KR20120094217A - System and method for checking an order list of electronic commerce - Google Patents

Abstract

PURPOSE: An electronic payment method for checking a purchase list using a portable terminal is provided to enable a user to check a purchase list of products to be purchased at the beginning of an electronic payment process by using an extra portable terminal. CONSTITUTION: A first terminal(3) of a user selects a payment method after selecting a product by connecting to a shopping mall server(1). The first terminal performs a purchase request in order to start electronic payment. The shopping mall server transmits a purchase list for electronic payment to the first terminal. If a telephone number is inputted, the telephone number and the purchase list are transmitted to a relay server(4). The relay server requests a connection to a second terminal(5) by using the telephone number.

Description

System and Method for Checking an Order List of Electronic Commerce}

The present invention relates to a technology for checking a purchase history of an item in an electronic transaction, and more particularly, in the electronic payment process in an electronic commerce through a communication network, the user can purchase a purchase history of items that the user wants to purchase. A system and method for checking an electronic transaction purchase history using a new portable terminal that enables a user to check the safety of an electronic transaction to be paid by allowing a user to check a separate portable terminal in addition to the user terminal connected to the will be.

In general, Internet e-commerce is carried out by an interaction between a personal computer (PC) composed of a user's laptop or desktop computer and a shopping mall system equipped with an Internet web server, and when necessary for electronic payment, for example, payment using a credit card. If is made, the card approvers to intervene to approve the payment of the credit card.

Let's look at the general e-commerce process. First, a user may visit an e-commerce web page provided by a shopping mall server through a communication network such as the Internet, using a user terminal such as a PC, examine the displayed product information, and select a desired product to apply for a purchase. In this process, a list of items requested for purchase, that is, purchase history information, is generated. The generated purchase history may include information such as a product name, a product model, a quantity, a price, a purchase date, a seller's name and contact information, a buyer's name and contact information, and a delivery address. Once the user applies for a purchase, the shopping mall server may initiate an electronic payment process and provide a screen for starting payment to the user terminal. Here, the user can select, for example, a payment method using a credit card. When the card payment is selected from the user terminal, the shopping mall server requests to select a card company, and inputs card information such as credit card information of the selected card company, that is, credit card number, expiration date of the credit card, and password of the credit card. . The card information input from the user terminal may be combined with the goods purchase history information and then transmitted to the card approval company server as payment approval request information. Then, the card approval company server executes a payment approval process based on the received payment approval request information, and notifies the shopping mall server to the shopping mall server.

The internet e-commerce has been developed and is very active to meet a variety of users' purchase needs. However, it is proportionately vulnerable. In other words, the user's personal information, that is, the purchase history information is exposed on the Internet, which is an open environment, and when malicious code is embedded in the user terminal connected to the shopping mall server in such an open environment, hacking, a transaction, and theft of personal information are used. It is a reality that such accidents are likely to occur and such accidents are actually occurring. As described above, in the electronic commerce under an open environment such as the Internet, it is a problem that the user simply checks the purchase history of the item to be electronically paid to the user terminal exposed under the open environment, and has a security vulnerability.

Therefore, in electronic commerce, it would be advantageous if the user can purchase the product with more peace of mind if the contents of the purchase to be paid by the user through electronic transactions are checked through a more secure environment to ensure the integrity of the purchase. .

The present invention has been made in view of the above-described problems to solve the problems of the technology for confirming the item purchase history information that the user is subject to the electronic payment in the conventional electronic commerce, and to provide another advantage, the present invention provides a communication network In the electronic commerce process, the user can check the purchase history of the items he / she wants to purchase by using a separate mobile terminal in addition to the user terminal connected to the shopping mall server, thereby ensuring the integrity of the purchase history. It is for that purpose.

The above object is achieved by an electronic transaction purchase history check system and method using a mobile terminal according to the present invention.

Electronic transaction purchase history check system using a mobile terminal provided according to an aspect of the present invention, a system for checking the purchase history before the electronic payment of the electronic commerce, initiates electronic payment of the electronic transaction and relates to the phone number and payment means A subscriber client consisting of a first terminal of a user for inputting personal information and a second terminal of the user for visually displaying to the user a purchase history to be electronically charged by the first terminal: a first client of the user via a communication network A shopping mall server providing a page to which the terminal connects, providing an item through the page, initiating electronic payment, and delivering a purchase history selected by the first terminal to the first terminal; Receives the purchase history and telephone number information transmitted from the first terminal, requests to connect to the second terminal of the user based on the telephone number, and transmits the item purchase history to the connected second terminal according to the access request. It is configured to include a relay server.

