KR100584900B1 - System and its method of payment by securing payer's private information and by protecting wrong drawing - Google Patents

Abstract

The present invention relates to a payment system and a payment method for preventing exposure of a payer's personal information, protecting a payer's personal information and preventing fraudulent withdrawal by performing a direct debit payment according to the payer's consent.

The payment system according to the present invention receives a payer's automatic transfer registration request from a user institution, and sends a payer authentication request requesting the payer's personal information (resident registration number, payer number) to be authenticated by the payer, thereby responding to personal information. A CMS server receiving the personal information and the direct debit registration request to the bank to receive a result of the direct debit registration, and responding the result to the user institution; And receiving the payment requestor authentication request from the CMS server, using the user's telephone number included in the payment requestor authentication request, sending payment information and direct debit information to the payer to request input of personal information, and the payer confirms the authentication request. If approved, characterized in that it comprises a certification authority server for receiving the personal information to be input and transmit to the CMS server.

Direct debit, CMS, phone bill combined payment

Description

System and its method of payment by securing payer's private information and by protecting wrong drawing}

The following drawings attached to this specification are illustrative of preferred embodiments of the present invention, and together with the detailed description of the invention to serve to further understand the technical spirit of the present invention, the present invention is a matter described in such drawings It should not be construed as limited to

1 is a functional diagram of a conventional CMS payment system.

2 is a block diagram of a CMS payment system according to the present invention.

3 is a functional block diagram of a CMS server according to a preferred embodiment of the present invention.

4 is a functional block diagram of a certification authority server according to a preferred embodiment of the present invention.

5 is a flowchart illustrating a CMS payment method according to a first embodiment of the present invention.

6 is a flowchart illustrating a CMS payment method according to another modified embodiment of the present invention.

7 is a flowchart illustrating a method for settlement of phone charges according to a second embodiment of the present invention.

8 is a flow chart of a method for settlement of telephone charges according to another modification of the present invention.

Explanation of symbols on the main parts of the drawings

1: system 2: CMS server

3: certificate authority server 4: bank server

5: payer terminal 6: user organization terminal

21: authentication request receiving means 22: authentication response receiving means

23: authentication payment method 24: result notification means

31: Authentication request receiving means 32: Authentication agent means

33: authentication response transmission means 211: authentication log DB

The present invention relates to a CMS payment system and a payment method for protecting a payer's personal identification information and preventing fraudulent withdrawal, and more specifically, by using only a portion of the personal identification information to the user organization when requesting CMS payment, The present invention relates to a CMS payment system and a payment method capable of preventing the payer's personal identification information from being stolen.

CMS (cash management service) is a service provided by KFTC, which means that a service provider (seller) provides tangible and intangible services (goods, services, etc.) to the payer, and receives the payment for the payment. do. That is, the CMS service is a service that automatically withdraws a predetermined amount from the payer's withdrawal account (automated transfer system account) at a predetermined date and transfers it to the CMS collection account of the user institution at the requester's request.

1 illustrates a conventional CMS payment system 100 and its execution procedure. The conventional CMS payment system 100 includes a CMS server 101, a bank server 102, a payer terminal 103 and the user institution terminal 104.

The payer accesses the user institution terminal 104 using the payer terminal 103 and automatically pays the user institution terminal 104 to pay for the service provided (or provided) online or offline. Request a transfer (①). Here, the service is a concept that includes all tangible and intangible goods, goods or services. When requesting direct debit, the payer provides debit to the user organization, including debit information (bank, account number, account holder) and payer's personal identification information (eg, social security number).

The user institution terminal 104 is an information communication terminal (server) on the side of a provider (seller) that provides various periodic services to the payer (buyer). As a business provider which provides such a regular service, an insurance company, a newspaper company, a city gas company, etc. are mentioned, for example. The user institution terminal 104 receives the direct debit information (account information, personal identification information) from the payer through a means such as web page / ARS recording, and transmits it to the CMS server 101 (②).

The CMS server 101 is, for example, a server built in a financial settlement agency, and provides a CMS service to the user organization. The CMS server 101 receives the direct debit information (account information, personal identification information) from the user institution terminal 104, and transmits it to the corresponding bank server 102 to complete the registration of the direct debit (③ ).

