 115. 1100, the transaction data is preferably received through a communication protocol stack defined in the wireless communication network.

Thereafter, the specialized processing unit 115 extracts a server-side private key for decrypting the encrypted secret key included in the transaction data from the authorized certificate (or security application module) provided in the relay server 100 (1105). By decrypting the secret key encrypted with the server-side public key in the wireless payment terminal 150 through the extracted server-side private key (1110), a predetermined secret key for decrypting the full text of the payment approval request is extracted. In operation 1115, the payment approval request message is decrypted using the extracted secret key (1120), and the wireless payment terminal 150 extracts the payment approval request message encrypted with the secret key (1125).

Here, the decryption function of the specialized processing unit 115 is called D (Decryption), the server-side private key is k2 (key), and the secret key encrypted with the server-side public key is C (Ciphertext) and the server-side individual. When the secret key decrypted with the key is r (random secret key), the function of the specialized processing unit 115 to decrypt the encrypted secret key is "Dk2 = r, or Dk2 (Ek1 (r)) = r". It can be expressed as an expression.

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the wireless payment terminal 150 through the server-side private key, RSA (Ron Rivest, Adi). Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, at least one or more of the various forms of decoding algorithms Although it can be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the wireless payment terminal 150, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the specialized processing unit may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), the secret key is r (random secret key), the payment approval request message encrypted with the secret key (C (Ciphertext)), and the decryption. When the payment approval request message is P (Plaintext), the function of the specialized processing unit 115 to decrypt the encrypted payment approval request message is "Dr = P, or Dr (Er (P)) = P". It can be expressed as an expression.

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment approval request message through the private key 115 may include SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( International Data Encryption Algorithm) preferably includes at least one or more, and various types of decryption algorithms may be used, but the decryption algorithm is matched with the encryption algorithm used in the wireless payment terminal 150. The present invention is not limited to the specific decoding algorithm.

When the payment approval request text is decrypted as described above, the specialized processor 115 transmits the decrypted payment approval request text to the payment server 135 through the bansa (1130).

12A and 12B illustrate a method of encrypting and transmitting a full payment approval request message in a key exchange method in a wireless payment terminal 150 according to an embodiment of the present invention.

12A and 12B illustrate a method of encrypting and transmitting the full payment approval request message in a key exchange method in a wireless payment terminal 150 having an encryption function as shown in FIG. A person skilled in the art may refer to and / or modify this drawing 12 to infer various implementation methods for encrypting the full payment approval request message in a key exchange method in the wireless payment terminal 150 on the wireless communication network. As will be appreciated, the present invention encompasses all of the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

In the figure 12 according to the embodiment of the present invention, the terminal-side private key and the server-side public key is preferably read from the public certificate (or security application module) provided in the wireless payment terminal 150, the public The certificate (or security application module) is stored in a predetermined memory unit 250 provided in the wireless payment terminal 150, and / or mounted in or detached from the wireless payment terminal 150 in the form of ID-000. It can be stored in an IC chip (or IC card), and / or stored in an IC card inserted into the IC card reader when a predetermined IC card reader is provided in the wireless payment terminal 150. The present invention is not limited.

Alternatively, the terminal-side private key and the server-side public key are extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate (or security application module) to the wireless payment terminal 150. It is possible that the present invention is not limited thereby.

12A and 12B, the full text generation unit 265 of the wireless payment terminal 150 includes predetermined payment means information, payment information, unique information of the wireless payment terminal 150, and a document serial number. When the payment approval request is generated, it is provided to the specialized transmission unit 270 (1200). When the payment approval request is provided, the specialized transmission unit 270 hashes the payment approval request message in a predetermined one-way hash. Create a message digest including a hash code of a certain length irrespective of the length of the payment approval request full text message, and generate the original message through the hash code (or message digest). One-way hash function that cannot be identified (or inferred) The wireless payment terminal 150 and the relay server 100 use the same hash function to generate a predetermined message digest (1205). In operation 1210, the message digest is encrypted by using the terminal-side private key.

Here, the encryption function of the specialized transmission unit 270 is called E (Encryption), the terminal side private key is t1 (terminal side key), the message digest is m (message digest), and the terminal side private key is encrypted. When the digested message digest is C (Ciphertext), the digital signature function of the specialized transmission unit may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, the algorithm for encrypting the message digest by the specialized transmission unit 270 using the terminal-side private key includes RSA (Ron Rivest, Adi Shamir, Len Adleman), and DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", where the digital signature function of the specialized transmission unit 270 may be expressed as" C = Et1 (m) = me mod n ".

In addition, the specialized transmission unit 270 generates a predetermined random secret key for encrypting the full payment approval request message in a secret key (symmetric key) method (1215), and the payment approval Through the generated private key by linking the request message with the copy of the message digest encrypted with the terminal-side private key and a certificate (eg, a certificate including the terminal-side public key) included in the public certificate (or security application module). Encrypt (1220).

Here, the encryption function of the specialized transmission unit 270 is called E (Encryption), and the secret key is encrypted with r (random secret key), the payment approval request text and a copy of the certificate with P (Plaintext), and the secret key. When the full payment approval request text and the certificate copy are referred to as C (Ciphertext), the encryption function of the full text transmission unit 270 may be expressed by an expression such as "Er (P) = C".

According to the embodiment of the present invention, the algorithm for encrypting the full text of the payment approval request and the certificate copy through the secret key is SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, It is preferable to include at least one or more of the International Data Encryption Algorithm (IDEA), and various forms of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the specialized transmission unit 270 extracts a predetermined server-side public key from the authorized certificate (or security application module) in order to encrypt the secret key encrypting the full payment approval request message (1225), and the server The private key is encrypted using the side public key (1230).

Here, the encryption function of the specialized transmission unit 270 is called E (Encryption), the server-side public key is referred to as s1 (server side key), the secret key as r (random secret key) and the server-side public key. When the encrypted secret key is called C (Ciphertext), the encryption function of the specialized transmission unit 270 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the secret key by the specialized transmission unit 270 through the server-side public key includes RSA (Ron Rivest, Adi Shamir, Len Adleman) and DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the specialized transmission unit 270 may be expressed as" C = Es1 (r) = re mod n ".

The payment authorization request message is encrypted with the generated private key in association with a copy of a certificate including the message digest encrypted with the terminal-side private key and the terminal-side public key, and the secret key is encrypted with the server-side public key. When encrypted through the message transmission unit 270, the server side copies a certificate including the message digest encrypted with the payment approval request message and the terminal side private key encrypted with the secret key and the terminal side public key. Generates predetermined transaction data in association with a secret key encrypted with a public key, provides the generated transaction data to the wireless communication unit (1235), and the wireless communication unit 203 configures the transaction data on a wireless communication network. Sending to the relay server 100 through the element (1240).

13A and 13B illustrate a method of decrypting a full payment approval request message encrypted and received by a relay server 100 according to an embodiment of the present invention by a key exchange method.

In more detail, Figures 13a and 13b is a relay server 100 as shown in Figure 1 that receives the transaction data including the encrypted payment authorization request full text from the wireless payment terminal 150 with the encryption function as shown in Figure 2 The present invention relates to a method of decrypting the transaction data in a key exchange method, and if the present invention has a general knowledge, the wireless payment terminal on the wireless communication network by referring to and / or modified with reference to FIG. Although it is possible to infer various implementation methods for decrypting the transaction data encrypted by the key exchange scheme in the same key exchange scheme at 150, the present invention includes all the inferred implementation methods, which are illustrated in FIG. It is not limited to implementation method.

In FIG. 13 according to an embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are provided with the authorized certificate (or security application module) provided in the relay server 100. Preferably, it is read from the, the official certificate (or security application module) is preferably stored in a predetermined database (not shown) to work with the relay server 100, by which the present invention is not limited.

Referring to FIGS. 13A and 13B, the full-text receiving unit 105 of the relay server 100 receives transaction data including an encrypted payment approval request full text through the wireless communication network (1300), and transmits the transaction data. It is provided to the specialized processing unit 115 (1305), the transaction data is preferably received via a communication protocol defined in the wireless communication network, and / or the payment approval request telegram encrypted with the secret key and the terminal side And a copy of the certificate including the message digest encrypted with the private key and the terminal-side public key, and the secret key encrypted with the server-side public key.

Thereafter, the specialized processor 115 extracts the server-side private key from the public certificate (or security application module) provided in the relay server 100 to decrypt the secret key encrypted with the server-side public key (1310). And decrypting the private key through the server-side private key (1315), thereby decrypting a copy of the certificate including the message digest encrypted with the full payment authorization request message and the terminal-side private key and the terminal-side public key. The secret key is extracted (1320).

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), the server side private key is s2 (server side key), the secret key encrypted with the server side public key is C (Ciphertext), and the server. When the secret key decrypted with the side private key is r (random secret key), the function of decrypting the encrypted secret key by the specialized processing unit 115 is "Ds2 = r, or Ds2 (Es1 (r)) = r". It can be expressed as

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the wireless payment terminal 150 through the server-side private key, RSA (Ron Rivest, Adi). Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, at least one or more of the various forms of decoding algorithms Although it can be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the wireless payment terminal 150, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the specialized processing unit 115 may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the specialized processor 115 includes the message digest encrypted with the payment approval request message and the terminal-side private key using the extracted secret key, and a certificate including the terminal-side public key. By decrypting the copy (1325), a copy of the certificate including the full message of the payment approval request encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), and the secret key is r (random secret key), and the message digest encrypted with the secret key encrypted with the secret key and the terminal private key. And a copy of the certificate including the terminal-side public key C (Ciphertext), and a copy of the certificate including the message digest encrypted with the decrypted full payment authorization request message and the terminal-side private key and the terminal-side public key P ( Plaintext), the specialty processing unit 115 decrypts a copy of the certificate including the encrypted message with the encrypted payment approval request message and the terminal-side private key and the terminal-side public key. , Or Dr (Er (P)) = P ".

According to an embodiment of the present invention, a copy of a certificate including the message digest and the terminal-side public key encrypted by the specialized processing unit 115 with the encrypted payment approval request message and the terminal-side private key through the secret key. The decryption algorithm may include at least one of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA), and various types of decryption algorithms may be used. However, the decryption algorithm is characterized in that it matches the encryption algorithm used in the wireless payment terminal 150, the invention is not limited by a specific decryption algorithm.

In addition, the specialized processor 115 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (1330), and generates and transmits the message from the payment approval request message in the wireless payment terminal 150. One message digest is extracted (1335).

Here, the decryption function of the specialized processing unit 115 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. When the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the specialized processing unit 115 is "Dt2 = m, or Dt2 (Es1 (r)) = m". The same formula can be used.

According to an embodiment of the present invention, the algorithm for decrypting the message digest encrypted by the terminal-side private key in the wireless payment terminal 150 through the terminal-side public key is RSA (Ron Rivest, Adi). Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, at least one or more of the various forms of decoding algorithms Although it can be used, the decryption algorithm is characterized in that it is matched with the encryption algorithm used in the wireless payment terminal 150, the invention is not limited by a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the specialized processing unit may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the specialized processing unit 115 generates a predetermined message digest through the same one-way hash function of the received payment approval request message in full (1340), and then generates the generated message digest and the message digest. By comparing the decrypted message digest (1345), the validity of the received payment approval request text is verified.

If the generated message digest and the decrypted message digest coincide with each other (1350), the specialized processor transmits the payment approval request message to the payment server 135 through the bansa (1355).

14 is a diagram illustrating a specialized structure for requesting payment approval request processed for the card payment agent of the mobile merchant according to an embodiment of the present invention.

In more detail, Figure 14 is a payment approval request professional structure processed by the relay server 100 for processing the payment approval request generated in a predetermined wireless payment terminal 150 for the card payment agent of the mobile merchant according to the present invention. As for, in detail, the wireless payment terminal 150 unique information of the payment approval request generated by the wireless payment terminal 150 is replaced with payment agency information, and the serial number of the bill for the card payment agent of the mobile merchant; It is about the structure of payment approval request replaced with a predetermined document serial number.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 14 to the respective payment means information (e.g., check card, debit card, prepaid card, etc.) as intended by those skilled in the art. Correspondingly, it is possible to infer various payment approval request specialized structures for the card payment agency of the mobile merchant, but the present invention includes all the implementation methods inferred, and this payment approval request specialized structure is illustrated in FIG. It is by no means limited.

Referring to FIG. 14, the payment approval request full text structure may include at least one or more specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and an end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text may include a transaction classification item (eg, a credit approval request, a credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a TRACK II Data item (eg, a TRACK II of an MS card). Credit card information obtained from a Primary Account Number (PAN) area and Additional Data (AD) and / or Discretionary Data (DD) areas, or credit card information obtained from a credit card file of an IC card. After the predetermined file separator (File Separator, 0X1C), it includes the installment month item, the total amount item, and the service fee item corresponding to the credit card payment information, and also the working key index item, password item, product code item, and document series. Number items and the like.

Those skilled in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

According to the exemplary embodiment of the present invention, the unique information of the wireless payment terminal 150 included in the Terminal_ID item in the full payment approval request is replaced with the payment agency information, and the document serial number item is the relay server 100. It is replaced with the predetermined document serial number generated in.

15 is a diagram illustrating an operation process of a payment server 135 of a card company according to an exemplary embodiment of the present invention.

In more detail, Figure 15 shows the entire payment approval request shown in Figure 14 through the process shown in Figure 5 in the relay server 100 on the card payment system shown in Figure 1 the card payment shown in Figure 1 When the transmission to the payment server 135 provided in the card company on the system, the payment server 135, the operation process for receiving the payment approval request full text to perform a predetermined payment approval procedure, the present invention belongs to If one of ordinary skill in the art, it will be able to infer various operations of the payment server 135 for the card payment agent service of the mobile merchant in accordance with the present invention by referring to and / or modified in this figure 15, The invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

Referring to Figure 15, the payment shown in Figure 14 through the process shown in Figure 5 in the relay server 100 on the card payment system shown in Figure 1 for the card payment agent service of the mobile merchant in accordance with the present invention When transmitting the full approval request, the payment server 135 receives at least one payment approval request message, and at least one or more necessary to perform a payment approval procedure such as the payment means information and payment information from the received payment approval request message The payment approval related information is extracted (1500), and the requested payment approval procedure is performed through the payment approval request text message through the extracted at least one payment approval related information (1505).