Electronic transaction purchase history check method using a mobile terminal provided according to another aspect of the present invention, a method for checking the purchase history before the electronic payment of the electronic commerce, the first terminal of the user connected to the shopping mall server through the communication network goods Selecting and selecting a means for payment and applying for purchase to initiate electronic payment; Transmitting, by the shopping mall server, a purchase history to be electronically paid by the user to the first terminal of the user; Waiting for input of a phone number of a user's second terminal to check the purchase history of the user's first terminal, and if a phone number is input, transmitting a phone number and a purchase history to a relay server; Requesting, by the relay server, to access the second terminal of the user using the telephone number; In response to the connection request, connecting the second terminal of the user to a relay server to receive the purchase history; And visually displaying the purchase history received by the second terminal of the user.

In one embodiment, the step of the relay server to request a connection to the second terminal of the user using the phone number is made using a text message including a callback URL.

In another embodiment, the step of transmitting the phone number and the purchase history to the relay server by the first terminal of the user is performed before the first terminal of the user receives personal information regarding payment means necessary for electronic payment.

In another embodiment, the purchase history transmitted by the first terminal of the user to the relay server is encrypted, and the purchase history transmitted from the relay server to the second terminal of the user is encrypted. It is preferable that the second terminal is visually displayed after being decoded.

According to the present invention having the above-described configuration, in the electronic commerce through a communication network, a user uses a separate mobile terminal in addition to a user terminal that connects a purchase history of items that the user wants to purchase with a shopping mall server at the beginning of the electronic payment process. By making it possible to check, it is possible to ensure the integrity of the purchase history, thereby providing a remarkable effect such as improving the safety of Internet e-commerce.

1 is a block diagram schematically illustrating information exchange between devices participating in a process of checking an item purchase history according to an embodiment of the present invention.
FIG. 2 is a flow chart schematically showing the information exchange shown in FIG. 1 in chronological order; FIG.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the electronic transaction purchase history check system and method using a mobile terminal according to the present invention.

The present invention relates to a system and method for confirming the purchase history of goods in electronic payment of an electronic commerce using two user terminals. It uses the first terminal, which may be the user's PC, and the second terminal, which may be the user's smartphone, together as a set of subscriber clients either at the beginning or at the beginning of initiating electronic payment of e-commerce over the Internet, such as the Internet. It is characterized by checking the integrity of purchase history through a more secure communication network such as a mobile communication environment rather than an open environment.

1 shows the overall configuration of a system according to the invention. As shown, the system of the present invention is a shopping mall server (1) for performing e-commerce, a card approval server (2) for approving payment, and the user's first terminal (3) and second terminal (5), And a relay server 4.

In this system, the user connects to the shopping mall server 1 using the first terminal 3 such as a PC to search for and select desired items (including types and services or non-types such as digital content). Perform a transaction. In the system according to the invention, most of the processes of electronic commerce are carried out in the user's first terminal 3 as in the prior art, but one difference is that not only the user's first terminal 3 but also a mobile phone or a smart phone. The second terminal 5 of the user is characterized in that it is possible to confirm the purchase history. For this purpose, the user must essentially have two terminals. This is easily realized since a mobile phone or a smart phone is a reality that is almost essential as a personal portable item.

According to the invention, the first terminal 3 of the user and the second terminal 5 of the user, which are included as subscriber clients, do not need to be directly connected to each other. It is sufficient that the user's first terminal 3 only connects to the shopping mall server 1 and interacts with each other, and the user's second terminal 5 only connects to the relay server 4 to interact with each other. The relay server 4 relays only between the card approval company server 3 and the user's second terminal 5.

The first terminal 3 of the user selects an item that the user wants to purchase as in a normal electronic commerce, and inputs or provides personal information for payment means, for example, card information related to a credit card. In addition, the user further enters the telephone number, that is, the mobile phone number of the user's second terminal 5 to be used for payment and is responsible for the function of transmitting the telephone number and purchase history to the relay server (4).

The second terminal 5 of the user is connected to the relay server 4 and serves to provide the user with confirmation by displaying the purchase history to be paid.

Meanwhile, the relay server 4 receives the telephone number and purchase history information from the first terminal 3 of the user, requests a connection to the second terminal 5 of the user using the telephone number, and responds to the connection request. The purchase history is provided to the second terminal (5). In particular, the relay server 4 may be a subject providing an agreement with the shopping mall server 1 in advance for the service according to the present invention, which may also be called, for example, a "mobile electronic payment purchase history check service".

