KR100758787B1 - Method of CRL verification for providing on-line payment services, payment gateway using funds transfer between bank accounts and on-line payment service method in its - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to a method for validating an electronic certificate for providing an online payment service, a payment service system based on a bank transfer using the same, and an online e-commerce payment service method thereof.

2. The technical problem to be solved by the invention

The present invention, in the electronic commerce using an open computer network, such as the Internet, in the payment service system of the bank transfer based on the non-credit card, the electronic counterparty by distribution and online inquiry of the electronic certificate revocation list through the forced distribution channel Validation method of the electronic certificate to verify the validity of the certificate and to verify the availability and safety of the e-commerce service related to the counterparty's electronic certificate by checking other value-added service information, and an account transfer-based payment service system using the same. And his online e-commerce payment service method.

3. Summary of Solution to Invention

The present invention provides a method for validating an electronic certificate in an online payment service system, comprising: constructing an electronic certificate revocation list in a directory server; And upon request of the other party's online bank transfer payment processing, one side verifying the validity of the counterparty electronic certificate based on the electronic certificate revocation list.

4. Important uses of the invention

The present invention is used for online electronic payment services and other additional services using electronic certificates in electronic commerce.

E-commerce, e-certificate validity, e-certificate revocation list, channel, online

Description

Method of CRL verification for providing on-line payment services, payment gateway using funds transfer between bank accounts and on-line payment service method in its}

1 is an exemplary configuration of a payment service system based on a wire transfer according to the present invention;

2 is a flowchart illustrating an embodiment of an online e-commerce payment service method according to the present invention;

3 is a flowchart illustrating a method of checking the validity of an electronic certificate for an online e-commerce payment service according to the present invention.

* Explanation of symbols for the main parts of the drawings

11: user system 12: store system

13: payment system 14: user registration authority

15: store registration authority 16: certification authority

17: directory server

The present invention is to check the validity of the counterparty electronic certificate through the confirmation of the electronic certificate cancellation list in the payment service system based on the bank transfer, not the credit card based on the electronic commerce using an open computer network, such as the Internet and other additional services A method of validating an electronic certificate, which can confirm the availability and safety of an e-commerce service related to a counterparty's electronic certificate by checking information, and a payment method system based on a wire transfer using the same and an online e-commerce payment service method thereof will be.

Electronic commerce (EC) refers to the act of buying and selling goods using the Internet or personal computer (PC) communication. All of this is included. The biggest advantage of such a transaction is that there is no time and space constraints, which saves you the hassle of going directly to the store, and the payment is mainly made by credit card. In addition, there is no cost of distribution or rent, and it is likened to the state of the art golden fishing grounds in that all Internet subscribers in the world are potential customers and is included in commerce at the light speed (CALS).

There is an electronic payment method using such an electronic commerce, and a payment method is generally a method of transmitting a user's credit card number to a shopping server.

Payment Gateway (PG) is the most basic role of financial institutions such as credit card companies in electronic commerce. This ultimately allows the store that sold the product to be paid for using a system linked to the card company.

PG service connects Merchant and card company online and performs various tasks such as payment approval or settlement.

In order to secure e-commerce payment processing in an open computer network such as the Internet, confidentiality to prevent disclosure of payment information to third parties, integrity to prevent tampering with payment information, and Non repudiation, mutual authentication to prevent the creation of unauthorized payment processing, etc., should be provided.

In general, an encryption algorithm based e-commerce protocol is used to implement such a function. A major example of such an e-commerce payment protocol is a payment processing using a credit card.

Nevertheless, in order to provide more secure online payment service in electronic commerce using an open computer network such as the Internet, the effective and stable distribution of the electronic certificate revocation list in a payment service system based on a bank transfer rather than a credit card is required. Through this, it is necessary to check the validity of the electronic certificate and to secure the safety and reliability of the e-commerce service.