Those skilled in the art to which the present invention pertains include a check card including payment means information (eg, credit card payment means information including credit card information, or check card information) included in the full payment approval request. You will be familiar with each payment approval procedure corresponding to payment method information, debit card payment method information including debit card information, or prepaid card payment method information including prepaid card information. Omit for convenience.

If, as a result of performing the payment approval procedure, the payment approval corresponding to the full payment approval request message is failed (1510), the payment server 135 generates a predetermined payment processing history including a predetermined payment error history. (1515).

On the other hand, if the payment approval corresponding to the full payment approval request is successful as a result of performing the payment approval procedure (1510), the payment server 135 generates a predetermined payment processing history including a predetermined payment approval details ( 1520).

By performing the payment approval procedure as described above, when a predetermined payment processing history including the payment approval details or payment error details is generated, the payment server 135 completes the predetermined payment approval text including the payment processing details. Generate (1525), the payment approval full text to the relay server 100 provided to the payment agency through the bansa with reference to the payment agency information corresponding to the payment approval related information included in the full payment approval request request; Send (1530).

According to the exemplary embodiment of the present invention, when the payment approval details are included in the payment processing details, the payment server 135 is related to the payment approval for the purchase and / or settlement of the documents corresponding to the full payment approval request. It is desirable to store and manage the information in a predetermined database (not shown).

FIG. 16 is a diagram illustrating an operation process of a relay server 100 of a payment agency for card settlement agency and settlement processing of a mobile affiliate store according to an exemplary embodiment of the present invention.

In more detail, FIG. 16 is a payment server 135 on the card payment system shown in FIG. 1 through a process shown in FIG. 15 to transfer a predetermined payment approval to a payment agency on the card payment system shown in FIG. When the transmission to the provided relay server 100, the relay server 100 receives the payment approval full message for the operation process for the card payment agent and settlement processing of the mobile merchant, the present invention belongs to Those skilled in the art may refer to and / or modify this drawing 16 to infer various operation processes of the relay server 100 for the card payment agent service of the mobile merchant according to the present invention. Includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

Referring to FIG. 16, the payment server 135 on the card payment system shown in FIG. 1 includes a predetermined payment processing history through the process shown in FIG. 15 for the card payment agent service of the mobile merchant according to the present invention. When the payment approval message is transmitted, the relay server 100 receives the payment approval message, reads the payment processing history included in the received payment approval message, and checks whether the payment approval request is approved. (1600).

If the card payment is not approved as a result of reading the payment processing details (1605), the relay server 100 replaces payment agency information included in the payment approval text with the unique information of the wireless payment terminal 150 ( Or restore) the document serial number included in the payment approval full text to the original document serial number generated by the wireless payment terminal 150 (1620), and the payment approval full text through the wireless communication network. The wireless payment terminal 150 transmits (1625).

On the other hand, if the card payment is approved as a result of reading the payment processing history (1605), the relay server 100 checks the mobile merchant information corresponding to the payment processing history included in the payment approval message, and further, the payment processing history After calculating the settlement amount information corresponding to (1610), the mobile affiliate information and the settlement amount information is processed in association with the predetermined storage medium 130 and stored (1615).

According to the exemplary embodiment of the present invention, the confirmed mobile affiliated store information preferably includes unique information of the wireless payment terminal 150 included in the payment approval request text corresponding to the payment approval text.

In addition, the mobile merchant information is a document serial number that is included in the full payment approval request in the wireless payment terminal 150, and / or a document serial number replaced (or included) by the professional processing request for the payment approval request. It is preferred to further comprise a.

According to an embodiment of the present invention, the calculated settlement amount information includes settlement amount information included in the full payment approval request, and / or includes an amount excluding the card company fee among the settlement amounts, and It is preferable that the payment amount includes the amount excluding the bansa fee, and / or the payment amount includes the amount excluding the payment agency fee.

Subsequently, the relay server 100 replaces (or restores) the payment agency information included in the payment approval message with the unique information of the wireless payment terminal 150, and also includes the document serial number included in the payment approval message. To restore the original document serial number generated by the wireless payment terminal 150 (1620), and transmits the payment approval full text to the wireless payment terminal 150 through the wireless communication network (1625).

17 is a diagram illustrating a process of settlement of a card payment amount to a mobile affiliate store according to one embodiment of the present invention.

In more detail, FIG. 17 illustrates that the card payment amount is moved by the payment agency after a card payment agent service through the wireless payment terminal 150 provided in the mobile affiliate is provided through the card payment system shown in FIG. 1. Regarding the process of settlement to an affiliated store, a person having ordinary knowledge in the technical field to which the present invention pertains refers to the settlement amount for the card payment agent service of the mobile affiliated store according to the present invention by referring to and / or modifying the drawing 17. Various embodiments of the settlement process may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 17, a card company server having a settlement processing function for the card payment amount in FIG. 1 is referred to as a "card company server" for convenience, and a payment agency server for final settlement of the card payment amount to the mobile affiliate store. For convenience, it is called "payment agency server".

Referring to FIG. 17, after a card settlement agent service is provided through the wireless payment terminal 150 provided in the mobile affiliate store through the card settlement system shown in FIG. 1, a predetermined card company (or a ticket purchase company) is approved for the payment. The document purchase procedure corresponding to the full payment approval request is performed (1700).

Those skilled in the art to which the present invention pertains, since they will be familiar with the various implementation methods for the slip purchase procedure, a detailed description thereof will be omitted for convenience.

If the slip purchase procedure is performed (1705), the card company server calculates a settlement amount for the settlement amount corresponding to the slip purchase (1710).

According to the method of the present invention, the calculated settlement amount is preferably made to include the amount of the credit card company fee from the settlement amount.

Alternatively, the calculated settlement amount is preferably made of the settlement amount including the amount limiting the card company fees and bansa fees.

When the settlement amount of the settlement amount corresponding to the slip purchase is calculated, the card company server deposits the settlement amount to the settlement agency through a predetermined financial system (1715).

According to an embodiment of the present invention, the financial system is a financial computer system in which the card company (or purchase company) financial account and the payment agency financial account are opened for the settlement processing. It is preferable to withdraw money from the credit card company (or slip purchase company) financial account through the financial system and process the deposit (or account transfer) into the payment agency financial account.

In the technical field to which the present invention pertains, a process in which the settlement amount is settled through the financial system (for example, the settlement amount is withdrawn from the credit card company (or slip purchase company) financial account) Direct deposit (or bank transfer) to an agency financial account, or the settlement amount is withdrawn from the card company (or voucher purchaser) financial account and directly deposited (or account transfer) to the payment agency financial account through the bansa account Process, etc.), so a detailed description thereof will be omitted for convenience.

At this time, the payment agency server checks whether the settlement amount corresponding to the full payment approval request is received in connection with the financial system (1720). If the settlement amount corresponding to the full payment approval request is received (1725) In operation 1730, the payment agency server confirms a final settlement target mobile affiliate store for final settlement of the settlement amount settled by the card company.

According to the implementation method of the present invention, the payment agency server inquires the storage medium 130 through the document serial number corresponding to the settlement amount settled by the card company, the final settlement target for final settlement processing of the settlement amount It is desirable to check the mobile merchant.

Thereafter, the payment agency server calculates a final settlement amount for the mobile affiliate store (1735).

According to the exemplary embodiment of the present invention, when the settlement amount information stored in the storage medium 130 includes the limited amount of the card company fee, the bansa fee, and the payment agency fee from the settlement amount included in the settlement approval request text, The processing unit extracts the settlement amount information linked to the mobile affiliate store information from the storage medium 130 to identify a predetermined settlement amount to be settled by the settlement agency to the mobile affiliate store.

Alternatively, when the settlement amount information stored in the storage medium 130 does not include an amount limiting the card company fee, the bansa fee, and the payment agency fee from the payment amount included in the full payment approval request, the settlement processing unit 125 Extracts settlement amount information linked to the mobile affiliate store information from the storage medium 130 and subtracts at least one fee from the extracted settlement amount information to perform settlement processing from the settlement agency to the mobile affiliate store. Confirm the predetermined settlement amount.

When the final settlement amount for the mobile affiliate store is calculated as described above, the settlement agency server deposits the final settlement amount to the mobile affiliate store through a predetermined financial system and processes the settlement (1740).

According to an embodiment of the present invention, the financial system is a financial computer system in which the payment agency financial account and the engineering merchant financial account are opened for the settlement processing, and the settlement amount is set through the financial system. It is preferable that the withdrawal from the payment agency financial account is processed (or account transfer) to the mobile merchant financial account.

18 is a diagram illustrating a card payment system configuration for a mobile affiliate store according to another embodiment of the present invention.

In more detail, FIG. 18 illustrates a payment authorization request for the card payment processing when a card is paid through a predetermined portable card terminal 1800 provided at the mobile affiliate store in a mobile affiliate store that is difficult to provide a card payment service. When the transmission server is provided to the relay server 100 provided in the payment agency through the network means, the payment processing by replacing the mobile merchant information included in the full payment approval request message with the payment agency information in the relay server 100 As a mobile merchant-based card payment system characterized in that, those skilled in the art to which the present invention belongs, it will be able to infer a variety of card payment system configuration for the mobile merchant by referring to and / or modified in this figure 18. As will be appreciated, the invention includes all such inferred implementation methods, in which the invention is not limited. Should you.

Referring to FIG. 18 according to an embodiment of the present invention, a card payment system for a mobile affiliate store includes a portable card terminal 1800 provided to at least one mobile affiliate store and a predetermined network connection provided to the mobile affiliate store. A device 1805 is connected to the portable card terminal 1800 through the network connection device 1805, and receives the full payment approval request message transmitted from the portable card terminal 1800. The relay server 100 to replace the included mobile merchant information with the payment agency information, and transmits the full payment approval request message including the payment agency information replaced by the relay server 100 to a predetermined payment server 135 And a payment server 135 for performing a payment approval procedure included in the full payment approval request.

In this case, the mobile affiliate store does not have any requirements for providing a conventional card payment service (eg, a business registration certificate, a fixed store / store, a communication means for connecting with a Value Added Network (VAN), etc.), and offline. Characterized in that it comprises at least one or more stores and / or stores and / or stalls.

For example, the mobile franchise may be a store temporarily opened in a high season and / or a specific area, and / or a store open at a specific time in a special place (eg, a food stall, a street stall, a flea market, a street market, etc.) , And / or stores that sell various goods on a street and / or in a particular location (e.g., street bargain temporary stores, etc.), and / or stores that always move and provide goods and / or services (e.g., Vehicle-type stores, etc.), and / or all commerce (e.g., door-to-door sales, etc.) that occur temporarily at a specific place and / or street, and / or businesses that deliver and / or deliver to the needs of various buyers (Eg, food delivery, etc.) may be included.

In addition, the payment agency is characterized in that for the at least one or more mobile merchants for the card payment service according to the present invention, for this purpose, the payment agency concludes a franchise contract for at least one mobile merchant and the card payment agency. Characterized in that.

In the franchise contract process between the payment agency and at least one mobile merchant, the payment agency unique information corresponding to the portable card terminal 1800 corresponding to the portable card terminal 1800 provided to the mobile merchant, and the portable card terminal 1800 It characterized in that the mobile merchant financial account information for the settlement of the amount processed through the process of linking and storing in a predetermined database (not shown).

According to the embodiment of the present invention, the payment agency is characterized in that the card payment service requirements for the card payment agent as described above, the card payment generated in the portable card terminal 1800 through the franchise agreement It is characterized by acting on the basis of the card payment service requirements of the payment agency.

That is, the payment agency corresponds to the bansa to transmit the payment approval request text generated in the portable card terminal 1800 when viewed from the portable card terminal 1800 provided in the mobile merchant, the bansa view It corresponds to a special corporation corresponding to a merchant that has a card payment service requirement and transmits a predetermined payment approval request message to the bansa.

According to the exemplary embodiment of the present invention, the payment agency may be a bansa or a special corporation established by the bansa for the card settlement agency as described above, in which case the relay server 100 is the bansa It is preferable to include a bansa server for processing the card payment agent according to the present invention.

According to another exemplary embodiment of the present invention, the payment agency is a special merchant (for example, a merchant that provides a payment agent service for at least one mobile merchant) contracted with a predetermined bansa for the card settlement agency as described above, or It is preferable to correspond to a special corporation (for example, a corporation that provides a billing service for at least one mobile merchant), in this case, the relay server 100 is connected to the bansa through a predetermined dedicated communication network, and / Or, it is preferable to be connected through a secure communication network that provides an encryption / decryption function.

The portable card terminal 1800 provided in the mobile affiliated store has a predetermined card reader (eg, an MS (Magnetic Stripe) reader and / or an integrated circuit (IC) reader, etc.), key input means, and short-range communication in hardware. Means, and the like, predetermined payment means information (e.g., card information read from a customer card) read through the card reader, and payment information (e.g., payment amount, A predetermined payment approval request message including an installment month, etc., and transmits the generated payment approval request message to the relay server 100 via the short distance communication means via the network connection device 1805. It is characterized by comprising a function to.

The network connection device 1805 for connecting the portable card terminal 1800 to a predetermined network means is a communication device provided in the mobile affiliate store, and is connected to the portable card terminal 1800 through a predetermined short range communication means. The portable card terminal 1800 may be connected to a predetermined network means to connect a communication channel between the portable card terminal 1800 and the relay server 100.

