KR20220133532A - System and method to support services for integrated management of identity and electronic payments online and offline - Google Patents

Abstract

The present invention relates to a system and method for O2O identification authentication and electronic payment integrated management service to skip an identification process. According to one embodiment of the present invention, the system for O2O identification authentication and electronic payment integrated management service comprises: a user terminal requesting distributed storage of (individual or corporate) credit card information and identification information, which are issued in a name of an individual or corporate, on the basis of a blockchain by using an O2O identification authentication and integrated electronic payment service platform; and a platform management server verifying the identification information provided by the user terminal, distributing and storing the verified identification information and credit card information in a blockchain network, requesting issuance of a one-time credit card number to a card company server of the corresponding credit card on the basis of the verified identification information and credit card information when the issuance of the one-time credit card number is requested from the user terminal, transferring the one-time credit card number to the user terminal, and providing the verified identification information to a terminal and/or web server of an on/offline seller when the user terminal pays for on/offline products by using the one-time credit card number.

Description

O2O identity authentication and electronic payment integrated management service system and method {System and method to support services for integrated management of identity and electronic payments online and offline}

The present invention relates to an O2O identity authentication and electronic payment integrated management service system and method.

A key feature of DID (Decentralized Identifier), decentralized identity authentication, is that users themselves can create and manage identity information that has been controlled by a central institution or company. This creates a way for individuals to implement and use an identity information management system, and enables fair compensation for the security, decision-making power and revenue of user data information. This feature is implemented by allowing users to verify whether identity information is forged or altered without going through a third central authority based on the cryptographic characteristics of the block chain that operates on a P2P basis and cannot be forged or tampered with.

After the blockchain technology was presented, the development of related technologies spurred, and the current implementation of blockchain technology has become commoditized at a high level throughout the industry. Improved technologies using chains are active. According to this change in the environment, the center of gravity naturally shifted to what kind of business model was created using the technology rather than whether or not the blockchain technology itself was used or the complexity of the request from society and the market.

In other words, the recent blockchain technology has reached a sufficiently mature stage of maturity, what kind of business model to create rather than the complexity of the technology itself, and how to solve governance problems so that participants can use the technology smoothly in the ecosystem built with that business model. It can be said that it is converging for two main purposes.

Korea Patent Publication No. 2019-0048666

An object to be solved by the present invention is to provide an O2O identity authentication and electronic payment integrated management service system and method that can solve the conventional problems.

The O2O identity authentication and electronic payment integrated management service system according to an embodiment of the present invention for solving the above problems is credit card information and identification information issued in its own name using the O2O identity authentication and integrated electronic payment service platform. A user terminal that requests distributed storage (individual, company) based on the block chain; and after verifying the identification information provided by the user terminal, and after distributing and storing the verified identification information and credit card information in a block chain network, when a one-time credit card number issuance request is made from the user terminal, the verification Based on the identified identification information and credit card information, the issuance of a one-time credit card number is requested and issued by the card company server of the corresponding credit card, and is transmitted to the user terminal, and the one-time credit card number is used in the user terminal. Includes a platform management server that provides verified identification information to the terminal and/or web server of the on/offline vendor at the time of /offline product payment.

In one embodiment, the platform management server requests the registration of credit card information and identification information (individual, company) necessary for membership registration from a user terminal using the O2O identity authentication and integrated electronic payment service platform as a prerequisite, The verification of the identification information is characterized in that it is confirmed based on a credit card issuance history of a card company server that issued the credit card information.

In one embodiment, when the user's identification information is verified, the platform management server generates an individual (corporate) decentralized identity certificate (DID), and sends the generated decentralized identity certificate (DID) to the electronic issued to the user terminal. It is characterized in that it is distributed and stored in the wallet.

The O2O identity authentication and electronic payment integrated management service method according to an embodiment of the present invention for solving the above problems includes credit card information issued in its own name and requesting distributed storage of identification information (individual, company) based on the block chain to the platform management server; verifying the verification of the identification information provided by the user terminal based on the card issuance history information provided by the card company server that issued the credit card information; When the verification of the identification information is completed, generating a decentralized identity certificate (DID), and then distributing and storing it in the electronic wallet created in the user terminal together with the credit card information; Upon request for issuance of a one-time credit card number from the user terminal, the user terminal receives and requests the issuance of a one-time credit card number from the card company server of the corresponding credit card based on the decentralized identity certificate (DID) and credit card information passing to; And after providing a decentralized identity certificate (DID) to the customer's terminal and/or web server during on/offline product payment or personal electronic payment using the one-time credit card number in the user terminal, safety with the user guaranteeing the transaction.

