KR100836011B1 - System for Operating Card`s Definition Information for Using It - Google Patents

Abstract

The present invention uses at least one user card that the card user has previously defined the input and output interface for inputting and outputting data to and from the terminal, the card-use transaction product, and / or the card-use transaction merchant, and / or the card-use transaction limit. And a processor that executes an application for accessing an IC chip having definition information and a terminal for approving the use of the card based on the user card use purpose definition information stored in the IC chip through the input / output interface when the card is used. Mounting the at least one user card usage definition information on an IC card containing the usage definition information of a card user and an integrated circuit chip (ICC) in the client card; and when using the card, a merchant card The ICC from the terminal And extracting the user card use purpose definition information mounted on the circuit chip to a server, and approving the use of the card based on the user card use purpose definition information provided from the merchant card terminal at the server. When the card operating method including the card user's usage definition information and the client card has no storage space, the user card usage definition information is stored in a storage medium on the network in association with the client card information and / or personal information. And providing the card information and / or personal information to a server from a merchant terminal when the card is used, and to the storage medium based on the card information and / or personal information provided from the card terminal at the server. To use at least one user card previously stored Extracting definition information or requesting to provide the user card usage definition information to the storage medium; and authorizing the use of the card based on the user card usage usage definition information extracted or provided from the storage medium. It relates to a card operating method including the use definition information of the card user including.

IC card, use

Description

System for Operating Card`s Definition Information for Using It}

1 is a simple configuration diagram of a card approval system according to a usage purpose of a credit card including a credit card, a server on a network, and a storage medium including user card usage definition information.

FIG. 2 is a simple exemplary diagram of an integrated circuit chip (ICC) structure in a client card including user card usage definition information.

3 is a simple flowchart illustrating a process in which user card usage definition information is mounted on an integrated circuit chip (ICC) in a client card to perform card use approval processing according to the use of the card.

4 is a simple flowchart illustrating a process in which user card usage definition information is mounted on a storage medium on a network and a card use approval process is performed according to the use of the card.

<Description of main parts of drawing>

100 server 105 receiver

110: extraction unit 115: approval processing unit

120: fraud determination unit 125: personal information D / B

130: approval history D / B 135: fraudulent use history D / B

140: storage medium 145: card terminal

150: client card

The present invention uses at least one user card that the card user has previously defined the input and output interface for inputting and outputting data to and from the terminal, the card-use transaction product, and / or the card-use transaction merchant, and / or the card-use transaction limit. And a processor that executes an application for accessing an IC chip having definition information and a terminal for approving the use of the card based on the user card use purpose definition information stored in the IC chip through the input / output interface when the card is used. Mounting the at least one user card usage definition information on an IC card containing the usage definition information of a card user and an integrated circuit chip (ICC) in the client card; and when using the card, a merchant card The ICC from the terminal And extracting the user card use purpose definition information mounted on the circuit chip to a server, and approving the use of the card based on the user card use purpose definition information provided from the merchant card terminal in the server. When the card operating method including the usage definition information of the card user including and the storage space in the client card, the user card usage definition information is stored in a storage medium on the network in association with the client card information and / or personal information And providing the card information and / or personal information from a merchant terminal to a server when the card is used, and the storage medium based on the card information and / or personal information provided from the card terminal at the server. To use at least one user card previously stored on Extracting definition information or requesting to provide the user card usage definition information to the storage medium; and authorizing the use of the card based on the user card usage usage definition information extracted or provided from the storage medium. It relates to a card operating method including the use definition information of the card user including.

Credit card fraud detection system (FDS) was introduced by card companies to prevent the fraudulent use of the card due to the customer's credit card theft, loss, forgery, forgery, identity theft, etc. It is a system that detects and detects transactions that are inconsistent with the member's usual card usage patterns by making a database of usage characteristics, patterns, and accident types into a database.

An Early Warning System (EWS) is also implemented as a system similar to the FDS fraud detection system. This early warning system (EWS) enables early identification of risks and appropriate countermeasures through phase-by-step monitoring of new member reviews and approvals, card issuance, debt collection processes, or customer card usage.

The Credit Card Fraud Detection System (FDS) or Early Warning System (EWS) automatically raises the burden of card fraud, such as theft, and automatically determines that there is a problem with the customer's card use. It was developed to suspend transaction approval and has been introduced by major card companies since 2000. In the early stages of operation, it was operated as a basic method of catching transactions for theft report card, but recently it has been upgraded to monitor all members' card usage.

