KR100831596B1 - Defrayment intermediate method and defrayment intermediate server for safe online payment - Google Patents

Abstract

A method and a server for intermediating payment for safe online payment are provided to reduce risk for leakage of card information in online payment by preventing a member shop system from recording the card information of a buyer. A receiver(410) receives a card approval request signal for an authenticated transaction from a member shop system. A decoder(420) extracts encoded card information from the received card approval request signal and decodes the extracted encoded card information. A card approval processor(430) transmits the decoded card information and payment information included in the card approval request signal to a card company server, and receives a card approval confirmation signal for a card approval request from the card company server. An encoder(440) encodes the card information according to the received card approval confirmation signal. A transmitter(450) completes a card approval process by transmitting the encoded card information and the payment information to the member shop system. A database(460) links/stores the encoded card information and the decoded card information.

Description

Payment brokering method and payment brokering server for secure online payments {DEFRAYMENT INTERMEDIATE METHOD AND DEFRAYMENT INTERMEDIATE SERVER FOR SAFE ONLINE PAYMENT}

1 is a system for implementing a payment brokering method according to an embodiment of the present invention.

2 is a flowchart illustrating card authentication in a payment brokering method according to an embodiment of the present invention.

3 is a flowchart illustrating a card approval in the payment intermediation method according to an embodiment of the present invention.

Figure 4 is a block diagram showing the internal configuration of a payment intermediation server according to an embodiment of the present invention.

5 is a view for explaining a database according to an embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

400: payment broker server

410: receiver

420: decryption processing unit

430: card authorization processing unit

440: encoding processing unit

450: transmission unit

460: database

The present invention relates to a method and a server for brokering a payment by using the card information of the buyer in a state in which the card information input from the buyer is not recorded in the merchant system.

Today, credit cards are a payment method that is frequently used in online shopping malls. In the payment method using a credit card, first, when card information is authenticated from a card company, payment information including the card information, payment amount, and installment information is transmitted to the card company for approval. In addition, when the approval process from the card company is completed, the merchant system determines that the payment process of the buyer is completed, and provides a service such as delivering goods to the buyer or providing contents.

However, the card information including the card number, expiration date, password, etc. is likely to be misused in case of leakage. Therefore, in the card payment online, the emergence of technical ideas to reduce the possibility of leaking the card information is urgently needed.

The present invention has been made to improve the prior art as described above, an object of the present invention, by preventing the card information of the buyer to be recorded in the merchant system, payment intermediary server and payment mediation to reduce the possibility of the card information leaked To provide a way.

In order to achieve the above object and solve the above-mentioned problems of the prior art, the payment intermediation method according to the present invention, the step of receiving a card authorization request signal from the merchant system for the authenticated transaction, the received card Extracting the encoded card information of the financial card from the authorization request signal, decoding the extracted card information, and transmitting the decoded card information and payment information included in the card approval request signal to a card company server for card approval Requesting, receiving a card approval confirmation signal for the card approval request from the card company server, encoding the card information according to the received card approval confirmation signal, and the encoded card information and the payment information. To the merchant system to complete the card approval process The transaction for the authentication process, the merchant system in accordance with the buyer's payment request, the card information input from the buyer using the plug-in module interworking with the card company server to the card company server card Request for authentication, and in response to the request through the plug-in module, receives the encoded card information from the card company server, and applies the encoded card information to the card approval request signal.

In another embodiment of the present invention, a payment brokering method may include receiving a payment request from a purchaser terminal in a merchant system, driving a plug-in module connected to a card company server according to the payment request, and using the plug-in module. Requesting card authentication by transmitting card information input from the purchaser terminal to the card company server; receiving the card information encoded through the plug-in module in response to the request from the card company server; Using the encoded card information and payment information input from the user, requesting card approval to a payment intermediation server, wherein the encoding is performed according to a card approval request received from the merchant system. Decrypting the received card information, the decryption Requesting card approval by transmitting card information and payment information to the card company server, receiving a card approval response from the card company server in response to the request, and encoding the card to the affiliated store system according to the card approval response. And transmitting the card information, wherein the merchant system receives the encoded card information from the payment broker server and processes the payment request of the buyer.

