KR100705038B1 - Mobile communication terminal and method for authenticating electronic payment - Google Patents

Abstract

The present invention provides a location information module for receiving location information of a terminal; A memory unit which stores location information on a pre-registered electronic payment allowance region and an electronic payment flag containing electronic payment permission; An electronic payment module for determining whether to allow the electronic payment by comparing the terminal location information with location information about the electronic payment allowance area; It provides a mobile communication terminal comprising an interface for transmitting the electronic payment flag to the electronic payment client when the electronic payment is connected to the electronic payment client by wireless or wired. In addition, when the electronic payment allowable region is registered, an electronic payment authentication method is implemented in which a process of performing electronic payment only in a specific region is implemented using this.

Mobile phone, mobile communication, authentication, security, payment, location information

Description

Mobile communication terminal and method for authenticating electronic payment

1 is a conceptual diagram illustrating a system for performing electronic payment authentication according to an embodiment of the present invention.

2 is a block diagram of a mobile communication terminal for performing electronic payment authentication in the system of FIG.

3 is a sequence diagram illustrating a process of storing location information in a mobile communication terminal according to an embodiment of the present invention.

4 is a sequence diagram illustrating a process of performing electronic payment authentication using a mobile communication terminal according to an embodiment of the present invention.

The present invention relates to electronic payment authentication, and more particularly, to a mobile communication terminal and a method for performing payment authentication only at a specific location using a mobile communication terminal.

In general, the payment authentication method used for the Internet is composed of a personal computer (PC), an internet network, and an authentication server for allowing a user to access the Internet. Of course, in order for a user to view a banking business or purchase a product on the Internet, a procedure for accessing an authentication server, receiving an electronic certificate, and storing the authentication file on the PC is required.

Such a storage method is not limited to a PC, but a removable memory may be used. Therefore, the user can make a payment using this authentication file.

However, the conventional method has a problem that a financial accident can occur when the subscriber's password and authentication file is leaked. This is because a removable disk or a PC containing a password and authentication file may be lost.

In addition, according to the conventional method, there is a problem that the authentication procedure of the subscriber is dependent on the authentication information.

SUMMARY OF THE INVENTION The present invention has been made in an effort to provide a mobile communication terminal and a method for performing an electronic payment authentication procedure such that a password and an authentication file are not easily leaked.

Another object is to provide an authentication procedure that does not depend on authentication information stored in a personal computer (PC).

As an aspect of the present invention for achieving the above object, a mobile communication terminal according to the present invention, the location information module for receiving the location information of the terminal; A memory unit which stores location information on a pre-registered electronic payment allowance region and an electronic payment flag containing electronic payment permission; An electronic payment module for determining whether to allow the electronic payment by comparing the terminal location information with location information about the electronic payment allowance area; Is connected to the electronic payment client wirelessly or wired and comprises an interface unit for transmitting the electronic payment flag to the electronic payment client when the electronic payment.
The electronic payment flag has a true value (TRUE) indicating an electronic payment allowance when the terminal location information and the location information on the electronic payment allowance area are the same, and the location information on the terminal location information and the electronic payment allowance area. If is not the same may be characterized by having a false value (FALSE) indicating that the electronic payment is not allowed.
The electronic settlement allowable area can be registered or changed by the user. Here, in the registration or change of the electronic payment allowance area, authentication of the terminal and electronic payment authentication of the electronic payment client may be required.
As another aspect of the present invention for achieving the above object, the electronic payment authentication method according to the present invention comprises the steps of: registering location information about the electronic payment acceptance region; Receiving location information of the terminal and comparing the location information with respect to the electronic payment allowance area; If the comparison result is the same, setting the value of the electronic approval flag containing whether the electronic approval is allowed to be TRUE; If the comparison result is not the same, setting the value of the electronic approval flag to a false value (FALSE); If there is an electronic payment request, the electronic payment flag set to the true or false value is sent to the electronic payment client.
Electronic payment authentication method according to the invention, the electronic payment client receiving the electronic payment flag; Performing, by the electronic payment client, electronic payment when the received electronic payment flag has a true value (TRUE); The electronic payment client may further include rejecting the electronic payment if the received electronic payment flag has a false value (FALSE).
The electronic payment client may be configured with an electronic payment authentication module for performing electronic payment by checking whether the electronic payment is allowed from the electronic payment flag.

delete

delete

delete

delete

delete

Therefore, the present invention has the effect of improving the security because the electronic payment is possible only in a specific location does not leak the password and authentication file. In addition, since the electronic payment authentication procedure is performed using a mobile communication terminal, there is an effect of preventing hacking or leakage of the authentication file by another person.