According to the credit card fraud detection system (FDS) or early warning system (EWS), for example, a male customer who has little transaction history such as shopping, purchases expensive women's clothing at a department store luxury store, or holds only shopping transaction details. When a female customer uses a card at an entertainment bar, the card is classified as an abnormal transaction and the card transaction is stopped.

Therefore, the use of such a credit card fraud detection system (FDS) or early warning system (EWS) can determine whether or not fraudulent use within 1 second when requesting transaction approval based on the card usage tendency of each member. In fact, the credit card theft, loss, forgery, forgery, identity theft, etc. is actually having a significant effect on the fraudulent use of the card.

However, the credit card fraud detection system (FDS) or early warning system (EWS) is used to prevent fraudulent use of the card, and the system is not stable and many cases of normal transactions are recognized as fraudulent. It is a trend that is being conducted without proper prior consent or notification procedure of customers, which is controversial.

An object of the present invention to solve the above problems is to prevent the illegal use of the card, the input and output interface for connecting to the terminal to input and output data, the card-use transaction products, and / or card-use transaction merchants, and / Or the user card use usage definition information stored in the IC chip through the input / output interface when the card is used in connection with an IC chip and a terminal having at least one user card use definition defined by a card user in advance. It provides an IC card containing the use definition information of the card user, characterized in that it comprises a processor for executing an application for approving the use of the card based on the.

Another object of the present invention is to designate an input / output interface that connects with a terminal to input and output data, and to be designated by a card user or a card issuing agency, in order to prevent fraudulent use of the card. When the card is used in connection with an IC chip and a card terminal having usage definition information of a card user, which is defined or is defined as a specific product group and / or a specific merchant group and / or a total limit, A function of receiving specific product information and / or specific merchant information and / or payment amount information from a card terminal 145, a function of extracting usage definition information of the card user stored in the IC chip, and the extracted card user Usage definition information and the received specific product code and / or specific merchant code and / or Compare the amount of payment information to determine the availability of the card, and the electronic information management program for realizing the function of providing a decision on the availability of the card to the card terminal 145 is recorded. There is provided an IC card comprising a recording medium or a processor.

Further, another object of the present invention is to mount the at least one user card usage definition information on an integrated circuit chip (ICC) in the client card, and when using the card, from the merchant card terminal to the ICC (ICC); Extracting the user card use purpose definition information mounted on an integrated circuit chip) and providing the same to the server; and approving the use of the card based on the user card use purpose definition information provided from the merchant card terminal at the server. The present invention provides a card operating method including usage definition information of a card user.

Still another object of the present invention is to store the user card usage definition information in association with client card information and / or personal information in a storage medium on a network when the client card has no storage space, and When the card is used, providing the card information and / or personal information from the merchant terminal to the server, at least one pre-stored in the storage medium based on the card information and / or personal information provided from the card terminal at the server Extracting the above user card usage definition information or requesting to provide the user card usage usage definition information to the storage medium; and using the card based on the user card usage usage definition information extracted or provided from the storage medium. Authorizing the card user It provides a card operating method including usage definition information.

The present invention uses at least one user card that the card user has previously defined the input and output interface for inputting and outputting data to and from the terminal, the card-use transaction product, and / or the card-use transaction merchant, and / or the card-use transaction limit. And a processor that executes an application for accessing an IC chip having definition information and a terminal for approving the use of the card based on the user card use purpose definition information stored in the IC chip through the input / output interface when the card is used. The present invention relates to an IC card including usage definition information of a card user.

The card may further include an information update application for deleting or updating the user card usage definition information. The card may be mounted or detached from the wireless terminal.

In addition, the present invention, the step of mounting the at least one user card usage definition information on the integrated circuit chip (ICC) in the client card, and when using the card from the merchant card terminal to the integrated circuit chip (ICC) Extracting the on-board user card use usage definition information and providing the same to the server; and approving the use of the card based on the user card use usage definition information received from the affiliated card terminal at the server. It relates to a card operating method including usage definition information.

In addition, the present invention, if there is no storage space in the client card, storing the user card usage purpose definition information in association with the client card information and / or personal information in a storage medium on the network, and when using the card And providing the card information and / or personal information to a server from a merchant terminal, and at least one user card previously stored in the storage medium based on the card information and / or personal information provided from the card terminal at the server. Extracting usage definition information or requesting to provide the user card usage definition information to the storage medium and approving the use of the card based on the user card usage definition information extracted or provided from the storage medium; Definition of use for the card user including the step It relates to a method of operation includes the card.

