KR20110019280A - User identity authentication system for mobile payment approval, and mobile payment approval system - Google Patents

Abstract

PURPOSE: A user identity authentication system for mobile payment approval and a mobile payment approval system, capable of supplying a mobile terminal approval service of high reliability are provided to divide a user authentication process and a payment approval process. CONSTITUTION: A subscriber identification information receiving unit(21) receives identification information of a user from a business carrier. A subscriber identification information obtaining unit(22) inputs information of the mobile terminal authentication on a web. A subscriber authentication unit(23) authenticates individual confirmation information through the subscriber identification information obtaining unit.

Description

User Identity Authentication System for Mobile Payment Approval, and Mobile Payment Approval System}

The present invention relates to a user authentication system and mobile phone payment approval processing system for mobile phone payment approval, in particular, to strengthen the user authentication function for the user attempting mobile phone payment, and separate the user authentication process and payment approval process for each system It is to provide a reliable mobile payment service by blocking inconsistencies in data related to mobile payments.

Currently, mobile payment service is widely used.

The mobile payment service is a method for allowing users to pay a fee for purchasing a product or service through each individual provider, along with a communication fee of a mobile carrier to which the user's mobile phone is subscribed. In this case, each individual service provider will settle the related fee with the mobile carrier.

Users do not have to pay cash immediately and the payment process is simple, making it easy to pay the necessary fees.

However, while the mobile payment service is easy to use, various social problems are occurring because the user authenticates the user only with the mobile phone name authentication for the mobile carrier. That is, a user who occupies another person's mobile phone can pay for the goods or service using the service regardless of the intention of the owner of the mobile phone if he / she knows only predetermined information such as the mobile number and the information of the mobile carrier.

For this reason, there is a problem that can cause inadvertent damage to the mobile phone holder due to fraudulent payment.

In addition, in the conventional mobile phone payment approval process, the mobile phone payment approval processing system unilaterally approves the payment after undergoing mobile phone occupancy authentication in connection with user authentication. There may be a problem that data is inconsistent among operators, mobile payment approval processing systems, and mobile carriers.

Accordingly, the present invention has been made to solve the above problems, by reinforcing the user authentication function to solve the problems caused by the difference between the user who attempts to pay the mobile phone and the name of the mobile phone, the user in the mobile payment approval process User authentication system for mobile phone payment approval, and mobile phone payment approval processing system that separates the authentication process and payment approval process to prevent data inconsistency caused by system accidents, thereby enabling safer and more reliable mobile payment service. The purpose is to provide.

In order to achieve the above object, the user identity authentication system for mobile phone payment approval in accordance with the present invention, the user's identity information for each transaction from the individual operator requesting the mobile phone payment approval (individual operators themselves Identity verification information receiving unit for receiving information (encrypted by using a specific encryption method of a predetermined type of information of the management information); For each transaction for which the mobile phone payment approval is requested, the corresponding user inputs the prescribed type of information on the web so that the personal identification information for each transaction (the information of the prescribed type entered by the user) Personal identification information acquisition unit for obtaining information encrypted using the specific encryption method; And an identity verification unit for verifying whether the personal identification information obtained through the personal identification information acquisition unit and the identification information received through the identification information receiving unit match each other and verifying whether the corresponding user is the user.

The specific encryption scheme may be configured to be impossible to decrypt.

The personal identification information acquisition unit may be configured to receive the predetermined type of information through a payment window provided on the web in order to allow a user to input information necessary for mobile phone payment.

In such an embodiment, the personal identification information may be configured to be generated and transmitted by the payment window.

Mobile phone payment approval processing system according to the present invention, the user identification system for mobile phone payment approval of each embodiment; Through the user authentication system for approving the mobile phone payment, the subscriber of the mobile carrier is connected with the mobile carrier by using the mobile phone number, mobile carrier information, and information of the mobile carrier of the user who successfully authenticated Carrier interworking authentication unit for authenticating whether or not; The one-time encryption key is transmitted to the user's mobile phone according to the authentication result of the communication company interworking authentication unit, and the user receives the one-time encryption key on the web again and checks whether or not it matches with each other to authenticate the occupation state of the mobile phone. Occupancy status authentication unit; And a communication service provider interworking approval processing unit performing a final payment approval procedure between the mobile carrier and the individual operator according to the authentication result in the occupancy status authentication unit and delivering the approval result regarding the mobile phone payment approval request. Can be.

