KR20120076589A - Method for providing electronic payment by using subscriber information and subscriber identification module, system, terminal and communication management apparatus therefor - Google Patents

Abstract

PURPOSE: An electronic payment providing system, system, terminal, and communication management apparatus is provided to protect the personal information of a user by comparing information security tokens created in a communication management apparatus and a terminal. CONSTITUTION: A communication management apparatus(130) creates a first security token by using a first identification number provided to an SIM(Subscriber Identity Module) and first payment information based on subscriber information. A terminal(110) creates a second security token by using a second identification number provided to the SIM and second payment information. The terminal processes payment approval for an electronic payment request signal based on a comparing result between the first and the second security token. A financial payment providing apparatus(140) pays electronic payment for costs by receiving an approval signal.

Description

Method for Providing Electronic Payment by Using Subscriber Information And Subscriber Identification Module, System, Terminal And Communication Management Apparatus Therefor}

One embodiment of the present invention relates to an electronic payment providing method using a subscriber information and subscriber identification module, and a system, a terminal, and a communication management apparatus therefor. More specifically, the electronic payment is performed using the security token generated based on the subscriber information inputted by the user and the unique number of the subscriber identification module for the communication service, thereby securing the user authentication during the electronic payment. The present invention relates to a method for providing electronic payment using a subscriber information and subscriber identification module and a system, a terminal, and a communication management device therefor that can enhance security against terminal hacking.

The contents described in this section merely provide background information on the embodiments of the present invention and do not constitute a prior art.

As a payment method for general commerce or e-commerce, a deposit method through a credit card, a debit card or a bank account is commonly used. However, the conventional payment method has a problem such as inconvenience to carry cash when using cash, the risk of losing cash, the hassle of returning the balance. On the other hand, the use of credit cards as a way to increase the transparency of the taxation of commerce is recommended and many other payment methods are being developed. In particular, as the e-commerce using the Internet has grown steadily, the payment settlement market is rapidly expanding. Until now, most of the payment methods on the Internet are credit card and bankbook online payment, but recently, payment using mobile phones or wired / wireless ARS. New payment methods are emerging and their frequency of use is increasing rapidly.

However, in spite of the change of the payment method, there is a problem in that the loss of the credit card may cause damage due to fraud and personal information leakage. In other words, even if personal information is leaked due to hacking of the Tongsing network at the time of payment, there is a need for an electronic payment method that can maintain security.

In order to solve the above problems, an embodiment of the present invention, an electronic payment providing method and system for using the subscriber information and subscriber identification module that can enhance the security for user authentication and the security for terminal hacking during electronic payment The main purpose is to provide a terminal and a communication management apparatus.

In order to achieve the above object, an embodiment of the present invention extracts first payment information based on subscriber information and a first unique number assigned to a subscriber identification module, and extracts the first payment information and the first unique number. A communication management device for generating and transmitting a used first security token; A second security token is generated and stored by using the second payment information input by the user and the second unique number assigned to the subscriber identification module, and is received from the communication management device when an electronic payment request signal is generated. A terminal processing a payment approval for the electronic payment request signal based on a result of comparing the first security token with the previously stored second security token; And a financial settlement providing device configured to perform an electronic payment for the corresponding cost when an approval signal for the electronic payment approval request signal is received from the communication management device. Provide a provision system.

In addition, according to another object of the present invention, extracting the second unique number assigned to the signed subscriber identification module, and based on the second payment information and the second unique number entered through the key input unit a second security token ( A second security token generator for generating and storing a security token; A terminal communication processor configured to receive a first security token from a communication management device when a payment request signal is received; And a payment approval unit for comparing the first security token with the second security token and processing a payment approval for the electronic payment request signal when the first security token and the second security token match each other. It provides a terminal characterized in that.

In addition, according to another object of the present invention, the subscriber information database for storing subscriber information; An information extraction unit for extracting first payment information and a first unique number assigned to the subscriber identification module based on the subscriber information; A first security token generator configured to generate a first security token using the first payment information and the first unique number; And a communication processing unit which transmits the first security token to the terminal when a request for the first security token is received from the terminal.

In addition, according to another object of the present invention, extracting the second unique number assigned to the signed subscriber identification module, and based on the second payment information and the second unique number entered through the key input unit a second security token ( A second security token generation step of generating and storing a security token; A communication processing step of receiving a first security token from a communication management device when a payment request signal is received from the key input unit; And comparing the first security token with the second security token, and when the first security token and the second security token coincide with each other, a payment approval step of processing payment approval for the electronic payment request signal. It provides a payment method using the subscriber information and subscriber identification module, characterized in that.