The present invention has been made in order to solve the above problems, the electronic certificate cancellation through the forced distribution channel in the payment service system based on the bank transfer, not the credit card based on the electronic commerce using an open computer network, such as the Internet Validation method of the electronic certificate to confirm the validity of the counterparty electronic certificate by distribution of the list and online inquiry, and to check the availability and safety of the e-commerce service related to the counterparty electronic certificate by checking other supplementary service information. And, to provide a payment service system based on the account transfer and its online e-commerce payment service method thereof.

In order to achieve the above object, the present invention provides an electronic certificate validity checking method in an online payment service system, the method comprising: downloading an electronic certificate revocation list provided by a directory server at one side; When the other party requests the online bank transfer payment processing, the one side forwarding the electronic certificate revocation list to the other side; And verifying the validity of the counterparty electronic certificate by checking the contents of the electronic certificate revocation list by the other side.
On the other hand, the present invention, in the electronic certificate validity verification method in the online payment service system, one side of the step of downloading the electronic certificate revocation list provided by the directory server; And upon request of the online bank transfer payment processing of the other party, the one party delivering the electronic certificate revocation list to the other party, and verifying the contents of the electronic certificate revocation list to verify the validity of the other party's electronic certificate. It is characterized by.
On the other hand, the present invention, the electronic certificate validation method in the online payment service system, comprising: constructing a digital certificate revocation list in the directory server; And upon request of the other party's online bank transfer payment processing, the one side characterized in that the step of verifying the validity of the counterparty electronic certificate based on the electronic certificate cancellation list.
In order to achieve the above object, the present invention provides a payment service method for online electronic commerce, comprising: generating an electronic certificate revocation list in a directory server; When the payment request is made through wire transfer for the goods purchased through electronic commerce, the store system transferring the store certificate and the payment system certificate to the customer system; Based on the electronic certificate cancellation list, the store system transmits the encrypted account transfer payment information transmitted by the customer system according to the result of validating the store certificate and the payment system certificate based on the electronic certificate revocation list. Checking the validity of the certificate and relaying it to the payment system; And checking, by the payment system, the validity of the customer certificate and the store certificate on the basis of the electronic certificate revocation list, decrypting and extracting the encrypted account transfer payment information, and then processing the account transfer. do.
On the other hand, the present invention, the payment service method for online e-commerce, comprising the steps of: generating an electronic certificate revocation list in the directory server; When the payment request is made through wire transfer for the goods purchased through electronic commerce, the store system transferring the store certificate and the payment system certificate to the customer system; Relaying, by the store system, the encrypted account transfer payment information transmitted by the customer system according to a result of checking the validity of the store certificate and the payment system certificate based on the electronic certificate cancellation list; And checking, by the payment system, the validity of the customer certificate and the store certificate on the basis of the electronic certificate revocation list, decrypting and extracting the encrypted account transfer payment information, and then processing the account transfer. .
On the other hand, the present invention, in the payment service method in the online e-commerce, when the payment request through the account transfer for the goods purchased through the e-commerce, the payment system is based on the customer certificate and the store based on the electronic certificate revocation list Check the validity of the certificate and encrypted payment transfer information -At this time, the encrypted payment transfer information is transmitted in accordance with the results of the validation of the store certificate and payment system certificate confirmed in the customer system based on the electronic certificate revocation list Decrypting and extracting the encrypted key and encrypted payment information ; And the payment system characterized in that it comprises a step of processing the account transfer based on the payment information.
On the other hand, the present invention, the payment service method for online electronic commerce, comprising the steps of: generating an electronic certificate revocation list in the directory server; Encrypting the transfer payment information using the customer certificate and transmitting the payment information to the store system by the customer system when the payment request is made through wire transfer for the item purchased through the electronic commerce; The store system transmitting the encrypted wire transfer payment information to a payment system using a store certificate; And checking, by the payment system, the validity of the certificate of the wire transfer payment information based on the electronic certificate revocation list, decrypting and extracting the encrypted account transfer payment information, and then processing the transfer based on the payment information. Characterized in that made.
In order to achieve the above object, the present invention, in the online e-commerce payment service system, when the payment request through the account transfer for the goods purchased through the e-commerce, confirming the validity of the customer certificate on the basis of the electronic certificate cancellation list And encrypted account transfer payment information -At this time, the encrypted account transfer payment information is encrypted key and encrypted payment information transmitted according to the validation result of the payment system certificate confirmed based on the electronic certificate revocation list in the customer system. Im - was extracted by decoding, it characterized in that the money transfer processing based on the payment information.
On the other hand, the present invention, the online e-commerce payment service system, Directory server for storing the electronic certificate list canceled and periodically generates a digital certificate revocation list; A customer system for transferring and processing the account transfer payment information required for the account transfer using a customer certificate in response to a payment request according to the purchase of goods during an e-commerce transaction; A store system for transferring the account transfer payment information transmitted from the customer system using a store certificate; And confirming the validity of the certificate of the wire transfer payment information based on the electronic certificate cancellation list, decrypting and extracting the wire transfer payment information, and processing the account transfer based on the payment information, and confirming the withdrawal result according to the processing. It is characterized by including a payment system.