Although only one shopping mall server 1 is shown in the illustrated example, it is obvious that a plurality of shopping mall servers 1 are connected to one relay server 4. Likewise, in the illustrated example, the user is assumed to be one person having the first terminal and the second terminal, but it is obvious that a large number of users use the service according to the present invention. Therefore, the relay server 4 basically determines whether the first terminal 3 and the second terminal 5 of a specific user are subscriber clients who can use the service according to the present invention with respect to the specific shopping mall server 1. It is desirable to configure it so that it can be verified. This verification may be based on a 'phone number' or a 'mobile phone number' that can access the user's second terminal.

Here, the first terminal 3 of the user is described as a personal computer such as a notebook or a desktop, but is not limited thereto. Any system capable of performing electronic commerce in a wired or wireless web environment on the Internet can be used without limitation. . On the other hand, the user's second terminal 5 is a communication terminal uniquely identifiable using a phone number or a mobile phone number, for example, a mobile phone, also known as a feature phone capable of data communication via a 2G network or a 3G network, or a 3G network or a Wi-Fi. It may be a smart phone capable of data communication through the wireless Internet, such as a WiFi network. However, the second terminal 5 of the user does not necessarily need to be limited to a mobile phone or a smart phone but only satisfies the condition that a terminal capable of data communication and a communication terminal identifiable by a telephone number.

As described above, in the present invention, the 'purchase history' information is generated in the shopping mall server 1 and then transmitted to the first terminal 3, the relay server 4, and finally to the second terminal 5 of the user. In order to ensure the integrity of the 'purchase history' information, it can use a PKI protocol such as TLS. In order to prevent the 'purchase history' information from being viewed by the relay server 4, an end-to-end encryption scheme is applied between the first terminal 3 and the second terminal 5 of the user. For example, a key for encryption and decryption may apply a key exchange algorithm such as DH (Diffie-Hellman).

Referring now to FIGS. 1 and 2, the user's first terminal 3 may access the shopping mall server 1, for example under a web environment of the Internet. The user may start the electronic payment for the item to be purchased by selecting the item to be purchased based on the item information provided by the shopping mall server 1 using the first terminal 3 and applying for a purchase. (S001).

Then, the shopping mall server 1 transmits the item details selected by the user, that is, purchase history information, to the first terminal 3, and the first terminal 3 displays them on the monitor screen to visually recognize the user. (S002).

At this time, if the purchase history information displayed on the screen by the keyboard hacking or memory hacking by malicious code that is inadvertently planted in the first terminal 3 of the user and the actual purchase history information transmitted from the actual shopping mall server 1 are the same. There may be a case of not doing so. If such a case occurs, the user may make an electronic payment for an item which he / she did not purchase. According to the present invention, an electronic payment is made by the user by using the mobile terminal of the user, such as a smartphone, to search for the original text of the actual purchase history generated by the shopping mall server 1 in a different environment than the communication environment connected to the shopping mall server 1. It offers the advantage of allowing you to check the integrity of your purchases.

To this end, the first terminal 3 of the user accesses the relay server 4 and transmits the 'purchase history' information transmitted from the shopping mall server 1. At this time, along with the 'purchase history' information, the phone number of the user's second terminal 5 should also be transmitted. That is, the user's first terminal (3) waits for input of the telephone number of the user's second terminal (5) to check the purchase history transmitted, and when the telephone number is input, the relay server (4) (S003). In this case, a security-enhanced connection may be made between the first terminal 3 and the relay server 4 by a protocol such as TLS. In addition, the 'purchase history' information is encrypted by the relay server 4 so that the key can be shared only with the second terminal 5 by, for example, a DH key exchange algorithm.

Subsequently, the relay server 4 attempts to connect with the second terminal 5, which may be a user's mobile phone or smartphone, using the transmitted phone number. This may be a simple text message or a connection request using a text message including a callback URL (S004).

In response to a connection request from the relay server 4 arriving at the second terminal 5, for example, the user runs a pre-stored application to confirm the purchase history or clicks a callback URL link included in a text message. In operation S005, the second terminal 5 of the user may be connected to the relay server 4.

Then, the relay server 4 may transmit the 'purchase history' of the encrypted state and key information by, for example, the DH key exchange algorithm to the second terminal 5 (S006).

The second terminal 5 of the user generates a key according to the DH key exchange algorithm, and then decrypts the received purchase history and visually displays it on a built-in display screen. Accordingly, the user can check whether the purchase history to be electronically paid is correct or not.

According to the present invention, since the user can determine whether the purchase history displayed through the second terminal 5 and the purchase history displayed through the first terminal 3 are the same, for example, the purchase displayed on the monitor screen of the PC. The advantage is that it is easy to see whether the history has been tampered with by malware.