According to another object of the present invention, an information extraction step of extracting the first payment information, the first unique number assigned to the subscriber identification module based on the previously stored subscriber information; Generating a first security token using the first payment information and the first unique number; And a communication processing step of transmitting the first security token to the terminal when there is a request for the first security token from the terminal. do.

As described above, according to an embodiment of the present invention, an electronic payment is performed by using a security token generated based on a subscriber information input by a user and a unique number of a subscriber identification module for a communication service. The security against user authentication and the security against terminal hacking can be strengthened. In addition, according to an embodiment of the present invention, when the financial settlement from the user's point of view, it is possible to pay the corresponding cost by using electronic security enhanced security only by PIN (Personal Identification Number) authentication for the terminal owned by the user It works. That is, the user authenticates only the PIN, but since the user performs authentication by comparing the security token which is substantially encrypted information generated by the terminal and the communication management device, the security can be improved. In addition, according to one embodiment of the present invention, even if the security token generated by the terminal and the communication management device is leaked to the outside, the user's personal information can not be confirmed through the respective security token and the unique number of the subscriber identification module Information is protected.

1 is a block diagram schematically showing an electronic payment providing system using subscriber information and subscriber identification module according to an embodiment of the present invention;
2 is a block diagram schematically illustrating a terminal according to an embodiment of the present invention;
3 is a block diagram schematically illustrating a communication management device according to an embodiment of the present invention;
4 is a flowchart illustrating a method for providing electronic payment using subscriber information and subscriber identification module according to an embodiment of the present invention;
5 is an exemplary diagram for a method for providing electronic payment using subscriber information and subscriber identification module according to an embodiment of the present invention.

The first payment information described in one embodiment according to the present invention refers to credit card number information or bank account information entered by a subscriber for payment of a communication fee upon subscription of a communication service, and the second payment information refers to a user terminal 110. It refers to credit card number information or bank account information entered for payment of a communication fee when the entered communication service subscription. The first unique number refers to the unique number of the subscriber identification module assigned to the subscriber when the communication service subscription, the second unique number refers to the unique number of the subscriber identification module concluded in the terminal 110. The first security token refers to encrypted information generated by the communication management device 130 for authentication, and the second security token refers to encrypted information generated by the terminal 110 for authentication.

1 is a block diagram schematically illustrating an electronic payment providing system using subscriber information and subscriber identification module according to an embodiment of the present invention.

Electronic payment providing system according to an embodiment of the present invention includes a terminal 110, subscriber identification module 112, communication network 120, communication management device 130 and financial payment providing device 140. Meanwhile, in an embodiment of the present invention, the electronic payment providing system includes only the terminal 110, the subscriber identification module 112, the communication network 120, the communication management device 130, and the financial payment providing device 140. However, this is merely illustrative of the technical idea of one embodiment of the present invention, and those skilled in the art to which an embodiment of the present invention belongs will not depart from the essential characteristics of the embodiment of the present invention. In the will be applicable to various modifications and variations to the components included in the electronic payment providing system.

The terminal 110 refers to a terminal capable of transmitting and receiving various data via the communication network 120 according to a user's key manipulation, and may be a tablet PC, a laptop, or a personal computer. , A smart phone, a personal digital assistant (PDA), a mobile communication terminal, or the like. That is, the terminal 110 refers to a device having a memory for storing a program for accessing the communication management device 130 through the communication network 120, a microprocessor for executing and controlling the program by executing the program, and the like. do. That is, the terminal 110 may be any terminal as long as it is connected to the communication network 120 and the server-client communication with the communication management device 130 is possible, and any communication computing device such as a notebook computer, a mobile communication terminal, a PDA, and the like may be used. It is a broad concept that includes everything. Meanwhile, the terminal 110 is preferably manufactured in a form having a touch screen, but is not necessarily limited thereto.

Meanwhile, the application downloaded from the terminal 110 refers to an application installed after being downloaded through an application store when the terminal 110 is a smart phone, and downloaded through a communication company server when the terminal 110 is a feature phone. Virtual machine and application.