The network connection device 1805 may include at least one of an xDSL device having a predetermined short range communication means, a wireless terminal having a predetermined short range communication means, and / or a wired terminal having a predetermined short range communication means. Characterized in that it comprises one or more, wherein the short-range communication means Bluetooth (BlueTooth), Wi-Fi (Wi-Fi), UWB (Ultra Wide Band system), Infrared Ray (RF), RF (Radio Frequency) communication It is preferable to include at least one, and according to the intention of the skilled person, the short range communication means may include a cable communication such as a universal serial bus (USB).

According to the exemplary embodiment of the present invention, the portable card terminal 1800 may be provided (or leased) from the payment agency to the mobile affiliate shop in the process of signing the franchise agreement with the payment agency. The payment approval request text generated by the portable card terminal 1800 is not the conventional bansa server (eg, a bansa side server that receives and processes the payment approval request text transmitted from at least one normal merchant) and the relay server ( 100).

According to an embodiment of the present invention, the full text of the payment approval request generated in the portable card terminal 1800 may include payment means information, payment information (eg, payment amount and installment months, etc.) and the payment information obtained from a predetermined customer card. Mobile merchant information (eg, unique information of the portable card terminal 1800) is preferably included.

The payment approval request text generated in the portable card terminal 1800 may further include a predetermined serial number for the payment approval request text.

Preferably, the portable card terminal 1800 and the relay server 100 are connected through the network connection device 1805, and a communication network connected to the network connection device 1805 is connected to an open network (eg, a transmission / reception packet). Network, which is accessible by a third party, the payment approval request text generated by the portable card terminal 1800 is preferably encrypted and transmitted to the relay server 100. The encrypted payment approval request text is It is preferable to be decrypted by the relay server 100.

Referring to FIG. 18, the relay server 100 receives a predetermined payment approval request message generated by the portable card terminal 1800 through the network connection device 1805 connected to the portable card terminal 1800. The specialized receiving unit 105 and the mobile merchant information included in the received payment approval request message is replaced with the payment agency information, and the payment approval request message replaced with the payment agency information is settled through a bansa predetermined payment server ( 135 to request the payment approval, and through the bansa professional processing unit 115 for receiving a payment approval full text including the payment processing history corresponding to the payment approval request from the payment server 135, and the payment Upon approval, the information storage unit 120 for linking the mobile merchant information and the settlement amount information corresponding to the payment approval and storing the information in the predetermined storage medium 130 and the payment approval That obtained by having a specialized transmission unit 110 for transmitting to the portable card, the terminal 1800 via the network connection device 1805 the statement is characterized.

In addition, the relay server 100 when a predetermined settlement amount is deposited to the settlement agency through a predetermined financial system to settle the settlement amount corresponding to the settlement approval in the card company provided with the settlement server 135, And a settlement processing unit 125 configured to settle the settlement amount to the mobile affiliate store through a predetermined financial system based on the mobile affiliate store information and the settlement amount information stored in the storage medium 130.

The specialized receiver 105 is connected to the portable card terminal 1800 through the network connection device 1805 and at least one payment approval from the at least one portable card terminal 1800 through the network connection device 1805. It is characterized in that it comprises a function configuration for receiving the request message, if the payment approval request message generated in a predetermined portable card terminal 1800 is transmitted through the network connection device 1805, characterized in that for receiving it do.

According to the exemplary embodiment of the present invention, when the payment approval request message transmitted from the portable card terminal 1800 is encrypted through at least one or more encryption methods, the specialized receiving unit 105 receives the received payment approval request message. It is preferable to decrypt through a decryption method corresponding to the encryption method.

The specialized processing unit 115 replaces the mobile affiliate store information included in the payment approval request message received (and / or received and decrypted) by the specialized receiving unit 105 with the payment agency information.

In this case, the mobile merchant information included in the payment approval request text is signed by the payment agency in the franchise agreement with the mobile merchant, the portable card terminal (1800) provided to the mobile merchant provided by the mobile merchant in accordance with the contract conclusion The card terminal 1800 is characterized by including the unique information.

According to the exemplary embodiment of the present invention, the mobile affiliate store information included in the full payment approval request message may include the same data structure as the affiliate store information included in the conventional payment approval request message.

In addition, the payment agency information that replaces the mobile merchant information included in the payment approval request text is the information for the payment approval request for the payment approval request text is processed as the payment approval request from the payment agency, the payment The agency information is characterized in that it comprises the same data structure as the merchant information included in the conventional payment approval request full text, whereby the payment server 135 (or bansa server) receiving the payment approval request text is the payment approval The request is recognized as requested by the payment agency.

That is, the card company provided with the payment server 135, when the payment approval corresponding to the payment approval request text by the payment agency information replaced as described above, the settlement amount corresponding to the payment amount included in the payment approval request text (E.g., the amount excluding the card company fee from the payment amount) is settled and deposited to the payment agency.

According to an exemplary embodiment of the present invention, if a predetermined document serial number is previously included in the full payment approval request, but the document serial number is not valid for the card payment agent (for example, the portable card terminal 1800). If the document serial number included in the payment approval request text is used only for the settlement processing between the mobile merchant and the payment agency), the specialized processing unit is valid for the card settlement agent (for example, the payment agency is used for settlement between card companies). It is preferable to generate a predetermined document serial number and replace the document serial number (eg, the document serial number included in the portable card terminal 1800) previously included in the full payment approval request.

If the document serial number previously included in the full payment approval request is valid for the card settlement agent, the specialized processing unit 115 may skip the process of replacing the document serial number, and the present invention is not limited thereto. No.

According to another exemplary embodiment of the present invention, when a predetermined document serial number is not included in the payment approval request text, the specialized processing unit 115 is effective for the card settlement agent (eg, the payment agency settles between card companies). It is preferable to generate a predetermined document serial number, which will be used for processing, in the preamble of the payment approval request.

The specialized processing unit 115 transmits the payment approval request text that replaces the mobile affiliate information with the payment agency information to a predetermined payment server 135 through a ban, and requests payment approval.

According to an exemplary embodiment of the present invention, the specialized processing unit 115 transfers the payment approval request message replaced with the payment agency information to a predetermined bansa server (for example, a payment approval request message transmitted from a payment terminal provided in a conventional normal merchant). Receiving and transmitting to a predetermined payment server (135) relayed to the bansa server, and the bansa server after the payment approval request received the payment approval request received from the payment terminal provided in the conventional normal merchants Through the same professional processing as the full text, the payment approval request message may be relayed to the payment server 135 provided in the card company corresponding to the payment means information included in the full payment approval request message.

According to another exemplary embodiment of the present invention, the specialized processing unit 115 is the payment approval to the payment server 135 provided in the card company corresponding to the payment means information included in the payment approval request message replaced with the payment agency information. It is possible to transmit the full text request, in this case the relay server 100 is to perform the function of the bansa server provided in the bansa.

The specialized processor 115 may receive a payment approval message including a payment processing history corresponding to the payment approval request from the payment server 135 through the bansa.

According to an embodiment of the present invention, the payment approval request message replaced with the payment agency information is received by a predetermined bansa server (for example, a payment approval request message transmitted from a payment terminal provided in a conventional normal affiliated predetermined payment server ( In the case of transmitting to the payment server 135 through the bansa server relaying to (135), the professional processing unit 115 is a payment processing corresponding to the payment approval request from the payment server 135 through the bansa server It is desirable to receive the full payment approval statement including the details.

According to another embodiment of the present invention, when the payment approval request message replaced with the payment agency information is directly transmitted from the relay server 100 to the payment server 135, the specialized processing unit 115 is the payment server. It is preferable to receive a payment approval text including a payment processing history corresponding to the payment approval request from 135.

According to an embodiment of the present invention, the payment processing details included in the received payment approval text may include payment approval details or payment error details.

If the payment processing details included in the payment approval text includes the payment approval details, the information storage unit 120 stores the mobile approval information (for example, the payment approval request message received through the specialized receiving unit 105). Mobile affiliate store information included in the) and the predetermined settlement amount information is characterized in that the storage in the predetermined storage medium 130.

According to the exemplary embodiment of the present invention, the mobile affiliated store information preferably includes unique information of the portable card terminal 1800 included in the full payment approval request message received through the specialized receiving unit 105.

In addition, the mobile merchant information is a document serial number included in the full payment approval request in the portable card terminal 1800, and / or replaced by (or included) in the full payment approval request by the specialized processing unit 115 It is preferable that the serial number is further included.

According to the exemplary embodiment of the present invention, the settlement amount information stored in the storage medium 130 in association with the mobile affiliate store information includes payment amount information included in the full payment approval request, and / or The payment amount includes the amount excluding the card company fee, and / or the payment amount includes the amount excluding the bansa fee, and / or the payment amount includes the amount excluding the payment agency fee. desirable.

By purchasing a document corresponding to the full payment approval request from a card company (or a purchase agent) equipped with a payment server 135 that has approved the card payment (for example, by confirming a document serial number corresponding to the full payment approval request) ), When the card company (or the purchase company) has settled a predetermined settlement amount (for example, the amount excluding the card company fee among the settlement amount) for the settlement amount included in the full payment approval request, the settlement amount is the document Deposits are made to the payment agency through a predetermined financial system including a serial number.

The financial system is a financial computer system in which the credit card company (or slip purchase company) financial account and the settlement agency financial account are opened for the settlement processing, and the settlement amount is set by the credit card company (or through the financial system). Document purchase company) characterized in that the withdrawal from the financial account is processed (or account transfer) to the payment agency financial account.

In the technical field to which the present invention pertains, a process in which the settlement amount is settled through the financial system (for example, the settlement amount is withdrawn from the credit card company (or slip purchase company) financial account and the settlement agency) The process of depositing directly (or account transfer) into a financial account, or the settlement amount is withdrawn from the card company (or voucher purchaser) financial account and directly deposited (or account transfer) to the payment agency financial account through the bansa account. Etc.), so a detailed description thereof will be omitted for convenience.

When the settlement amount according to the card settlement agent is deposited to the settlement agency, the settlement processing unit performs the settlement through mobile merchant information (for example, the document serial number included in the settlement approval request) stored in the storage medium 130. It is characterized by checking the mobile merchant corresponding to the amount.

If the mobile merchant corresponding to the settlement amount is confirmed, the settlement processing unit 125 is processed from the storage medium 130 to the mobile affiliate store based on the settlement amount information stored in association with the mobile affiliate store information. A predetermined settlement amount to be settled is identified, and the settlement settlement amount is settled to the mobile affiliated store through a predetermined financial system.

According to the embodiment of the present invention, the settlement amount processed by the settlement processing unit 125 to the mobile merchant stores the card company fee, the bansa fee, and the payment agency fee from the payment amount included in the payment approval request. Corresponding.

For example, when the settlement amount information stored in the storage medium 130 includes the amount of the card company fee, the bansa fee, and the payment agency fee in the payment amount included in the full payment approval request, the settlement processing unit 125 may be configured. By extracting the settlement amount information linked to the mobile merchant information from the storage medium 130, the payment agency checks the predetermined settlement amount to be settled to the mobile merchant.

Alternatively, when the settlement amount information stored in the storage medium 130 does not include an amount limiting the card company fee, the bansa fee, and the payment agency fee from the payment amount included in the full payment approval request, the settlement processing unit 125 Extracts settlement amount information linked to the mobile affiliate store information from the storage medium 130 and subtracts at least one fee from the extracted settlement amount information to perform settlement processing from the settlement agency to the mobile affiliate store. Confirm the predetermined settlement amount.

Thereafter, the settlement processing unit 125 processes the settlement amount to the mobile affiliate store through a predetermined financial system based on the mobile affiliate financial account information secured in a franchise contract process between the settlement agency and the mobile affiliate store. It is done.

The financial system is a financial computer system in which the payment agency financial account and the engineering merchant financial account are opened for the settlement processing, and the settlement amount is withdrawn from the payment agency financial account through the financial system. It is characterized in that the deposit (or account transfer) processing to the mobile merchant financial account.

Those skilled in the art to which the present invention pertains will be familiar with the process of settlement of the settlement amount through the financial system, so a detailed description thereof will be omitted for convenience.

Referring to FIG. 18, a payment server 135 that processes payment approval for a payment approval request message transmitted from the relay server 100 may include a card company (eg, a card company corresponding to payment means information included in the payment approval request message). And a card company that issues a card having at least one payment method to the card payment customer), receives at least one full payment approval request message through a predetermined payment network, and reads the received full payment approval request message. By performing a payment approval procedure for the corresponding payment approval request, generating a payment processing history including a predetermined payment approval history or a payment error history, and generating a predetermined payment approval text including the payment processing history to generate the payment. Characterized in that it comprises a payment approval unit 140 for transmitting through a network, the payment approval unit 14 0) indicates predetermined card information for performing the payment approval process and limit information for each card (e.g., when the payment method information included in the full payment approval request message corresponds to the credit card payment method). If the credit limit information or the payment method information included in the full payment approval request corresponds to the check / debit card payment method, the financial account information (or financial account balance information) associated with the check / debit card is cooperatively processed. It is characterized by the management.

According to the exemplary embodiment of the present invention, when the payment approval request requested through the full payment approval request is approved while the payment approval unit 140 performs the payment approval procedure, the payment approval unit 140 The document serial number included in the payment approval request text is managed until the document corresponding to the payment approval request text is purchased and / or the settlement amount corresponding to the payment approval request text is completed. do.

Those of ordinary skill in the art to which the present invention pertains may include credit card payment means and / or check card payment means and / or debit card payment means. Since you will be familiar with the technical features of the payment approval unit for performing the payment approval procedure, a detailed description thereof will be omitted for convenience.

According to the present invention, the payment server 135 is included in the full payment approval request message, when the payment approval request requested through the full payment approval request message is approved in the process of performing the payment approval process. Purchase and process a document corresponding to the full payment approval request through a document serial number (or when a document corresponding to the document serial number is purchased through a predetermined document purchase company), and a predetermined payment amount corresponding to the purchased document And a payment settlement unit 145 for calculating a predetermined settlement amount from the settlement and processing the calculated settlement amount through a predetermined financial system.