Upon confirming that the purchase details are not tampered with, the user selects a payment method such as, for example, a credit card, on the first terminal 3 to input necessary card information and / or for a digital signature by an authorized certificate. After inputting such a request can be made to the payment approval server (2) (S007). Accordingly, the card approval company 2 may verify the electronic signature and perform a payment approval procedure. Then, the card approval company 2 transmits a payment approval notice (S008) to the shopping mall server 1, and the shopping mall server ( 1) may transmit it to the first terminal 3 of the user (S009).

In particular, according to the present invention, in order to check the purchase history, the first terminal 3 of the user first transmits the telephone number and the purchase history to the relay server 4 (S003), the first terminal of the user (3) It is desirable to make this before the personal information about the payment method necessary for the electronic payment is input. Here, the 'personal information about the payment method required for electronic payment' may include information such as account information for payment account transfer, card information for credit card payment, or a certified certificate password for electronic signature.

In addition, in the present invention, the path through which the 'purchase history' transmitted from the user's first terminal 3 to the second terminal 5 is transmitted is an open environment of the Internet environment and a neutral third of 'relay server'. There is always the possibility of being tampered with by malicious hackers because of their self-intervention. Therefore, if it is necessary to ensure that the 'purchase history' is transmitted from the first terminal 3 to the second terminal 5 without risk of being tampered with, the 'purchase history' is encrypted in the first terminal 3 for this purpose. After that, it needs to be transmitted to the second terminal 5. In addition, a key for encrypting and decrypting the 'purchase history' should be shared between the first terminal 3 and the second terminal 5. Therefore, at the same time as 'purchase history' information is transmitted from the first terminal 3 to the second terminal 5 via the relay server 4, or at the same time, for example, TLS (Transport Layer Security Protocol), ECDH (Elliptic) A key exchange process may be performed between the first terminal 3 and the second terminal 5 according to a key exchange scheme such as Curve Diffie-Hellman).

According to the present invention described above, for example, while the user performs the electronic commerce with the PC, the security of the electronic commerce can be improved by checking the integrity of the purchase history before executing the electronic payment with the smart phone.

While the present invention has been described as a preferred embodiment, the present invention is not limited thereto, and various modifications can be made without departing from the gist of the invention.

1: shopping mall server
2: card acceptor server
3: Terminal 1 (PC)
4: relay server
5: second terminal (smartphone)

Claims (5)

As a system for checking purchase history before electronic payment of e-commerce,
The first terminal (3) of the user for starting the electronic payment of the electronic transaction and input personal information about the telephone number and payment means, and the purchase history to be electronically paid by the first terminal (3) to the user visually Subscriber client consisting of the user's second terminal 5 for display:
Providing a page to which the user's first terminal 3 accesses through a communication network, selecting a product through the page and initiating electronic payment, and providing a purchase history selected by the first terminal 3 A shopping mall server 1 for transmitting to one terminal 3;
The second terminal which receives the purchase history and the telephone number information transmitted from the first terminal 3, requests to connect to the second terminal 5 of the user based on the telephone number, and connects according to the connection request. (5) relay server (4) for transmitting the goods purchase history
Electronic transaction purchase history check system using a mobile terminal, characterized in that configured to include. As a method of checking purchase history before electronic payment of e-commerce,
The first terminal 3 of the user accessing the shopping mall server 1 through a communication network to select an item, to select a means for payment, and to apply for a purchase to initiate an electronic payment (S001);
Transmitting, by the shopping mall server, the purchase details to be electronically paid by the user to the first terminal 3 of the user (S002);
The user's first terminal (3) waits for input of the telephone number of the user's second terminal (5) to check the purchase history sent, and when the telephone number is input, the relay server (4) Transmitting (S003);
Requesting, by the relay server (4), to access the second terminal (5) of the user using the telephone number (S004);
In response to the connection request, the second terminal 5 of the user accessing the relay server 4 to receive the purchase details (S005 and S006);
Visually displaying the purchase history received by the second terminal 5 of the user
Electronic transaction purchase history check method using a mobile terminal comprising a. The method (S004) of claim 2, wherein the relay server (4) requests to connect to the second terminal (5) of the user using the telephone number (S004) by using a text message including a callback URL. Electronic transaction purchase history check method using a mobile terminal. The method of claim 2, wherein the first terminal 3 of the user transmits the phone number and the purchase history to the relay server 4 (S003), the first terminal 3 of the user is required for electronic payment Electronic transaction purchase history check method using a mobile terminal, characterized in that made before receiving the personal information about the means. The method according to claim 2, wherein the purchase history transmitted to the relay server 4 by the first terminal 3 of the user is transmitted in an encrypted state, the second terminal 5 of the user in the relay server 4 The purchase history transmitted to the electronic transaction purchase history check method using a mobile terminal, characterized in that the decoded in the second terminal (5) of the user and then displayed visually.

Images