The terminal 110 according to an embodiment of the present invention extracts the second unique number assigned to the signed subscriber identification module 112 and based on the second unique number and the second payment information input by the user's command. After generating a second security token (Security Token) to store in the subscriber identification module (112). Here, the second payment information is the same information as the credit card number information or bank account information previously registered in the communication management device 130, the second security token is encrypted information, the second payment information and the second unique number Based on the encrypted value. Here, the second security token is preferably a hash value based on the second payment information and the second unique number, but is not necessarily limited thereto. When the payment request signal is received by the user's command, the terminal 110 receives the first security token from the communication management device 130 and compares the first security token with the second security token, thereby obtaining the first security token. If the and the second security token match each other, the payment approval for the electronic payment request signal is processed.

The terminal 110 checks whether the personal identification number (PIN) information input by the user's operation to generate the second security token is authenticated, and if the PIN information is authenticated as a result of the verification, the second security token is Allow to be created. Here, the PIN is a kind of personal identification number, and is generally set to four digits, and eight digits of a personal unblocking key (PUK) are assigned. On the other hand, the PIN can be changed according to the user's needs, and if the user incorrectly inputs the PIN more than a predetermined number consecutively, since the corresponding subscriber identification module is locked, the PIN can be reset by inputting the PUK. However, if the PUK is also input more than a predetermined number of times, the PUK must be discarded and re-granted. The terminal 110 confirms whether the PIN information re-input by the user's operation is authenticated to process the payment approval, and if the PIN information is authenticated as a result of the confirmation, the second security token is the subscriber identification module 112. Allow to be loaded from. When the payment approval for the payment request signal is processed, the terminal 110 transmits a payment approval signal to the communication management device 130.

The terminal 110 includes a hash function, a hash algorithm, a hash algorithm, a data encryption standard (DES), and a message-digest algorithm (MD5) in the second payment information and the second unique number. ), An encrypted second security token is generated using any one of an encryption method such as BitLocker Drive Encryption and Feistel Cipher. Meanwhile, the terminal 110 preferably applies a hash function or a hash algorithm to the second payment information and the second unique number, but is not necessarily limited thereto. Here, the hash function or hash algorithm is a method of generating a kind of short 'electronic fingerprint' from arbitrary data. The hash function produces a result by truncating, replacing, or repositioning the data. This result is generally called a hash value. Because hash functions must work deterministically, if two hash values are different, the original data for that hash value must be different, and vice versa. In other words, the quality of the hash function is determined by how few hash collisions occur in the input area (when two different data have the same hash value) .The more collisions, the more difficult it is to distinguish different data and retrieve data. The cost increases. In other words, the most basic property of every hash function is that if the two hash values are different, the original data is also different. This is because the hash function is deterministic, on the contrary, the hash function is not a singular function. If they have the same hash value, this implies that the original input value is the same, but it does not guarantee that the hash value changes significantly due to the nature of the hash function even if only one bit of the original input is changed.

On the other hand, the terminal 110 stores the second security token generated using the second payment information entered by the user and the second unique number assigned to the subscriber identification module 112 concluded, the electronic payment request signal If so, the function of processing the payment approval for the electronic payment request signal based on a result of comparing the first security token received from the communication management device 130 with the previously stored second security token is mounted in the terminal 110. Can be done via a built-in application. That is, the terminal 110 may download and install an electronic payment application and install the same, and perform the above-described functions through the electronic payment application, but is not limited thereto.

The subscriber identification module 112 stores basic information such as subscriber identification information and phone number information, and is connected to the terminal 110 to provide subscriber identification information. Here, the subscriber identification module is a type of smart card, also called a Universal Integrated Circuit Card (UICC), and includes a microprocessor, a memory, a card operation system (COS), a security algorithm, and an electronically erasable programmable read only memory (EEPROM). ) Can be built. The subscriber identification module 112 is used for subscriber authentication, billing, global roaming, e-commerce, and the like. In addition, the subscriber identification module 112 may be manufactured in the form of a card and inserted into the terminal 110, and may include at least one of a subscriber identification module (SIM), a universal subscriber identity module (USIM), and a micro USIM. It may include.