Further, according to the present invention, the card operating method including the usage definition information of the card user further comprises the step of deleting or updating the user card usage usage definition information.

Here, the user card use purpose definition information is defined as a single product and / or a single merchant and / or one time limit specified by the user or a specific product group and / or a specific merchant group and / or the overall limit amount It is done.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First, predetermined reference numerals are added to elements illustrated in the drawings. However, it is noted that the same components shown in different drawings are denoted by the same reference numerals as much as possible.

In addition, in the following description, in order to explain the embodiments of the present invention, specific details such as specific elements are illustrated, which are provided to help a more general understanding of the present invention, and the present invention may be practiced without these specific details. It will be apparent to those skilled in the art. In describing the present invention, when it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

1 is a simple configuration diagram of a card approval system according to a usage purpose of a credit card 150 including a credit card 150, a server 100 on a network, and a storage medium including user card usage definition information. to be.

The drawing is based on the user card use definition information when using the credit card 150 through the credit card 150 associated with at least one user card use definition definition according to the transaction product, merchant, limit, etc. A simple schematic diagram of a system that allows for approval processing.

In addition, the system includes at least one or more card terminals for performing a series of processes for credit card payment authorization processing, in which the server 100 and the card terminals are connected through a network such as a VAN.

In addition, the server 100 is preferably a card company server 100 that communicates with the merchant card terminal through a network such as a value added network (VAN), and also through the at least one transaction with the client card 150 The merchant card terminal connected to the server 100 through a VAN and the like may be a CAT (Credit Authentication Terminal), a POS (Point of Sales) system, a PC (Personal Computer), an ATM (Auto Teller Machine), a CD. At least one or more of the groups.

According to the present invention, the server 100 obtains the user card usage usage definition information to approve the client card usage based on the user card usage usage definition information. The server 100 may obtain the user card usage definition information in various ways depending on the location of the storage medium including the user card usage definition information. For example, the storage medium may be stored in the server 100. If the storage medium is connected to the server 100 through a network (Internet, etc.), when the storage medium is connected to the server 100 through a VAN, the information of the storage medium is an application (Or data) in the form of a client card 150, etc. is possible, which is to specify that those skilled in the art can be set within the scope of the present invention without departing from the spirit of the present invention.

In order to implement the present invention, the server 100 includes a receiving unit 105, an extracting unit 110, an approval processing unit 115, a fraud determination unit 120, a personal information database 125, and an approval history database 130. , Fraudulent usage history database 135, and the like.

The receiving unit 105 in the server 100 is connected to the card terminal 145 through a network such as a value added network (VAN) to receive transaction data provided from the card terminal 145.

The transaction data includes a full card approval request according to the credit card approval process and the like, which includes card information of the client. Therefore, the card information of the client provided to the server 100 through the full card approval request or the like is a basis for extracting the user card use definition information according to the present invention from the storage medium 140.

In addition, when the user card use purpose definition information is mounted on an integrated circuit chip (ICC) in the client card 150, the user data used from the integrated circuit chip (ICC) in the card 150 is used for the transaction data. Usage definition information may be included.

The extraction unit 110 requests the storage medium 140 on the network for user card usage definition information associated with the card information based on the card information of the client identified through the reception unit 105, and the storage medium. When the user card use purpose definition information is provided from 140 or the user card use purpose definition information is present in the server 100, the user card use purpose definition information is extracted from a predetermined database.

The authorization processing unit 115 is requested from the card terminal 145 on the basis of the user card usage purpose definition information associated with the personal information and / or card information of the card usage client extracted or confirmed through the extraction unit 110. It is responsible for processing card use authorization requests. In addition, the approval processing unit 115 performs a card use approval process after confirming whether payment information requested for approval is valid by interworking with the fraud determination unit 120 described below in a card use approval process. .

The illegal use determination unit 120 according to the present invention for the authorization processing according to the card use of the client based on the user card use definition information of the client, the product information, merchant information included in the user card use use definition information Check the limit information and the like, and the payment information (merchant information (code), amount information, product information (code), etc.) included in the full text of the card approval request provided from the card terminal 145 is included in the user card use definition information. It is determined whether it is valid or invalid, and the determination details are provided to the approval processing unit 115.

