KR100501164B1 - System and Method for Authentication/Payment Using Mobile Terminal with Smart Card - Google Patents

Abstract

The present invention relates to an authentication / payment system for performing a payment by issuing a payment authentication key for a smart card to a mobile communication terminal having a smart card.

The present invention generates, stores and manages a payment authentication key by receiving identification data in a smart card from a mobile communication terminal upon request for issuing a payment authentication key, and encrypts the payment authentication key to be stored in a smart card of the mobile communication terminal. Authentication key issuance and management means to send to; MAC generation means for receiving the identification data of the smart card to generate a MAC; When a payment request is requested from the POS terminal for authentication of the mobile communication terminal, the smart terminal identification data, the encrypted authentication key, and the MAC are transmitted from the mobile communication terminal together with the payment request message, and the identification data of the smart card is held. A payment authentication key and MAC verification means for generating a MAC by itself and comparing it with a MAC received from a mobile communication terminal, and confirming that the decrypted payment authentication key is the same as a payment authentication key stored in a database when the MAC is the same; And payment management means for receiving and managing payment information from the POS terminal.

Since the present invention issues an authentication key used for payment using smart card identification data, payment can be performed using a mobile communication terminal even when offline.

Description

System and Method for Authentication / Payment Using Mobile Card with Smart Card {System and Method for Authentication / Payment Using Mobile Terminal with Smart Card}

The present invention provides an authentication / payment system, which is capable of performing a payment by issuing a payment authentication key for a smart card to a mobile communication terminal having a smart card.

The payment service using the mobile terminal equipped with the existing smart card has electronic money, credit card, and transportation pass service according to the program in the integrated circuit, and the mobile terminal payment service by the mobile network operator is the payment settlement on the wired Internet. As a means, by accessing the Internet using a general PC, the payment authentication key is transmitted to the mobile communication terminal at the time of purchase of goods and payment of contents at the internet merchant, and the range of use of the mobile communication terminal billing service. The possible range is limited to wired internet.

In addition, in the charging of the mobile terminal, the charging information is generated based on the user's mobile terminal information. The mobile terminal information includes hardware information of the terminal and mobile station identification data (hereinafter referred to as MIN). There is a user agent profile which is information on software information, service type, and the like. The charging information is generated by extracting MIN information corresponding to the mobile communication terminal number from the mobile communication terminal 100 user information. However, the MIN information of the mobile communication terminal can be changed by the user in the offline state without access to the mobile communication network. Although it is impossible to connect to the mobile communication network with randomly changed MIN information, in the offline state, there is no limitation in short-range communication such as RF, IrFM, Bluetooth, etc. using the changed MIN information of the mobile communication terminal. There is a problem of changing or misusing billing data that generates billing information.

Due to these problems, it was not possible to use a mobile terminal payment service using a mobile terminal in an off-line affiliate store that uses a POS terminal including a communication means for accessing a VAN through a general PSTN.

The present invention has been made to solve the above problems, to provide an authentication / payment system and method for issuing a payment authentication key to a mobile communication terminal with a smart card and performing payment offline using the same. There is a technical problem.

The present invention for achieving the above object is connected to a mobile network operator and a POS terminal, issuing a payment authentication key to a mobile communication terminal with a smart card embedded, and performs a payment to the mobile communication terminal at the merchant equipped with a POS terminal It is an authentication / payment system that allows you to hold smart card identification data.

Control unit; Upon request for issuing a payment authentication key, under the control of the control unit, identification data in the smart card is received from the mobile communication terminal, the payment authentication key is generated, stored in a database and managed, and the payment authentication key is encrypted and stored in the smart card of the mobile communication terminal. Authentication key issuance and management means for transmitting to the mobile communication terminal; MAC generation means for receiving the identification data of the smart card from the mobile communication terminal under the control of the control unit to generate a MAC to transmit to the mobile communication terminal; When the payment request is requested from the POS terminal, the mobile terminal receives the smart card identification data, the encrypted authentication key, and the MAC together with the payment request message. The MAC is generated using the identification data and compared with the MAC received from the mobile terminal. If the MAC is the same, the encrypted payment authentication key transmitted from the mobile terminal is decrypted, and the decrypted payment authentication key is stored in the database. Payment authentication key and MAC verification means for confirming whether the same as the payment authentication key; And payment management means for receiving payment information from a POS terminal and storing and managing the payment information in a database under the control of the controller.