delete

delete

delete

The present invention can verify the validity of the counterparty electronic certificate in the payment service system based on the bank transfer rather than the credit card. This is the same as the digital signature verification method of the electronic certificate as in the credit card base, but differs in the method of distributing and verifying the revoked digital certificate list.

The method of confirming the validity of the conventional electronic certificate confirms the signature of the electronic certificate according to the issuance path (Trust Chain) of the electronic certificate, and confirms the validity of the electronic certificate by inquiry of the electronic certificate revocation list following the delivery of the electronic certificate. On the other hand, the validity verification method of the electronic certificate by the electronic certificate revocation list inquiry in the payment service system according to the present invention is the same procedure for confirming the electronic signature against the issuing path, but forced to distribute the electronic certificate revocation list The procedure for verifying the availability and safety of the e-commerce service related to the electronic certificate of the counterparty by verifying the validity of the electronic certificate by the distribution channel and online inquiry and other additional service information is different.

The present invention provides an effective and stable distribution of the electronic certificate revocation list and other necessary information to confirm the validity of the electronic certificate used for the safe and effective provision of electronic payment services during electronic commerce using an open computer network such as the Internet. To provide electronic certificate revocation list distribution and other supplementary service information online.

To this end, the present invention provides a method for compulsory distribution of the electronic certificate revocation list and online electronic certificate to provide the validity of the electronic certificate used for the mutual user authentication and the stable provision of the electronic payment service and other additional service information in the online electronic payment service system. By providing certificate validation and additional service information, it provides security functions such as mutual authentication and message security through electronic certificates and other additional service information. As a result, the present invention can be used for online electronic payment services and additional services using electronic certificates in electronic commerce using an open computer network such as the Internet.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a configuration of a payment service system based on a bank transfer according to the present invention, in which "11" is a user system, "12" is a shop system, "13" is a payment system (PG), and "14" is A user registrar, "15" represents a store registrar, "16" represents a certification authority, and "17" represents a directory server, respectively.

Here, "101" indicates a periodic electronic certificate revocation list compulsory distribution channel, "102" indicates a real-time electronic certificate revocation list confirmation and additional service confirmation channel, and "103" indicates an electronic certificate application and issuance channel, respectively.