The bank server 102 confirms the validity of the payer and the debit account using the debit information, and responds to the CMS server 101 with the verification result (④). Accordingly, the CMS server 101 notifies the user institution terminal 104 of this authentication result (5).

As such, when the registration of the direct debit to the relevant bank is completed, a predetermined amount is withdrawn from the automatic debit system account every set date, and the deposit is made to the collection account of the user institution. (⑥ ~ ⑨)

In the conventional CMS payment system 100 and the payment method, the payer must provide all of the personal identification information such as the resident registration number as well as the withdrawal account number to the user for registration of automatic transfer. In this case, the payer is exposed to the risk that his personally identifiable information is stolen or misused by the user.

The present invention is to solve the above-described problems, the object of the payer to apply for automatic transfer of the payment, the purpose of preventing the personal identification information such as resident registration information is stolen or misused in advance.

The present inventors have found that it is very likely to be stolen or misused to provide an important user's important information such as resident registration information and account information to an unreliable user institution without applying any protection device.

Therefore, the present inventors divide the resident registration number into two parts, the payer provides only a part of the resident registration number to the user institution, and later receives the remaining part from the payer through a separate certification authority to prevent the theft or misuse of personal information in advance. I found out.

According to the CMS payment system to protect the personal information of the payer of the present invention and prevent fraudulent withdrawal to achieve the object as described above, the automatic payment to the payer when the direct debit for the payer's automatic debit application on the wired and wireless network In the CMS payment system that performs the CMS account transfer when the approval is approved, a request for payment of the payer's direct debit registration is received from the user institution, and a request for input of the payer's personal information (resident registration number and payer number) is performed to verify the request from the payer. A CMS server that transmits a payment requestor authentication request to receive the personal information, sends the personal information and the direct debit registration request to a bank to receive a result of the direct debit registration, and responds to the user institution; And receiving a payer authentication request from the CMS server, using the user's telephone number included in the payer authentication request, transmitting payment information and direct debit information to the payer, requesting the input of the personal information, and the payer requesting authentication. If it confirms and approves, characterized in that it comprises a certification authority server for receiving the personal information to be input and transmit to the CMS server.

According to a preferred feature of the present invention, the CMS server receives the direct debit registration request including the digit of the resident registration number (6 digits of the date of birth) registered by the payer as incomplete personal information from the user organization terminal, the individual upon request of the payer authentication request In order to complete the information, request the input of the last digit (7 digits) of the resident registration number, and when the payer confirms and approves the use price and the user's institution, the back digit of the resident registration number is sent as a response of the personal information, and the payer's resident registration number ( 13 digits), the debit registration request including the social security number is transmitted to the bank server.

In addition, according to the CMS payment method to protect the personal information of the payer of the present invention and prevent fraudulent withdrawal, CMS account transfer if the automatic transfer to the payer when the automatic transfer to the payer of the payer on the wired and wireless network In the payment method of the CMS payment system for performing the step of: (1) the CMS server receiving a direct debit registration request requested by the payer from the user institution terminal; (2) generating, by the CMS server, a payer authentication request for requesting a payer's personal information to the debit registration request; (3) transmitting the payer authentication request to the payer terminal, and receiving the personal information input by the payer; (4) transmitting the debit registration request including the personal information to a bank server; (5) receiving a direct debit registration result from the bank server; And (6) notifying the user institution terminal of the result of the debit registration and the result of the debit received from the bank server at each date of the debit.

Hereinafter, with reference to the accompanying drawings looks at in detail the configuration of a preferred embodiment of the present invention.

2 shows the configuration of a direct debit payment system 1 according to a preferred embodiment of the present invention. The direct debit payment system 1 according to an embodiment of the present invention includes a payer terminal 5, a user institution terminal 6, a CMS server 2, a certification authority server 3 and a bank server (4). . These components are connected to each other through wired and wireless networks.