The payment intermediation server according to an embodiment of the present invention, a receiving unit for receiving a card approval request signal from the merchant system for the authenticated transaction, extracts the encoded card information of the financial card from the received card approval request signal And a decryption processing unit for decoding the extracted card information, transmitting the decrypted card information and payment information included in the card approval request signal to a card company server, and a card approval confirmation signal for a card approval request from the card company server. A card approval processing unit for receiving a card approval request, an encoding processing unit for encoding the card information according to the received card approval confirmation signal, and transmitting the encoded card information and the payment information to the affiliated store system to process the card approval. A transmitting unit for completing the authentication unit; Transaction for, the merchant system according to the buyer's payment request, using the plug-in module interlocking with the card company server to transmit the card information input from the buyer to the card company server to request card authentication, the plug-in module In response to the request through, the card company server receives the encoded card information, characterized in that to apply the encoded card information to the card approval request signal.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings and the contents described in the accompanying drawings, but the present invention is not limited or limited to the embodiments.

1 is a system for implementing a payment brokering method according to an embodiment of the present invention.

Referring to FIG. 1, the affiliated store system 120 processes the card information input to the purchaser terminal 110 to be directly transmitted to the card company server 140 through a plug-in module set in a web page of an online shopping mall. Requests card information to be authenticated. In addition, when the authentication process is completed, the card company server 140 transmits a card authentication confirmation signal to the affiliated store system 120 through the plug-in module. In this case, the plug-in module encodes the card information according to the card authentication confirmation signal received from the card company server, and transmits the card information to the affiliated store system 120. As a result, during the authentication process of the card information, the affiliated store system 120 does not know the actual card information, and receives only the information in which the card information is encoded.

As another example, when the authentication process is completed, the card company server 140 may encode the card information, and may process the encoded card information to be transmitted to the affiliated store system 120 through the plug-in module.

More specifically, when the card information is authenticated, the affiliated store system 120 transmits the encoded card information and payment information to the payment broker server 130. The payment broker server 130 maintains decryption information corresponding to the encoding of the card information performed by the plug-in module or the card company server 140, and decodes the received card information by using the decryption information. In addition, the payment intermediation server 130 transmits the decrypted card information and the payment information to the card company server 140, and requests the card to be approved. In this case, the payment information may include payment amount and installment information for purchase, and the card information may include one or more of a card number, an expiration date, and a password of the credit card. The plug-in module may be a pop-up web page directly connected to the card company server.

When the card information and the payment information are approved in the card company server 140, the payment intermediation server 130 encodes the card information and transmits the card information to the affiliated store system 120. Upon receiving the encoded card information, the affiliated store system 120 confirms that the payment processing of the buyer is completed, and executes a delivery process of the goods processed by the buyer, and provides related services to the buyer. have.

As a result, the payment brokering method according to the present invention provides a more secure payment method by preventing the card information input by the user from being recorded in the merchant system 120.

2 is a flowchart illustrating card authentication in a payment brokering method according to an embodiment of the present invention.

In the present specification, in payment processing using a credit card, only card authentication will be described with reference to FIG. 2, and card approval will be described with reference to FIG. 3.

First, in step 201, the buyer terminal receives a payment request from the buyer, and requests the payment to the merchant system. For example, the payment request may be input by the purchaser by clicking on a 'payment' icon on a web page provided by the merchant terminal. Next, in step 202, the merchant terminal receiving the payment request from the purchaser terminal drives a plug-in module that is directly connected to the card company server. Thus, in step 203, the purchaser terminal directly transmits the card information input from the user through the plug-in module to the card company server. The card information includes a credit card number, expiration date, password, and the like.

Next, in step 205, the card company server receives the card information, and authenticates using the received card information. That is, the card company server processes the availability of the credit card, inquiry of the limit balance, etc. using the card information. If the authentication is normally processed, the card company server generates a card authentication confirmation signal and transmits the card authentication confirmation signal to the plug-in module in step 206, and the plug-in module transmits the card information according to the reception of the card authentication confirmation signal in step 207. Encode For example, the plug-in module may maintain a table of a plurality of identifiers, and may map card information of which authentication is confirmed to a specific identifier among the plurality of identifiers, and use the encoded card information. As another example, the plug-in module may encode the card information by using a predetermined encoding algorithm.

In the embodiment of FIG. 2, the plug-in module encodes the card information. However, the encoding may be performed by the card company server.

In step 208, the affiliated store system that receives the encoded card information confirms that the authentication request has been successfully processed according to the reception of the encoded card information, and prepares for approval processing. Following step 208, card authorization is described in detail with reference to FIG.

3 is a flowchart illustrating a card approval in the payment intermediation method according to an embodiment of the present invention.

Referring to FIG. 3, in step 301, the merchant system transmits the encoded card information and payment information received in step 208 to the payment broker server according to the present invention. The payment mediation server may be, for example, a VAN company server, and the payment information may include payment amount and installment information for payment. Next, in step 302, the payment broker server decrypts the encoded card information. To this end, the payment broker server may maintain the decoding information corresponding to the encoding performed by the plug-in module in step 207. When the card information is decrypted, in step 303, the payment broker server transmits the decrypted actual card information and the payment information to the card company server to request card approval.