As shown in FIG. 1, a payment service system based on a bank transfer function for checking an electronic certificate cancellation list according to the present invention includes an electronic wallet installed in a user system 11 and a store system 12 installed in a shopping mall. ), A payment system 13 connected to the bank side, a user registrar 14 responsible for registering and issuing a user's certificate, a store registrar 15 responsible for registering and issuing a certificate of a store system 12, a user system ( 11) manages and stores the certification authority 16 that issues the electronic certificate to the store system 12 and the payment system 13, the electronic certificate issued from the certification authority 16, the electronic certificate revocation list, and other additional service information. A directory server 17 is provided.
In particular, the bank transfer-based payment service system according to the present invention, the directory server 17 for storing the list of canceled electronic certificate and the periodic electronic certificate revocation list, and the payment request according to the purchase of goods during electronic commerce Accordingly, the user system (customer system) 11 which transfers the account transfer payment information required for the account transfer using the customer certificate and the transfer payment information transferred from the user system 11 using the store certificate. After confirming the validity of the store system 12 and the 'certification of the account transfer payment information, the update cycle of the electronic certificate cancellation list and its contents are confirmed through the forced distribution channel', and decodes and extracts the account transfer payment information It includes a payment system 13 to process the account transfer based on the information, and confirm and process the withdrawal result of the process.

Each function and function of these components is as follows.

The user system 11 is equipped with a web browser and an electronic wallet for processing an e-commerce payment protocol, which is called a customer system.

The electronic wallet mounted on the user system 11 performs management and verification functions of the electronic certificate, encryption and decryption functions, and a specialized delivery and reception function of a payment message according to a payment protocol.

The electronic wallet is interlocked with the store system 12 to handle the e-commerce payment.

The electronic wallet checks the validity of the electronic certificate of the store system 12 and the payment system 13 through the periodic electronic certificate compulsory distribution channel 101 or the real-time electronic certificate confirmation channel 102 for online account transfer payment processing. After encrypting the information required for wire transfer payment processing using a symmetric key encryption algorithm, the encryption key is encrypted with the public key of the payment system 13. The encrypted account transfer information and the encrypted key are transmitted to the store system 12 using the e-commerce payment protocol, and the result is received and confirmed.

The store system 12 is a system for selling tangible and intangible goods to customers through an open network such as the Internet, and is equipped with a store electronic wallet for account transfer payment processing.

The electronic wallet for the store relays the transfer payment information in connection with the customer system 11 and the payment system 13, and receives the result from the payment system 13 and delivers the result to the customer system 11.

For online bank transfer payment processing, the store system 12 checks whether the customer's electronic certificate is valid through the periodic electronic certificate forced distribution channel 101 or the real-time electronic certificate confirmation channel 102, and the customer system 11 The encrypted account transfer payment information (that is, the encrypted account transfer information and the encrypted key) is transmitted to the payment system 13 using the e-commerce payment protocol to request the payment processing, and the result is received from the customer system ( 11) to pass.

The payment system 13 performs a bank transfer payment process requested by the store system 12 in association with the bank host system.

When the store system 12 requests online bank transfer payment processing, the payment system 13 checks whether the store and the customer's electronic certificate are valid through the periodic electronic certificate compulsory distribution channel 101 or the real-time electronic certificate confirmation channel 102. Check it. At this time, if the electronic certificate is valid, the payment system 13 decrypts the symmetric key for encrypting the payment information encrypted with its public key with the private key and then decrypts the encrypted account transfer payment information.

The payment system 13 transmits the bank transfer payment information to the withdrawal bank having the account of the user system 11 to request a payment request through the bank transfer, and the result is stored in the store system 12 using the e-commerce payment protocol. To pass.
Here, the bank transfer payment process is based on a known method in which a bank having a customer account withdraws the payment information from the customer's account and transfers the payment information to a store account (which may be a bank account or another account). .
In addition, the payment system 13 and the bank (bank host system) can be integrated as well as linked by a separate configuration.

A payment processing process in the payment service system will be described with reference to FIG. 2.

First, when the user system 11 inquires the online state of the store system 12 (201, 202) and requests the payment process using the e-commerce payment protocol to the store system 12 in the online state (203), the store System 12 queries the online state for user system 11 (204) and requests payment authorization using the e-commerce payment protocol in the online state (205).

The payment system 13 then inquires (206) the online state for the store system 12 and sends a response to the payment authorization request to the store system 12 in the online state (207), and the store system 12 In step 208, the received payment approval response is transmitted to the user system 11.