If a person having ordinary knowledge in the technical field to which the present invention pertains, the document corresponding to the full text of the payment approval request is processed for purchase (or a document corresponding to the document serial number is purchased through a predetermined document purchase company), and Since you will be familiar with the technical features of the payment settlement unit for processing a predetermined settlement amount corresponding to the purchased document, a detailed description thereof will be omitted for convenience.

19 is a diagram illustrating a functional configuration of a portable card terminal 1800 that provides a card settlement agent service for a mobile affiliate store according to another exemplary embodiment of the present invention.

More specifically, FIG. 19 illustrates an embodiment of a portable card terminal 1800 having a payment mode for a card payment agent service for a mobile merchant, and a person having ordinary skill in the art to which the present invention pertains. By referring to and / or modifying this drawing 19, it is possible to infer the configuration of various portable card terminals 1800 for the card payment agency service for the mobile merchant, but the technical features of the present invention are limited by this drawing 19. It is to be understood that the present invention is intended to cover all the inferred embodiments.

Referring to FIG. 19, a portable card terminal 1800 having a payment mode for a card payment agent service for a mobile merchant basically includes a control unit 1905, a memory unit 1950, a card reader unit 1910, and a key input unit. And a power supply unit 1925 for supplying power to the screen output unit 1915, the near field communication unit 1930, the security application module 1935, the print output unit 1940, and the portable card terminal 1800. And at least one terminal function unit (not shown) according to the intention of the skilled person.

The control unit 1905 controls the overall operation of the portable card terminal 1800 according to the function configuration, manages the flow of information or data between each component, and the portable card terminal 1800 for card payment processing for the mobile affiliate store. At least one processor and an execution memory (for example, a register) including a CPU (Central Processing Unit) / MPU (Micro Processing Unit) in hardware and at least one component included in the And / or a random access memory (RAM) and a bus for inputting and outputting predetermined data, and predetermined recording for performing a function unique to the portable card terminal 1800 in software. A predetermined program routine which is loaded from the medium into the execution memory and computed by the processor. And / or include program data (hence, a predetermined program recorded on a recording medium provided in the portable card terminal 1800 for card payment agency processing for the mobile merchant, and / or the portable card terminal 1800). In this functional configuration, the components that can be processed by software are shown in the control unit 1905).

According to an exemplary embodiment of the present invention, the controller 1905 may include components (eg, the memory unit 1950, the card reader unit 1910, the key input unit 1920, and the screen) provided in the portable card terminal 1800. The portable card terminal by interworking an output unit 1915, a short range communication unit 1930, a security application module 1935, a print output unit 1940, and / or a terminal functional unit (not illustrated) according to the intention of a person skilled in the art). In addition to controlling and managing providing the electronic payment service defined in 1800, the components provided in the portable card terminal 1800 for the card payment agent service for the mobile merchant according to the present invention by interworking with each other It is preferable to execute a program recorded on a recording medium provided in the portable card terminal 1800 for controlling and / or for a card settlement service for the mobile affiliate store.

The memory unit 1950 inputs and outputs when an operation by a predetermined program routine (or code) and / or program data (eg, a program routine (or code)) for controlling the overall operation of the portable card terminal 1800 is performed. General term for non-volatile memory for storing information or data), including at least hardware-based electrically erasable and programmable read only memory (EEPROM) and / or flash memory (FM) and / or hard disk drive (HDD). It includes one or more storage means, the control unit 1905 is a predetermined program routine and program data required for performing a predetermined control function (for example, the program routine is input or output to perform a predetermined function) Data) is stored.

According to the exemplary embodiment of the present invention, the memory unit 1950 preferably stores specific information of predetermined portable card terminal 1800 corresponding to the portable card terminal 1800, and the portable card terminal 1800 The unique information is preferably included in a predetermined payment approval request text generated by the portable card terminal 1800.

The customer receiving the card payment agent service for the mobile merchant according to the present invention through the portable card terminal 1800, based on the ISO / IEC 7810 standard MS (Magnetic Stripe) card, and / or ISO / IEC 7816 standard Possesses (or owns) a contact IC card (or wireless IC chip) and / or a card including at least one contactless IC card (or wireless IC chip) based on ISO / IEC 14443 standard, The card reader 1910 may provide an interface for reading at least one or more information or data included in the card.

According to an embodiment of the present invention, the card reader unit 1910 may include an MS reader unit providing an interface between the MS card and the portable card terminal 1800, and / or the contact IC card and the portable card terminal ( 1800) a contact IC reader unit providing an interface between the contactless and / or a contactless IC reader unit providing an interface between the contactless IC card and the portable card terminal 1800.

The MS reader unit is a card reader unit 1910 based on ISO / IEC 7810, and includes at least one magnetic head including a predetermined coil, and includes predetermined information (eg, magnetized binary). When the MS card on which (Binary) data is recorded moves in a predetermined direction in close contact with the magnetic head (or the magnetic head moves in close contact with an MS card in which predetermined information is recorded), a predetermined electrical signal is transmitted to the magnetic head. It is characterized by interfacing the predetermined information or data to the portable card terminal 1800 from at least one or more tracks provided in the MS of the MS card by using the loaded.

The contact IC reader unit is a card reader unit 1910 based on ISO / IEC 7816, and includes at least one contact point making electrical contact with a chip on board (COB) provided in a contact IC card. It supplies power to the IC chip of the IC card through the contact point, and the predetermined information or data from the IC chip through the half duplex transaction using an APDU (Application Protocol Data Unit) It is characterized in that the interface to the portable card terminal (1800).

The contactless IC reader unit is a card reader unit 1910 based on ISO / IEC 14443. The contactless IC reader unit uses at least an electrical contact with the contactless IC card by using capacitive coupling and / or inductive coupling. It comprises one or more antennas, and supplies power to the IC chip of the IC card through the antenna, and portable information or data from the IC chip through the half duplex transaction using the APDU It is characterized in that the interface to the card terminal (1800).

According to an embodiment of the present invention, the card reader unit 1910 may be configured to provide predetermined card information (eg, a card) from at least one card reader unit 1910 for the electronic payment service defined in the portable card terminal 1800. It is preferable to read the payment means information corresponding to the payment means including at least one credit card, check card, debit card, cash card, financial account provided), and also act as a card payment for mobile merchants according to the present invention It is preferable to read predetermined payment means information from at least one card for the service.

According to the exemplary embodiment of the present invention, the payment means information includes credit card payment means information including predetermined credit card information, or check card payment means information including check card information, or debit card payment including debit card information. Preferably, the method comprises at least one or more of prepaid card payment means information including means information or prepaid card information.

The key input unit 1920 includes a predetermined at least one key button including at least one numeric key and / or a character key and / or a function key. Detects information (or a signal) input from a key input device of a predetermined key and is provided to the key input device in a specific input mode and / or operation mode of the portable card terminal 1800 controlled by the controller 1905. When predetermined information (or signal) is inputted from the key button of, a key event corresponding to the input information (or signal) is generated, and the generated key event is provided to the controller 1905. The controller 1905 acquires predetermined key data corresponding to the key event in the current input mode and / or operation mode of the portable card terminal 1800, and / or matches the key event. Instructions for executing the air-defined predetermined function is characterized in that acquisition. The key input unit 1920 and the key input device having at least one key button interlock with each other to perform a function of key input means provided in the portable card terminal 1800.

The key input device interoperating with the key input unit 1920 may include a keypad device including at least one numeric key and a function key, and / or at least one numeric key and a character key (eg, English character key, and / or Korean character). Key) and / or a keyboard device having a function key, and / or having at least one numeric key and a function key in conjunction with the screen output means, and / or having at least one numeric key, a character key and a function key. It is preferable to include at least one touch screen device.

According to an exemplary embodiment of the present invention, the key input unit 1920 may provide key data (eg, payment) corresponding to the electronic payment service from at least one or more key input devices for the electronic payment service defined in the portable card terminal 1800. It is preferable to perform the function of the key input means for receiving the amount, etc., and also in the process of providing a card payment agent service for the mobile merchant from the key input device for the card payment agent service for the mobile merchant according to the present invention. It is preferable to perform the function of the key input means for receiving at least one or more key data required.

According to an exemplary embodiment of the present invention, the key input device corresponding to the key input unit 1920 may include an operation mode of the portable card terminal 1800 in the initial mode and / or the general payment mode for the mobile affiliated store according to the present invention. It is desirable to have a key button for switching to the payment mode for the card payment agency service.

The screen output unit 1915 may be a liquid crystal display (LCD) and / or a CRT (or LCD) by the controller 1905 while the portable card terminal 1800 performs a predetermined function (for example, an electronic payment processing function). And at least one information or data which is predefined or defined in real time to be output to a predetermined output device including a Cathode Ray Tube) through a predefined interface screen. The screen output unit 1915 ) And the screen output device interoperate with each other to perform the function of the screen output means provided in the portable card terminal 1800.

The predefined information or data to be output from the portable card terminal 1800 to the screen output device may be provided in the key data input through the key input unit 1920 and / or in the portable card terminal 1800. Corresponding to information (or data) stored or generated by a component, information (or data) transmitted / received through the local area communication unit 1930, and / or a predetermined operation result performed by the portable card terminal 1800 ( Or data).

According to a preferred embodiment of the present invention, the screen output unit 1915 outputs an electronic payment processing screen according to each electronic payment step to the screen output device for the electronic payment service defined in the portable card terminal 1800. It is preferable to perform a function of a screen output means, and also outputs a processing screen corresponding to the step of providing a card payment agent service for the mobile affiliate store to the screen output device for the card payment agent service for the mobile affiliate store according to the present invention. It is preferable to perform the function of the screen output means.

The short range communication unit 1930 connects a predetermined network connection device 1805 with a short range communication channel while the portable card terminal 1800 performs a predetermined function (for example, an electronic payment processing function). It provides a short-range communication means for connecting the communication server for the professional transmission and reception with the relay server 100 that is connected through the device 1805, the software for connecting the communication channel (or communication session) Communication protocols and / or drivers.

According to an embodiment of the present invention, the near field communication means may include at least one of Bluetooth, Wi-Fi, Ultra Wide Band system (UWB), Infrared Ray communication, and Radio Frequency (RF) communication. It is preferable to include, and the local area communication means may include a cable communication such as USB (Universal Serial Bus) according to the intention of those skilled in the art.

Those skilled in the art to which the present invention pertains, because they will be familiar with the technical features of the short-range communication means, a detailed description thereof will be omitted for convenience.

The secure application module 1935 (SAM) is a confidentiality and / or authentication (required in the process of performing the electronic payment and / or electronic payment by the portable card terminal 1800 using the card ( Security requirements, including Authentication and / or Integrity and / or Nonrepudiation, may be stored in the portable card terminal 1800 without using an authentication server (or relay server 100) on a payment network. As a safety device for performing a secure and reliable structure in the above, a predetermined message processed in the process of performing the predetermined security request function (for example, electronic payment and / or electronic payment function) of the portable card terminal 1800 ( Information or data), adding an authenticator that prevents forgery (or tampering) of the message, or performing the security request function. It is characterized in that to perform the function of storing important key information.

In general, the security application module 1935 preferably consists of a predetermined security application module 1935 inserter and a security application module 1935 chip, the security application module 1935 chip is a chip containing at least 8-bit CPU Application Specific Integrated Circuit (ASIC) chips (eg, PLCC 44-pin chips) and / or IC chips (eg, IC cards in the form of subscriber identity modules (SIMs)) with performance of 2 MIPS (Million Instructions Per Second) or more. It is preferable to comprise a.

In addition, the security application module 1935 is at least one or more security application data (eg, at least one identifier, version, expiration date, issue date, code value required for the portable card terminal 1800 to perform a predetermined security request function) And / or keys (e.g., one master key and at least one application key) and / or protocols (e.g., trading protocols, re-transaction protocols, immediate transaction cancellation protocols, collection protocols, SAM issuance protocols, (e.g. Card company) registration protocol, authorization acquisition protocol, mode switching protocol, key download protocol, SAM revocation protocol) and / or commands (e.g., at least one read / authentication / transmission / registration / setting / mode switching / collection / deletion / discard / Initialization / reprocessing / cancellation command).

The print output unit 1940 may include predetermined information or data (eg, payment processing result information) generated as a result of the portable card terminal 1800 performing a predetermined function (eg, an electronic payment processing function) and / or as a result. Or data) to a predetermined printing device (eg, a receipt printer), and a printing protocol and a driver for printing the printing information or data through the predetermined printing device in accordance with a predefined printing form. It is made to include.

Referring to FIG. 19, the portable card terminal 1800 has an operation mode of the portable card terminal 1800 in order to provide a card settlement agent service for a mobile affiliate store according to the present invention. A mode check unit 1955 for confirming whether the payment mode corresponds to a service, and when the operation mode of the portable card terminal 1800 is the payment mode, the card reader 1910 from the customer card. Read and input predetermined payment means information for the card payment agency service for the mobile merchant, and / or for the card payment agency service for the mobile merchant from a predetermined key input means through the key input unit 1920 An information input unit 1960 for inputting payment information (for example, a payment amount and an installment month), and the payment means input through the information input unit 1960 A professional generation unit 1965 for generating a payment approval request message including information and payment information, and a specialized transmission unit for transmitting the generated payment approval request message to the relay server 100 through the local area communication unit 1930. 1970 and a payment approval message including a payment processing history corresponding to the payment approval request text from the relay server 100 through the short-range communication unit 1930, and the payment processing included in the payment approval text. It is characterized in that it comprises a specialized processing unit 1975 for screen output through the screen output unit 1915, and / or print output through the print output unit 1940.

The mode checking unit 1955 checks whether the operation mode of the portable card terminal 1800 periodically (or in response to the payment mode switch key event) is a payment mode corresponding to a card payment agent service for the mobile affiliate store. Characterized in that.

If the check result indicates that the operation mode of the portable card terminal 1800 is not the payment mode, the portable card terminal 1800 performs a conventional electronic payment processing function, while the operation mode of the portable card terminal 1800 is When the payment mode is confirmed, the mode confirmation unit 1955 outputs the payment mode confirmation result through the screen output unit 1915 and then provides the information input unit 1960.