Therefore, the O2O identity authentication and electronic payment integrated management service system and method according to an embodiment of the present invention can prevent theft and duplication of personal or corporate credit cards through issuance of a one-time credit card number, and between transaction parties It has the advantage of being able to omit the identification process due to the low level of trust, the inability to guarantee the safety of transactions, the misuse of personal information, and the complicated and cumbersome document procedures required to conduct electronic transactions.

1 is a network configuration diagram of an O2O identity authentication and electronic payment integrated management service system according to an embodiment of the present invention.
FIG. 2 is a device block diagram for explaining the detailed configuration of the platform management server shown in FIG. 1 .
3 and 4 are flowcharts illustrating an O2O identity authentication and electronic payment integrated management service method according to an embodiment of the present invention.
5 illustrates an example computing environment in which one or more embodiments disclosed herein may be implemented.

Hereinafter, embodiments of the present specification will be described with reference to the accompanying drawings. However, it is to be understood that the technology described herein is not limited to specific embodiments, and includes various modifications, equivalents, and/or alternatives of the embodiments of the present specification. . In connection with the description of the drawings, like reference numerals may be used for like components. In the present specification, expressions such as “have,” “may have,” “include,” or “may include” indicate the presence of a corresponding characteristic (eg, a numerical value, function, operation, or component such as a part). and does not exclude the presence of additional features.

In this specification, expressions such as “A or B,” “at least one of A and/and B,” or “one or more of A or/and B” may include all possible combinations of the items listed together. . For example, "A or B," "at least one of A and B," or "at least one of A or B" means (1) includes at least one A, (2) includes at least one B; Or (3) it may refer to all cases including both at least one A and at least one B.

As used herein, expressions such as "first," "second," "first," or "second," can modify various elements, regardless of order and/or importance, and refer to one element. It is used only to distinguish it from other components, and does not limit the components. For example, the first user equipment and the second user equipment may represent different user equipment regardless of order or importance. For example, without departing from the scope of the rights described in this specification, a first component may be referred to as a second component, and similarly, the second component may also be renamed as a first component.

A component (eg, a first component) is "coupled with/to (operatively or communicatively)" to another component (eg, a second component) When referring to "connected to", it will be understood that the certain element may be directly connected to the other element or may be connected through another element (eg, a third element). On the other hand, when it is said that a component (eg, a first component) is "directly connected" or "directly connected" to another component (eg, a second component), the component and the It may be understood that other components (eg, a third component) do not exist between other components.

As used herein, the expression "configured to (or configured to)" depends on the context, for example, "suitable for," "having the capacity to ," "designed to," "adapted to," "made to," or "capable of." The term “configured (or configured to)” may not necessarily mean only “specifically designed to” in hardware. Instead, in some circumstances, the expression “a device configured to” may mean that the device is “capable of” with other devices or parts.

For example, the phrase “a processor configured (or configured to perform) A, B, and C” refers to a dedicated processor (eg, an embedded processor) for performing the operations, or by executing one or more software programs stored in a memory device. , may mean a generic-purpose processor (eg, a CPU or an application processor) capable of performing corresponding operations.

The terms used herein are used only to describe specific embodiments, and may not be intended to limit the scope of other embodiments. The singular expression may include the plural expression unless the context clearly dictates otherwise. Terms used herein, including technical or scientific terms, may have the same meanings as commonly understood by one of ordinary skill in the art described herein. Among the terms used in this specification, terms defined in a general dictionary may be interpreted with the same or similar meaning as the meaning in the context of the related art, and unless explicitly defined in the present specification, have ideal or excessively formal meanings. is not interpreted as In some cases, even the terms defined in this specification cannot be construed to exclude the embodiments of the present specification.

Hereinafter, an O2O identity authentication and electronic payment integrated management service system according to an embodiment of the present invention will be described in more detail based on the accompanying drawings.