Hereinafter, with reference to the accompanying drawings will be described in detail an embodiment according to the present invention.

1 is a conceptual diagram illustrating a system for performing electronic payment according to an embodiment of the present invention. Referring to the drawings, the mobile communication terminal 100 to execute the electronic payment authentication only in a specific region, the location information server 120 to determine the location of the terminal and transmit the location information, and perform the electronic payment It consists of the electronic payment client 130 and the electronic payment server 150.

In short, it consists of a part for receiving location information and a part for performing electronic payment according to the location information. First, the mobile terminal 100 is wirelessly connected to the base station 110 when receiving the location information. When the base station 100 receives the request for the location information of the terminal, the location information server 120 for determining the location of the terminal and transmitting the location information to the corresponding terminal is connected. This location information receiving process is shown in FIG. 3 and will be described later.

The electronic payment part includes a mobile communication terminal 100, an electronic payment client 130 connected to the mobile communication terminal 100 by wired or wireless communication, and an electronic payment server 150 that processes the electronic payment. Of course, the mobile communication terminal 100 and the electronic payment client 130 is connected using a wired or infrared communication, such as a data communication cable, a USB cable, wireless, such as Bluetooth. The electronic payment client 130 and the electronic payment server 150 are connected through the internet network 140, and the internet network 140 may be a wired or wireless network. The electronic payment process according to this is shown in FIG. 4 and will be described later.

The electronic payment client 130 has a web browser installed, through which the user can select a product and perform the electronic payment. Of course, the electronic payment authentication module 131 is installed for the electronic payment. For example, an Internet explorer or a navigator is installed in a personal computer (PC), a notebook, and an electronic payment authentication module such as an accredited certificate is installed.

2 is a view illustrating a configuration diagram of the mobile communication terminal 100. Referring to the drawings, the mobile communication terminal 100 includes a control unit 200, a key input unit 210, a display unit 220, an electronic payment module 230, a memory unit 240, an interface unit 250, The location information module 260 has a wireless circuit unit 270.

The controller 200 controls functions implemented in the mobile communication terminal and processes data and signals with other components. In particular, one embodiment of the present invention registers the specific location information and performs the electronic payment only in a specific area using this.

The key input unit 210 performs a digit button (0-9), a special key button (*, # ....), a letter key button engraved with a Korean alphabet or alphabet, which is used as an input in a mobile communication terminal. It consists of a function key button, and serves as an interface for transmitting a user's instructions to the control unit 200. Of course, in the present invention, a key button for executing the electronic payment mode may be configured separately. Alternatively, it is also possible to execute a menu screen method using a general key button without configuring a separate key button.

The display unit 220 may be formed of a display device such as a liquid crystal display (LCD), an organic light emitting diode (OLED), or the like, and may be controlled by the user of the mobile terminal according to the control of the controller 200. Displays the selected menu screen, the execution screen, and the result screen. In particular, in the date of the present invention, the electronic payment menu screen is displayed. In this electronic payment menu, a menu for confirming an electronic payment allowance area may be configured as a submenu.

The electronic payment module 230 checks whether the electronic payment is allowed and notifies the controller 200 of the electronic payment. That is, the electronic payment module 230 reads the location information of the terminal, determines whether the terminal is located in a specific region, determines whether the electronic payment is allowed, and transmits it to the electronic payment client 130.

The memory unit 240 may be configured of a flash memory, a RAM, an electrically erasable programmable read only memory (EEPROM), and the like. In other words, the basic real-time operating system (OS) and the call processing software of the terminal are stored in the flash memory, and the variables and states of these programs are retrieved from the RAM and run. The ROM may be configured as an EEPROM, and may store nonvolatile data that may be electrically erased or stored again, and perform input / output according to a command of the controller 200.