Now, the validity of the counterparty's electronic certificate will be examined in the bank's account transfer based payment service system rather than the credit card.

The method of validating the electronic certificate is largely based on the periodic process of forced distribution of the electronic certificate revocation list through the electronic certificate revocation list forced distribution channel 101 and the need for the store system 12 and the payment system 13 to cancel the real-time electronic certificate. It may be divided into a real-time electronic certificate verification process through the list confirmation and additional service confirmation channel 102.

First, referring to the periodic distribution process of the electronic certificate revocation list, the payment system 13 periodically accesses the directory server 17 to store the revoked electronic certificate list and generate the periodic electronic certificate revocation list. Get a list of certificate revocations. In this way, the received electronic certificate revocation list is transmitted by the payment system 13 to the store system 12 when the store system 12 makes the payment processing request as the payment system 13.

Thereafter, the shop system 12 checks the update cycle of the electronic certificate revocation list transmitted from the payment system 13, and determines that the reliability of the received electronic certificate revocation list is not reliable if the update cycle is incorrect. However, it is used to verify the validity of the electronic certificate by checking the contents of the electronic certificate revocation list only when the renewal cycle is correct.

The store system 12 transmits the electronic certificate revocation list received from the payment system 13 to the user system 11 when the user system 11 requests a payment processing. In this case, the user system 11 that has received the electronic certificate revocation list is used to confirm the validity of the electronic certificate according to the appropriateness of the update cycle of the electronic certificate revocation list, similarly to the shop system 12.

On the other hand, if you look at the online electronic certificate revocation list check and additional service confirmation procedures, this means that the payment system (13), the store system (12), the user system (11), which is a payment service system component, each electronic member according to their needs. When checking the certificate revocation list online, the validity of the counterparties' electronic certificates to be verified on the directory server 17 side is checked and checked online in parallel with the electronic certificate compulsory distribution process.

The method to inquire the validity of the counterparty's electronic certificate is as follows.

First, the status of the electronic certificate to be verified is checked by requesting the directory server 17 for the electronic certificate revocation list and other additional service information online.

Second, the electronic certificate to be verified is transmitted to the directory server 17 to receive the electronic certificate verification service regarding the issuance state, cancellation state, etc. of the electronic certificate from the directory server 17. At this time, the directory server 17 checks the registration status and validity status of the received electronic certificate, and accordingly transmits the electronic certificate confirmation message to the requester for confirmation.

Third, the electronic certificate to be verified is delivered to the directory server 17 to receive additional service information other than the validation of the electronic certificate to be verified from the directory server 17. At this time, the service that can be provided by the directory server 17 is related to the processed additional service information regarding the inquiry related to the credit status or the grade related to the electronic certificate which has been requested for confirmation, the inquiry regarding the transaction limit, and the inquiry regarding the transaction grade. The inquiry is classified by the user system 11, the store system 12, and the payment system 13 to provide the service inquiry information to the requestor for confirmation.

3 is a flowchart illustrating a method of checking the validity of an electronic certificate for an online e-commerce payment service according to the present invention.
First, when a request for a counterpart electronic certificate for electronic commerce is received (301), the digital signature of the certification authority for the received electronic certificate is checked (302) and the validity of the electronic certificate through the electronic certificate revocation list forced distribution channel 101 is verified. Check (303).

If the verification result 303 is invalid (if invalid), the transaction is aborted (304).

If the verification result 303 is valid, it is determined whether it is necessary to check the status of the online electronic certificate (305), and if necessary, the directory server 17 requests the online electronic certificate verification (306) to check the status of the online electronic certificate. (307).

If the check result 307 is invalid, the transaction is stopped (308). If it is valid, the transaction is used (309) and the e-commerce service is terminated (310).

As a result of the determination 305, if it is not necessary to check the status of the online electronic certificate, without performing the step (306, 307) of checking and validating the validity of the counterparty electronic certificate to be verified online to the directory server 17 side, The validity of an electronic certificate can be confirmed only by the forced distribution of the electronic certificate.