For example, when the illegal use determination unit 120 determines that the card use of the client is not valid for the user card use definition, the use of the card by another person who does not recognize the user card use definition. This corresponds.

In addition, when it is determined that the use of the card 150 of the client is not valid for the user card use purpose definition information according to the present invention, the misuse determination unit 120 determines the result of the determination of the card terminal 145 and the client. It further includes the role provided by mobile phones, e-mail, etc. based on the personal information of the.

The personal information database 125 of the server 100 stores personal information (eg, user ID, card number, chip serial number, card validity period, credit information, account information) for the client and / or client card 150. Information, etc.).

 The approval history database 130 in the server 100 is a database that stores the approval history for the card 150 of the client.

According to the present invention, the illegal use history database 135 of the server 100 is illegally used (eg, based on the user card usage definition information stored in the storage medium 140) (for example, in the server 100). When a client sets a specific product, a specific merchant, or a specific limit as user card usage purpose definition information, and the like, the card is used for the specific product, a specific merchant, a specific limit, etc.) Database.

According to the present invention, as shown in FIG. 1, the storage medium 140 may be implemented at various locations (for example, a network such as the Internet or a VAN, a card terminal, etc.), and the storage medium 140 may be An integrated circuit chip (ICC) included in the card 150 and / or an integrated circuit chip (ICC) included in a wireless terminal on which the card 150 is mounted or detached is provided.

In addition, the storage medium 140 comprises at least one user card usage definition information according to the present invention, the user card usage usage definition information stored in the storage medium 140 is the card 150 of the client ) Provides a basis for preventing misuse in use.

The user card usage definition information includes, for example, product information defined by the user (or designated) and / or merchant information and / or limit information, and the user card usage definition information defined by the client is a single product. And / or defined as a single merchant or the like, or a specific product group and / or a specific merchant group.

In addition, the user card usage purpose definition information is for managing at least one or more card usage purpose definition information (eg, product information and / or merchant information and / or limit information, etc.) included in the user card usage purpose definition information. It further includes at least one card use definition policy information.

For example, the card usage definition policy information controls and manages an expiration date, an update (or an update), etc. of the user card usage definition information, so that the user card usage definition information is more effectively operated.

In addition, the above-mentioned user card usage definition information is not limited to this, and it is noted that it is possible to add or modify new information in the implementation of the present invention by those skilled in the art.

In addition, the user card use definition information card is issued or issued in the form of post-issuance it can be defined by the card use client and / or card issuer.

According to the location of the storage medium 140 in which the user card usage definition information is stored, for example, the user card usage definition information is stored in the storage medium 140 on a network and stored in the storage medium 140. When the card approval is processed using the card usage purpose definition information, the client card 150 performs a card transaction approval transaction with the server 100 connected through the card terminal 145 and the value added network (VAN), The card terminal 145 provides the server 100 with transaction data such as a card approval request message including card information (eg, credit card number information) read out from the card 150, and the server ( 100 confirms card information included in the transaction data and adds user card usage definition information associated with the card information from the storage medium 150. Upon receipt or request, the user card usage definition information according to the present invention is provided, and authorization processing for the card usage is performed based on the provided user card usage usage definition information.

In addition, the user card usage definition information is mounted on the integrated circuit chip (ICC) in the client card 150, and using the user card usage usage definition information mounted on the integrated circuit chip (ICC) for card use. In the case of the authorization process, the card terminal 145 extracts and / or executes a user card use purpose definition information application (or data) mounted on an integrated circuit chip (ICC) in the card 150 to execute the user card. The usage definition information is provided to the server 100 through a VAN or the like to perform authorization processing for card use.

The card terminal 145 shown in the figure includes a credit authentication terminal (CAT), a point of sales (POS) system, a personal computer (PC), an auto teller machine (CAD), a CD device, etc., having a basic credit card inquiry function. It includes, and has a card interface for a transaction with the client card 150.

The card interface depends on the data communication method of the card 150, and includes at least one or more MS interface, chip interface, wireless data communication (RF, Bluetooth, WLAN, infrared, etc.) interface.

For example, if the client card 150 is a card 150 based on at least one smart card standard that satisfies ISO / IEC 7816 and / or ISO / IEC 14443, or the like, an application protocol data unit (APDU) or the like. Through a protocol, the card terminal performs a data transaction between the cards 150.