Another embodiment of the present invention is connected to a mobile communication network operator and a POS terminal, issuing a payment authentication key to a mobile communication terminal with a smart card embedded, authentication to perform a payment to the mobile communication terminal in the merchant equipped with a POS terminal As an authentication / payment method using the / payment system, the process of issuing a payment authentication key,

Receiving information necessary for issuing a payment authentication key from a mobile communication terminal of a user; Requesting user authentication by transmitting the user's mobile terminal number and user information among payment authentication key issuing information to the mobile communication network operator; Receiving a result of authenticating the user from the mobile communication network operator and confirming whether or not a payment authentication key corresponding to the smart card in the user mobile communication terminal may be issued; Receiving smart card information including smart card identification data and user information in the mobile communication terminal from the mobile communication terminal; Generating and encrypting a payment authentication key using smart card information of the mobile communication terminal; Generating a MAC using smart card identification data of the mobile communication terminal and transmitting the MAC to the mobile communication terminal together with the encrypted payment authentication key; As the mobile terminal generates the MAC using smart card identification data and compares it with the MAC received from the authentication / payment system, decrypts and stores the encrypted payment authentication key and transmits the result to the authentication / payment system. The authentication / payment system includes transmitting a payment authentication key issuance completion message to the mobile communication terminal.

Another embodiment of the present invention is connected to a mobile communication network operator and a POS terminal, issuing a payment authentication key to a mobile communication terminal with a smart card embedded, authentication to perform a payment to the mobile communication terminal in the merchant equipped with a POS terminal As a payment method,

Issuing a payment authentication key and a MAC to the mobile communication terminal and storing the issued payment authentication key; Receiving a mobile communication terminal smart card identification data, an encrypted payment authentication key embedded in the smart card, a MAC and payment information as a payment request message from the POS terminal; Generating a MAC by using smart card identification data of the mobile communication terminal and comparing the MAC with the MAC received from the POS terminal to determine whether the MAC card is identical; Decrypting the payment authentication key transmitted from the POS terminal and comparing the payment authentication key stored therein; Requesting user authentication by transmitting user information to a mobile network operator; Verifying the user by using the user information received from the mobile network operator, and transmitting the payment amount information received from the POS terminal to the mobile network operator; And performing a payment for the payment amount.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram showing an example of connection between an authentication / payment system 500 and a communication network according to the present invention.

The mobile communication terminal 100 of the user is a terminal that stores information for performing a payment. The mobile communication terminal 100 includes a removable smart card and is provided to the smart card through an RF antenna or an optical communication port provided in the mobile communication terminal 100. Send the stored information. Here, the smart card is embedded with identification data for use in the symmetric key encryption method at the time of issuance, and in addition to performing the payment, such as the mobile communication terminal 100, user information, payment authentication key, etc. to which the smart card will be mounted. Include additional information needed. The identification data is a number issued for each smart card. When another user tries to make a payment by attaching a smart card to his mobile wireless terminal, the identification data of the mobile terminal and the smart card that attempts payment do not match. Therefore, payment is not allowed. In addition, the mobile communication terminal 100 smart card encrypts the payment authentication key stored in the smart card of the mobile communication terminal 100 and generates a MAC when the payment is made using the mobile communication terminal 100 offline. Send to 700.

The authentication / payment system 500 receives information necessary for issuing a payment authentication key from a smart card (not shown) in the mobile communication terminal 100 of the user to generate a unique payment authentication key of the mobile communication terminal 100. After encryption, the data is transmitted to the mobile communication terminal 100 together with the generated MAC using smart card identification data. In addition, the authentication / payment system 500 receives and stores payment information (for example, mobile communication terminal 100 number, payment amount, POS terminal 700 number, etc.) from the POS terminal 700 provided in the affiliated store and After verifying the received payment information, the payment is performed.

The POS terminal 700 is a terminal for receiving payment information from a mobile communication terminal 100 having a smart card and transmitting payment information to perform payment. The payment transmitted from the mobile communication terminal 100 using near field communication is performed. The information (payment authentication key, the user's mobile communication terminal 100 number, etc.) is transmitted to the authentication / payment system 500 to make a payment request. Here, the payment information transmitted by the POS terminal 700 is transmitted to the authentication / payment system 500 through the PSTN communication.