1 is a network configuration diagram of an O2O identity authentication and electronic payment integrated management service system according to an embodiment of the present invention, and FIG. 2 is a device block diagram for explaining the detailed configuration of the platform management server shown in FIG.

First, as shown in FIG. 1 , the O2O identity authentication and electronic payment integrated management service system 100 according to an embodiment of the present invention includes a user terminal 200 and a block chain information management server 300 .

The user terminal 200 and the block chain information management server 300 communicate through a network. Here, the network refers to a connection structure in which information exchange is possible between each node, such as a plurality of terminals and servers, and examples of such networks include RF, 3rd Generation Partnership Project (3GPP) network, Long Term Evolution (LTE). Network, 5th Generation Partnership Project (5GPP) network, World Interoperability for Microwave Access (WIMAX) network, Internet, Local Area Network (LAN), Wireless Local Area Network (Wireless LAN), Wide Area Network (WAN), PAN (Personal Area Network), Bluetooth (Bluetooth) network, NFC network, satellite broadcasting network, analog broadcasting network, DMB (Digital Multimedia Broadcasting) network, etc. include, but are not limited thereto.

In the following, the term at least one is defined as a term including the singular and the plural, and even if at least one term does not exist, each component may exist in the singular or plural, and may mean the singular or plural. it will be self-evident In addition, whether each component is provided in singular or plural will be changeable according to the embodiment.

More specifically, the user terminal 200 executes the identity authentication and payment management platform 10 provided from the cloud block chain server 300 to be described later to request issuance of a one-time credit card number, and after being issued, one-time credit By generating an NFC tag or QR code including a card number, it can be provided to a sales terminal of an on/off store, and the sales terminal uses the identity authentication and payment management platform 10 to tag or read NFC tags or QR codes You can receive a one-time credit card number by performing the process.

That is, the user terminal 200 may be a terminal capable of performing any one of on/off-line electronic payment and electronic transaction using a one-time credit card number.

The user terminal 200 receives a one-time credit card number using the O2O identity authentication and integrated electronic payment service platform 10, and uses the one-time credit card number to process payment for products to be purchased at an online or offline store It may be a terminal requesting .

The user terminal 200 may generate an NFC tag or a QR code including a one-time credit card number using the O2O identity authentication and integrated electronic payment service platform 10 when paying for a product in an offline store, and the The offline sales terminal receives the one-time credit card number by performing the tagging or reading process of the NFC tag or QR code using the O2O identity authentication and integrated electronic payment service platform.

For reference, the user terminal 200 distributes and stores the credit card number issued by the card company in the block chain-based electronic payment, and information that can prove the owner of the credit card number when a one-time credit card number issuance is requested. , for example, it may be a terminal capable of providing a decentralized identity certificate (DID) distributed and stored in an electronic wallet.

For reference, the electronic wallet of the user terminal 200 is a configuration issued at the time of membership registration of O2O identity authentication and integrated electronic payment service platform, and the electronic wallet is an issued one-time credit card number for payment or transaction details Information can be distributed and stored in blockchain nodes.

On the other hand, the O2O identity authentication and integrated electronic payment service platform 10 is a platform for processing on/offline product transaction, electronic payment, and identity authentication, and processes the user terminal 200, on/offline identity authentication and product payment. It may be a platform installed in a sales terminal that

The customer terminal and the offline sales terminal are terminals capable of installing or opening the O2O integrated electronic payment platform 10 (application, program, app page, web page, etc.), and a service program using a script executed in a web browser It may be a terminal that can be driven.

Here, the web browser is a program that enables the use of a web (world wide web) service, and refers to a program that receives and displays hypertext written in HTML (hyper text mark-up language), for example, Netscape , Explorer, and Chrome. In addition, the application means an application on the terminal, for example, includes an app (app) executed in a mobile terminal (smartphone).

The terminals mentioned herein are a smart phone, a portable terminal, a mobile terminal, a foldable terminal, a personal digital assistant (PDA), a portable terminal (PMP). Multimedia Player) terminal, telematics terminal, navigation terminal, personal computer, notebook computer, slate PC, tablet PC, ultrabook, wearable device ( Wearable Device, for example, watch-type terminal (Smartwatch), glass-type terminal (Smart Glass), HMD (Head Mounted Display), etc.), Wibro (Wibro) terminal, IPTV (Internet Protocol Television) terminal, smart TV, digital It can be applied to various terminals such as a broadcasting terminal, an AVN (Audio Video Navigation) terminal, an A/V (Audio/Video) system, a flexible terminal, and a digital signage device.