Various types of information of the user stored in the subscriber identification module 112 include personal authentication information such as a PIN, which is a personal identification number for user authentication of the terminal 110, and a PUK, which is a personal unblocking key. The personal authentication information stored in the memory chip of the subscriber identification module 112 determines whether the card user is a registered user in the network when the subscriber identification module 112 is inserted into the terminal 110. ) To enable use, and thereby the call charge is charged to the user of the subscriber identification module 112. It is determined whether the user of the subscriber identification module 112 is a registered user in the network. If a wrong PIN is input three or more times, the use of the terminal 110 is blocked and a PUK must be input to release it. . If you enter the wrong PUK more than the preset number, you will not be able to make a call except for an emergency call. The PUK is a unique number stored in the subscriber identification module 112 as given at the time of purchase (or providing) of the subscriber identification module 112. Meanwhile, the subscriber identification module 112 according to an embodiment of the present invention stores the second security token in a security area divided into a separate area.

The communication network 120 refers to a network capable of transmitting and receiving data through an internet protocol using various wired and wireless communication technologies such as an internet network, an intranet network, a mobile communication network, and a satellite communication network. Here, since the technology for the communication network 120 is already known technology, a detailed description thereof will be omitted.

The communication management device 130 performs basic and additional service processing for providing a communication service, incoming and outgoing call processing of a subscriber, location registration procedure and handoff procedure, and interworking with other networks. In addition, the communication management device 130 includes a database that stores a service profile of the subscriber information, the terminal identification number (MIN: Mobile Identification Number) of the terminal 110, the terminal unique number (ESN: Electronic Serial Number) And subscriber information by storing information about the type of service.

The communication management apparatus 130 according to an embodiment of the present invention stores subscriber information and extracts first payment information and a first unique number assigned to the subscriber identification module 112 based on the subscriber information. The communication management device 130 generates a first security token using the first payment information and the first unique number, stores the first security token in the subscriber identification module 112, and requests for the first security token from the terminal 110. In this case, the first security token is transmitted to the terminal 110. When the communication management device 130 receives the approval signal for the electronic payment request from the terminal 110, transmits a payment approval signal for the corresponding cost to the financial payment providing device 140, and the financial payment providing device 140. Receives the approval result signal for the corresponding cost from the terminal 110 and transmits it. On the other hand, the communication management device 130 is encrypted by applying the encryption method of any one of a hash function, a hash algorithm, RSA, DES, MD5, bit locker drive encryption and Fistel password to the first payment information and the first unique number. Generate a first security token. Here, the communication management device 130 preferably uses a hash function or a hash algorithm to generate the first security token, but is not necessarily limited thereto.

The financial settlement providing apparatus 140 is a concept of a device including at least one server of a card company server, a financial institution server, a communication billing server, a transportation agency server, and a mobile payment server that performs electronic payment. Of course, the financial settlement providing apparatus 140 may be implemented as any one of a card company server, a financial institution server, a communication billing server, a transportation institution server, and a mobile payment server. The financial settlement providing apparatus 140 receives a payment approval signal and performs a function of processing the amount corresponding to the payment approval signal as a payment means. That is, when the financial settlement providing apparatus 140 receives the approval signal for the electronic payment approval request signal from the communication management device 130, the financial settlement providing apparatus 140 performs the electronic payment for the corresponding cost.

2 is a block diagram schematically illustrating a terminal according to an embodiment of the present invention.

Terminal 110 according to an embodiment of the present invention is a subscriber identification module fastening unit 210, the second security token generation unit 220, PIN authentication unit 230, payment approval unit 240, key input unit 250 And the terminal communication processing unit 260. Meanwhile, in an embodiment of the present invention, the terminal 110 includes a subscriber identity module fastening unit 210, a second security token generating unit 220, a PIN authentication unit 230, a payment approval unit 240, and a key input unit ( 250) and the terminal communication processing unit 260, but this is merely to describe the technical idea of an embodiment of the present invention by way of example, one of ordinary skill in the art to which one embodiment of the present invention belongs Growing up will be applicable to various modifications and variations to the components included in the terminal 110 without departing from the essential characteristics of one embodiment of the present invention. That is, the terminal 110 according to an embodiment of the present invention preferably includes a memory unit, a display unit, a terminal controller, a microphone, a speaker, and the like, but for convenience of description in the present invention, the terminal 110 is a subscriber identity module. It is described that only the fastening unit 210, the second security token generating unit 220, the PIN authentication unit 230, the payment approval unit 240, the key input unit 250, and the terminal communication processing unit 260 are included.