The communication company interworking approval processing unit waiting for a payment approval request from the respective service provider after notifying the individual service provider of the state of the mobile phone being checked by the occupation state authentication unit; And requesting the payment approval of the mobile phone payment approval request to the mobile carrier according to the payment approval request from the respective service provider, and delivering the response to the corresponding service provider to perform the final payment approval process. Can be.

According to the present invention, a user authentication process can be strengthened by comparing user information held by an individual operator with information input by a user who attempts a mobile phone payment.

Accordingly, the mobile phone payment approval processing system may restrict mobile phone payment attempts by unauthorized users other than mobile phone names.

At this time, if the user's personal information is encrypted in a form that cannot be decrypted and only the result value is exchanged, the risk of exposing the personal information of the user who attempts the mobile phone payment may be blocked.

In addition, by separating the payment approval process and the user authentication process that is finally approved for mobile phone payment in the relationship with the mobile carrier, even if the user authentication process is normally terminated to receive payment approval from the mobile carrier to deliver to each operator of each system It can prevent data inconsistencies that may occur due to unexpected circumstances such as errors in internal processing, and ensure data consistency between individual operators, mobile phone payment approval processing systems, and mobile carriers.

In addition, individual operators can execute their own business logic for the user who attempts to make a mobile phone payment after the user is authenticated and before the final payment is approved, thereby adding various event functions to the transaction. Can lead to.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Referring to FIG. 1, an overview of an overall system in which a mobile phone payment service is performed will be described.

Individual operators 13 are operators who provide their own services to their customers, such as shopping malls that sell goods or services on the Internet.

The individual operator 13 allows a user using his paid service to select a mobile phone payment method as one of payment methods.

The mobile payment approval processing system 17 checks whether or not a corresponding payment request can be approved when a user who wants to pay a certain fee for each individual operator selects a mobile payment method. Also called Payment Gateway.

Regardless of the name of the mobile phone payment approval processing system in connection with the present invention, it is possible to add the charge of the user who uses the service of each individual operator in connection with the individual operator and the mobile operator through the communication network to the communication fee of the specific mobile phone. It refers to a system that checks with a carrier and confirms whether a user who attempts a payment actually occupies the mobile phone, and then passes the payment approval.

Let's take a look at the whole process of mobile phone payment.

When a user selects a mobile phone payment method as a bill payment method while using a service of an individual operator 13 by using a computer terminal 11-1 such as a personal computer (PC), the individual operator 13 pays for a mobile phone. The approval processing system 17 requests the approval of the transaction.

The mobile phone payment approval processing system 17 then transmits a payment window to the user's computer terminal 11-1 to confirm the subscriber with the mobile phone number, the mobile carrier information to which the mobile phone is subscribed, and the mobile carrier. Receive necessary information such as personal identification information (eg social security number). Typically this is done on the web.

Then, the mobile phone payment approval processing system 17 communicates with the mobile communication company 15 using the information input by the user through the payment window, and confirms whether the user is a subscriber of the mobile communication company 15.

The mobile phone payment approval processing system 17 generates a one-time authentication key when the user is a subscriber of the mobile carrier 15 and transmits it to the mobile phone 11-2 of the user, and receives the authentication key again on the web. As a result, the mobile terminal checks whether the user is currently occupying the mobile phone.

When the occupancy state of the mobile phone is confirmed, the mobile phone payment approval processing system 17 finally delivers that the payment request has been approved to the respective operator 13 and ends the processing of the mobile phone payment request.

Referring to FIG. 2, a user authentication system for approving a mobile phone payment (hereinafter, referred to as a user authentication system) according to the present invention may be used as a component of the mobile phone payment approval processing system 17 or in conjunction with it. And it checks whether or not the user who attempts to pay for the mobile phone.

The identity verification information receiver 21 receives the identity verification information of the corresponding user for each transaction from the individual operator 13 requesting the mobile phone payment approval.

Here, the identity verification information refers to information in which an individual operator 13 encrypts a predetermined type of information (user characteristic information) among user information related to a transaction requesting mobile phone payment approval using a specific encryption method.