Accordingly, the card company server processes the card authorization using the card information and the payment information received from the payment broker server through step 304, and returns the processing result to the payment broker server. The payment broker server encodes the card information again in step 305, and transmits the encoded card information to the merchant system as a result of processing of the card authorization in step 306.

As a result, the merchant system confirms the card approval by receiving a processing result including the encoded card information from the payment broker server in step 307. When the card approval is confirmed, the affiliated store system may process a service such as delivering goods to the buyer or providing content.

According to an embodiment of the present invention, the payment broker server may correlate the encoded card information and the decrypted card information to a database in association with each other. That is, the payment broker server stores both the encoded card information provided to the affiliated store system and the decrypted card information used for authentication and authorization processing in the card company server in preparation for possible disputes. In addition, the card information stored in the database can be used in the purchase process. More specifically, the payment intermediation server receives a purchase request signal from the merchant system, extracts the encoded card information from the received purchase request signal, decodes the extracted card information and transmits it to the card company server The purchase request may be received and the processing result according to the purchase request may be received from the card company server and transmitted to the affiliated store system.

4 is a block diagram showing the internal configuration of a payment intermediation server 400 according to an embodiment of the present invention.

As shown in FIG. 4, the payment broker server 400 includes a receiver 410, a decryption processor 420, a card approval processor 430, an encoding processor 440, and a transmitter 450.

For the transaction for the authentication process, the merchant system requests card authentication by transmitting card information input from the buyer to the card company server using a plug-in module interworking with the card company server according to the payment request of the buyer. Accordingly, the card company server processes the card authentication based on the received card information, and when the card information is authenticated, in response to the request for the card authentication, the card company server uses the plug-in module to notify the affiliated store system. The encoded card information is transmitted. Upon receiving the encoded card information, the affiliated store system confirms that the card authentication has been successfully processed, generates a card approval request signal including the encoded card information, and sends the received card information to the receiving unit 410 for card approval. do.

Accordingly, the receiving unit 410 receives a card approval request signal for the authenticated transaction from the affiliate store system. In addition, the decoding processing unit 420 extracts encoded card information of the financial card from the received card approval request signal, and decodes the extracted card information. For decryption, the decryption processor 420 maintains decryption information corresponding to the encoding performed by the plug-in module when the card is authenticated.

The card approval processing unit 430 transmits the decoded card information and payment information included in the card approval request signal to the card company server, and receives a card approval confirmation signal for a card approval request from the card company server. The encoding processor 440 encodes the card information according to the received card approval confirmation signal, and the transmission unit 450 transmits the encoded card information and the payment information to the affiliated store system to process the card approval. To complete.

According to an embodiment of the present invention, the payment broker server 400 in preparation for the dispute, the database 460 for holding the encoded card information and the corresponding card information, that is, the decrypted card information It includes more. That is, by checking the encoded card information in the slip issued by the merchant system and comparing the actual card information corresponding to the encoded card information stored in the database 460, the possibility of possible disputes can be reduced. have.

5 is a diagram illustrating a database 500 according to an embodiment of the present invention.

As shown in FIG. 5, the database 500 stores the encoded card information and the decoded card information corresponding thereto, as indicated by reference numeral 501. In addition, by further recording the payment information according to the card information, the possibility of possible disputes can be reduced. That is, the encoded card information is maintained by the affiliated store system, and the decrypted card information is information used for card authentication and card approval processing in a card company server, and whether or not the corresponding card information is verified through the database 500. Can be. For example, as indicated by reference numeral 501, 'S # 1' is encoded card information processed by the affiliate system, and the actual card number '2222-3333-4444-5555' processed by the card company server is valid. Corresponds to the card information divided by 'March 2010' and the password '1111'. In addition, the card information 'S # 1' can be confirmed that 200,000 won payment processing. In addition, the database 500 may further store a payment date, an installment method, and the like as payment information.

As a result, the payment intermediation server according to the present invention can provide a secure payment processing service by performing the payment intermediation so that the card information of the buyer is not recorded in the merchant system.

Embodiments of the invention include a computer readable medium containing program instructions for performing various computer-implemented operations. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. The media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical recording media such as CD-ROMs, DVDs, magnetic-optical media such as floppy disks, and ROM, RAM, flash memory, and the like. Hardware devices specifically configured to store and execute the same program instructions are included. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

While specific embodiments of the present invention have been described so far, various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by those equivalent to the scope of the claims.