Subscriber identification module fastening unit 210 is fastened with the subscriber identification module 112, and transmits and receives information stored in the subscriber identification module (112). The second security token generator 220 extracts the second unique number assigned to the signed subscriber identification module 112 and based on the second payment information and the second unique number input through the key input unit 250. The second security token is generated and stored in the subscriber identification module 112. The second security token generation unit 220 encrypts the second payment information and the second unique number by applying an encryption method of any one of a hash function, a hash algorithm, RSA, DES, MD5, bit locker drive encryption, and Feistel password. The generated second security token. Here, the second security token is encrypted information, which is an encrypted value based on the second payment information and the second unique number, and the second payment information is credit card number information or bank previously registered in the communication management device 130. The same information as the account information.

The PIN authenticator 230 checks whether the PIN information input through the key input unit 250 is authenticated to generate the second security token, and if the PIN information is authenticated, the second security token generator Allow 220 to generate a second security token. The PIN authenticator 230 checks whether the PIN information re-entered to process the payment authorization is authenticated, and if the PIN information is authenticated, the second security token is loaded into the payment approval unit 240. Allow. The payment approval unit 240 compares the first security token and the second security token, and processes the payment approval for the electronic payment request signal when the first security token and the second security token match each other.

The key input unit 250 includes a button for inputting numbers, letters, and symbols to receive a key or a command from a user who uses the terminal 110. Here, the key input unit 250 may be implemented as a touch screen together with the display unit, but is not limited thereto. When the payment request signal is received from the key input unit 250, the terminal communication processor 260 receives the first security token from the communication management device 130. When the payment approval for the payment request signal is processed through the payment approval unit 240, the terminal communication processor 260 transmits a payment approval signal to the communication management device 130. That is, the terminal communication processor 260 is a digital signal processing function for coding or decoding a voice signal, performing an equalizer function to remove multipath noise, and performing an acoustic data processing function, and a baseband signal for a transmitted / received signal. A baseband conversion function that performs digital-to-analog conversion and analog-to-digital conversion processing, receives an RF (Radio Frequency) signal, converts it into an IF (Intermediate Frequency) signal, and converts an IF signal into an RF signal, The wireless signal may be processed by performing an RF signal processing function for demodulating and amplifying an RF signal and an antenna function for transmitting and receiving a wireless signal in the air. In addition, the terminal communication processor 260 may perform voice or data communication through an access point (AP). That is, the terminal communication processor 260 may be implemented to process data packets using wireless communication technologies such as WLAN, Wi-Fi, WiMAX, and WiBro. However, the present invention is not limited thereto.

3 is a block diagram schematically illustrating a communication management device according to an embodiment of the present invention.

Communication management apparatus 130 according to an embodiment of the present invention is a subscriber information database 310, information extraction unit 320, the first security token generation unit 330, communication processing unit 340 and electronic payment processing unit 350 ). Meanwhile, in an embodiment of the present invention, the communication management device 130 may include a subscriber information database 310, an information extracting unit 320, a first security token generating unit 330, a communication processing unit 340, and an electronic payment processing unit ( It is described as including only 350, which is merely illustrative of the technical spirit of one embodiment of the present invention, those skilled in the art to which one embodiment of the present invention belongs to one embodiment of the present invention Various modifications and variations to the components included in the communication management apparatus 130 may be applied without departing from the essential characteristics of the examples.

The subscriber information database 310 stores subscriber information. Here, the subscriber information database 310 classifies the first payment information included in the subscriber information, the unique number of the subscriber identification module 112, and the telephone number information, and stores and manages them in a database. It may be implemented inside or outside the device 130. Such a database refers to a general data structure implemented in a storage system (hard disk or memory) of a computer system using a database management program (DBMS), and can freely search (extract) data, delete data, edit data, and add data. It is a data storage type that can be used, such as relational database management systems (RDBMS) such as Oracle, Infomix, Sybase, DB2, Gemston, Orion, An object-oriented database management system (OODBMS) such as O2, etc., and an XML Native Database such as Excelon, Tamino, Sekaiju, etc. are used to meet the purpose of an embodiment of the present invention. It can be implemented and has the appropriate fields or elements to achieve its function.