Next, the blockchain information management server 300 verifies the identity confirmation information provided by the user terminal, and then distributes and stores the verified identity confirmation information and credit card information in the block chain network, from the user terminal Upon request for issuance of a one-time credit card number, the issuance of a one-time credit card number is requested and issued to the card company server of the corresponding credit card based on the verified identification information and credit card information, and is transmitted to the user terminal, and the user Providing a decentralized identity certificate (DID) generated based on the identification information verified by the terminal and/or the web server of the on/offline vendor at the time of on/offline product payment using the one-time credit card number in the terminal can be configuration.

In addition, the blockchain information management server 300 requests the registration of credit card information and identification information (individual, company) necessary for membership registration from the user terminal using the O2O identity authentication and integrated electronic payment service platform as a prerequisite, and , it is characterized in that the verification of the identification information is confirmed based on the credit card issuance details of a card company server that issued the credit card information.

In addition, when the user's identification information is verified, the blockchain information management server 300 generates an individual (corporate) decentralized identity certificate (DID) and issues the generated decentralized identity certificate (DID) to the user terminal. It may be configured to be distributed and stored in an electronic wallet.

For reference, the blockchain information management server 300 includes a distributed ledger system, which may also be referred to as a consensus network (eg, composed of a peer-to-peer node), and a blockchain network; DLS). Here, a distributed ledger system (DLS) allows participating entities to securely and immutably conduct transactions and store data. Blockchain is commonly used to refer to DLS without reference to any specific use case. As introduced above, a blockchain network can be provided as a public blockchain network, a private blockchain network, or a consortium blockchain network.

In a public blockchain network, the consensus process is controlled by nodes in the consensus network. For example, hundreds, thousands, or even millions of entities can collaborate in a public blockchain network, each running at least one node in the public blockchain network. Thus, a public blockchain network can be considered as a public network for participating entities. In some instances, for a block to be valid and added to the blockchain (distributed ledger) of the blockchain network, the majority of entities (nodes) must sign every block. Exemplary public blockchain networks include the Bitcoin Network, which is a peer-to-peer payment network. The Bitcoin network utilizes a distributed ledger called a blockchain. However, as noted above, the term blockchain is generally used to refer to a distributed ledger without specifically referring to the Bitcoin network.

In general, public blockchain networks support public transactions. Public transactions are shared with all nodes in the public blockchain network and are stored on the global blockchain. A global blockchain is a blockchain that is replicated across all nodes. In other words, all nodes are in perfect agreement on the global blockchain. To achieve consensus (e.g., consent to add a block to the blockchain), a public protocol is implemented within a public blockchain network. Exemplary consensus protocols include, by way of non-limiting example, proof-of-work (POW) implemented in the Bitcoin network.

In general, private blockchain networks are provided for specific entities that centrally control read and write permissions. Entities control which nodes can participate in the blockchain network. As a result, private blockchain networks are generally referred to as permissioned networks that place restrictions on who is allowed to participate in the network and on the level of their participation (eg, only for certain transactions). Various types of access control mechanisms may be used (eg, existing participants may vote to add new entities, and regulators may control entry).

In general, consortium blockchain networks are private among the participating entities. In a consortium blockchain network, the consensus process is controlled by a set of authorized nodes, one or more nodes being operated by each entity (eg, a corporation). For example, a consortium of 10 entities (eg, a company) may operate a consortium blockchain network, and each entity operates at least one node in the consortium blockchain network. Thus, the consortium blockchain network can be considered as a private network for participating entities. In some examples, each entity (node) must sign every block in order for the block to be valid and added to the blockchain. In some examples, at least a subset of entities (nodes) (eg, at least 7 entities) must sign every block in order for the block to be valid and added to the blockchain.