As described above, the validity of the counterparty electronic certificate to be checked on the directory server 17 side can be inquired and confirmed online only by the forced distribution of the electronic certificate or in parallel thereto.
As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the spirit of the present invention for those skilled in the art to which the present invention pertains, and the above-described embodiments and accompanying It is not limited to the drawing.

According to the present invention as described above, when using the payment service based on the bank transfer function of the bank, the electronic certificate validity by the forced distribution of the electronic certificate revocation list and the validity of the electronic certificate by online inquiry of the electronic certificate revocation list In parallel with the verification method, additional services such as certificate validity, credit rating and evaluation, transaction limit, etc. can be safely inquired, and accidents due to forgery of electronic certificates or misuse of unregistered electronic certificates can be prevented. It can be prevented, thereby enhancing the safety and reliability of electronic commerce.

Claims (29)

A method for validating an electronic certificate in an online payment service system, Downloading one side of an electronic certificate revocation list provided by a directory server; When the other party requests the online bank transfer payment processing, the one side forwarding the electronic certificate revocation list to the other side; And Verifying the validity of the counterparty electronic certificate by checking the contents of the electronic certificate revocation list by the other party; Electronic certificate validation method comprising a. A method for validating an electronic certificate in an online payment service system, Downloading one side of an electronic certificate revocation list provided by a directory server; And At the request of the other party's online bank transfer payment process, the one side forwarding the electronic certificate revocation list to the other side, and verifying the contents of the electronic certificate revocation list to verify the validity of the counterparty's electronic certificate; Electronic certificate validation method comprising a. A method for validating an electronic certificate in an online payment service system, Constructing an electronic certificate revocation list in the directory server; And On the other hand, upon request of the payment processing of the online bank transfer, one side verifies the validity of the counterparty electronic certificate based on the electronic certificate revocation list. Electronic certificate validation method comprising a. The method according to any one of claims 1 to 3, The electronic certificate revocation list, Electronic certificate validation method characterized in that the transmission through the forced distribution channel electronic certificate. The method according to any one of claims 1 to 3, Verifying the validity of the counterparty electronic certificate by accessing the directory server in real time through the electronic certificate confirmation channel; Electronic certificate validation method further comprising a. The method according to any one of claims 1 to 3, Querying the additional service of the counterparty by accessing the directory server in real time through the electronic certificate confirmation channel; Electronic certificate validation method further comprising a. The method according to any one of claims 1 to 3, The other side, Checking the renewal period of the electronic certificate revocation list, and checking the validity of the electronic certificate revocation list by checking the contents of the electronic certificate revocation list when the renewal period is correct. The method of claim 7, wherein The directory server, The electronic certificate revocation list, the electronic certificate characterized in that it provides additional service information classified by customer system, shop system, payment system related to the registration status, credit rating, transaction grade, transaction limit related to the electronic certificate to be confirmed Validation method. The method of claim 8, The customer system, Process the electronic commerce payment in conjunction with the store system, but check the validity of the store certificate and payment system certificate for online account transfer payment processing through the electronic certificate compulsory distribution channel or the electronic certificate confirmation channel, the account transfer The payment information required for payment processing is encrypted using a symmetric key algorithm, the encryption key is encrypted with the public key included in the payment system certificate, the encrypted payment information and the encrypted key are transferred to the store system, and then the account transfer. Electronic certificate validation method, characterized in that receiving the payment processing result confirmation. The method of claim 8, The store system, In connection with the customer system and the payment system, the account transfer payment information necessary for the account transfer payment process is relayed and the result of the account transfer payment process is received from the payment system and delivered to the customer system, and the customer for online account transfer payment processing The validity of the certificate is confirmed through the digital certificate compulsory distribution channel or the electronic certificate confirmation channel, and the encrypted key and the encrypted payment information sent from the customer system are transmitted to the payment system, and the result of the transfer payment processing is delivered. Electronic certificate validation method, characterized in that the delivery to the customer system. The