The information extracting unit 320 extracts the first payment information and the first unique number assigned to the subscriber identification module 112 based on the subscriber information stored in the subscriber information database 310. The first security token generator 330 generates a first security token using the first payment information and the first unique number. The first security token generator 330 encrypts the first payment information and the first unique number by applying an encryption method of any one of a hash function, a hash algorithm, an RSA, DES, MD5, a bit locker drive encryption, and a Fiestel password. The generated first security token. When there is a request for the first security token from the terminal 110, the communication processor 340 transmits the first security token to the terminal 110. When the electronic payment processing unit 350 receives the approval signal for the electronic payment request from the terminal 110, the electronic payment processing unit 350 transmits a payment approval signal for the corresponding cost to the financial settlement providing apparatus 140. The electronic payment processing unit 350 receives the approval result signal for the corresponding cost from the financial settlement providing apparatus 140 and transmits it to the terminal 110.

4 is a flowchart illustrating a method for providing electronic payment using subscriber information and a subscriber identification module according to an embodiment of the present invention.

The communication management device 130 extracts first payment information input from an agency, a merchant, or an Internet server when the user first subscribes to a communication service (S410). That is, the subscriber essentially enters a bank account number or credit card number in order to automatically transfer the communication costs after subscribing to the first communication service, and the communication management device 130 acquires the corresponding information. In addition, the communication management device 130 obtains the first unique number of the subscriber identification module 112 assigned to the user when the user uses the communication service (S412). That is, the subscriber identification module 112 is fastened to the terminal 110 to use a communication service, but when the communication service is opened, the communication management device 130 transmits the unique number and first number of the subscriber identification module 112 granted to the corresponding user. Match and store payment information, phone number information, and the like.

The communication management apparatus 130 stores the first payment information and the first unique number (S414), and transmits a payment initialization request signal to the corresponding terminal 110 (S416). The terminal 110 may receive a payment initialization request signal from the communication management device 130 and initialize payment information. Meanwhile, an electronic payment application capable of performing electronic payment to the terminal 110 may be provided to the communication management device 130.

The terminal 110 receives the second payment information input by the user's operation (S418). In this case, the terminal 110 may use the downloaded electronic payment application. The terminal 110 extracts the second unique number assigned to the signed subscriber identification module 112 (S420). Here, the second payment information is the same information as credit card number information or bank account information previously registered in the communication management device 130, and the second security token is encrypted information based on the second payment information and the second unique number. Is a hash value.

The terminal 110 receives the PIN information input by the user's operation to generate the second security token, and authenticates the input PIN by comparing with the PIN of the subscriber identification module 112 (S422). When the input PIN information is authenticated, the terminal 110 generates a second security token using the second payment information and the second unique number (S424). Here, the terminal 110 may generate an encrypted second security token by applying a hash function or a hash algorithm to the second payment information and the second unique number. The terminal 110 stores the generated second security token in the subscriber identification module 112 (S426). On the other hand, the communication management device 130 generates and stores the first security token using the first payment information and the first unique number (S428). Meanwhile, the communication management device 130 generates an encrypted first security token by applying a hash function or a hash algorithm to the first payment information and the first unique number.

The terminal 110 receives a payment request signal according to a user's command (S430). The terminal 110 receives the PIN information re-entered by the user's operation to retrieve the first security token stored in the subscriber identification module 112, and compares the PIN with the PIN of the subscriber identification module 112 again. The information is authenticated (S432). If the re-entered PIN information is authenticated, the terminal 110 loads the second security token from the subscriber identification module 112 (S434).

After receiving the first security token from the communication management device 130, the terminal 110 compares the first security token with the second security token (S436). When the first security token and the second security token coincide with each other, the terminal 110 processes the payment approval for the electronic payment request signal and transmits a payment approval signal to the communication management device 130 (S438). When the communication management device 130 receives the approval signal for the electronic payment request from the terminal 110, transmits a payment approval signal for the corresponding cost to the financial payment providing device 140 (S440). Receive the approval result signal for the corresponding cost from the 140 (S442) and transmits to the terminal 110 (S444). After receiving the approval result signal from the communication management device 130, the terminal 110 processes the purchase completion for the corresponding cost (S446).

In FIG. 4, steps S410 to S446 are described as being sequentially executed. However, this is merely illustrative of the technical idea of an embodiment of the present invention, and the general knowledge in the technical field to which an embodiment of the present invention belongs. Those having a variety of modifications and variations may be applicable by changing the order described in FIG. 4 or executing one or more steps of steps S410 to S446 in parallel without departing from the essential characteristics of an embodiment of the present invention. 4 is not limited to the time series order.