Implementations of the present disclosure are described in greater detail herein with reference to a consortium blockchain network that is public among participating entities (eg, members of a consortium). However, it is contemplated that implementations of the present disclosure may be implemented in any suitable type of blockchain network. While the techniques described in this disclosure are described as being relevant to consortium blockchain networks, the techniques also apply, with or without modification, to other types of blockchain networks, including public blockchain networks and private blockchain networks. , can be used.

Embodiments of the present disclosure are described in more detail herein in view of the above circumstances. More specifically, and as introduced above, embodiments of the present disclosure relate to executing smart contract updates within a contract update management system of a blockchain network to manage updates to smart contracts.

A smart contract can be described as a digital representation of a real-world legal contract with contract clauses affecting various parties. Smart contracts are implemented, stored, updated (as needed), and executed within the consortium blockchain network, in the exemplary context. Contracting parties involved in smart contracts (eg, buyers and sellers) are represented as nodes in the consortium blockchain network. In some examples, parties to a contract may include entities (eg, an enterprise) associated with a smart contract (eg, as a party to the smart contract).

In some examples, a smart contract may store data that may be used to record information, facts, associations, balances, and any other information necessary to implement logic for contract execution. A smart contract can be described as a computer-executable program consisting of functions from which instances of smart contracts can be created, and functions that are called to execute logic. In some examples, a smart contract may include various components, one or more of which may also be described as a contract. In some examples, one or more components of a smart contract may be updated as part of an update to the overall smart contract.

In some implementations, exemplary components of a smart contract may include, by way of non-limiting example, a controller contract, a service contract, and a data contract. A controller contract may be defined by a dispatcher upon receipt of a request by a contract initiator that initiated a smart contract. Initiating a smart contract may include providing the smart contract to nodes within the consortium blockchain network (eg, to entities that will be parties to the smart contract). Initiation of the smart contract may also identify the time at which the smart contract was created and the identity of the initiator of the smart contract. In some examples, the service contract is the raw material of the smart contract.

includes direct. The logic may define how the contract is executed, including the order of events and the definition of relationships with entities related to the smart contract. A data contract includes, by way of non-limiting example, the terms of a smart contract, including products and/or services covered by the smart contract, and payment information for the smart contract for the provision of products and/or services. Data stored in a data contract may be used to record information, facts, and associations, including, but not limited to, balances, payments, receipts, deliveries, due dates, and any other information necessary to implement the logic of a smart contract. have.

In technical terms, smart contracts can be implemented based on objects and object-oriented classes. For example, the terms and components of a smart contract may be represented as objects that are processed by an application implementing the smart contract. A smart contract (or an object within a smart contract) can call other smart contracts (or objects within a smart contract) just like any other object-oriented object. A call made by an object may be, for example, a call to create, update, delete, propagate, or communicate with an object of another class. Object-to-object calls may be implemented as functions, methods, application programming interfaces (APIs), or other invocation mechanisms. For example, a first object may call a function for creating a second object.

On the other hand, the exemplary environment in which the blockchain information management server 300 mentioned herein can be used to execute the above-described implementations allows entities to participate in the consortium blockchain network. Exemplary environments include a computing system, and a network. In some examples, the network includes a local area network (LAN), a wide area network (WAN), the Internet, or a combination thereof, and is coupled to a website, a user device (eg, a computing device), and a backend system. In some examples, the network may be accessed via a wired and/or wireless communication link.

In the illustrated example, the computing systems may each include any suitable computing system that enables participation as a node in a consortium blockchain network. Exemplary computing devices include, by way of non-limiting examples, servers, desktop computers, laptop computers, tablet computing devices, and smartphones. In some examples, the computing system hosts one or more computer-implemented services for interacting with the consortium blockchain network. For example, computing system 106 may be configured by a first entity (eg, user A), such as a transaction management system that the first entity uses to manage transactions with one or more other entities (eg, other users). ) can host computer-implemented services. Computing system 108 is a computer implementation of a second entity (eg, user B), such as a transaction management system that the second entity uses to manage transactions with one or more other entities (eg, other users). You can host services. In the example of FIG. 1 , the consortium blockchain network is represented as a peer-to-peer network of nodes, and the computing system provides nodes of a first entity and a second entity, respectively, participating in the consortium blockchain network.