When the mobile network operator 300 receives the user mobile communication terminal 100 number transmitted by the authentication / payment system 500, the mobile communication service provider 300 searches for a user matching the mobile communication terminal 100 number, and the mobile communication terminal 100 of the user. Check the status of payment, cancellation, and suspension of service. As a result of the check, for example, if the mobile network operator 300 has an overdue amount because the user does not pay the usage fee for the mobile communication terminal 100, the mobile network operator 300 transmits the fee due to the authentication / payment system 500 for authentication. Allow payment system 500 to refuse payment.

2 is a diagram showing in detail the configuration of the authentication / payment system 500 according to the present invention.

The authentication / payment system 500 authenticates payment by using smart card information mounted on the mobile communication terminal 100 for payment according to the payment request of the user management means 510 and the POS terminal 700 for managing user information. Authentication key issuance and management means 520 for generating, managing and encrypting keys, generating or verifying a payment authentication key generated for transmission to the mobile communication terminal 100 or a MAC received from the mobile communication terminal 100 or MAC authentication means for generating a message authentication code (MAC) using the received payment authentication key and the smart card identification data of the mobile communication terminal 100, payment authentication encrypted by the smart card of the mobile communication terminal 100 The MAC generated using the key and the identification data and the encrypted payment authentication key received from the mobile communication terminal 100 and the MAC generated from the identification data are verified and verified. And then the authentication key and MAC verification means 540 for decrypting and verifying the encrypted payment authentication key, payment management means 550 for receiving and managing payment information from the POS terminal 700, a mobile communication terminal or a POS terminal ( 700 is composed of a payment result notification means 560, a control unit 570 and a database 580 for transmitting the result information generated in the payment process.

In more detail, the user management means 510 is a user information (for example, mobile communication terminal 100 number, user name, user address, etc.) to be issued a payment authentication key transmitted from the user mobile communication terminal 100 Receive and store in the database 580. The information stored in the database 580 by the user managing means 510 is referred to managing by the corresponding user when the authentication / payment system 500 receives the payment information from the mobile communication terminal 100. In addition, the information stored in the database 580 by the user management means 510 can be updated when the information of the user changes.

When the authentication key issuing and managing means 520 receives payment authentication key issuing request information (for example, identification data of the smart card) transmitted from the mobile communication terminal 100 having a smart card, the identification data of the smart card is received. And using the user information stored in the database 580 generates a payment authentication key to be used for payment and stores in the database 580. The authentication key generated by the authentication key issuing and managing means 520 is encrypted later when it is transmitted to the mobile communication terminal 100.

The MAC generating unit 530 generates a message authentication code (MAC) using smart card identification data of the mobile communication terminal 100 stored in the database 580. The MAC, which is a mutual authentication code, is an entity authentication method for verifying the identity of the other party to the sender and receiver so that the issued payment authentication key is not exposed to other users in the process of being transmitted to the mobile communication terminal 100. Authentication key and MAC verification means 540 checks whether the MAC authentication and the payment authentication key generated in the mobile communication terminal 100 and the authentication / payment system 500, respectively.

The payment management means 550 is a payment information (payment amount, encrypted payment of the mobile communication terminal 100) transmitted from the POS terminal 700 to the mobile terminal 100 when the user intends to perform a payment such as purchase of goods. Receive the payment amount of the authentication key, MAC, POS terminal 700 number, etc.) and store in the database 580, and after the confirmation process for the mobile communication terminal 100 or the payment authentication key is performed, the POS terminal 700 Pay the amount sent from.

The payment result notification means 550 issues the encrypted payment authentication key or transmits the result information on the payment authentication key issuance and payment completion to the user's mobile terminal 100 or the POS terminal 700 after the payment is completed. . The result information is in the form of any one of SMS, voice, video, and a combination thereof.

The control unit 570, the user management means 510, authentication key issuance and management means 520, MAC generation means 530, authentication key and MAC verification means 540, payment management means 550, payment result notification Control the means 560 to store information transmitted or received from the outside or the internal to the database 580 or control the entire system such that each means performs an operation such as issuing a payment authentication key, generating a MAC, sending a result, or making a payment. do.

3 is a detailed view of the database 580 of the authentication / payment system 500 according to the present invention.

The database 580 is composed of a user information database 581, an authentication key information database 582, a MAC information database 583, a payment information database 584, and a payment information verification result database 585.