As described above, the electronic payment providing method using the subscriber information and the subscriber identification module according to an embodiment of the present invention described in FIG. 4 may be implemented in a program and recorded in a computer readable recording medium. A computer-readable recording medium for recording a program for implementing a method for providing an electronic payment using the subscriber information and the subscriber identification module according to an embodiment of the present invention may be any type of data that can be read by a computer system. It includes a recording device. Examples of such computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, etc., and also implemented in the form of a carrier wave (e.g., transmission over the Internet) . The computer readable recording medium may also be distributed over a networked computer system so that computer readable code is stored and executed in a distributed manner. In addition, functional programs, code, and code segments for implementing an embodiment of the present invention may be easily inferred by programmers skilled in the art to which an embodiment of the present invention belongs.

5 is an exemplary diagram for a method for providing electronic payment using subscriber information and subscriber identification module according to an embodiment of the present invention.

As shown in FIG. 5, a user inputs a bank account number or a credit card number to automatically transfer communication costs by using an agency, a merchant, or an Internet server when the user first subscribes to a communication service. The communication management device 130 ) Stores the information as first payment information. In addition, the communication management device 130 extracts the unique number of the subscriber identification module 112 assigned to the user when the user uses the communication service and stores it as the first unique number. At this time, the communication management device 130 matches and stores the unique number, the first payment information, the telephone number information, etc. of the subscriber identification module 112 assigned to the user.

Here, an electronic payment application capable of performing electronic payment to the terminal 110 may be provided to the communication management device 130. The terminal 110 receives the second payment information input by the user's operation. In this case, the terminal 110 may use the downloaded electronic payment application. The terminal 110 extracts the second unique number assigned to the signed subscriber identification module 112. Here, the second payment information is the same information as credit card number information or bank account information previously registered in the communication management device 130, and the second security token is encrypted information based on the second payment information and the second unique number. Is a hash value.

The terminal 110 generates a second security token using the second payment information and the second unique number. Here, the terminal 110 may generate an encrypted second security token by applying a hash function or a hash algorithm to the second payment information and the second unique number. The terminal 110 stores the generated second security token in the subscriber identification module 112. Meanwhile, the communication management device 130 generates and stores the first security token using the first payment information and the first unique number. Meanwhile, the communication management device 130 generates an encrypted first security token by applying a hash function or a hash algorithm to the first payment information and the first unique number.

When the terminal 110 receives the payment request signal by the user's command, the terminal 110 receives the first security token from the communication management device 130 and then compares the first security token with the second security token. When the first security token and the second security token coincide with each other, the terminal 110 processes the payment approval for the electronic payment request signal and transmits the payment approval signal to the communication management device 130. When the communication management device 130 receives the approval signal for the electronic payment request from the terminal 110, transmits a payment approval signal for the corresponding cost to the financial payment providing device 140, and the financial payment providing device 140. Receives the approval result signal for the corresponding cost from the terminal 110 and transmits it.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. That is, within the scope of the present invention, all of the components may be selectively combined to operate in one or more, and those skilled in the art to which the present invention pertains without departing from the essential characteristics of the present invention Various modifications and variations will be possible in the. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention but to describe the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

As described above, the present invention is applied to various fields that can enhance security for user authentication and security for terminal hacking during electronic payment. It is a useful invention that generates an effect that can pay the corresponding cost by using the secure electronic payment.

110: terminal 112: subscriber identification module
120: communication network 130: communication management device
140: financial payment providing device 210: subscriber identification module fastening unit
220: second security token generation unit 230: PIN authentication unit
240: payment approval unit 250: key input unit
260: terminal communication processing unit 310: subscriber information database
320: information extracting unit 330: first security token generating unit
340: communication processing unit 350: electronic payment processing unit

Claims (19)