As described herein, a blockchain network is provided as a peer-to-peer network comprising a plurality of nodes that immutably record information in a blockchain (eg, a consortium blockchain). Although a single blockchain is schematically shown, multiple copies of the blockchain are provided and maintained across the blockchain network. For example, each node stores a copy of the blockchain. In some implementations, the blockchain stores information related to transactions conducted between two or more entities participating in a private blockchain network.

More specifically, the block chain information management server 300 includes an electronic wallet generation unit 310 , a request unit 320 , a DID generation and management unit 330 , and a smart contract unit 340 .

The electronic wallet generation unit 310 generates and issues an electronic wallet that is linked with a blockchain network for users who use the above-described O2O identity authentication and integrated electronic payment service platform.

The electronic wallet generation unit 310 generates and distributes and stores different network nodes (channels) according to the types of objects to be stored. In addition, in the generated electronic wallet, different data contracts, update contracts, transaction contracts, etc. may be set between nodes (blocks) according to the smart contract contract policy.

The aforementioned electronic wallet may be a space for distributing and storing various data such as identity authentication, transaction details, and electronic documents.

Next, the request unit 320 is a credit card company that issued the credit card information registered in the user's electronic wallet in response to a request for issuing a one-time credit card number to be used for on/off electronic transactions from the user terminal. It may be a configuration that requests confirmation of the validity of the credit card issued by the user along with the decentralized identity certificate (DID) generated based on the identification information initially issued from the institution.

In addition, the requesting unit 320 may be configured to request identity authentication for verification of the identification information provided by the user to the credit card company.

When the request unit 320 receives the identity authentication information for the identity verification information from the credit card company, it is provided to the DID generation and management unit 330 to be described later to request the generation of a decentralized identity certificate (DID) for the user. can be

Next, the DID generation and management unit 330 generates a decentralized identity certificate (DID) based on the identity authentication information provided by the card company server, and distributes and manages it in a blockchain network that works with the user's electronic wallet. can

Meanwhile, the DID generation and management unit 330 may generate and issue a personal DID or a corporate DID according to a user type, for example, an individual or a corporation.

In the case of the personal DID, the personal DID may be generated based on the identity authentication information provided by the card company server that issued the credit card information in the name of the user.

In the case of corporate DID, corporate DID can be created and issued by verifying the information of the company name, such as a certified copy of corporate registration, corporate seal, and corporate registration, provided by the terminal belonging to the company. .

To this end, the person in charge of the company is first issued a personal DID that can prove that he is the person in charge of the task through the system using his/her terminal, and uses the personal DID to obtain approval from the representative of the company. In addition to making a request, when approval is completed, a corporate DID can be requested using one's own personal DID and the representative's personal DID.

Here, even in the same company, general employees limit the authority to call representatives for issuing powers of attorney and approval of powers of attorney, and only participants who are company managers who have the authority to do the work can have access to the system. Such authority is filtered in the identity verification procedure when issuing the above-described personal DID, and the personal DID without authority may be restricted so that the subsequent corporate DID issuance procedure cannot be performed.

Also, the DID generation and management unit 330 may perform an identity verification procedure for the submitted first personal DID in response to a corporate DID issuance request. By obtaining a DID document from the blockchain network through the first personal DID and verifying the public key, it is possible to request identification for the first personal DID.

Next, the smart contract unit 340 automatically establishes a transaction contract when a transaction of an individual electronic transaction exists between the user terminal 200 and the customer terminal (individual, company) and the transaction satisfies the condition data. can A smart contract is a software code implemented on a blockchain platform that guarantees that the contract is automatically executed for the assets contained in the blockchain according to the fulfillment of pre-specified conditions. In other words, a smart contract is an automated self-enforced agreement that is a concept that combines the two processes of contract establishment and execution into one by blockchain technology. The technical concept of a smart contract is that transaction records are distributed and stored, decentralized and shared, and the duplicated ledger is operated and stored, and at the same time, it is a kind of program that is automatically executed according to an event that instructs the transfer of assets to the ledger. -driven program). On the other hand, a smart contract is legally required to have at least two parties, ② it is related to the transfer of assets from one party to another, and ③ its implementation is automatic, and once the contract is initiated, It is a contract concept that does not require human intervention. In this respect, a smart contract as an element of contract law is a kind of algorithmic contract. In an algorithmic contract, one party or both parties promise to decide whether to conclude the contract and the conditions by using the algorithm. However, a smart contract has a distinguishing feature from an algorithmic contract in that it can form a DAO (Decentralized Autonomous Organization), a kind of decentralized autonomous organization. On the other hand, smart contracts do not value the trust of the parties because they are executed automatically without human intervention. Therefore, it is a kind of so-called conditional nature, in which the problem of non-performance of the contract, which is the biggest weakness of the contract, is determined by the fulfillment of a programmed condition rather than depending on the credit of the other party. Therefore, interpreting, judging, and evaluating whether a condition is achieved in a smart contract is a legally important issue, and the setting of the condition does not exclude that it is set by agreement with the user terminal 200 as described above.