Further, according to the present invention, the card terminal 145 is interlocked with a storage medium including user card use definition information, or has user card use use definition information contained in the storage medium 140 loaded therein. In this case, the card terminal 145 confirms whether the card is used for illegal use based on the user card use definition information through a predetermined agent program, and provides it to the server 100. .

In addition, according to the present invention, the client card 150 includes at least one user card usage definition information associated with the card information and / or client personal information (in the case of an IC card) or a storage medium 140 on a network. It is characterized in that the card is used in conjunction with the user card usage definition information stored in).

In addition, the card 150 is connected to the terminal 145, the input and output interface for inputting and outputting data, the card-use trading products, and / or the card-use trading merchants, and / or the card-use transaction limit of the card user An IC chip having at least one predefined user card usage definition information, and the card based on the user card usage usage definition information stored in the IC chip through the input / output interface when the card is used in connection with the terminal 145. And a processor that executes the application to approve the use.

In addition, the card 150 is connected to the terminal 145, the input and output interface for inputting and outputting data, designated by the card user or card issuer, and defined as a single product and / or a single merchant and / or one-time limit or When using a card connected to an IC chip and a card terminal having a usage definition information of a card user, characterized in that it is defined as a specific product group and / or a specific merchant group and / or the total limit, the card terminal through the input and output interface ( 145) a function of receiving specific product information and / or specific merchant information and / or payment amount information, a function of extracting usage definition information of the card user stored in the IC chip, and the extracted card user usage definition information. Compares the received specific product code and / or specific merchant code and / or payment amount information And a recording medium or processor for recording an electronic information management program for realizing a function of determining whether or not a card is already available and providing a function of determining whether the card is available to the card terminal 145. Characterized in having a.

The user use definition information provided in the IC card satisfies the IC card standard including ISO / IEC 7816 and / or ISO / IEC 14443, or the financial IC chip standard including EMV (Europay, Master, VISA). Preferably, the processor provided in the IC card of the present invention according to the standard is through at least one IC chip application issued and / or post issuance to the IC card through a COS (Chip Operating System) The confidentiality, authentication, integrity, and nonrepudiation of the IC card in the IC card using at least one information provided from the terminal and the information included in the IC chip storage information. Arithmetic functions for nonrepudiation, etc. can be performed.

 Preferably, the processor provided in the IC card is provided with a PIN (Personal Identification Number) from the terminal using an APDU (Application Protocol Data Unit) through the COS, and the PIN provided from the terminal and the PIN stored in the IC card as described above Compare and, as a result authenticates the validity of the IC card in the IC card, and serves to provide a validity authentication result to the terminal through the APDU.

 According to the present invention, the IC card has user usage definition information (e.g., designated by the card user or the card issuer, and defined by a single product and / or a single merchant and / or a one-time limit, or by a specific product group and / or a specific merchant). At least one IC chip application is provided for approving the use of the card based on group and / or total limit information, wherein the processor included in the IC card is provided with the above computing functions (eg, from a terminal). Compare and / or determine at least one or more information provided from the terminal and the use definition information provided from the terminal in the IC card using the COS through the available information and information contained in the IC chip). As a result, the card is approved for use inside the IC card.

For example, the IC card receives the product information and / or merchant information and / or the terminal information, etc., from the terminal through the APDU, and the IC chip application provided in the IC card is provided through the operation function and the COS of the processor. The usage definition information included in the IC chip is compared with the information provided from the terminal as described above, and whether the information provided from the terminal approves the use of the card as described above (eg, enabling the use of the card through the usage definition information). ), Or not to approve (eg, disable card use through usage definition information), and determine whether to approve card use for the terminal by providing the determination result to the terminal through the APDU. It is possible.

 According to the present invention, the function of the application of the IC chip is a logic code (e.g., at least one or more conditional statements (e.g. if ..., else if ..., else ...) and loops (e.g. for ..., while ..., do ... whil) ), Arithmetic expressions (e.g., +,-, /, *), and assignment equations (e.g., a = b), and the like, through which the processor and COS provided in the IC card are used. At least one or more pieces of information provided from the terminal are compared and calculated based on the definition information, and as a result, the use of the card is approved in the IC card.

In addition, the card 150 further includes being mounted or detached from the wireless terminal.