The user information database 581 stores user information (for example, the mobile communication terminal 100 number) transmitted and received by the user management means 510 under the control of the controller 570. The authentication key information database 582 stores the payment authentication key generated by the authentication key issuing and managing means 520 under the control of the controller 570. The MAC information database 583 receives and stores the MAC from the MAC generating means 530 under the control of the controller 570. The payment information database 584 stores payment information such as a payment amount, a POS terminal 700 number, and the like received by the payment management means 550 under the control of the controller 570. The payment information verification result database 585 stores information transmitted and received by the authentication key and the MAC verification means 540 under the control of the controller 570, or generated by the mobile communication terminal 100 and the authentication / payment system 500. The result of checking whether the payment authentication key and the MAC are the same is stored.

The user information database 581, the authentication key information database 582, the MAC information database 583, the payment information database 584, and the payment information verification result database 585 change items to be stored as needed by an operator. It is possible.

4 is a flowchart illustrating an embodiment of an authentication key issuing method applied to the present invention. A method of issuing a payment authentication key corresponding to the smart card of the mobile communication terminal 100 by the authentication / payment system 500 will be described.

The user management means 510 in the authentication / payment system 500 receives information necessary to issue a payment authentication key (for example, the mobile communication terminal 100 number, etc.) from the mobile communication terminal 100 of the user to receive a database 580. In step S101.

Subsequently, the user management means 510 transmits the user's mobile communication terminal 100 number and user information among the received payment authentication key issuing information to the mobile communication network operator 300 to request user authentication (S103). The mobile network operator 700 searches for the user by using the mobile communication terminal 100 number and the user information transmitted by the user management means 510 and confirms the validity of the mobile communication terminal 100. The authentication / payment system 500 receives an authentication result from the mobile network operator 700 (S105). The authentication / payment system 500 checks whether or not a payment authentication key corresponding to the smart card in the user mobile communication terminal 100 may be issued (S107).

If the user is eligible to issue the payment authentication key as a result of step S107, the authentication key issuing and managing means 520 requests the smart card information required for issuing the payment authentication key to the mobile communication terminal 100 (S109). The authentication key issuing and managing means 520 receives the smart card information in the mobile communication terminal 100 transmitted by the mobile communication terminal 100 (S111). Here, the smart card includes identification data for identifying the smart card and user information.

The authentication key issuing and managing means 520 generates and encrypts a payment authentication key using the received smart card information (eg, smart card identification data and user information) of the mobile communication terminal 100. In addition, the MAC generating unit 530 is based on the smart card identification data of the mobile communication terminal 100 in order to prevent the encrypted payment authentication key is known to other users in the process of being transmitted to the mobile communication terminal 100. To generate (S113). Here, the MAC (Message Authentication Code), which is a mutual authentication code, is an entity authentication code that confirms the identity of each counterpart to transmit and receive, and is intended to prevent exposure to other users when transmitting an encrypted payment authentication key.

Authentication key issuance and management means 520 transmits the encrypted payment authentication key and the MAC to the mobile communication terminal (100) (S115). The mobile communication terminal 100 receives and stores the encrypted payment authentication key and MAC transmitted from the authentication key issuing and managing means 520 and generates a MAC using identification data stored in the smart card (S117). . The smart card of the mobile communication terminal 100 compares the MAC generated by itself with the MAC received from the MAC generating means 530 to determine whether the MACs are the same (S119). If the MAC is the same as the result of checking in step S119, the mobile communication terminal 100 smart card decrypts and stores the payment authentication key (S121). Here, the encryption and decryption of the payment authentication key uses a symmetric key method. Symmetric Key decryption is a technique of encrypting and decrypting with the same key, and is a method in which the sender and the receiver encrypt or decrypt by using the same key to symmetrically. After decrypting and storing the payment authentication key, the result is transmitted to the authentication / payment system 500 (S123). The payment result notification means 560 receives a signal indicating that the payment authentication key is stored from the mobile communication terminal 100, and then transmits information indicating that the payment authentication key issuance is completed for the smart card of the mobile communication terminal 100. (S125).

Hereinafter, a process in which a user who has issued a payment authentication key for a smart card of the mobile communication terminal 100 performs a payment by using the mobile communication terminal 100 at an offline affiliated store will be described. In the present invention, in the case of the purchase of goods purchased offline, unlike the transmission including the credit card information in the payment delivery message format transmitted to the POS terminal 700, the transmission includes smart card identification data, an encrypted authentication key, and a MAC. do.