Transactions in smart contracts are made in the following order: ① programming code writing, ② code signing, ③ block chain storage, and ④ transaction execution. The program code and the results executed here are included in the transaction and stored in the form of a database in a block connected by a chain, so that all participants share transaction information. ) are stored independently of each other. Here, participants link the wallet address created by the public key encryption method with the block chain to conclude a contract and electronically sign it. A smart contract transaction is a computer protocol designed to make it easy and convenient to execute or verify the execution of a contract on a network. These transactions can be traced, but have irreversibility that the transaction record cannot be returned to its previous state or changed. In this case, functions including Turing-completeness, value-awareness, blockchain-awareness, and state concepts may be provided.

3 and 4 are flowcharts illustrating an O2O identity authentication and electronic payment integrated management service method according to an embodiment of the present invention.

As shown in Figures 3 and 4, the O2O identity authentication and electronic payment integrated management service method (S700) according to an embodiment of the present invention is first, using the O2O identity authentication and integrated electronic payment service platform in the user terminal. A request for distributed storage of credit card information and identification information (individual, company) issued in one's own name based on the block chain to the block chain information management management server (S710).

Thereafter, the block chain information management server 300 performs a verification process based on the card issuance history information provided by the card company server that issued the credit card information for verification of the identification information provided by the user terminal (S720) do.

After verification of the identification information is completed, a decentralized identity certificate (DID) is generated and distributed and stored in the electronic wallet created in the user terminal together with credit card information (S730).

Thereafter, when a one-time credit card number issuance request is received from the user terminal, the one-time credit card number is requested and issued to the card company server of the credit card based on the decentralized identity certificate (DID) and credit card information. It is transmitted to the user terminal (S740).

After the step S740, the user terminal uses the one-time credit card number to provide a decentralized identity certificate (DID) to the customer's terminal and/or web server during on/offline product payment or personal electronic payment using the one-time credit card number (S750) By doing so, secure transactions with users (customers) are guaranteed.

Therefore, the O2O identity authentication and electronic payment integrated management service system and method according to an embodiment of the present invention can prevent theft and duplication of personal or corporate credit cards through issuance of a one-time credit card number, and between transaction parties It has the advantage of being able to omit the identification process due to the low trust in the transaction, the inability to guarantee the safety of the transaction, the misuse of personal information, and the complicated and cumbersome document process required to conduct electronic transactions.

5 is a diagram illustrating an example computing environment in which one or more embodiments disclosed herein may be implemented, and is an illustration of a system 1000 including a computing device 1100 configured to implement one or more embodiments described above. shows For example, computing device 1100 may be a personal computer, server computer, handheld or laptop device, mobile device (mobile phone, PDA, media player, etc.), multiprocessor system, consumer electronics, minicomputer, mainframe computer, distributed computing environments including any of the aforementioned systems or devices, and the like.

The computing device 1100 may include at least one processing unit 1110 and a memory 1120 . Here, the processing unit 1110 may include, for example, a central processing unit (CPU), a graphic processing unit (GPU), a microprocessor, an Application Specific Integrated Circuit (ASIC), Field Programmable Gate Arrays (FPGA), etc. and may have a plurality of cores.

The memory 1120 may be a volatile memory (eg, RAM, etc.), a non-volatile memory (eg, ROM, flash memory, etc.), or a combination thereof. Additionally, the computing device 1100 may include additional storage 1130 . Storage 1130 includes, but is not limited to, magnetic storage, optical storage, and the like. The storage 1130 may store computer readable instructions for implementing one or more embodiments disclosed herein, and other computer readable instructions for implementing an operating system, an application program, and the like. Computer readable instructions stored in storage 1130 may be loaded into memory 1120 for execution by processing unit 1110 . Computing device 1100 may also include input device(s) 1140 and output device(s) 1150 .