That is, the individual operator 13 stores and maintains the member information of the customers in the member information database 13-1 in order to provide services to their customers, and when a user attempts to pay for the mobile phone, the member information of the corresponding user. User characteristic information is encrypted and transmitted together with mobile phone payment approval request.

The user characteristic information may be variously set as necessary. In general, the user characteristic information may be information (eg, social security number) that the user must input during the mobile phone payment process, and information added to such information for user identification (unjustly). It can be configured as something that is not easily known to those who attempt to make a payment. For example, names, hobbies, all or part of an address.

The personal identification information acquisition unit 22 acquires personal identification information for each transaction by allowing a corresponding user to input user characteristic information on the web for each transaction for which mobile phone payment approval is requested from an individual operator 13. Do this.

Herein, the personal identification information refers to information obtained by encrypting information input by a user (information corresponding to user characteristic information) using the same method as a specific encryption method used by an individual operator.

The encryption of the user characteristic information by the individual operator 13 or the personal identification information acquisition unit 22 is to prevent the exposure of the user's personal information to a third party. Therefore, the individual operator 13 or the personal identification information acquisition The encryption method used by the unit 22 may be configured so that it cannot be decrypted.

That is, since only the encrypted result value is sufficient for user authentication, the mobile phone payment approval processing system 17 does not need to know the user characteristic information itself.

As an example of how the personal identification information acquisition unit 22 obtains personal identification information from the user, information corresponding to the user characteristic information through a payment window provided on the web in order to allow the user to input necessary information for mobile phone payment. Received, the payment window may be configured to generate and send personal identification information.

That is, the payment window transmits the mobile phone payment approval processing system 17 to receive a mobile phone number, mobile carrier information, and information (for example, a social security number) for identifying the subscriber of the mobile carrier from the user.

Looking at the example of the payment window 40 shown in Figure 4, the user selects one of the types of mobile carriers that appears when the user clicks the open button (41-1) mobile carriers subscribed to their carrier input box 41 Enter the information. In addition, the user enters his or her social security number in the social security number input box 43, selects the mobile phone station number using the spread button 44-1, and enters the rest of the mobile phone number in the mobile phone number input box 44-2.

The user inputs corresponding information in the user characteristic information input box 46.

The payment window 40 is interlocked with a module 48 capable of encrypting the information input in the user characteristic information field 46 through a specific encryption method, and when the user clicks the transmission button 47, the payment window 40 is the user. Transmits the entered carrier information, mobile phone number, social security number, and personal identification information generated by the encryption module 48.

The payment window 40 shown in FIG. 4 is only for better understanding of the description and may be variously configured as necessary.

If the user characteristic information is information (eg, social security number) that the user generally needs to input in the mobile payment process, in the example shown in FIG. 4, the user characteristic information input field 46 does not need to be separately provided. In this case, the encryption module 48 will encrypt the information input in the social security number input field 43 through a specific encryption method.

The identity verification unit 23 compares the personal identification information obtained through the personal identification information acquisition unit 22 with the identification information received through the identity verification information receiving unit 21 to determine whether the identity verification success.

Referring to FIG. 3, the personal authentication unit 23 compares the personal identification information obtained through the personal identification information acquisition unit 22 with the identification information received through the identification information receiving unit 21 to determine whether they match each other. Check whether or not (S31).

If the personal identification information and the identification information match each other, it is determined that the user identification is successful (S32, S33), and if the identification information and the identification information do not match each other, it is determined that the identification of the user has failed (S32, S34).

As a result of the determination by the personal authentication unit 23, if the authentication is successful, the mobile phone payment approval processing system 17 proceeds to the subsequent procedure. However, when the personal authentication fails, the mobile phone payment approval processing system 17 determines the The approval can be treated as a failure and the mobile phone payment approval process for the transaction can be terminated.

Referring to Figure 5, the mobile phone payment approval processing system 17 according to the present invention is the user identity authentication system 20, carrier interworking authentication unit 51, occupancy status authentication unit 52, carrier interworking approval processing unit 53 It can be made, including).

When the mobile phone payment approval processing system 17 receives a mobile phone payment approval processing request from each individual operator, the user ID system 20 executes user ID authentication as in each of the embodiments described above, or fails or fails the ID authentication. Judge whether or not.