Communication for extracting first payment information based on subscriber information and a first unique number assigned to a subscriber identification module, and generating and transmitting a first security token using the first payment information and the first unique number. Management device;
A second security token is generated and stored by using the second payment information input by the user and the second unique number assigned to the subscriber identification module, and is received from the communication management device when an electronic payment request signal is generated. A terminal processing a payment approval for the electronic payment request signal based on a result of comparing the first security token with the previously stored second security token; And
When the approval signal for the electronic payment approval request signal is received from the communication management device, the financial settlement providing device for performing the electronic payment for the corresponding cost
Electronic payment providing system using the subscriber information and subscriber identification module comprising a. Extracting a second unique number assigned to the signed subscriber identification module, and generating and storing a second security token based on the second payment information input through the key input unit and the second unique number Security token generator;
A terminal communication processor configured to receive a first security token from a communication management device when a payment request signal is received; And
A payment approval unit for comparing the first security token with the second security token and processing the payment approval for the electronic payment request signal when the first security token and the second security token match each other.
And a second terminal. The method of claim 2,
In order to generate the second security token, it is determined whether the personal identification number (PIN) information input through the key input unit is authenticated, and if the PIN information is authenticated as a result of the verification, the second security token generator The terminal further comprises a PIN authentication unit for allowing the second security token to be generated. The method of claim 3, wherein
The PIN authentication unit,
Check whether the PIN information re-input to process the payment approval is authenticated, and if the PIN information is authenticated, allowing the second security token to be loaded into the payment approval unit. Terminal, characterized in that. The method of claim 2,
The second security token is encrypted information, and characterized in that the encrypted value based on the second payment information and the second unique number. The method of claim 2,
The second payment information,
And the same information as credit card number information or bank account information previously registered in the communication management device. The method of claim 2,
The terminal communication processing unit,
And a payment approval signal is transmitted to the communication management device when the payment approval for the payment request signal is processed through the payment approval unit. The method of claim 2,
The second security token generator,
Hash Function, Hash Algorithm, Rivest Shamir Adleman (RSA), Data Encryption Standard (DES), Message-Digest Algorithm 5 (MD5), Bits in the second payment information and the second unique number And generating an encrypted second security token by applying an encryption method of any one of a locker drive encryption and a Feistel cipher. The method of claim 2,
The subscriber identification module,
And storing the second security token in a security area divided into a separate area. The method of claim 2,
The subscriber identification module,
A terminal comprising at least one module of a subscriber identification module (SIM), a universal subscriber identity module (USIM), and a micro USIM. A subscriber information database storing subscriber information;
An information extraction unit for extracting first payment information and a first unique number assigned to the subscriber identification module based on the subscriber information;
A first security token generator configured to generate a first security token using the first payment information and the first unique number; And
When there is a request for the first security token from the terminal, the communication processing unit for transmitting the first security token to the terminal
Communication management device comprising a. The method of claim 11,
When receiving the approval signal for the electronic payment request from the terminal, the electronic payment processing unit for transmitting a payment approval signal for the corresponding cost to the financial payment providing device
Communication management device further comprises. The method of claim 12,
The electronic payment processing unit,
And receiving an approval result signal for the corresponding cost from the financial settlement providing device and transmitting the received result signal to the terminal. The method of claim 11,
The first security token generator,
Generate an encrypted first security token by applying one of a cryptographic method of a hash function, a hash algorithm, RSA, DES, MD5, bit locker drive encryption, and a Feistel password to the first payment information and the first unique number. Communication management apparatus, characterized in that. Extracting a second unique number assigned to the signed subscriber identification module, and generating and storing a second security token based on the second payment information input through the key input unit and the second unique number Generating a security token;
A communication processing step of receiving a first security token from a communication management device when a payment request signal is received from the key input unit; And
A payment approval step of processing the payment authorization for the electronic payment request signal when the first security token and the second security token match each other by comparing the first security token with the second security token.
The payment method using the subscriber information and subscriber identification module comprising a. The method of claim 15,
A payment processing step of transmitting a payment approval signal for the electronic payment request signal to the communication management device so that payment for the corresponding cost is performed;
Electronic payment providing method using the subscriber information and subscriber identification module, characterized in that it further comprises. The method of claim 15,
The second security token generation step,
Generate an encrypted second security token by applying one of a cryptographic method of a hash function, a hash algorithm, RSA, DES, MD5, bit locker drive encryption, and Feistel password to the second payment information and the second unique number. Electronic payment providing method using the subscriber information and subscriber identification module comprising the step of. An information extraction step of extracting first payment information and a first unique number assigned to the subscriber identification module based on previously stored subscriber information;
Generating a first security token using the first payment information and the first unique number; And
A communication processing step of transmitting the first security token to the terminal when there is a request for the first security token from the terminal;
Electronic payment providing method using the subscriber information and subscriber identification module comprising a. The method of claim 18,
The first security token generation step,
Generate an encrypted first security token by applying one of a cryptographic method of a hash function, a hash algorithm, RSA, DES, MD5, bit locker drive encryption, and a Feistel password to the first payment information and the first unique number. Electronic payment providing method using the subscriber information and subscriber identification module comprising the step of.

Images