The CMS server 2 is a server that provides a billing request and collection agent service of the direct debit for the payer to the user organization (seller) registered as a member. That is, the CMS server 2 is a payment information (charge object and amount information) of the payer from the user institution terminal 6, and direct debit information (for example, bank name, account number, account holder, incomplete payer identification information) And receive a debit registration request, and responds to the processing result. Further, the CMS server 2 authenticates the debit registration by requesting the payer terminal 5 to complete the incomplete payer identification information according to the debit registration request and receiving the response.

Of course, the authentication procedure of the direct debit registration may be performed by the CMS institution as shown in FIG. 5, or may be performed through a separate certification authority as shown in FIG. 6.

The certification authority server 3 may exist as a separate authentication module in the CMS server 2, or may be installed as a system of independent operators as shown in FIG. The certification authority server 3 is an information communication system for completing the incomplete payer identification information by making a request to the payer terminal 5. That is, the certification authority server 3 receives a payer authentication request including the payer's contact information (for example, a wired or wireless telephone number) from the CMS server 2, and sends a means such as ARS / SMS to the contact information. In addition to the approval of direct debit, it also requires the completion of incomplete payer identification information.

The bank server 4 is a computer system of a first financial institution such as a bank or card company or a second financial institution such as a mutual savings bank. The bank server 4 receives a request to register a direct debit account from the CMS server 2, and registers the account as a direct debit account.

The payer terminal 5 is a client-side system that transmits and receives information with the user organization terminal 6, the certification authority server 3, and the CMS server 2 via a wired or wireless network, for example, data communication. Personal computers, mobile phones (CDMA phones, GSM phones, WCDMA phones, CDMA-2000 phones, DMB phones, etc.) capable of wireless Internet, PDAs capable of wireless communication, and the like.

The user institution terminal 6 is a system on the side of a provider that provides tangible and intangible services to the payer and executes billing, for example, an insurance company server, a newspaper company server, and the like. The user institution terminal 6 includes a web server and a billing server, and is connected to the CMS server 2 using a dedicated line, a wired or wireless public communication network.

3 shows a functional configuration of the CMS server 2 according to the preferred embodiment of the present invention.

CMS server 2 according to an embodiment of the present invention comprises an authentication request receiving means 21, an authentication response receiving means 22, an authentication payment means 23 and a result notification means 24. In addition, the DBMS structure includes an authentication log DB 211 and automatic transfer information DB 241.

The authentication request receiving means 21 is a function module for receiving and recording the debit authorization information from the user institution terminal 6. The debit authorization information is, for example, `` before the resident's ID number (birth date) + transfer account information (bank name, account number, account holder) + payer's contact phone number + transfer amount + withdrawal date + withdrawal account number '' It may be configured as, but is not necessarily limited thereto.

The authentication response receiving means 22 is a function module for authenticating and recording the debit registration from the payer in accordance with the request for approval of the direct debit of the user institution terminal 6. That is, the authentication response receiving means 22 notifies the payer of the request for direct debit using ARS or SMS, and requests completion of the incomplete payer identification information. Accordingly, the payer confirms the request for automatic transfer, and enters the remaining digit after the resident registration number, the payer number, and stores it in the authentication log DB (211). Here, the payer identification information may be any one of three pieces of information, such as a digit after the resident registration number, a payer number, a digit after the resident registration number + payer number.

In this embodiment, although the resident registration number is used as the identification information of the payer, the identification information of the payer is not necessarily limited to this example, and all unique information (for example, the payer number) used to distinguish the payer is the identification information of the present invention. Can be seen as.

In addition, the present invention can be implemented through a separate authentication server, without installing the authentication response receiving means 22 in the CMS server (2).

The authentication payment means 23 is a function module for requesting the bank server 4 for the debit registration for the payer who has completed the authentication, and receives the result.

The result notification means 24 is a functional module for notifying the user organization terminal 6 of the result when the automatic transfer is successfully performed on the designated date.

The authentication log DB 211 is a database for storing and managing the authentication request of the payer and automatic transfer performed by the authentication response receiving means 22 and the log file according to the response. Therefore, the payer who confirms the direct debit payment and completes the uncertain identification information cannot later deny the fact itself.

The debit information DB 241 is a database for storing and managing the debit authorization information and the debit execution records for each payer.

4 shows a configuration module of the certification authority server 3 according to another embodiment of the present invention.