If the user authentication system 20 determines that the user authentication fails, the mobile phone payment approval processing system 17 considers that the authentication procedure related to the mobile phone payment approval request has failed and sends an authentication failure message to the user and the individual operator 13. After taking countermeasures such as sending a message to the user, the procedure according to the mobile phone payment approval request may be terminated.

However, if the user authentication in the user authentication system 20 is successful, the mobile phone payment approval processing system 17 performs the subsequent procedure.

The telecommunication company interworking authentication unit 51 communicates with the mobile telecommunication company 15 using a mobile phone number, mobile telecommunication company information, and a social security number input by the user through a payment window, thereby authenticating whether the subscriber of the telecommunication company is correct.

If the subscriber authentication in the carrier interworking authentication unit 51 succeeds, the occupancy state authentication unit 52 transmits the one time encryption key to the user's mobile phone 11-2, and the user again to use the one time encryption key on the web. It checks whether the inputs match each other and authenticates the occupancy status of the mobile phone.

If the occupancy status authentication unit 52 succeeds in the occupancy authentication, the carrier interworking approval processing unit 53 proceeds to the final payment approval procedure between the individual operator 13 and the mobile carrier 15 to the corresponding mobile phone payment approval request. The approval results will be delivered.

A specific embodiment in which the telecommunication company interworking approval processing unit 53 performs the final payment approval procedure will be described with reference to FIG. 6.

First, when the carrier interworking approval processing unit 53 is authenticated to the occupation state of the mobile phone in the occupancy state authentication unit 52, the individual operator 13 informs that the user authentication is successful, and then the payment from the individual operator 13 Wait for the approval request (S61).

And, if there is a payment approval request from the individual operator (13) (S63), the mobile carrier 15 requests the payment approval of the mobile phone payment approval request (S64), and delivers the response to the individual operator (13) (S65, S66). Then, the individual operator 13 executes the procedure after payment is normally made, such as delivering the product purchased by the user to the user.

As described above, the authentication procedure by the user authentication system 20, the communication service provider interworking authentication unit 51, and the occupancy status authentication unit 52, and the payment approval process by the service provider interworking approval processing unit 53 are clearly distinguished from each other. .

In addition, the individual operators 13 may execute their business logic for a certain period of time between the step S61 and the step S63, that is, after the user successful authentication of the user is known to the individual operators 13 to market the user ( S62).

Referring to FIG. 7, an example of the overall process of the mobile phone payment approval procedure is performed through the mobile phone payment approval processing system according to the present invention.

When the user 61 makes a purchase order for an individual operator 13 and selects a mobile phone payment method as the bill payment method (S71-1), the individual carrier 13 pays the mobile payment approval processing system 17. By sending the information request to receive the mobile phone payment approval for the case (S71-2).

In particular, the individual operator 13 transmits the identification information together when transmitting the payment information to the mobile phone payment approval processing system 17 in step S71-2.

Now, the mobile phone payment approval processing system 17 transmits a payment window as shown in the example shown in FIG. 4 to the user 61 on the web (S72-1), and the mobile phone number, mobile carrier information, Acquire the resident registration number, personal identification information (S72-2), and compares the acquired personal identification information and the corresponding identity information to check whether or not match with each other (S73-1).

If the personal verification information and the personal identification information do not match with each other as a result of the verification in step S73-1, it is determined that the user identity authentication has failed, and the procedure of the relevant case is terminated after proceeding with the procedure when the user authentication fails (S73-2). S78).

However, if the verification result in step S73-1 and the personal identification information and the identity information match each other, the mobile phone payment approval processing system 17 moves to the mobile phone number, mobile carrier information, social security number entered by the user through the payment window The user checks whether or not the user is a subscriber between the carrier 15 (S74-1, S74-2).

If the subscriber of the mobile carrier is correct as a result of checking in steps S74-1 and S74-2, the mobile phone payment approval processing system 17 generates a one-time authentication key and transmits it to the user's mobile phone and re-enters the authentication key on the web. By checking whether the match is received by the user to check whether the user 61 currently attempting to pay the mobile phone is the occupant of the mobile phone (S75-1, S75-2).