In particular, in one embodiment of the present invention is stored the registration location information 241 for storing the location information received from the location information server 120, and the electronic payment flag 242 containing the electronic payment permission. Of course, the registration location information 241 is required to register the location information of the terminal so that the electronic payment is performed only in a specific region. The registration process for explaining this is shown in FIG. This will be described later.

In addition, by comparing the registered location information and the current location information of the terminal to determine whether the electronic payment is allowed and the program and related data including the algorithm for transmitting it to the PC is stored.

The interface unit 250 is an interface that performs the connection between the electronic payment client 130 and the terminal 100. As described above, the connection between the terminal 100 and the electronic payment client 130 can be wired or wireless, and the electronic payment flag 242 stored in the memory unit 240 has the electronic payment client at the terminal 100. To 130.

The location information module 260 receives the location information of the terminal 100 from the location information server 120. Normally, location information uses GPS.

The wireless circuit unit 270 receives a telephone call or data sent by an external telephone through the antenna ANT and transmits it to the control unit 200 or transmits data stored in the memory unit 240. That is, the location information server 120 receives location information or transmits a message requesting location information.

3 is a sequence diagram illustrating a process of storing location information in a mobile communication terminal according to an embodiment of the present invention. Strictly speaking, it is a process of registering an electronic settlement allowable area to use the electronic settlement function only in a specific region.

Referring to the drawings, the subscriber is located in a specific region to execute the electronic payment function of the terminal (a310). Here, the registration request of the "electronic payment allowable area" to allow the electronic payment with the subscriber's authentication information (a320). In addition, the subscriber is in the process of registering the access area to use the electronic payment function in the future. For example, the local scope is limited so that the electronic payment can be made only to the PC location of the head of household or the PC location of the office.

When there is a registration request of the subscriber, the mobile communication terminal 100 requests the location information of the terminal 100 from the location information server 120 (a330).

Accordingly, the location information server 120 searches for the location of the terminal 100 and transmits it (a340).

The mobile communication terminal 100 receives the location information and stores it in the registration location information 241 of the memory unit 240 (a350). Here, the subscriber's "electronic payment allowance area" can be stored in plurality, if necessary, and can be changed. In order to change the "electronic payment allowable area", it is desirable to be accompanied by PC electronic payment authentication along with confirming the password (authentication number) of the mobile terminal.

When the electronic payment allowable region is registered, the process of performing the electronic payment only in a specific region is implemented using this. A diagram showing this is shown in FIG. 4. That is, FIG. 4 is a sequence diagram illustrating a process of performing electronic payment authentication using a mobile communication terminal according to an embodiment of the present invention.

Referring to the drawings, the user is located in a specific area for electronic payment (a410). For example, suppose you are connecting to a home PC. Here, the user 400 is the same as the subscriber 300 of FIG. 3.

This is just another expression for easy understanding of the present invention. That is, the subscriber 300 is a term used when registering an "electronic payment allowable area", and the user 400 merely refers to a person who uses the electronic payment function after a specific area is registered.

The user 400 is located in a specific region and selects the electronic payment function in the terminal 100 to execute the "electronic payment allowable area check" (a411, a412).

Accordingly, the electronic payment module 230 requests the location information to determine the current location of the terminal (a413). Of course, the location information module 260 performs a role of transmitting a message requesting location information to the location information server 120.

The location information server 120 receives the location information request message from the terminal 100, grasps the location information of the terminal 100, and transmits the location information to the terminal 100 again (a414). Of course, the location information module 260 received the location information is transmitted to the electronic payment module 230.

Upon receiving the location information from the location information server 120, the electronic payment module 230 checks whether the location is the same by comparing the current terminal location with the registered location of the "electronic payment allowable area" (a420).

As a result of the check, if the current position and the registered position of the terminal are the same, the electronic payment flag is set to "true (true value)" (a421).

Accordingly, the user 400 attempts electronic payment on the electronic payment client 130 (a431). That is, the user 400 purchases a product on the Internet using a web browser installed in the electronic payment client 130 and attempts electronic payment with respect to the same. Of course, for the sake of easy understanding, the payment for product purchase has been described as an example, but it may be applied to internet banking or security authentication using electronic payment. In this case, the electronic payment authentication module 131 is installed in the electronic payment client 130.