The information input unit 1960 is a card payment agent for the mobile merchant from the customer card through the card reader unit 1910 to process the electronic payment corresponding to the payment mode for the card payment agency service for the mobile merchant. Characterized in that the predetermined payment means information for the service to read and input, the input payment means information is provided to the full text generation unit (1965).

In addition, the information input unit 1960 to the mobile affiliate store from the predetermined key input means through the key input unit 1920 to process the electronic payment corresponding to the payment mode for the card payment agency service for the mobile affiliate store; Characterized in that the payment information for the card payment agent service for inputting, the input payment information is provided to the full text generation unit.

The full text generation unit 1965 generates a full text of the payment approval request including the payment means information and the payment information input through the information input unit 1960, and the generated full text of the payment approval request Provided to the transmitter 1970.

According to an embodiment of the present invention, the full text generation unit 1965 preferably includes the portable card terminal 1800 unique information stored in the memory unit 1950 in the full text of the payment approval request as the mobile affiliate store information. .

In addition, the full text generation unit 1965 generates a predetermined document serial number for the settlement processing of the settlement amount corresponding to the payment amount included in the payment agency and the payment information to include in the full text of the payment approval request. desirable.

The specialized transmission unit 1970 is characterized in that for transmitting the payment approval request full text generated by the professional generation unit 1965 to the relay server 100 through the short-range communication unit 1930, correspondingly The relay server 100 performs a predetermined payment processing procedure for providing a card settlement agent service for the mobile affiliate store through the payment approval request message, and then the payment approval details or payment errors corresponding to the payment processing result. A payment processing history corresponding to any one of the details is generated, and a predetermined payment approval text including the payment processing history is generated and transmitted to the portable card terminal 1800 through the payment network.

According to the exemplary embodiment of the present invention, when the wireless communication network connected to the local area communication unit 1930 is an open network (eg, a network accessible by a third party to a transmitted / received packet), the specialized transmission unit 1970 may perform the above-mentioned communication. The payment approval request message generated by the full text generation unit 1965 may be encrypted by at least one or more encryption methods, and then transmitted to the relay server 100 through the short range communication unit 1930. The full text is preferably decrypted by the relay server 100.

After the payment approval request message is transmitted to the relay server 100 through the specialized transmitter 1970, the specialized processor 1975 transmits the relay server 100 on the payment network through the local area communication unit 1930. Periodically (or in response to a full-text reception event of the short-range communication unit 1930), a payment approval full-text including a payment processing history corresponding to the full text of the payment approval request is received.

If the payment approval message including the payment processing history corresponding to the payment approval request message is received through the short-range communication unit 1930, the expert processing unit 1975 may include a payment processing history (eg, included in the payment approval message). Payment approval details, or payment error details) is output through the screen output unit 1915, and / or through the print output unit 1940, characterized in that for outputting, thereby to the mobile affiliated store The electronic payment procedure for the card payment agent service is completed.

20 is a diagram illustrating a payment approval request specialized structure for the card settlement of the mobile merchant according to another embodiment of the present invention.

More specifically, FIG. 20 illustrates a payment approval request specialized structure generated for a card payment of a mobile affiliate store in a predetermined portable card terminal 1800, and specifically, read from a customer card in the portable card terminal 1800. If the payment means information includes credit card information, it is for a payment approval request specialized structure generated for the card payment agent of the mobile merchant based on the credit card.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 20 to correspond to each payment means information (e.g., check card, debit card, prepaid card, etc.) as intended by those skilled in the art. It will be possible to infer various payment approval request professional structure for the card payment agency of the mobile merchant, but the present invention includes all the implementation methods inferred, the present payment approval request professional structure is limited to that illustrated in Figure 20 It never happens.

Referring to FIG. 20, the payment approval request full text structure may include at least one specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and an end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text is a transaction classification item (eg, credit approval request, credit approval cancellation, etc.) related to the credit card payment, Terminal_ID item for the portable card terminal 1800, POS Entry Mode item, and TRACK II Data items (e.g., PAN (Primary Account Number) area of TRACK II of MS card and AD (Additional Data) corresponding to payment means information obtained from a predetermined card through a card reader included in the portable card terminal 1800 ) And / or credit card information obtained from the DD (Discretionary Data) area, or credit card information obtained from the credit card file of the IC card, and after a predetermined FS (File Separator, 0X1C) It includes the installment month item, the total amount item, and the service fee item corresponding to the payment information, and also the Working Key Index item, password item, product code item and document serial number item It comprise.

Those skilled in the art to which the present invention pertains will clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Description is omitted.

According to an exemplary embodiment of the present invention, the Terminal_ID item in the payment approval request message includes unique information of a predetermined portable card terminal 1800 corresponding to the portable card terminal 1800, and unique to the portable card terminal 1800. The information (mobile merchant information) is replaced by payment agency information in the relay server 100 receiving the full payment approval request.

In addition, in the full text of the payment approval request, the slip serial number item includes a predetermined slip serial number generated by the portable card terminal 1800, and is used for settlement processing between the mobile affiliate store and the payment agency, and the mobile affiliate store. It is replaced by a predetermined document serial number generated by the payment agency in the relay server 100 for the card payment agency for.

According to another exemplary embodiment of the present invention, the document serial number item of the payment approval request message generated by the portable card terminal 1800 may include a null value, and thus the present invention is not limited thereto.

21 is a diagram illustrating an operation process of the portable card terminal 1800 according to an embodiment of the present invention.

In more detail, FIG. 21 illustrates a preferred operation process for the card payment proxy service of the mobile merchant in accordance with the present invention in the portable card terminal 1800 shown in FIG. 19 on the card settlement system shown in FIG. Those skilled in the art to which the present invention pertains, various operations of the portable card terminal 1800 for the card payment agent service of the mobile merchant according to the present invention by referring to and / or modifying the Figure 21. It may be inferred, but the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

Referring to FIG. 21, a mobile card terminal 1800 shown in FIG. 19 for a card payment agent service of a mobile affiliated store according to the present invention uses payment means information (eg, credit card information) from a customer card through a predetermined card reader. Reading credit card payment method information, or check card payment method information including check card information, or debit card payment method information including debit card information, or prepaid card payment method information including prepaid card information). In operation 2100, payment information including a payment amount and an installment month is input through a predetermined key input means.

Thereafter, the portable card terminal 1800 extracts unique information of the portable card terminal 1800 to be included in the payment approval request message shown in FIG. 20 from the memory unit, and further includes a payment approval request message shown in FIG. A document serial number to be included is generated (2105).

When at least one or more information to be included in the full payment approval request is secured as described above, the portable card terminal 1800 is the payment means information, payment information, portable card terminal 1800 unique information and the document serial number as shown in FIG. Generate a payment approval request full text including 2110.

If the encryption processing for the generated payment approval request text is not necessary (for example, if the portable card terminal 1800 is a closed network connected by a network connection device 1805 to which local area communication is connected) 2115, The portable card terminal 1800 transmits the full text of the payment approval request to the relay server 100 provided in the payment agency through the network connection device 1805 (2120).

On the other hand, if encryption processing for the generated payment approval request message is necessary (for example, the portable card terminal 1800 is connected to the network connection device 1805 to which short-range communication is connected, the communication network is connected to an open network (third to the transmission / reception packet). 2115), the portable card terminal 1800 performs an encryption procedure for the full text of the payment approval request (2125).

According to an embodiment of the present invention, the encryption procedure for the full payment approval request may include secret key (or symmetric key) based encryption, and / or public key based encryption, and / or electronic envelope based encryption, and / or key exchange. It is preferable to include at least one or more of the base encryption.

If the encryption procedure for the payment approval request text is completed (2130), the portable card terminal 1800 is the encrypted payment to the relay server 100 provided in the payment agency through the network connection device 1805 Send the full request for approval (2135).

After transmitting the full payment approval request message to the relay server 100 provided in the payment agency as described above, the portable card terminal 1800 performs payment corresponding to the full payment approval request message through the network connection device 1805. Periodically, it is checked whether a predetermined payment approval text including a processing history is received (2140).

If a predetermined payment approval message including a payment processing history corresponding to the payment approval request message is received through the network access device 1805 (2145), the portable card terminal 1800 receives the received payment approval message. The payment processing details included in the portable card terminal 1800 is output to the screen output means provided, and / or to the print output means provided to the portable card terminal 1800 (2150).

22 is a diagram illustrating an operation process of the relay server 100 of the payment agency for the card payment agent of the mobile merchant according to another embodiment of the present invention.

In more detail, FIG. 22 shows the entire payment approval request shown in FIG. 20 through the process shown in FIG. 21 in the portable card terminal 1800 shown in FIG. When transmitting to the relay server 100 provided in the payment agency on, receiving the full payment approval request from the relay server 100 for the preferred operating process for the card payment agency service of the mobile merchant according to the present invention, If one of ordinary skill in the art to which the present invention pertains, various operations of the relay server 100 for the card payment agent service of the mobile merchant according to the present invention can be inferred by referring to and / or modifying the present invention. It should be noted that the present invention encompasses all of the inferred implementation methods and is not limited to the implementation method shown in FIG.

Referring to FIG. 22, the payment approval request shown in FIG. 20 is performed through the process shown in FIG. 21 in the portable card terminal 1800 shown in FIG. 19 for the card payment agency service of the mobile merchant in accordance with the present invention. When the message is generated and transmitted, the relay server 100 receives the payment approval request message through the network connection device 1805 and checks whether the received payment approval request message is decoded (2200).

According to the exemplary embodiment of the present invention, if the received payment approval request text is encrypted through at least one encryption method in the portable card terminal 1800, the encrypted payment approval request text is predetermined according to the encryption method. It is preferable to decrypt through a decoding method.

If the received payment approval request message is not decrypted (for example, if the received payment approval request message is not encrypted in the portable card terminal 1800) (2205), the relay server 100 may request the payment approval request. The portable card terminal 1800 included in the full text is replaced with the payment agency information (2220).

On the other hand, if it is necessary to decrypt the received payment approval request text (for example, if the received payment approval request text is encrypted through at least one encryption method in the portable card terminal 1800) (2205), the relay server 100 ) Performs a decryption procedure for the encrypted payment approval request message (2210), and when the decryption procedure for the encrypted payment approval request message is completed (2215), the relay server 100 completes the payment approval request message. The portable card terminal 1800 included in the mobile station 1800 performs the process of replacing the unique information with the payment agency information (2220).

As described above, after the portable card terminal 1800 unique information included in the payment approval request text is replaced with the payment agency information, the relay server 100 replaces the document serial number included in the payment approval request text ( Or add (2225).

If the check result does not need to replace (or add) the document serial number included in the payment approval request text (2230), the relay server 100 through the predetermined bansa predetermined payment for the payment approval request text The server 135 transmits the data to the server 135 (2240).

On the other hand, if the check result has to replace (or add) the document serial number included in the payment approval request text (2230), the relay server 100 is a predetermined document serial to be replaced (or added) to the payment approval request text. After generating a number, and replaces (or adds) the generated document serial number with the payment approval request text (2235), and transmits the payment approval request text to a predetermined payment server 135 through a predetermined bansa. (2240).

According to an exemplary embodiment of the present invention, the relay server 100 transmits a payment approval request message replaced with the payment agency information to a predetermined bansa server (for example, a payment approval request message transmitted from a payment terminal provided in a conventional normal merchant). Receiving and transmitting to a predetermined payment server (135) relayed to the bansa server, and the bansa server after the payment approval request received the payment approval request received from the payment terminal provided in the conventional normal merchants Through the same professional processing as the full text, the payment approval request message may be relayed to the payment server 135 provided in the card company corresponding to the payment means information included in the full payment approval request message.

According to another exemplary embodiment of the present invention, the relay server 100 is the payment approval to the payment server 135 provided in the card company corresponding to the payment means information included in the payment approval request text replaced with the payment agency information. It is possible to transmit the full text request, in this case the relay server 100 is to perform the function of the bansa server provided in the bansa.

FIG. 23 is a diagram illustrating a method of encrypting and transmitting a payment approval request message in a symmetric key (or secret key) method in a portable card terminal 1800 according to an embodiment of the present invention.

More specifically, FIG. 23 is an embodiment of the present invention for encrypting and transmitting the payment approval request text in a symmetric key (or secret key) method in a portable card terminal 1800 equipped with an encryption function as shown in FIG. In the art to which the present invention pertains, various modifications may be made to refer to and / or modify this figure 23 to encrypt the full text of the payment approval request in a symmetric key (or secret key) manner in the portable card terminal 1800. Although the implementation method may be inferred, the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 23 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate (or security application module) provided in the portable card terminal 1800, the public certificate ( Or a security application module) is an IC chip of ID-000 type stored in a predetermined memory unit 1950 provided in the portable card terminal 1800, and / or mounted or detached from the portable card terminal 1800. (Or an IC card), and / or when the portable card terminal 1800 has a predetermined IC card reader, it can be stored in an IC card inserted into the IC card reader. This is not limited.

According to another embodiment of the present invention, the symmetric key (or secret key) is stored in the memory unit 1950 provided in the portable card terminal 1800 in addition to the public certificate (or security application module), and / or relay It can be included in the interface screen provided from the server 100 to the portable card terminal 1800, and / or embedded in a communication program communicating with the relay server 100 on the portable card terminal 1800. By this, the semi-invention is not limited.

Referring to FIG. 23, a predetermined payment approval request including predetermined payment means information, payment information, unique information on a portable card terminal 1800, and a document serial number may be made by the professional generation unit 1965 of the portable card terminal 1800. When the full text is generated, it is provided to the full text transmitter 1970 (2300). When the full payment approval request text is provided, the full text transmitter 1970 is provided with an official certificate provided in the portable card terminal 1800. Or (2305) reads a predetermined symmetric key (or secret key) for encrypting the payment approval request text from the security application module, and encrypts the payment approval request text through the read symmetric key (or secret key). (2310).