As described above, in the present invention, the CMS server 2 may directly perform the authentication procedure for the payer, but may be executed through a separate certification authority server 3. In this case, the certification authority server 3 preferably has a functional configuration as shown in FIG.

The certification authority server 3 according to the embodiment of the present invention comprises an authentication request receiving means 31, an authentication agent means 32, and an authentication response transmission means 33.

The authentication request receiving means 31 is a functional module for receiving a payer authentication request from the CMS server 2.

The authentication agent means 32 is a functional module for authenticating a payer using means such as ARS or SMS on behalf of the CMS server 2. The payment of the payer is accomplished by completing incomplete payer identification information, as described above.

The authentication response transmission means 33 is a functional module for transmitting the remaining payer identification information (for example, the digit after the social security number) received from the payer to the CMS server 2.

Example 1

Hereinafter, the configuration of the system described above and the method of the first embodiment according to the present invention will be described in detail with reference to FIG.

The first embodiment of the present invention discloses a procedure in which a CMS server 2 authenticates a payer via an external certificate authority server 3. If you use regular goods or services, such as newspapers, insurance and apartment maintenance fees, you must pay the monthly fee to the institution. In this case, it is also possible to pay using paper, but usually it is easy to use automatic transfer.

In this way, the person (ie, the payer) who wants to pay the fee by using the automatic transfer connects to the user organization terminal 6 using his or her information communication terminal (ie, the payer terminal) 5. In addition, the debit registration is registered with the direct debit information.

Here, the direct debit information consists of payer identification information (payer name, resident registration number), account information (financial institution name, account number, account holder), payer telephone number, object information to be automatically transferred (use price, etc.), withdrawal date and the like. Here, the payer identification information typically means a resident registration number, and is input in an incomplete state in order to prevent unauthorized theft or abuse of the user organization. That is, enter only the date of birth of the payer corresponding to the first digit of the resident registration number. [①]

As such, the user institution terminal 6, which has been requested to apply for direct debit from the payer, adds account information (hereinafter, collection account information) of the user institution to be collected to the direct debit information and adds the direct debit to the CMS server 2. Request for approval. [②]

The CMS server 2, which has received the request for the approval of the direct debit from the user institution terminal 6, stores the debit authorization information (direct debit information + collection account information) in the debit information database 241, and the certificate authority server ( 3) request the payer authentication. [3] At this time, the CMS server 2 transmits the debit information including the payer's telephone number to the certification authority server 3.

The certification authority server 3 transmits the data requesting the payment of the payer to the payer's phone number using the ARS server or the SMS server. After verifying the authenticity, it will request the completion of incomplete payer identification information (the first digit of the resident registration number). The payer who receives the SMS message (see FIG. 7) or ARS requesting verification of the direct debit from the certification authority server 3 checks the debit information, enters the digit of the resident registration number and the payer number, and sends the certificate authority server ( 3) [5] Here, the payer identification information may be any one of three pieces of information, such as a digit after the resident registration number, a payer number, a digit after the resident registration number, and a payer number.

The certification authority server 3, which has received a part of the payer identification information (for example, a digit after the resident registration number) from the payer, sends the personal information (back digit of the resident registration number, payer number) entered by the payer to the CMS server 2. [⑥ ]

Accordingly, the CMS server 2 is the remaining payer identification information (for example, the back of the resident registration number) received from the payer via the certification authority server 3 and the incomplete payer identification information transmitted from the user institution terminal (6). For example, combining the resident registration number) to generate the completed payer identification information.

After completing the payer identification information, the CMS server 2 accesses the bank server 4 that manages the payer's automatic transfer account and requests registration of the debit. At this time, the CMS server 2 transmits the completed payer identification information to the bank server 4. [⑦]

The bank server 4, which has been requested to register the direct debit from the CMS server 2, confirms the payer and the account number and registers the requested direct debit. Thereafter, the bank server 4 responds to the CMS server 2 with the registration result of the direct debit [8], and the CMS server 2 transmits the result back to the corresponding user institution terminal 6. ⑨]

As described above, according to the first embodiment of the present invention, the payer can apply for direct debit even if only a part of the payer identification information (resident registration number) and the payer number that are required to be secured by the user organization are used. Unauthorized theft or misuse can be prevented.