The user selects a payment menu from a list displayed on the mobile communication terminal 100 in order to purchase a necessary item on the mobile communication terminal 100 at offline (S201). The mobile terminal 100 displays the user to input a password, and if the user inputs the password, the mobile terminal 100 checks whether the password set by the user matches the password input by the user (S203). Thereafter, the mobile communication terminal 100 transmits identification data of the smart card to the POS terminal 700 in order to perform a payment, and after confirming mutual authentication, a communication channel is formed (S205).

The mobile communication terminal 100 smart card encrypts the payment authentication key stored therein, and generates a MAC based on the smart card identification data of the mobile communication terminal 100 to the POS terminal 700 together with the encrypted payment authentication key. It transmits (S207).

The POS terminal 700 receives and stores the encrypted payment authentication key and MAC from the mobile communication terminal 100 smart card, and then transmits the stored payment authentication key and MAC purchase information to the authentication / payment system 500 for payment. Request for authentication and approval for (S209).

The authentication / payment system 500 generates a MAC using the smart card identification data of the mobile communication terminal 100 stored in the database, and compares the MAC with the MAC received from the POS terminal 700 to check whether or not it matches. The authentication key and the MAC verification means 550 compares the MAC generated and transmitted by the mobile communication terminal 100 with the MAC generated by the authentication key issuing and managing means 520 and transmits the same from the mobile communication terminal 100. The encrypted payment authentication key is decrypted and compared with the payment authentication key generated in the authentication key issuing and managing means 520 and stored in a database (S211).

Subsequently, the authentication / payment system 500 requests user authentication by transmitting the user's information to the mobile network operator 300 (S213). The mobile network operator 300 receives the user information transmitted from the authentication / payment system 500, searches for the user's bill payment status, and transmits the user's credit result (S215). The authentication / payment system 500 verifies and verifies the user by using the user information received from the mobile network operator 300 (S217). When the identity of the user in step S217 is verified and the user can perform the payment, the authentication / payment system 500 transmits the payment information received from the POS terminal 700 to the mobile communication network operator 300 (S219). The authentication / payment system 500 transmits the user authentication result and the approval result for the payment amount to the POS terminal 700 (S221). The POS terminal 700 outputs a receipt based on the authentication result and the payment amount approval result received from the authentication / payment system 500 (S223). Lastly, the authentication / payment system 500 transmits the SMS of the result of the user's approval of the amount of the payment attempted using the mobile communication terminal 100 (S225).

As a result of step S211, when the payment authentication key received from the mobile communication terminal 100 and the payment authentication key stored in the database are not the same, the authentication / payment system 500 indicates that payment is impossible to the POS terminal 700. The message is transmitted (S231). The POS terminal 700 transmits a payment impossible message to the user (S233).

If the user who cannot perform the payment because the identity is not authenticated as a result of step S217, steps S231 and S233 are performed.

As such, those skilled in the art will appreciate that the present invention can be implemented in other specific forms without changing the technical spirit or essential features thereof. Therefore, the above-described embodiments are to be understood as illustrative in all respects and not as restrictive. The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

As described above, the present invention issues payment authentication keys used for payment by using identification data of a mobile communication terminal having a smart card, so that payment can be made using the mobile communication terminal even when offline.

1 is a diagram showing a connection example of an authentication / payment system and a communication network according to the present invention;

2 is a view showing in detail the configuration of the authentication / payment system according to the present invention,

3 is a view showing in detail a database of an authentication / payment system according to the present invention;

4 is a flowchart for explaining an embodiment of an authentication key issuing method applied to the present invention;

5 is a flowchart illustrating an embodiment of a payment method according to the present invention.

<Description of the symbols for the main parts of the drawings>

100: mobile communication terminal 300: mobile communication network operators

500: authentication / payment system 510: user management means

520: Issuance and management means of the authentication key 530: MAC generation means

540: authentication key and MAC verification means 550: payment management means

560: payment result notification means 570: control unit

580: Database 581: User Information Database

582: authentication key information database 583: MAC information database

584: Billing Information Database

585: Payment information verification result database

Claims (11)