Here, the encryption function of the specialized transmission unit 1970 is called E (Encryption), the symmetric key (or secret key) is k (key), the payment approval request full text P (Plaintext), and the symmetric key ( Alternatively, if the full text of the payment approval request encrypted with a secret key) is C (Ciphertext), the encryption function of the full text transmission unit 1970 may be expressed by an expression such as "Ek (P) = C".

According to an embodiment of the present invention, an algorithm for encrypting the full text of the payment approval request through the symmetric key (or secret key) by the specialized transmission unit 1970 may include SEED, DES (Data Encryption Standard), Triple-DES, At least one of Skipjack and International Data Encryption Algorithm (IDEA) is preferably included. Various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

When the payment approval request message is encrypted through the symmetric key (or secret key) as described above, the short-range communication unit 1930 transmits the encrypted payment approval request message through the communication protocol corresponding to the network connection device 1805. Transmission to the relay server 100 (2315).

24 is a diagram illustrating a method of decrypting a payment approval request message encrypted and received at the relay server 100 by a symmetric key (or secret key) method according to an embodiment of the present invention.

In more detail, FIG. 24 shows a symmetric key (or secret) in the relay server 100 as shown in FIG. 18 for the full payment approval request received encrypted from the portable card terminal 1800 equipped with the encryption function as shown in FIG. The method of decrypting by a key) method, and if the present invention has a general knowledge in the technical field to which the present invention belongs, and with reference to and / or modified this figure 24, the encrypted payment authorization in the portable card terminal 1800 Various implementation methods for decrypting the request text in a symmetric key (or secret key) manner may be inferred, but the present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 24 according to the embodiment of the present invention, the symmetric key (or secret key) is preferably read from the public certificate (or security application module) provided in the relay server 100, the public certificate (or Security application module) is preferably stored in a predetermined database (not shown) in conjunction with the relay server 100, by which the present invention is not limited.

Referring to FIG. 24, the professional receiving unit 105 of the relay server 100 receives the encrypted payment approval request message through the network connection device 1805 and provides it to the specialized processing unit 115 (2400). The payment approval request message may be received through a communication protocol stack defined in the network connection device 1805.

Thereafter, the specialized processing unit 115 extracts a predetermined symmetric key (or secret key) for decrypting the encrypted payment approval request message from the authorized certificate (or security application module) provided in the relay server 100. In operation 2405, the encrypted payment approval request message is decrypted using the extracted symmetric key (or secret key) (2410).

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), the full text of the payment approval request encrypted with the symmetric key (or secret key) k (key) and the symmetric key (or secret key). (Ciphertext) and the decrypted payment approval request full text is P (Plaintext), the function of decrypting the encrypted payment approval request full text by the specialized processing unit is "Dk = P, or Dk (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment authorization request full text through the symmetric key (or secret key) may be SEED, DES (Data Encryption Standard), Triple-DES. Preferably, at least one of Skipjack, International Data Encryption Algorithm (IDEA), and various other decryption algorithms may be used, the decryption algorithm is the encryption algorithm used in the portable card terminal 1800 And the present invention is not limited by a specific decoding algorithm.

When the payment approval request text encrypted through the symmetric key (or secret key) is decrypted as described above, the specialized processing unit 115 transmits the decrypted payment approval request text to the payment server 135 through the bansa ( 2415).

FIG. 25 is a diagram for a method of encrypting and transmitting a payment approval request message in a public key based structure in a portable card terminal 1800 according to an embodiment of the present invention.

In more detail, FIG. 25 is an embodiment of the present invention for encrypting and transmitting the full payment approval request message in a public key infrastructure structure in a portable card terminal 1800 equipped with an encryption function as shown in FIG. 19. Those skilled in the art may refer to and / or modify this drawing 25 to infer various implementation methods for encrypting the payment approval request text in a public key manner in the portable card terminal 1800. The present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In this figure 25 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate (or security application module) provided in the portable card terminal 1800, and the public certificate (or security application). Module) is an IC chip (or IC) of ID-000 type stored in a predetermined memory unit 1950 provided in the portable card terminal 1800 and / or mounted or detached from the portable card terminal 1800. Card) and / or stored in an IC card inserted into the IC card reader when the portable card terminal 1800 includes a predetermined IC card reader, and the present invention is not limited thereto. No.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate (or security application module) to the portable card terminal 1800. The present invention is not limited by this.

Referring to FIG. 25, a predetermined payment approval request including predetermined payment means information, payment information, unique information on a portable card terminal 1800, and a serial number of a mobile card terminal 1800 may be generated by the specialized generation unit 1965. When the full text is generated, it is provided to the full text transmission unit 1970 (2500). When the full text approval request is provided, the full text transmission unit 1970 approves the payment from the authorized certificate (or security application module). A predetermined server-side public key for encrypting the request message is extracted (2505), and the payment approval request message is encrypted through the extracted server-side public key (2510).

Herein, the encryption function of the specialized transmission unit 1970 is referred to as E (Encryption), the server-side public key is k1 (key), the payment approval request message is encrypted with P (Plaintext), and the server-side public key. If the full text of the payment approval request is referred to as C (Ciphertext), the encryption function of the full text transmission unit 1970 may be expressed by a formula such as "Ek1 (P) = C".

According to an exemplary embodiment of the present invention, the algorithm for encrypting the payment approval request message through the server-side public key is RSA (Ron Rivest, Adi Shamir, Len Adleman) or DSA (Digital Signature). Algorithm), DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH is preferably included at least one or more. The present invention is not limited by this.

For example, in the case of encrypting the full payment approval request message through the RSA encryption algorithm among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a prime number that is not disclosed by the different prime factors of n is a. And b, if the published index (e.g., 3 or 216+) is e, and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a -1) (b-1) ", wherein the encryption function of the specialized transmission unit 1970 may be expressed as" C = Ek1 (P) = Pe mod n ".

When the payment approval request message is encrypted through the server-side public key as described above, the short-range communication unit 1930 transmits the encrypted payment approval request message to the relay server 100 through the network component (2515). .

FIG. 26 is a diagram illustrating a method of decrypting a full payment approval request message encrypted and received by a relay server 100 in a public key based structure according to an embodiment of the present invention.

In more detail, FIG. 26 illustrates a public key infrastructure structure in the relay server 100 as shown in FIG. 18 for the entire payment approval request received encrypted from the portable card terminal 1800 equipped with the encryption function as shown in FIG. The present invention relates to an embodiment of the present invention, which, if known to those skilled in the art to which the present invention pertains, refers to and / or modifies the present invention with reference to FIG. 26 and encrypts with the server-side public key in the portable card terminal 1800. Although various implementation methods for decrypting the entire request for approval may be inferred in the public key infrastructure structure, the present invention includes all the inferred implementation methods and is not limited to the implementation method illustrated in FIG.

In FIG. 26 according to the embodiment of the present invention, the server-side private key for decrypting the full payment approval request message encrypted with the server-side public key in a public key infrastructure structure may include the public certificate provided in the relay server 100. Or it is preferably read from the security application module, the public certificate (or security application module) is preferably stored in a predetermined database (not shown) in conjunction with the relay server 100, whereby the present invention It is not limited.

Referring to FIG. 26, the professional receiving unit 105 of the relay server 100 receives the encrypted payment approval request message through the network connection device 1805 and provides it to the specialized processing unit 115 (2600). The payment approval request message may be received through a communication protocol stack defined in the network connection device 1805.

Thereafter, the specialized processing unit 115 extracts a server-side private key for decrypting the encrypted payment approval request message from the authorized certificate (or security application module) provided in the relay server 100 (2605). The encrypted payment approval request message is decrypted through the extracted server-side private key (2610).

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), the server-side private key is k2 (key), and the settlement approval request text encrypted with the server-side public key is C (Ciphertext) and the server. When the payment approval request text decrypted with the side private key is P (Plaintext), the function of decrypting the encrypted payment approval request text by the specialized processing unit 115 is "Dk2 = P, or Dk2 (Ek (P)) = It can be expressed by an expression such as "P".

According to an embodiment of the present invention, an algorithm for decrypting the payment approval request message encrypted by the server-side public key in the portable card terminal 1800 by the specialized processor 115 using the server-side private key is RSA (Ron Rivest). , Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although a decryption algorithm may be used, the decryption algorithm is matched with an encryption algorithm used in the portable card terminal 1800, and the present invention is not limited to a specific decryption algorithm.

For example, in the case of decrypting the full payment approval request message through the RSA decryption algorithm, the public method (Modulus) used in the decryption process is not disclosed with n and different prime factors of n. If the prime is a and b, the published exponent (e.g. 3 or 216+) is e and the undisclosed exponent is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1) (b-1) ", where the decoding function of the specialized processor may be expressed as" P = Dk2 = Cd mod n ".

As described above, when the payment approval request text encrypted with the server-side public key is decrypted by the portable card terminal 1800, the specialized processing unit 115 transmits the decrypted payment approval request text through the bansa. The payment server 135 transmits (2615).

FIG. 27 is a diagram illustrating a method of encrypting and transmitting a full payment approval request message in an electronic envelope method in a portable card terminal 1800 according to an embodiment of the present invention.

More specifically, Figure 27 relates to an embodiment of the present invention for encrypting and transmitting the full payment approval request message in an electronic envelope method in the portable card terminal 1800 equipped with the encryption function as shown in Figure 19, the present invention If one of ordinary skill in the art, it will be able to infer various implementation methods for encrypting the payment approval request full text in an electronic envelope method in the portable card terminal 1800 by referring to and / or modified in this figure 27, The invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

In this figure 27 according to the embodiment of the present invention, the server-side public key is preferably read from the public certificate (or security application module) provided in the portable card terminal 1800, and the public certificate (or security application). Module) is an IC chip (or IC) of ID-000 type stored in a predetermined memory unit 1950 provided in the portable card terminal 1800 and / or mounted or detached from the portable card terminal 1800. Card) and / or stored in an IC card inserted into the IC card reader when the portable card terminal 1800 includes a predetermined IC card reader, and the present invention is not limited thereto. No.

Alternatively, the server-side public key may be extracted from a predetermined directory (not shown) operated and managed by a certification authority that issues the certificate (or security application module) to the portable card terminal 1800. By the way, the present invention is not limited.

Referring to FIG. 27, a predetermined payment approval request including predetermined payment means information, payment information, unique information on a portable card terminal 1800, and a document serial number may be made by the professional generation unit 1965 of the portable card terminal 1800. When the full text is generated, it is provided to the full text transmitter (1970) (2700). When the full text of the payment approval request is provided, the full text transmitter (1970) sends the full text of the payment approval request to a secret key (symmetric). A predetermined random secret key for encryption is generated (2705), and the full text of the payment approval request is encrypted using the generated secret key (2710).

Herein, the encryption function of the specialized transmission unit 1970 is called E (Encryption), the secret key is r (random secret key), the payment approval request is P (Plaintext), and the payment approval encrypted with the secret key. When the request message is called C (Ciphertext), the encryption function of the message transmission unit 1970 may be expressed by an equation such as "Er (P) = C".

According to an embodiment of the present invention, the algorithm for encrypting the full text of the payment approval request by the specialized transmission unit 1970 includes the SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and IDEA (International). It is preferable to include at least one or more of Data Encryption Algorithm, and in addition, various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

Thereafter, the specialized transmission unit 1970 encrypts the secret key (random secret key) used to encrypt the full payment approval request message. For this purpose, the specialized transmission unit 1970 performs the authentication certificate (or security application module). A predetermined server-side public key is extracted from the 2715, and the secret key is encrypted using the server-side public key (2720).

Here, the encryption function of the specialized transmission unit 1970 is called E (Encryption), the server-side public key is encrypted with k1 (key), the secret key is r (random Secret key), and the server-side public key. If the secret key is C (Ciphertext), the encryption function of the specialized transmission unit 1970 may be expressed by an expression such as "Ek1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the private key through the server-side public key by the specialized transmission unit 1970 may include RSA (Ron Rivest, Adi Shamir, Len Adleman) and DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the undisclosed prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the specialized transmission unit 1970 may be expressed as" C = Ek1 (r) = re mod n ".

If the payment approval request is encrypted with the secret key, and the secret key is encrypted with the server-side public key, the specialized transmission unit 1970 with the payment approval request message and the server-side public key encrypted with the secret key. Generate and provide transaction data associated with an encrypted secret key to the local area communication unit 1930 (2725), and the local area communication unit 1930 transmits the transaction data to the relay server 100 through a network component ( 2730).

FIG. 28 is a diagram illustrating a method of decrypting the full payment approval request message encrypted and received by the relay server 100 according to an embodiment of the present invention by an electronic envelope method.

In more detail, FIG. 28 shows the transaction in the relay server 100 as shown in FIG. 18, which receives the transaction data including the encrypted payment approval request message from the portable card terminal 1800 equipped with the encryption function as shown in FIG. The present invention relates to a method of decrypting data by an electronic envelope method. If the present invention belongs to a general knowledge, the electronic bag in the portable card terminal 1800 may be referred to and / or modified with reference to FIG. 28. Although various implementation methods for decrypting transaction data encrypted in the same manner may be inferred by the same electronic envelope method, the present invention includes all the inferred implementation methods and is not limited to the implementation method shown in FIG.

In this figure 28 according to the embodiment of the present invention, the server-side private key for decrypting the transaction data in an electronic envelope method is preferably read from the public certificate (or security application module) provided in the relay server 100. In addition, the public certificate (or security application module) is preferably stored in a predetermined database (not shown) in conjunction with the relay server 100, by which the present invention is not limited.

Referring to FIG. 28, the specialized receiver 105 of the relay server 100 receives predetermined transaction data including the encrypted payment authorization request message through the network connection device 1805 and the specialized processor 115. (2800), the transaction data is preferably received via a communication protocol stack defined in the network connection 1805.