Variant

Hereinafter, a method of another modification of the first embodiment according to the present invention will be described with reference to FIG. 6.

This modification is characterized in that unlike the first embodiment, the CMS server 2 performs the above-described payer authentication procedure by itself without the presence of a separate certification authority server 3.

In other words, in this modification, the certification authority server 3 is integratedly built on the CMS server 2 so that the CMS server 2 can directly authenticate whether the direct debit is approved by the payer. Since the flow of the main data is similar to that of the first embodiment described above, its detailed description is omitted by referring to the drawings.

Example 2

7 shows the data flow of the payment system 1 according to the second embodiment of the present invention.

The present embodiment separates the payer identification information (resident registration number), and provides the user organization with only a part of the payer identification information, and later collects the telephone charges by receiving the remaining identification information from the payer and authenticating the payer. It is applied to payment.

That is, the payer terminal 5 requests the sum of the telephone charges of the use charges using ARS recording or web document to the use organization terminal 6 according to the use charges generated by the purchase on / offline [①]. At this time, the payer provides only a part of the payer identification information such as the first digit of the social security number to the user institution terminal 6. The user institution terminal 6 requests the payer authentication to the landline telephone service provider server 2 in order to confirm that the purchaser's telephone charge sum request is valid [②]. The landline telephone company server 2 having received the payer authentication request from the user institution terminal 6 re-requests the payer's authentication to a separate certification authority server 3 [③]. The certification authority server 3 requests the payer terminal 5 whether the payment information is valid and completes the payer identification information using ARS or SMS [④]. The payer performs a response to the authentication by transmitting the digit of the resident registration number and the payer number to the certification authority server 3 as in the first embodiment [⑤].

The certification authority server 3, which has received the remaining payer identification information (the digit after the resident registration number, the payer number) from the payer, delivers it to the landline telephone company server 2, and the landline telephone company server 2 is provided from the user organization terminal 6. Incomplete payer identification information (for example, the first resident registration number) and the remaining payer identification information (for example, the resident registration number) are combined to generate completed payer identification information (resident registration number). (2) confirms the validity of the payer by using the completed identification information, and if found to be valid, transmits the authentication result to the user terminal 6 [⑦].

The user terminal 6 receiving the payment result of the payer authentication from the landline telephone company charges the landline telephone company server 2 with the fee for the payer using only the first digit of the social security number [8] and the landline telephone company server 2 ) Generates a bill using the payer identification information (completed social security number) stored inside. The bill generated in this way is sent to the payer electronically (or by mail) to complete the bill for the sum of the bills [9].

Variant

Hereinafter, a method of another modification of the second embodiment according to the present invention will be described with reference to FIG. 8.

This modification is characterized in that, unlike the second embodiment, the landline telephone company server 2 performs the above-described payer authentication procedure by itself without intervening a separate certification authority server 3.

That is, in the present modification, the certification authority server 3 is integrated with the landline telephone company server 2 so that the landline telephone company server 2 receives the remaining payer identification information directly from the payer. Since the flow of the main data is similar to that of the second embodiment described above, its detailed description is omitted by referring to the drawings.

As described above, specific embodiments of an automatic transfer method and a telephone bill sum payment method for protecting a payer's personal information and preventing fraudulent withdrawals according to the present invention have been disclosed. Although the present invention has been described by way of limited embodiments and drawings, the present invention is not limited thereto, and the technical spirit of the present invention and the claims to be described below by those skilled in the art to which the present invention pertains. Of course, various modifications and variations are possible within the scope of equivalents.

The CMS payment system and the payment method for protecting the payer's personal information and preventing fraudulent withdrawal according to the present invention, when the user uses the CMS service account information and personal information is separated and the user's personal information is protected, automatic Since the user directly checks and approves each transfer, there is an effect to prevent fraudulent withdrawals.