In addition, the card 150 further includes an information update application for deleting or updating the user card use purpose definition information.

2 is a simple exemplary diagram of an integrated circuit chip (ICC) structure in the client card 150 including user card usage definition information.

FIG. 3 is an exemplary embodiment of a file structure of a card 150 in which user card usage definition information is mounted on an integrated circuit chip (ICC) in a client card 150 in the form of an application (or data).

The client card 150 conforms to an integrated circuit chip (ICC) standard including ISO / IEC 7816 and / or ISO / IEC 14443, and the integrated circuit chip (ICC) includes at least one arithmetic processing element (eg, a CPU). (Central Process Unit), MPU (Micro Process Unit), Coprocessor (Coprocessor), and at least one memory device (e.g., Read Only Memory (ROM), Random Access Memory (RAM), Electrically Erasable and Programmable Read) Only Memory (FM), Flash Memory (FM), and a bus (BUS) for connecting the arithmetic element and the memory element, etc., and include contact and / or contactless contact for data communication with the card terminal 145. do.

The figure shows an ICC memory structure in which the user card usage definition information according to the present invention is loaded in the form of smart card storage information in a smart card application area, and EEPROM (Electrically Erasable and Programmable Read Only) within the ICC memory structure. It is preferable that the user card use purpose definition information be loaded in a memory such as Memory).

The ROM (Read Only Memory) shown in the figure includes an operating system such as a chip operating system (COS).

RAM (Random Access Memory) shown in the figure is used for the storage of temporary data, or the data transferred from the card terminal 145 and the data transferred to the card terminal 135 for the smart card command (Command) This area is for using buffers.

In addition, when the user card usage purpose definition information is mounted in the memory in the form of an application (or data), the user card usage purpose definition information is loaded according to a general tree structure of the smart card placement information.

However, the user card usage definition information may include system commands and / or system information included in a chip operating system (COS) included in a ROM, or a card management command included in a card manager of an open platform. And / or card management information.

According to the present invention, a smart card file structure in which user card usage purpose definition information is provided that provides a basis for processing authorization for card use by a client mounted in a memory (EEPROM, etc.), corresponds to a root file. One master file (MF), at least one dedicated file (DF) classified according to the smart card service and application, and data and / or information for the smart card service are stored. In a general smart card file structure composed of an element file (EF) or the like, the user card use purpose definition information according to the present invention is at least one dedicated file (DF) (e.g., user card use use definition information only file). Etc.) and at least one element file EF (e.g., a user-defined definition) arranged in a subdirectory of the dedicated file DF. Book information element file, user defined product information element file, user defined limit information element file, user defined merchant information element file, etc.).

The user-policy policy information element file disposed below the user-card usage purpose-definition file in memory may be used to provide a basis for card authorization processing according to the use of the card 150 of the client. Contains policy that controls and manages the element file (EF) located under the definition information-only file.

The user-defined product information element file located below the user-use-use-use-definition-only file includes specific or intangible product information for which a card defined by the client cannot be used (or possible).

The user defined limit information element file located below the user card use definition information dedicated file includes limit information for enabling card use according to a limit defined by the client.

The user-defined affiliate information element file located below the user-use-use-use-definition-only file includes information about a specific affiliated store that cannot use (or possible) the card defined by the client.

In addition, the information update application located below the user card usage definition information dedicated file serves to delete or update the user card usage usage definition information.

The use module located below the user card use purpose definition information dedicated file is a preferred embodiment according to the present invention. The information provided from the card terminal to the card (for example, specific product information and / or specific merchant information and / or In order to determine whether to use the card based on the card usage definition information stored in the card through payment amount information, etc., specific product information and / or specific from the card terminal through the input / output interface when the card is used and connected to the card terminal. Receive merchant information and / or payment amount information.

In addition, the use module extracts (confirms) user card usage definition information stored in an IC chip in a card, compares payment information received from the terminal, and determines whether the card is valid, and determines the validity of the card. Provided to the terminal.

3 is a simple flowchart illustrating a process in which user card usage definition information according to the present invention is mounted on an integrated circuit chip (ICC) in a client card 150 to perform a card use approval process according to the use of the card.

According to the present embodiment, at least one user card usage definition information application (or data) is mounted on an integrated circuit chip (ICC) in the client card 150 (300), and according to the client's request to use the card 150. A transaction occurs between the card 150 and the card terminal 145 (305), through which the card terminal 145 extracts card information and user card usage definition information application (or data) from the card 150 (310).