Thereafter, the specialized processing unit 115 extracts a server-side private key for decrypting the encrypted secret key included in the transaction data from the authorized certificate (or security application module) provided in the relay server 100 (2805). By decrypting the secret key encrypted with the server-side public key in the portable card terminal 1800 through the extracted server-side private key (2810), a predetermined secret key for decrypting the full text of the payment approval request is extracted. In operation 2815, the payment approval request message is decrypted using the extracted secret key (2820), and the payment approval request message encrypted with the secret key is extracted from the portable card terminal 1800 (2825).

Here, the decryption function of the specialized processing unit 115 is called D (Decryption), the server-side private key is k2 (key), the secret key encrypted with the server-side public key is C (Ciphertext), and the server side. When the secret key decrypted with the private key is r (random secret key), the function of decrypting the encrypted secret key by the specialized processing unit 115 is " Dk2 = r, or Dk2 (Ek1 (r)) = r " The same formula can be used.

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the portable card terminal 1800 through the server-side private key is RSA (Ron Rivest, Adi). Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, at least one or more of the various forms of decoding algorithms Although this may be used, the decryption algorithm is matched with the encryption algorithm used in the portable card terminal 1800, and the present invention is not limited to the specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the specialized processing unit 115 may be expressed as" P = Dk2 = Cd mod n ".

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), the secret key is r (random secret key), the payment approval request message encrypted with the secret key (C (Ciphertext)), and the decryption. When the payment approval request message is P (Plaintext), the function of the specialized processing unit 115 to decrypt the encrypted payment approval request message is "Dr = P, or Dr (Er (P)) = P". It can be expressed as an expression.

According to an embodiment of the present invention, the algorithm for decrypting the encrypted payment approval request message through the private key 115 may include SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, IDEA ( International Data Encryption Algorithm) preferably comprises at least one or more, and may be used in addition to a variety of decryption algorithms, the decryption algorithm is matched with the encryption algorithm used in the portable card terminal (1800) The present invention is not limited by the specific decoding algorithm.

When the payment approval request text is decrypted as described above, the specialized processor 115 transmits the decrypted payment approval request text to the payment server 135 through the bansa (2830).

29A and 29B illustrate a method of encrypting and transmitting a payment approval request message in a key exchange method in a portable card terminal 1800 according to an embodiment of the present invention.

More specifically, FIGS. 29A and 29B illustrate an embodiment of the present invention, which encrypts and transmits the payment approval request message in a key exchange method in a portable card terminal 1800 equipped with an encryption function as shown in FIG. 19. Those skilled in the art may refer to and / or modify this drawing 29 to infer various implementation methods for encrypting the full payment approval request message in a key exchange method in the portable card terminal 1800. The present invention includes all the inferred implementation methods, and is not limited to the implementation method illustrated in FIG.

In this figure 29 according to the embodiment of the present invention, the terminal-side private key and the server-side public key are preferably read from the certificate (or security application module) provided in the portable card terminal 1800. The certificate (or security application module) is stored in a predetermined memory unit 1950 provided in the portable card terminal 1800, and / or mounted in or detached from the portable card terminal 1800 in the form of ID-000. It may be stored in an IC chip (or IC card), and / or stored in an IC card inserted into the IC card reader when the portable card terminal 1800 includes a predetermined IC card reader. The present invention is not limited.

Alternatively, the terminal-side private key and the server-side public key are extracted from a predetermined directory (not shown) operated and managed by an authentication authority that issues the certificate (or security application module) to the portable card terminal 1800. It is possible that the present invention is not limited thereby.

Referring to FIGS. 29A and 29B, the full text generation unit 1965 of the portable card terminal 1800 includes predetermined payment means information, payment information, unique information of the portable card terminal 1800, and a document serial number. When the payment approval request is generated, it is provided to the specialized transmission unit 1970 (2900). When the payment approval request is provided, the specialized transmission unit 1970 hashes the payment approval request message in a predetermined one-way hash. Create a Message Digest containing a hash code of a certain length regardless of the length of the full text of the payment authorization request, for example, and the original message through the hash code (or message digest). One-way hash function that cannot verify (or infer) The portable card terminal 1800 and the relay server 100 use the same hash function to generate a predetermined message digest. 2905, and digitally sign 2910 by encrypting the message digest with the terminal-side private key.

Here, the encryption function of the specialized transmission unit 1970 is called E (Encryption), the terminal side private key is t1 (terminal side key), the message digest is m (message digest), and the terminal side private key is encrypted. If the message digest is referred to as C (Ciphertext), the digital signature function of the specialized transmission unit 1970 may be expressed by an expression such as "Et1 (m) = C".

According to an embodiment of the present invention, an algorithm for encrypting the message digest by the specialized transmission unit 1970 using the terminal-side private key includes RSA (Ron Rivest, Adi Shamir, Len Adleman), and DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, ECDH, or at least one of the above. Preferably, various types of encryption algorithms may be used. The invention is not limited.

For example, in the case of encrypting the message digest through the RSA encryption algorithm, among the encryption algorithms, a public method (Modulus) used in the encryption process is n, and a decimal number that is not disclosed by the different prime factors of n is a. b, if the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a- 1) (b-1) ", wherein the digital signature function of the specialized transmission unit may be expressed as" C = Et1 (m) = me mod n ".

In addition, the specialized transmission unit 1970 generates a predetermined random secret key for encrypting the payment approval request text in a secret key (symmetric key) method (2915), and the payment approval Through the generated private key by linking the request message with the copy of the message digest encrypted with the terminal-side private key and a certificate (eg, a certificate including the terminal-side public key) included in the public certificate (or security application module). Encrypt (2920).

Herein, the encryption function of the specialized transmission unit 1970 is referred to as E (Encryption), the secret key is r (random secret key), the payment authorization request full text and the copy of the certificate is encrypted with P (Plaintext), and the secret key When the payment approval request full text and the certificate copy are referred to as C (Ciphertext), the encryption function of the full text transmission unit 1970 may be expressed by a formula such as "Er (P) = C".

According to an embodiment of the present invention, an algorithm for encrypting the full text of the payment approval request and the certificate copy through the secret key is SEED, DES (Data Encryption Standard), Triple-DES, Skipjack. It is preferable to include at least one or more of an International Data Encryption Algorithm (IDEA), and various types of encryption algorithms may be used, but the present invention is not limited to a specific encryption algorithm.

In addition, the specialized transmission unit 1970 extracts a predetermined server-side public key from the public certificate (or security application module) in order to encrypt the secret key that encrypted the full payment approval request message (2925), and the server The secret key encrypting the full payment approval request message is encrypted using the side public key (2930).

Herein, the encryption function of the specialized transmission unit 1970 is referred to as E (Encryption), the server side public key is referred to as s1 (server side key), the secret key as r (random secret key), and the server side public key. When the encrypted secret key is C (Ciphertext), the encryption function of the specialized transmission unit 1970 may be expressed by an expression such as "Es1 (r) = C".

According to an embodiment of the present invention, the algorithm for encrypting the private key through the server-side public key by the specialized transmission unit 1970 may include RSA (Ron Rivest, Adi Shamir, Len Adleman) and DSA (Digital Signature Algorithm). , DH (Diffie, Hellman), ECC (Elliptic Curve Cryptosystem), KCDSA, ECDSA, ECDH, or at least one of the one or more preferably, but may be used in various forms of encryption algorithm, but by a specific encryption algorithm The present invention is not limited.

For example, in the case of encrypting the secret key through the RSA encryption algorithm among the encryption algorithms, the public method (Modulus) used in the encryption process is n, and the non-public prime numbers with different prime factors of n are a and b. , If the published index (e.g., 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod (a-1). (b-1) ", wherein the encryption function of the specialized transmission unit may be expressed as" C = Es1 (r) = re mod n ".

The payment authorization request message is encrypted with the generated private key in association with a copy of a certificate including the message digest encrypted with the terminal-side private key and the terminal-side public key, and the secret key is encrypted with the server-side public key. When encrypted, the specialized transmission unit 1970 copies the certificate including the message digest and the terminal-side public key encrypted with the payment approval request message and the terminal-side private key encrypted through the secret key. Generates predetermined transaction data in association with a secret key encrypted with a public key, provides the generated transaction data to the local area communication unit 1930 (2935), and the local area communication unit 1930 provides the transaction data with a network component. Through the transmission to the relay server 100 through (2940).

30A and 30B illustrate a method of decrypting a full payment approval request message encrypted and received by the relay server 100 according to an exemplary embodiment of the present invention using a key exchange method.

In more detail, Figures 30a and 30b is a relay server 100 as shown in Figure 18 that receives the transaction data including the encrypted payment authorization request full text from the portable card terminal 1800 equipped with the encryption function as shown in Figure 19 In the embodiment of the present invention for decrypting the transaction data in a key exchange method, if the present invention belongs to a general knowledge, referring to and / or modified in this figure 30 in the portable card terminal 1800 Although various implementation methods for decrypting the transaction data encrypted by the key exchange scheme may be inferred by the same key exchange scheme, the present invention includes all the inferred implementation methods and is limited to the implementation method illustrated in FIG. Not.

In FIG. 30 according to the embodiment of the present invention, the server-side private key and the terminal-side public key for decrypting the transaction data in a key exchange method are provided with the authorized certificate (or security application module) provided in the relay server 100. Preferably, it is read from the, the official certificate (or security application module) is preferably stored in a predetermined database (not shown) in conjunction with the relay server 100, by which the present invention is not limited.

30A and 30B, the full-text receiving unit 105 of the relay server 100 receives the transaction data including the encrypted payment approval request text through the network connection device 1805 (3000), Providing the transaction data to the specialized processing unit 115 (3005), the transaction data is preferably received via a communication protocol defined in the network connection device 1805, and / or the encrypted with the secret key And a copy of the certificate including the full message of the payment approval request, the message digest encrypted with the terminal-side private key, and the terminal-side public key, and the secret key encrypted with the server-side public key.

Subsequently, the specialized processor 115 extracts the server-side private key from the public certificate (or security application module) provided in the relay server 100 to decrypt the secret key encrypted with the server-side public key (3010). By decrypting the private key through the server-side private key (3015), thereby decrypting a copy of the certificate including the message digest encrypted with the full payment authorization request message and the terminal-side private key and the terminal-side public key. The secret key is extracted (3020).

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), the server side private key is s2 (server side key), the secret key encrypted with the server side public key is C (Ciphertext), and the server. When the secret key decrypted with the side private key is r (random secret key), the function of decrypting the encrypted secret key by the specialized processing unit 115 is "Ds2 = r, or Ds2 (Es1 (r)) = r". It can be expressed as

According to an embodiment of the present invention, the algorithm for decrypting the secret key encrypted by the server-side public key in the portable card terminal 1800 through the server-side private key is RSA (Ron Rivest, Adi). Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. Although this may be used, the decryption algorithm is matched with the encryption algorithm used in the portable card terminal 1800, and the present invention is not limited by a specific decryption algorithm.

For example, when decrypting the secret key through the RSA decryption algorithm among the public key-based decryption algorithms, n is a public method (Modulus) used in the decryption process, and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the specialized processing unit may be expressed as" P = Ds2 = Cd mod n ".

When the secret key is extracted as described above, the specialized processing unit 115 includes a certificate including the message digest and the terminal-side public key encrypted with the payment approval request message and the terminal-side private key using the extracted secret key. By decrypting the copy (3025), a copy of the certificate including the full message of the payment approval request encrypted with the secret key and the message digest encrypted with the terminal-side private key and the terminal-side public key are extracted.

Here, the decryption function of the specialized processing unit 115 is referred to as D (Decryption), and the secret key is r (random secret key), and the message digest encrypted with the secret key encrypted with the secret key and the terminal private key. And a copy of the certificate including the terminal-side public key C (Ciphertext), and a copy of the certificate including the message digest encrypted with the decrypted full payment authorization request message and the terminal-side private key and the terminal-side public key P ( Plaintext), the specialty processing unit 115 decrypts a copy of the certificate including the encrypted message with the encrypted payment approval request message and the terminal-side private key and the terminal-side public key. , Or Dr (Er (P)) = P ".

According to an embodiment of the present invention, the specialized processing unit 115 copies a certificate including the message digest encrypted with the encrypted payment approval request message and the terminal-side private key through the secret key and the terminal-side public key. The decryption algorithm may include at least one or more of SEED, DES (Data Encryption Standard), Triple-DES, Skipjack, and International Data Encryption Algorithm (IDEA), and various types of decryption algorithms may be used. The decryption algorithm is matched with the encryption algorithm used in the portable card terminal 1800, and the present invention is not limited to the specific decryption algorithm.

In addition, the specialized processor 115 decrypts the message digest encrypted with the terminal-side private key through the terminal-side public key (3030), thereby generating and transmitting the message from the payment approval request message in the portable card terminal (1800). One message digest is extracted (3035).

Here, the decryption function of the specialized processing unit 115 is called D (Decryption), the terminal side public key is t2 (terminal side key), the message digest encrypted with the terminal side private key is C (Ciphertext), and the terminal. When the message digest decrypted with the side public key is m (Message Digest), the function of decrypting the encrypted message digest by the specialized processing unit 115 is "Dt2 = m, or Dt2 (Es1 (r)) = m". The same formula can be used.

According to an exemplary embodiment of the present invention, an algorithm for decrypting a message digest encrypted by the terminal-side private key in the portable card terminal 1800 through the terminal-side public key may include RSA (Ron Rivest, Adi Shamir, Len Adleman (DSA), Digital Signature Algorithm (DSA), Diffie, Hellman (DH), Elliptic Curve Cryptosystem (ECC), KCDSA, ECDSA, and ECDH. An algorithm may be used, but the decryption algorithm is matched with an encryption algorithm used in the portable card terminal 1800, and the present invention is not limited to a specific decryption algorithm.

For example, when decrypting the message digest through the RSA decryption algorithm of the public key-based decryption algorithm, n is a public method (Modulus) used in the decryption process and n is a prime number that is not disclosed by different prime factors of n. If a and b, the published index (e.g. 3 or 216+) is e and the undisclosed index is d, then n satisfies "n = a * b" and d is "de = 1 mod ( a-1) (b-1) ", wherein the decoding function of the specialized processing unit may be expressed as" P = Dt2 = Cd mod n ".