Therefore, when the user 400 attempts electronic payment for a certain product, the electronic payment authentication module 131 transmits a message confirming whether the electronic payment is allowed to the terminal 100 (step a432).

The terminal 100 receiving the electronic payment permission request transmits the electronic payment flag 242 stored in the memory unit 240 to the electronic payment client 130 (a433).

Accordingly, the electronic payment client 130 checks the transmitted electronic payment flag 242 and requests the electronic payment authentication to the electronic payment server 150 when the value is "true value" (a434). That is, the electronic payment request to the electronic payment server 150.

In contrast, if the current position and the registered position of the terminal is not the same in the position comparison process (a420), the electronic payment flag is set to "fall (false value)" (a450).

Accordingly, the user 400 attempts electronic payment on the electronic payment client 130 (a461).

When the electronic payment attempt is made, the electronic payment authentication module 131 of the electronic payment client 130 transmits a message confirming whether the electronic payment is allowed to the terminal 100 (step a462).

The terminal 100 receiving the electronic payment permission request transmits the electronic payment flag 242 stored in the memory unit 240 to the electronic payment client 130 (a463).

Accordingly, the electronic payment client 130 checks the transmitted electronic payment flag 242 and displays a message to the user 400 that the electronic payment cannot be performed if the value is "false value" (a464). ). That is, a message indicating that the user 400 is not a legitimate user may be displayed on the screen on the electronic payment client 130.

As mentioned above, although this invention was demonstrated in detail using the preferable Example, the scope of the present invention is not limited to a specific Example, If the person who acquired the ordinary knowledge in this technical field, without departing from the range of this invention, It should be understood that many modifications and variations are possible. Therefore, the protection scope of the present invention will be preferably interpreted by the appended claims.

As described above, the present invention has the effect that the security is improved because the password and the authentication file is not leaked because the electronic payment is possible only in a specific location.

In addition, since the electronic payment authentication procedure is performed using a mobile communication terminal, there is an effect of preventing hacking or leakage of the authentication file by another person.

Claims (9)

A location information module for receiving location information of the terminal; A memory unit which stores location information on a pre-registered electronic payment allowance region and an electronic payment flag containing electronic payment permission; An electronic payment module for determining whether to allow the electronic payment by comparing the terminal location information with location information about the electronic payment allowance area; And an interface unit connected to an electronic payment client by wireless or wired and transmitting the electronic payment flag to the electronic payment client when the electronic payment is made. The method of claim 1, wherein the electronic approval flag, If the terminal location information and the location information about the electronic payment allowance area are the same, and has a true value (TRUE) indicating the electronic payment allowance, and if the terminal location information and the location information about the electronic payment allowance area are not the same A mobile communication terminal, characterized in that it has a false value (FALSE) indicating a disallow. The method of claim 1, wherein the electronic payment allowed area, A mobile communication terminal, characterized in that the registration or change by the user. The method of claim 3, wherein the registration or change of the electronic settlement allowed region, A mobile communication terminal, characterized in that the authentication of the terminal and the electronic payment authentication of the electronic payment client is required. Registering location information regarding an electronic payment permission region; Receiving location information of the terminal and comparing the location information with respect to the electronic payment allowance area; If the comparison result is the same, setting the value of the electronic approval flag containing whether the electronic approval is allowed to be TRUE; If the comparison result is not the same, setting the value of the electronic approval flag to a false value (FALSE); If there is an electronic payment request, transmitting the electronic payment flag set to the true or false value to the electronic payment client. Electronic payment authentication method comprising. The method of claim 5, Receiving, by the electronic payment client, the electronic payment flag; Performing, by the electronic payment client, electronic payment when the received electronic payment flag has a true value (TRUE); The electronic payment client rejecting the electronic payment if the received electronic payment flag has a false value (FALSE) Electronic payment authentication method further comprising. The method of claim 6, The electronic payment authentication method is characterized in that the electronic payment authentication module configured to perform the electronic payment by confirming whether the electronic payment is allowed from the electronic payment flag. The method of claim 5, wherein the electronic settlement allowable area, Electronic payment authentication method characterized in that the registration or change by the user. The method of claim 8, wherein the registration or change of the electronic settlement allowable area, Electronic payment authentication method characterized in that the authentication of the terminal and the electronic payment authentication of the electronic payment client is required.

Images