According to the present invention, it is possible to provide a payment intermediation server and a payment intermediation method for reducing the possibility of leaking the card information by preventing the purchaser's card information from being recorded in the merchant system.

Claims (16)

In the payment brokering method using a financial card, Receiving a card approval request signal for an authenticated transaction, including encoded card information and payment information of a financial card, from the merchant system; Extracting and decoding the encoded card information from the received card approval request signal; Receiving a card approval confirmation signal for the decrypted card information and the payment information from a card company server; Encoding the decoded card information according to the received card approval confirmation signal; And Transmitting the encoded card information and the payment information to the affiliated store system to complete the card approval process. Payment intermediary method comprising a. The method of claim 1, The transaction for the authentication process, The merchant system requests card authentication by transmitting card information input from the buyer to the card company server using a plug-in module interworking with the card company server according to the payment request of the buyer, and requests the card through the plug-in module. In response to receiving the encoded card information from the card company server, and applying the encoded card information to the card approval request signal. The method of claim 1, Associating the encoded card information with the decoded card information in a database Payment intermediation method further comprises. The method of claim 1, Receiving a purchase request signal from the merchant system; Extracting the encoded card information from the received embedding request signal and decoding the extracted card information; Transmitting the decrypted card information to the card company server to make a purchase request; And Receiving a processing result according to the purchase request from the card company server, and transmitting the received processing result to the affiliate store system; Payment intermediation method further comprises. The method of claim 1, The financial card is a credit card, And the card information includes a card number, an expiration date, and a password of the credit card. The method of claim 1, The merchant system is a shopping mall server that provides a web page, And the plug-in module is linked to the web page. The method of claim 1, In the transaction for the authentication process, And the encoded card information received from the card company server is encoded in the plug-in module or the card company server. In the payment brokering method using a financial card, In the merchant system, (1-1) receiving a payment request from a purchaser terminal; (1-2) in response to the payment request, driving a plug-in module connected to a card company server and requesting card authentication by transmitting card information input from the purchaser terminal to the card company server using the plug-in module; (1-3) receiving the card information encoded through the plug-in module in response to the request from the card company server; And (1-4) using the encoded card information and payment information input from the user, requesting a card approval to a payment intermediation server; At the payment broker server, (2-1) decoding the encoded card information according to a card approval request received from the affiliated store system; (2-2) requesting card approval by transmitting the decrypted card information and the payment information to the card company server, and receiving a card approval response from the card company server in response to the request; And (2-4) performing the step of transmitting the encoded card information to the affiliated store system according to the card approval response, The merchant system receives the encoded card information from the payment intermediation server, and processes the payment request of the buyer, characterized in that. The method of claim 8, In the merchant system, (1-5) storing the encoded card information and the payment information including a payment amount Payment intermediary method characterized in that it further comprises. The method of claim 8, The financial card is a credit card, And the card information includes a card number, an expiration date, and a password of the credit card. The method of claim 8, In the above (1-3) step, And the encoded card information is encoded in the plug-in module or the card company server. A computer-readable recording medium for recording a program for executing the method of any one of claims 1 to 11 on a computer. In the payment mediation server for payment mediation of a financial card, Receiving unit for receiving a card authorization request signal from the merchant system for the authenticated transaction; A decoding processing unit which extracts encoded card information of the financial card from the received card approval request signal and decodes the extracted card information; A card approval processing unit for transmitting the decoded card information and the payment information included in the card approval request signal to a card company server and receiving a card approval confirmation signal for a card approval request from the card company server; An encoding processor for encoding the card information according to the received card approval confirmation signal; And Transmission unit for transmitting the encoded card information and the payment information to the merchant system, the card approval process is completed Including, The transaction for the authentication process, The merchant system requests card authentication by transmitting card information input from the buyer to the card company server using a plug-in module interworking with the card company server according to a payment request of the buyer, and requests the card through the plug-in module. In response to receiving the encoded card information from the card company server, and applying the encoded card information to the card approval request signal. The method of claim 13, The transaction for the authentication process, The merchant system requests card authentication by transmitting card information input from the buyer to the card company server using a plug-in module interworking with the card company server according to the payment request of the buyer, and requests the card through the plug-in module. In response to receiving the encoded card information from the card company server, and applying the encoded card information to the card approval request signal. The method of claim 13, A database storing the encoded card information and the decoded card information in association with each other; Payment intermediary server further comprises. The method of claim 13, In the transaction for the authentication process, the encoded card information received from the card company server is encoded in the plug-in module or the card company server, characterized in that the payment broker server.

Images