When the occupation status of the mobile phone is confirmed in steps S75-1 and S75-2, the mobile phone payment approval processing system 17 informs the individual service provider 13 that the user authentication has been successful, and then from the individual service provider 13 Wait for the payment approval request (S76-1).

The individual operators 13 execute their business logic for a certain period of time to market the user (S76-2), and then request final payment approval to the mobile phone payment approval processing system 17 (S76-3).

In response to the request in step S76-3, the mobile phone payment approval processing system 17 requests the mobile communication provider 15 to approve payment of the corresponding mobile phone payment approval request (S76-4), and responds to the individual carriers 13 in response thereto. (S76-5, S76-6).

Then, the individual operator 13 executes the procedure after the payment is normally made, such as delivering the product purchased by the user to the user (S76-7).

The above-described embodiments are intended to help the understanding of the present invention, and the present invention is not limited to the above-described embodiments and can be variously modified and implemented by those skilled in the art without departing from the spirit of the present invention. to be.

1 is an overview of the overall system in which the mobile payment service is made,

2 is an embodiment of a user identification system according to the present invention;

Figure 3 is an embodiment of the operation of the user authentication unit,

4 is an embodiment of a payment window,

Figure 5 is an embodiment of a mobile phone payment approval processing system according to the present invention,

6 is an example of an operation of a communication company interworking approval processing unit;

7 is an example of the overall process of the mobile phone payment approval is made in accordance with the present invention.

DESCRIPTION OF THE REFERENCE NUMERALS

11-1: Computer Terminal 11-2: Mobile Phone

13: Individual carrier 15: Mobile carrier

17: mobile phone payment approval processing system 21: identity verification information receiving unit

22: personal identification information acquisition unit 23: identity verification unit

51: carrier interworking authentication unit 52: occupation status authentication unit

53: communication service provider approval processing unit

Claims (6)

From the individual service provider requesting approval of mobile phone payment, the user's identity information (information encrypted by the specific type of information among the member information managed by each service provider using specific encryption method) for each transaction Receiving identity verification information receiving unit; For each transaction for which the mobile phone payment approval is requested, the corresponding user inputs the prescribed type of information on the web so that the personal identification information for each transaction (the information of the prescribed type entered by the user) Personal identification information acquisition unit for obtaining information encrypted using the specific encryption method; And Approved mobile phone payment including a personal authentication unit for verifying whether the personal identification information obtained through the personal identification information acquisition unit and the identification information received through the identification information receiving unit match each other to authenticate whether the user is the identity User Authentication System for. The method of claim 1, The specific encryption method is a user identity authentication system for mobile phone payment approval, characterized in that configured not to be decrypted. The method of claim 1, The personal identification information acquisition unit is configured to receive the predetermined type of information through a payment window provided on the web so that the user can input the information required for mobile phone payment, the user for mobile phone payment approval Identity verification system. The method of claim 3, wherein The personal identification information is a user authentication system for mobile phone payment, characterized in that the payment window is configured to generate and transmit. In the mobile phone payment approval processing system for processing the mobile phone payment approval process for the user using the service of each individual service provider in connection with each individual service provider and a mobile carrier through a communication network, A user identification system for mobile phone payment approval according to any one of claims 1 to 4; Through the user authentication system for approving the mobile phone payment, the subscriber of the mobile carrier is connected with the mobile carrier by using the mobile phone number, mobile carrier information, and information of the mobile carrier of the user who successfully authenticated Carrier interworking authentication unit for authenticating whether or not; The one-time encryption key is transmitted to the user's mobile phone according to the authentication result of the communication company interworking authentication unit, and the user receives the one-time encryption key again on the web and checks whether or not the mobile phone occupies it. Occupation status authentication unit for authenticating; And In accordance with the authentication result in the occupancy status authentication unit, the final communication approval process between the mobile carrier and the individual operator is carried out including a carrier interworking approval processing unit for delivering the approval result for the mobile phone payment approval request case Mobile payment approval processing system, characterized in that. The method of claim 5, The communication company interworking approval processing unit waiting for a payment approval request from the respective service provider after notifying the individual service provider of the state of the mobile phone being checked by the occupation state authentication unit; And Requesting the payment approval of the mobile phone payment approval request to the mobile carrier according to the payment approval request from the respective service provider, and delivering the response to the service provider to perform the final payment approval process. Mobile payment approval processing system.

Images