Thereafter, the expert processing unit 115 generates a predetermined message digest through the same one-way hash function as the portable card terminal 1800 by receiving the received payment approval request message (3040), and generates the generated message digest and the message digest. By comparing the decrypted message digest (3045), the validity of the received payment authorization request preamble is verified.

If the generated message digest and the decrypted message digest coincide with each other (3050), the preamble processor 115 transmits the full text of the payment approval request to the payment server 135 through the bansa (3055).

31 is a view illustrating a payment approval request specialized structure processed for the card payment agent of the mobile merchant according to another embodiment of the present invention.

In more detail, Figure 31 is a payment approval request professional structure processed by the relay server 100 for processing the payment approval request generated in a predetermined portable card terminal (1800) for the card payment of the mobile merchant in accordance with the present invention As to, specifically, the mobile card terminal 1800 of the payment approval request generated by the portable card terminal 1800 unique information to replace the payment agency information, the agency information, the bill serial number for the card payment agency of the mobile merchant It is about the structure of payment approval request replaced with a predetermined document serial number.

Those skilled in the art to which the present invention pertains may refer to and / or modify this drawing 31 to correspond to each payment means information (e.g., check card, debit card, prepaid card, etc.) as intended by those skilled in the art. It would be possible to infer a variety of payment approval request professional structure for the card payment agency of the mobile merchant, the present invention includes all the implementation method inferred, this payment approval request professional structure is illustrated in this figure 31 It is by no means limited.

Referring to FIG. 31, the payment approval request full text structure may include at least one or more specialized information defined between a predetermined start character (STX (Start of TeXt), 0X02) and an end character (ETX (End of TeXt), 0X03), After the terminating character is characterized in that it further comprises a checksum (CRC-CCITT) for the specialized information.

The payment approval request text may include a transaction classification item (eg, a credit approval request, a credit approval cancellation, etc.), a Terminal_ID item, a POS Entry Mode item, and a TRACK II Data item (eg, an MS card TRACK). Credit card information obtained from the Primary Account Number (PAN) area and Additional Data (AD) and / or Discretionary Data (DD) areas, or credit card information obtained from the credit card file of the IC card). , The number of installment months, the total amount of money, and the service fee, which correspond to the credit card payment information after the predetermined file separator (File Separator, 0X1C), and also include the Working Key Index item, password item, product code item, and slip Serial number entry and the like.

Persons of ordinary skill in the art to which the present invention pertains can clearly understand the details of each item included in the full payment approval request based on the contents shown in FIG. Detailed description will be omitted.

According to the exemplary embodiment of the present invention, the unique information of the portable card terminal 1800 included in the Terminal_ID item in the payment approval request message is replaced with the payment agency information, and the serial number item is the relay server 100. It is replaced with the predetermined document serial number generated in.

32 is a diagram showing the operation of the payment server 135 of the card company according to another embodiment of the present invention.

More specifically, FIG. 32 shows the entire payment approval request shown in FIG. 31 through the process shown in FIG. 22 in the relay server 100 on the card settlement system shown in FIG. 18. When the transmission to the payment server 135 provided in the card company on the system, the payment server 135, the operation process for receiving the payment approval request full text to perform a predetermined payment approval procedure, the present invention belongs to If one of ordinary skill in the art, it will be able to infer various operations of the payment server 135 for the card payment agent service of the mobile merchant in accordance with the present invention by referring to and / or modified in this figure 32, The present invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

Referring to Figure 32, the payment shown in Figure 31 through the process shown in Figure 22 in the relay server 100 on the card payment system shown in Figure 18 for the card payment agent service of the mobile merchant in accordance with the present invention When transmitting the full approval request, the payment server 135 receives at least one payment approval request message, and at least one or more necessary to perform a payment approval procedure such as the payment means information and payment information from the received payment approval request message The payment approval related information is extracted (3200), and the requested payment approval procedure is performed through the payment approval request message through the extracted at least one payment approval related information (3205).

Those skilled in the art to which the present invention pertains include a check card including payment means information (eg, credit card payment means information including credit card information, or check card information) included in the full payment approval request. You will be familiar with each payment approval procedure corresponding to payment method information, debit card payment method information including debit card information, or prepaid card payment method information including prepaid card information. Omit for convenience.

If, as a result of performing the payment approval procedure, the payment approval corresponding to the full payment approval request message fails (3210), the payment server 135 generates a predetermined payment processing history including a predetermined payment error detail ( 3215).

On the other hand, if the payment approval corresponding to the full payment approval request is successful as a result of performing the payment approval procedure (3210), the payment server 135 generates a predetermined payment processing history including a predetermined payment approval details ( 3220).

By performing the payment approval procedure as described above, when a predetermined payment processing history including the payment approval details or payment error details is generated, the payment server 135 completes the predetermined payment approval text including the payment processing details. Generate (3225), the payment approval full text to the relay server 100 provided to the payment agency through the bansa with reference to payment agency information corresponding to the payment approval related information included in the full payment approval request request; Send (3230).

According to the exemplary embodiment of the present invention, when the payment approval details are included in the payment processing details, the payment server 135 is related to the payment approval for the purchase and / or settlement of the documents corresponding to the full payment approval request. It is desirable to store and manage the information in a predetermined database (not shown).

FIG. 33 is a diagram illustrating an operation process of a relay server 100 of a payment agency for card settlement agency and settlement processing of a mobile affiliate store according to another embodiment of the present invention.

In more detail, FIG. 33 shows a payment agency on the card payment system shown in FIG. 18 through a process shown in FIG. 32 in the payment server 135 on the card payment system shown in FIG. When transmitting to the relay server 100 provided in the, to receive the payment approval from the relay server 100 for the operation process for the card payment agent and settlement processing of the mobile affiliate, the present invention belongs to If one of ordinary skill in the art, it will be able to infer various operations of the relay server 100 for the card payment agent service of the mobile merchant in accordance with the present invention by referring to and / or modified in this figure 33, The invention includes all the inferred implementation methods, and is not limited to the implementation method shown in FIG.

Referring to FIG. 33, a payment server 135 on the card settlement system of FIG. 18 includes a predetermined payment processing history through the process shown in FIG. 32 for the card payment agent service of the mobile merchant according to the present invention. When the payment approval message is transmitted, the relay server 100 receives the payment approval message, reads the payment processing history included in the received payment approval message, and checks whether the payment approval request is approved. (3300).

If the card payment is not approved as a result of reading the payment processing history (3305), the relay server 100 replaces payment agency information included in the payment approval text with the unique information of the wireless payment terminal 150 ( Or restore) the document serial number included in the payment approval text to the original document serial number generated by the wireless payment terminal 150 (3320), and the payment approval text to the network access device 1805. In operation 3325, the wireless payment terminal 150 is transmitted to the wireless payment terminal 150.

On the other hand, if the card payment is approved as a result of reading the payment processing history (3305), the relay server 100 checks the mobile merchant information corresponding to the payment processing history included in the payment approval full text, and also the payment processing history After calculating the settlement amount information corresponding to the operation 3310, the mobile affiliate information and the settlement amount information is processed in association with the predetermined storage medium 130 and stored (3315).

According to the exemplary embodiment of the present invention, the confirmed mobile affiliated store information preferably includes unique information of the wireless payment terminal 150 included in the payment approval request text corresponding to the payment approval text.

In addition, the mobile merchant information is a document serial number that is included in the full payment approval request in the wireless payment terminal 150, and / or a document serial number replaced (or included) by the professional processing request for the payment approval request. It is preferred to further comprise a.

According to the method of the present invention, the calculated settlement amount information includes settlement amount information included in the full payment approval request, and / or includes an amount excluding the card company fee among the settlement amounts; and It is preferable that the payment amount includes the amount excluding the bansa fee, and / or the payment amount includes the amount excluding the payment agency fee.

Subsequently, the relay server 100 replaces (or restores) the payment agency information included in the payment approval message with the unique information of the wireless payment terminal 150, and also includes the document serial number included in the payment approval message. Revert to the original document serial number generated by the wireless payment terminal 150 (3320), and transmits the full payment approval to the wireless payment terminal 150 through the network connection device (1805) (3325).

34 is a diagram illustrating a process of settlement of a card payment amount to a mobile affiliate store according to another embodiment of the present invention.

More specifically, FIG. 34 shows that the card payment amount is moved by the payment agency after a card payment agent service through the portable card terminal 1800 provided in the mobile affiliate store is provided through the card payment system shown in FIG. 18. Regarding the process of settlement to an affiliated store, a person having ordinary knowledge in the technical field to which the present invention belongs, the amount settled for the card payment agent service of the mobile affiliated store according to the present invention by referring to and / or modifying the drawing 34. It will be able to infer various implementation process of the settlement process, but the present invention includes all of the inferred implementation method, and is not limited to the implementation method shown in FIG.

Hereinafter, in FIG. 34, a card company server having a settlement processing function for the card payment amount in FIG. 18 is referred to as a "card company server" for convenience, and a payment agency server for final settlement of the card payment amount to the mobile affiliate store. For convenience, it is called "payment agency server".

Referring to FIG. 34, after a card payment agency service is provided through a portable card terminal 1800 provided in the mobile affiliate store through the card payment system shown in FIG. 18, a predetermined card company (or slip purchase company) is authorized for the payment. The document purchase procedure corresponding to the full payment approval request is performed (3400).

Those skilled in the art to which the present invention pertains, since they will be familiar with the various implementation methods for the slip purchase procedure, a detailed description thereof will be omitted for convenience.

If the voucher purchase procedure is performed (3405), the card company server calculates the settled amount for the settlement amount corresponding to the voucher purchase (3410).

According to the method of the present invention, the calculated settlement amount is preferably made to include the amount of the credit card company fee from the payment amount.

Alternatively, the calculated settlement amount is preferably made of the settlement amount including the amount limiting the card company fees and bansa fees.

When the settlement amount for the settlement amount corresponding to the purchase of the slip is calculated, the card company server deposits the settlement amount into the settlement agency through a predetermined financial system (3415).

According to the implementation method of the present invention, the financial system is a financial computer system in which the credit card company (or purchase company) financial account and the settlement agency financial account for the settlement processing is opened, wherein the settlement amount is the It is preferable to withdraw money from the credit card company (or slip purchase company) financial account through the financial system and process the deposit (or account transfer) to the payment agency financial account.

In the technical field to which the present invention pertains, a process in which the settlement amount is settled through the financial system (for example, the settlement amount is withdrawn from the credit card company (or slip purchase company) financial account and the settlement agency) The process of depositing directly (or account transfer) into a financial account, or the settlement amount is withdrawn from the credit card company (or voucher purchaser) financial account and directly deposited into the payment agency financial account (or account transfer) through the bansa account. Etc.), so a detailed description thereof will be omitted for convenience.

At this time, the payment agency server checks whether the settlement amount corresponding to the full payment approval request is received in connection with the financial system (3420). If the settlement amount corresponding to the full payment approval request is received (3425), In operation 3430, the payment agency server identifies a final settlement target mobile affiliate store that will process the settlement amount settled by the card company.

According to the implementation method of the present invention, the payment agency server inquires the storage medium 130 through the document serial number corresponding to the settlement amount settled by the card company, the final settlement target for final settlement processing of the settlement amount It is desirable to check the mobile merchant.

Thereafter, the payment agency server calculates a final settlement amount for the mobile affiliate store (3435).

According to the exemplary embodiment of the present invention, when the settlement amount information stored in the storage medium 130 includes the limited amount of the card company fee, the bansa fee, and the payment agency fee from the settlement amount included in the settlement approval request text, The processor extracts the settlement amount information linked to the mobile affiliate store information from the storage medium 130, thereby confirming a predetermined settlement amount to be settled by the settlement agency to the mobile affiliate store.

Alternatively, when the settlement amount information stored in the storage medium 130 does not include the card company fee, the bansa fee, and the payment agency fee in the settlement amount included in the payment approval request text, the settlement processing unit stores the storage. Extracting settlement amount information linked to the mobile affiliate store information from the medium 130 and subtracting at least one or more fees from the extracted settlement amount information, the predetermined settlement to be processed by the settlement agency to the mobile affiliate store Check the amount.

When the final settlement amount for the mobile affiliate store is calculated as described above, the settlement agency server deposits the final settlement amount to the mobile affiliate store through a predetermined financial system and processes the settlement (3440).

According to an embodiment of the present invention, the financial system is a financial computer system in which the payment agency financial account and the engineering merchant financial account are opened for the settlement processing, and the settlement amount is set through the financial system. It is preferable that the withdrawal from the payment agency financial account is processed (or account transfer) to the mobile merchant financial account.

According to the present invention, a store temporarily opened in a high season and / or a specific area, and / or a store opened at a specific time in a special place (eg, food stalls, stalls, flea markets, market street stores, etc.), And / or stores that sell various goods on the street and / or in certain places (e.g., street discount temporary stores, etc.), and / or stores that always move and provide goods and / or services (e.g., vehicles) Type stores, etc.), and / or all commerce (e.g., door-to-door sales, etc.) that occur temporarily at specific places and / or streets, and / or businesses that deliver on demand of various buyers and / or stores that need to be delivered ( For example, there is an advantage of providing a card payment service at a mobile store (and / or flowable store) including at least one or more food delivery.

Claims (2)

Receiving, in a server, a full payment approval request message including payment means information, payment information, and mobile affiliate information from a terminal or a device; Replacing, at a server, mobile merchant information included in the full payment approval request message with predetermined payment agency information; Transmitting, by a server, a payment approval request text in which the mobile affiliate store information is replaced with payment agency information to a predetermined payment server; Calculating a final settlement amount to be settled to the mobile affiliated store among the purchase slip settlement amount corresponding to the payment approval request full text at the server, and processing the calculated final settlement amount to the mobile affiliated store; Characterized in that the payment processing method. The method of claim 1, wherein the terminal, Payment processing method, characterized in that the wireless terminal.

Images