Here, the input device(s) 1140 may include, for example, a keyboard, mouse, pen, voice input device, touch input device, infrared camera, video input device, or any other input device, or the like. Further, the output device(s) 1150 may include, for example, one or more displays, speakers, printers, or any other output device, or the like. Also, the computing device 1100 may use an input device or an output device included in another computing device as the input device(s) 1140 or the output device(s) 1150 . Computing device 1100 may also include communication connection(s) 1160 that enable computing device 1100 to communicate with other devices (eg, computing device 1300 ).

Here, communication connection(s) 1160 may be a modem, network interface card (NIC), integrated network interface, radio frequency transmitter/receiver, infrared port, USB connection, or other for connecting computing device 1100 to another computing device. It may include interfaces. Further, the communication connection(s) 1160 may include a wired connection or a wireless connection. Each component of the computing device 1100 described above may be connected by various interconnections such as a bus (eg, peripheral component interconnection (PCI), USB, firmware (IEEE 1394), optical bus structure, etc.) and may be interconnected by a network 1200 . As used herein, terms such as "component," "system," and the like, generally refer to a computer-related entity that is hardware, a combination of hardware and software, software, or software in execution.

The present invention is not limited by the above embodiments and the accompanying drawings. For those of ordinary skill in the art to which the present invention pertains, it will be apparent that components according to the present invention can be substituted, modified and changed without departing from the technical spirit of the present invention.

100: O2O identity authentication and electronic payment integrated management service system
200: user terminal
300: blockchain information management server
310: electronic wallet generation unit
320: request part
330: DID generation and management unit
340: smart contract unit

Claims (4)

A user terminal that requests distributed storage of credit card information and identification information (individual, company) issued in his/her name using the O2O identity authentication and integrated electronic payment service platform based on the block chain; and
After verifying the identification information provided by the user terminal, and after distributing and storing the verified identification information and credit card information in a block chain network, when a one-time credit card number issuance request is made from the user terminal, the verified Based on the identification information and credit card information, the issuance of a one-time credit card number is requested and issued by the card company server of the corresponding credit card, and the issuance is transmitted to the user terminal, and the user terminal uses the one-time credit card number. O2O identity authentication and electronic authentication including a blockchain information management server that provides a decentralized identity certificate (DID) generated based on the identification information verified by the terminal and/or web server of the on/offline vendor at the time of offline product payment Payment integrated management service system.
According to claim 1,
The blockchain information management server is
Requests the registration of credit card information and identification information (individual, company) necessary for membership registration from the user terminal using the O2O identity authentication and integrated electronic payment service platform as a prerequisite, and verifying the identification information O2O identity authentication and electronic payment integrated management service system, characterized in that it is verified based on the credit card issuance details of the card company server that issued the card information.
3. The method of claim 2,
The blockchain information management server is
O2O, characterized in that when the user's identification information is verified, an individual (corporate) decentralized identity certificate (DID) is generated, and the generated decentralized identity certificate (DID) is distributed and stored in an electronic wallet issued to the user terminal Identity authentication and electronic payment integrated management service system.
Distributing and storing credit card information and identification information (individual, company) issued in one's own name in a blockchain-based electronic wallet using O2O identity authentication and integrated electronic payment service platform in the user terminal;
verifying the verification of the identification information provided by the user terminal based on the card issuance history information provided by the card company server that issued the credit card information;
When the verification of the identification information is completed, generating a decentralized identity certificate (DID), and then distributing and storing it in the electronic wallet created in the user terminal together with the credit card information;
Upon request for issuance of a one-time credit card number from the user terminal, the user terminal receives and requests the issuance of a one-time credit card number from the card company server of the corresponding credit card based on the decentralized identity certificate (DID) and credit card information passing to;
After providing a decentralized identity certificate (DID) to the customer's terminal and/or web server during on/offline product payment or personal electronic payment using the one-time credit card number in the user terminal, secure transaction with the user O2O identity authentication and electronic payment integrated management service method including the step of guaranteeing.

Images