method of claim 8, The payment system, In connection with a bank host system, the store system performs the payment transfer request requested by the store system, and requests the validity of the store certificate and the customer certificate when the store system requests the online transfer payment process. A bank having a customer account that checks through a confirmation channel, decrypts the encrypted key with its private key if the store certificate and the customer certificate are valid, decrypts the encrypted payment information, and then clears the payment information with the withdrawal account. Requesting an account transfer to the bank, and transmitting the account transfer payment processing result to the store system. In the payment service method in online e-commerce, Generating an electronic certificate revocation list in the directory server; When the payment request is made through wire transfer for the goods purchased through electronic commerce, the store system transferring the store certificate and the payment system certificate to the customer system; Based on the electronic certificate cancellation list, the store system transmits the encrypted account transfer payment information transmitted by the customer system according to the result of validating the store certificate and the payment system certificate based on the electronic certificate revocation list. Checking the validity of the certificate and relaying it to the payment system; And The payment system checking the validity of the customer certificate and the store certificate based on the electronic certificate revocation list, decrypting and extracting the encrypted account transfer payment information, and then processing the account transfer Online e-commerce payment service method comprising a. In the payment service method in online e-commerce, Generating an electronic certificate revocation list in the directory server; When the payment request is made through wire transfer for the goods purchased through electronic commerce, the store system transferring the store certificate and the payment system certificate to the customer system; Relaying, by the store system, the encrypted account transfer payment information transmitted by the customer system according to a result of checking the validity of the store certificate and the payment system certificate based on the electronic certificate cancellation list; And The payment system checking the validity of the customer certificate and the store certificate based on the electronic certificate revocation list, decrypting and extracting the encrypted account transfer payment information, and then performing an account transfer process Online e-commerce payment service method comprising a. In the payment service method in online e-commerce, When requesting payment via wire transfer for goods purchased through e-commerce, the payment system verifies the validity of the customer certificate and the store certificate based on the electronic certificate revocation list and encrypts the account transfer payment information -At this time, the encrypted account Decrypting and transferring the payment information, the encrypted key and encrypted payment information transmitted based on a result of confirming the validity of the store certificate and the payment system certificate confirmed based on the electronic certificate cancellation list in the customer system ; And The payment system processing the account transfer based on the payment information; Online e-commerce payment service method comprising a. In the payment service method in online e-commerce, Generating an electronic certificate revocation list in the directory server; Encrypting the transfer payment information using the customer certificate and transmitting the payment information to the store system by the customer system when the payment request is made through wire transfer for the item purchased through the electronic commerce; The store system transmitting the encrypted wire transfer payment information to a payment system using a store certificate; And Checking, by the payment system, the validity of the certificate of the wire transfer payment information based on the electronic certificate revocation list, decrypting and extracting the encrypted transfer payment information, and then processing the account transfer based on the payment information; Online e-commerce payment service method comprising a. The method according to any one of claims 12 to 15, The electronic certificate revocation list, An online electronic commerce payment service method, which is delivered through an electronic certificate compulsory distribution channel and used to verify the validity of the counterparty electronic certificate. The method according to any one of claims 12 to 15, Verifying the validity of the counterparty electronic certificate by accessing the directory server in real time through the customer certificate system or the store system or the payment system through an electronic certificate confirmation channel; Online e-commerce payment service method further comprising. The method according to any one of claims 12 to 15, The customer system or the store system or the payment system accessing the directory server in real time through an electronic certificate confirmation channel to query the additional service of the counterparty; Online e-commerce payment service method further comprising. The method according to any one of claims 12 to 15, The payment system transmitting the result of the transfer payment processing to the store system and / or the customer system Online e-commerce payment service method further comprising. The method of claim 12, The store system, In connection with the customer system and the payment system, the account transfer payment information necessary for the account transfer payment process is relayed and the result of the account transfer payment process