Claims (19)

In the CMS payment system that performs the CMS account transfer when the automatic payment to the payer when the debit is confirmed and approved by the payer on the wired / wireless network, Receives a request for payment of direct payment by the payer from the user institution, and sends a request for the payment of the personal information (resident registration number, payer number) to receive the personal information to be authenticated by the payer. A CMS server transmitting information and the debit registration request to a bank to receive a result of the debit registration, and responding to the user institution; And Receives a payment requester authentication request from the CMS server, using the user's telephone number included in the payment requester authentication request to send the payment information and direct debit information to the payer to request the input of the personal information, the payer requests the authentication request In case of confirming and approving, the certification authority server which receives the personal information inputted and sends it to the CMS server CMS payment system to protect the personal information of the payer and prevent fraudulent withdrawal comprising a. The method of claim 1, A payer who transmits a payer's direct debit application to request the payer to pay the payment by direct debit using wired / wireless telephony or Internet communication, and includes payload information and debit information from the certification authority server. A payer terminal requesting authentication and responding to the personal information entered by the payer; Record the payer's voice request for the payer's direct debit application using the wired / wireless telephony (ARS guide) from the payer terminal, or store the payer's written request transmitted to the CMS server, A user institution terminal receiving the registration result by transmitting the direct debit registration request; And The bank server that receives a request for direct debit registration from the CMS server, compares the received personal information with the personal information of an account holder already stored, and if the authentication is successful, registers the direct debit information and responds to the processing result. CMS payment system, characterized in that it further comprises. The method of claim 1, The CMS server, Authentication request receiving means for receiving the debit registration request including payment information and direct debit information (CMS deposit account, withdrawal account, payer phone number) from a user institution terminal; Authentication response receiving means for receiving the personal information by transmitting the payer authentication request to the certification authority server for confirmation of the payer with respect to the direct debit registration request; An authentication payment means for transmitting the personal information and the direct debit registration request to a bank server and receiving a result of the direct debit registration; And Result notification means for receiving a direct debit result from the bank server at each debit date and notifying the user's terminal CMS payment system comprising a. The method of claim 3, wherein The CMS server, An authentication log DB for storing the debit registration request of a user institution, the payer authentication request of a CMS server, and the payer's personal information; And A debit information DB for storing the debit registration result and the debit result of a bank; CMS payment system, characterized in that it further comprises. The method according to claim 1 or 3, The CMS server, Receiving a request from the user's terminal to receive the direct debit registration request including the digit (6 digits of the date of birth) registered by the payer as incomplete personal information When the payer authentication request is requested to enter the back digit (7 digits) of the resident registration number for the completion of the personal information, and if the payer confirms and approves the use price and user organizations, the back of the resident registration number is sent as a response of the personal information, Complete the payer's social security number (13 digits) as complete personal information and the CMS payment system characterized in that for transmitting the debit registration request including the social security number to the bank server. The method of claim 1, The certification authority server, Authentication request receiving means for receiving the payer authentication request from the CMS server; Extract the subscriber's telephone number from the payer authentication request and send an SMS or ARS call to guide the use price information, the user information and the direct debit information included in the payer authentication request, and the subscriber confirms the information. Authentication agent means for receiving personal information; And Authentication response transmission means for transmitting the personal information to the CMS server CMS payment system comprising a. The method according to claim 1 or 6, The certification authority server, CMS payment system, characterized in that integrated with the internal configuration module to the CMS server under the control of the CMS server. In the telephone bill sum billing system, when a payer confirms the sum of billing facts and approves the bill to the payer, the bill is summed up to the phone bill. , Receives a request for registration of payment of the sum of the payer's telephone charges from the user institution, and sends a request for the payment of the personal information (resident registration number, payer number) to receive the personal information in order to receive the request from the payer. A landline telephone service provider server that responds to the user's authentication result in comparison with the personal information of the telephone subscriber who has already stored the personal information, and charges the user's bill by adding up the phone bill if the authentication is successful; The payer authentication request is transmitted from the landline telephone company server, and the payer uses the user's telephone number included in the payer authentication request to transmit the payer's use price information and the telephone bill sum billing information to request the input of the personal information. If the payer confirms and approves the authentication request, the certification authority server receives