For example, data exchange through a transaction between the card 150 and the card terminal 145 may be performed through an application protocol data unit (APDU) communication, and the card terminal 145 may be connected to an ICC in the card 150. After confirming contact connection, the card 150 is activated by performing a reset (RST) and data of the card 150 and the card terminal 145 through an Answer To Reset (ATR) for the RST. Wait for the exchange.

Thereafter, the card terminal 145 and the card 150 perform prescribed commands and command responses to thereby provide an application (or data) included in the card 150 (eg, a user card usage definition information application (or data). Exchange information).

Through the above process, the card terminal 145 checks the user card usage definition information extracted from the card 150 and provides the user card usage definition information to the server 100 (315). Based on the user card usage definition information provided from the card terminal, it is determined whether the client approves the card usage (320).

For example, if the card includes user card usage definition information that prevents the client from approving the use of the card to a high-end brand store such as a department store, a client other than the client uses the card in a high-end brand store such as a department store. In this case, the card use authorization is not made according to the present invention.

If the card approval is not possible according to the user card usage definition information provided from the card terminal 145 as in the embodiment (325), the server 100 sends a card non-approval message for the card use of the client. And / or notify the client (330).

On the other hand, if card authorization is possible according to the user card usage definition information provided from the card terminal 145 (335), the server 100 performs the card use approval and generates the full card use approval response card terminal In step 345, the card terminal 145 and / or the client confirms the completion of the card approval process through the full card approval response (345).

In this figure, the server 100 on the network determines whether the card approval processing according to the user card usage definition information transmitted from the card terminal 145, but in another embodiment according to the present invention, the card terminal 145 from the card Specify whether the card can be used by checking the extracted user card usage definition information to prevent unauthorized use of the card 150, or provide the determination result to the server 100 to allow the card to be authorized. I will.

At this time, the card terminal 145 is characterized in that it further comprises a predetermined processor for processing the card usage definition information.

4 is a simple flowchart illustrating a process in which user card usage definition information according to the present invention is mounted on a storage medium on a network and a card use approval process is performed according to the use of the card.

According to the present invention, at least one user card usage definition information is stored in the storage medium 140 on the network in association with the client personal information and / or card information (400), and the card (as requested by the client to use the card) The transaction between the 150 and the card terminal 145 occurs (405).

Through the transaction, the card terminal 145 reads card information from the card 150, generates a full text of an authorization request including the card information, and provides it to the server 100 (410). The server 100 The client card information included in the transmitted authorization request message is checked, and the user card usage definition information associated with the card information is requested to the storage medium 140 (415).

The storage medium 140 extracts user card usage definition information associated with the card information provided from the server 100 and provides the extracted information to the server 100 (420), and the server 100 stores the storage medium 140. On the basis of the user card usage definition information provided by the client, it is determined whether the card usage approval for the card usage of the client is performed (425).

If the card authorization request requested from the card terminal 145 is not appropriate based on the user card usage definition information (430), the card terminal 145 and / or a message indicating that the client cannot use the card is not authorized. Notify the client (435).

On the other hand, if it is determined that the card authorization request requested from the card terminal 145 is appropriate based on the user card usage definition information (440), the server 100 approves the card usage and approves the card usage. The response message is generated and transmitted to the card terminal 145 (445), so that the card terminal 145 and / or the client confirms the completion of the card approval process through the card approval response message (450).

According to the present invention, a credit card theft, loss, forgery, forgery, and theft of the user is defined by the user in advance defining the card transaction product, and / or the card transaction transaction merchant, and / or the card transaction transaction limit. It is effective to prevent the illegal use of the card due to the back.

Claims (2)

Check the card information included in the full payment approval request according to the use of the card, the card is used in connection with the card information pre-stored in a predetermined storage medium or database use definition information-use the card set by the card user or card issuer Means for confirming target transaction merchant information (or card usage limit information for each transaction merchant); And Card merchant transaction target merchant information (or card merchant limit information for each merchant affiliate) corresponding to the identified card use definition information and merchant approval target merchant information (or merchant authorization target payment authorization request) included in the received message; Means for comparing payment amount information) and determining whether the card is approved according to the comparison result. The method of claim 1, wherein the card, An MS card, an IC card, and at least one IC chip mounted or detached from a wireless terminal.

Images