is received from the payment system and delivered to the customer system, and the customer for online account transfer payment processing The validity of the certificate is confirmed through an electronic certificate compulsory distribution channel or an electronic certificate confirmation channel, and the encrypted key and the encrypted payment information sent from the customer system are transmitted to the payment system, and the account transfer payment processing result is received. Online e-commerce payment service method characterized in that the delivery to the customer system. The method according to any one of claims 13 to 15, The store system, In connection with the customer system and the payment system relays the account transfer payment information necessary for the account transfer payment processing and receives the result of the account transfer payment processing from the payment system to pass to the customer system, the encrypted key sent by the customer system And transmitting the encrypted payment information to the payment system, receiving the result of the transfer payment payment, and delivering the payment result to the customer system. The method according to any one of claims 12 or 13 or 15, The directory server, And providing additional service information classified by the customer system, the store system, and the payment system related to the electronic certificate cancellation list and the registration status, credit rating, transaction grade, and transaction limit related to the electronic certificate to be checked. Online E-Commerce Payment Service Method. The method according to any one of claims 12 to 15, The customer system, Process the e-commerce payment in conjunction with the store system, but check the validity of the store certificate and payment system certificate through the electronic certificate compulsory distribution channel or the electronic certificate confirmation channel for the process of online bank transfer payment processing, payment transfer processing Encrypt the payment information required by using a symmetric key algorithm, encrypt the encryption key with the public key included in the payment system certificate, and transfer the encrypted payment information and the encrypted key to the store system, and then transfer payment to the store system. Online e-commerce payment service method characterized in that the result is received and confirmed. The method according to any one of claims 12 to 15, The payment system, In connection with a banking host system, the store system performs the payment transfer request requested by the store system, and checks whether the store certificate and the customer certificate are valid when requesting the online account transfer payment process from the store system. If the store certificate and the customer certificate is valid, the encrypted key is decrypted with its own private key, and then the encrypted payment information is decrypted, and the payment information is transferred to a bank having a withdrawal account. Requesting a bank transfer, and transmitting the result of the bank transfer payment to the store system. In the online e-commerce payment service system, When requesting payment through bank transfer for goods purchased through e-commerce, the validity of the customer certificate is verified based on the electronic certificate revocation list and encrypted account transfer payment information -At this time, the encrypted account transfer payment information is After the system decrypts and extracts the encrypted key and encrypted payment information transmitted according to the validation result of the payment system certificate verified based on the electronic certificate revocation list , the bank transfer processing is performed based on the payment information. Account transfer based payment service system. The method of claim 25, The payment service system, An account transfer based payment service system further comprising a function of verifying the validity of the counterparties 'electronic certificates or querying the counterparties' additional services by accessing a directory server in real time through an electronic certificate verification channel. In the online e-commerce payment service system, A directory server for storing the revoked electronic certificate list and periodically generating an electronic certificate revocation list; A customer system for transferring and processing the account transfer payment information required for the account transfer using a customer certificate in response to a payment request according to the purchase of goods at the time of electronic commerce; A store system for transferring the account transfer payment information transmitted from the customer system using a store certificate; And Verifying the validity of the certificate of the wire transfer payment information based on the electronic certificate cancellation list, decrypting and extracting the wire transfer payment information, and processing the account transfer based on the settlement information, and confirming and withdrawing the result of withdrawal according to the processing Payment system Account transfer based payment service system comprising a. The method of claim 27, The customer system or the store system or the payment system, The account transfer based payment service system further comprises a function of verifying the validity of the counterparties' electronic certificates or inquiring additional services of the counterparties by accessing the directory server in real time through an electronic certificate verification channel. The method according to any one of claims 25 to 28, The electronic certificate revocation list, The payment service system based on the account transfer, which is transmitted through an electronic certificate forced distribution channel and used to verify the validity of the counterparty's electronic certificate.

Images