the personal information input and transmits it to the CMS server. The telephone bill summing payment system to protect the personal information of the payer, and to prevent fraudulent withdrawal. The method of claim 8, The certification authority server, CMS integrated system, characterized in that the wired telephone provider server is integrated with the internal configuration module under the control of the wireline telephone operator server. In the payment method of the CMS payment system that performs the CMS account transfer when the automatic transfer to the payer when the debit is confirmed and approved for the payer's automatic debit application on the wired and wireless network, (1) receiving, by the CMS server, a direct debit registration request from the payer; (2) generating, by the CMS server, a payer authentication request for inputting payer's personal information (resident registration number, payer number) to the debit registration request; (3) transmitting the payer authentication request to the payer terminal, and receiving the personal information input by the payer; (4) transmitting the debit registration request including the personal information to a bank server; (5) receiving a direct debit registration result from the bank server; And (6) notifying the user's terminal of the result of the debit registration and the result of the debit received from the bank server at each date of the debit; CMS payment method for preventing fraudulent withdrawal by using the resident number authentication of the payer, characterized in that it comprises a. The method of claim 10, Step (1), The user organization terminal further comprises the step of receiving from the payer terminal the payer automatic transfer request including the payer's account information, telephone number by ARS recording (wired or wireless telephony) or Internet writing (internet communication) CMS payment method. The method of claim 10, Step (2) is, Generating, by the CMS server, the payer authentication request including personal information input guide to the direct debit registration request including payment information and direct debit information (CMS deposit account, withdrawal account, payer phone number); CMS payment method. The method of claim 10, Step (3), The CMS server transmits the payer authentication request to an external certification authority server, and the certification authority server sends the payer authentication request to the payer terminal by SMS or ARS transmission using the payer's phone number included in the payer authentication request. And transmitting the personal information as an authentication response after the transmission. The method of claim 10 or 13, Step (3), The certification authority server is integrated with the internal configuration module in the CMS server, the CMS payment method, characterized in that the step of transmitting the payer authentication request, receiving the personal information. The method of claim 10, The CMS server, Receiving a request from the user's terminal to receive the direct debit registration request including the digit (6 digits of the date of birth) registered by the payer as incomplete personal information When the payer authentication request is requested to enter the back digit (7 digits) of the resident registration number for the completion of the personal information, and if the payer confirms and approves the use price and user organizations, the back of the resident registration number is transmitted as the personal information response And completing the payer's social security number (13 digits) as complete personal information and transmitting the direct debit registration request including the social security number to the bank server. In the wired / wireless network, if the payer adds up the phone bill to the user's institution, the phone bill is added to the phone bill. In the method, (1) the wired telephone company server receiving a request for payment registration for the sum of telephone fees requested by the payer from the user organization terminal; (2) generating, by the wireline telephone operator server, a payer authentication request for inputting a payer's personal information (resident registration number, payer number) to the registration request; (3) transmitting the payer authentication request to the payer terminal, and receiving the personal information input by the payer; (4) comparing the authentication result with the personal information of the landline subscriber who has already stored the personal information and responding the authentication result to the user institution terminal as a result of the telephone bill limit registration; And (5) If the authentication is successful, add the charge to the phone bill The telephone bill sum payment method to protect the personal information of the payer and prevent fraudulent withdrawal comprising a. The method of claim 16, Step (3), The wireline telephone company server transmits the payer authentication request to an external certification authority server, and the certification authority server authenticates the payer by SMS or ARS transmission method to the payer terminal using the payer's telephone number included in the payer authentication request. And after receiving the request, receiving the personal information as an authentication response. The method according to claim 16 or 17, Step (3), The integrated billing method of the wired telephone company server, the certification authority server is integrated with the internal configuration module to transmit the payer authentication request and receive the personal information. The method of claim 16, The landline telephone company server, Receive a request from the user's terminal to receive the phone bill sum payment registration request including the first digit (6 digits of the date of birth) registered by the payer as incomplete personal information, When the payer authentication request is requested to enter the back digit (7 digits) of the resident registration number for the completion of the personal information, and if the payer confirms and approves the use price and user organizations, the back of the resident registration number is sent as a response of the personal information, Completing the payer's resident registration number (13 digits) as complete personal information, and comparing the personal information of the landline subscribers already stored in the phone bills billing method characterized in that the step of performing the authentication.

Images