It is an authentication / payment system connected to a mobile communication network operator and a POS terminal, issuing a payment authentication key to a mobile communication terminal having a smart card embedded therein, and performing a payment to the mobile communication terminal at an affiliated store equipped with a POS terminal. Holds identification data of the smart card, Control unit; Upon request for issuing a payment authentication key, under the control of the controller, the mobile terminal receives identification data in the smart card, generates and stores a payment authentication key in a database, and encrypts the payment authentication key. Authentication key issuing and managing means for transmitting to the mobile communication terminal to be stored in a smart card; MAC generation means for receiving the identification data of the smart card from the mobile communication terminal under the control of the controller to generate a MAC to transmit to the mobile communication terminal; In the payment request, when authentication of the mobile communication terminal is requested from the POS terminal, smart card identification data, an encrypted authentication key, and a MAC are transmitted from the mobile communication terminal together with a payment request message. After generating the MAC using the identification data of the smart card to compare with the MAC received from the mobile communication terminal, and if the MAC is the same, after decrypting the encrypted payment authentication key transmitted from the mobile communication terminal, Payment authentication key and MAC verification means for confirming whether the decrypted payment authentication key is the same as the payment authentication key stored in the database; And And payment management means for receiving payment information from the POS terminal under the control of the controller, storing and managing the payment information in the database. According to claim 1, The authentication / payment system authentication / payment system further comprises a payment result notification means for transmitting the result information generated in the payment process to the mobile terminal or the POS terminal. The method of claim 2, The result information is a short message (SMS) authentication / payment system, characterized in that. According to claim 1, The database is An authentication key information database for storing an encrypted payment authentication key generated by the authentication key issuing and managing means; A MAC information database for receiving and storing the MAC generated by the MAC generating means; A payment information database connected with the payment management means to store payment information; And And a payment information verification result database for storing whether the payment authentication key and MAC generated by the mobile communication terminal and the authentication / payment system are identical in the authentication key and MAC verification means. The method of claim 4, wherein The payment information authentication / payment system, characterized in that it comprises a POS terminal number, payment amount. According to claim 1, The smart card includes an identification number of the mobile communication terminal, smart card identification data of the mobile communication terminal, personal information of the user. An authentication / payment system connected to a mobile communication network operator and a POS terminal and issuing a payment authentication key to a mobile communication terminal having a smart card embedded therein, so that a merchant having a POS terminal can perform payment to the mobile communication terminal. As the authentication / payment method used, the process of issuing the payment authentication key, Receiving information necessary for issuing the payment authentication key from the mobile communication terminal of the user; Requesting user authentication by transmitting a user's mobile terminal number and user information of the payment authentication key issuing information to the mobile communication network operator; Receiving a result of authenticating a user from the mobile communication network operator and confirming whether or not a payment authentication key corresponding to a smart card in the user mobile communication terminal may be issued; Receiving smart card information including smart card identification data and user information in the mobile communication terminal from the mobile communication terminal; Generating and encrypting a payment authentication key using smart card information of the mobile communication terminal; And Generating a MAC using smart card identification data of the mobile communication terminal and transmitting the MAC with an encrypted payment authentication key to the mobile communication terminal; The mobile terminal generates a MAC using smart card identification data and compares the MAC with the received MAC from the authentication / payment system, and decrypts and stores the encrypted payment authentication key, and stores the result. As sent to And transmitting, by the authentication / payment system, a payment authentication key issuance completion message to the mobile communication terminal. The method of claim 7, wherein The completion message is a short message (SMS) characterized in that the authentication / payment method. As an authentication / payment method connected to a mobile communication network operator and a POS terminal, a payment authentication key is issued to a mobile communication terminal having a smart card embedded therein, so that a merchant having a POS terminal can perform payment to the mobile communication terminal. , Issuing a payment authentication key and a MAC to the mobile communication terminal and storing the issued payment authentication key; Receiving the mobile communication terminal smart card identification data, the encrypted payment authentication key embedded in the smart card, the MAC, and the payment information from the POS terminal as a payment request message; Generating a MAC by using the mobile terminal smart card identification data and comparing the MAC with the MAC received from the POS terminal to check whether the MAC is identical; Decrypting the payment authentication key transmitted from a POS terminal and comparing the stored payment authentication key; Requesting user authentication by transmitting user information to the mobile network operator; Verifying a user using user information received from the mobile communication network operator, and transmitting payment amount information received from the POS terminal to the mobile communication network operator; And Authentication / payment method comprising the step of performing a payment for the payment amount. The method of claim 9, And after the payment for the payment amount, transmitting a result message for approving the payment amount to the mobile communication terminal. The method of claim 10, The result message is a short message (SMS) characterized in that the authentication / payment method.