KR100990373B1 - Method for Managing Application for IC Card - Google Patents

Abstract

The present invention relates to a method for managing an application for an IC card, wherein when the at least one application (or data) is loaded into a client IC card, application (or data) management information for the application (or data) is stored in the client card information and / or. Or storing it in a predetermined storage medium or server in association with personal information, and using or executing information of the application (or data) through the card terminal and the client when using the application (or data) mounted on the IC card. Providing card information and / or personal information to the server, and the client card information and / or to the storage medium or server based on the client card information and / or personal information provided from the card terminal at the server. Apple already stored in association with personal information Extracting application (or data) management information, and using the application (or data) by comparing the extracted application (or data) management information with the usage or execution information of the application (or data) provided from the card terminal. Or determining whether the execution is appropriate and providing the card terminal or the client with a result of the determination regarding the proper use of the application (or data).

IC card, application

Description

Application management method for IC card {Method for Managing Application for IC Card}             

1 is a simplified configuration diagram of a management system according to the present invention.

Fig. 2 is a simple flowchart in which management of the used application (or data) is made in the use of an application (or data) mounted on a client card.

3 is a simple database example of management information of an application (or data) mounted and used on a client card.

<Description of main parts of drawing>

100: server 105: use information acquisition unit

110: management information extraction unit 115: determination unit

120: determination information provider 125: application management information

130: card terminal 135: client card

140: client terminal

According to the present invention, when at least one application (or data) is loaded into a client IC card, application (or data) management information for the application (or data) is linked to the client card information and / or personal information. Or storing the usage or execution information of the application (or data) and the client card information and / or personal information through a card terminal when the application is stored in the server, and when the application (or data) mounted on the IC card is used. And an application previously stored in association with the client card information and / or personal information in the storage medium or the server based on the client card information and / or personal information provided from the card terminal at the server. Data) to extract management information And comparing the extracted application (or data) management information with the use or execution information of the application (or data) provided from the card terminal to determine whether the use or execution of the application (or data) is appropriate. The present invention relates to a method for managing an application for an IC card, comprising the step of providing the card terminal or the client with a result of the determination on the proper use of the application (or data).

Currently, MS (Magnetic Stripe) cards have various uses such as cash cards and credit cards, and are widely used and widely used based on a wide infrastructure. The MS card has a magnetic strip (area) in which data unique to the card holder is recorded, and a terminal device such as a credit card checker located at the affiliate store reads card information (credit card number information, etc.) in the magnetic area. In general, it is generally used in conjunction with a server (VAN server, credit card company server, etc.) on the network (VAN).

However, the MS type card has a huge problem that the storage space in the card is very limited, so that there are very few applications (or data) to be mounted on the card.

In addition, as a replacement card for the MS type card recently, it is designed as a single chip very difficult to detect the internal signal, and by performing a physical / logical lock processing so that the internal structure can not be reconfigured at the manufacturing stage, Data can be stored securely, can't be duplicated, it has a relatively large storage capacity (8kb ~ 256kb) to secure the offline transaction, and above all, to store data and programs. Smart cards that can be used for versatile applications are widely expanding.

However, since various applications generally communicate data through the corresponding card terminal, various applications (or data) mounted on the card are provided unless the card terminal has excellent server-class operation and storage capacity. New alternatives should be sought for management, such as ensuring that) is properly and properly implemented.

An object of the present invention to solve the above problems is to manage an application provided by a client IC card, when at least one application (or data) is loaded into the client IC card, the application for the application (or data) (Or data) storing management information in a predetermined storage medium or server in association with the client card information and / or personal information, and when using an application (or data) mounted on the IC card, through the card terminal. Providing usage or execution information of an application (or data) and the client card information and / or personal information to the server, based on the client card information and / or personal information provided from the card terminal at the server; The client to the storage medium or server Extracting previously stored application (or data) management information in association with client card information and / or personal information, using the extracted application (or data) management information and the application (or data) provided from the card terminal; or Comparing execution information to determine whether the use or execution of the application (or data) is appropriate and providing the card terminal or client with a result of the determination on the proper use of the application (or data). An application management method for an IC card is provided.

According to the present invention, when at least one application (or data) is loaded into a client IC card, application (or data) management information for the application (or data) is linked to the client card information and / or personal information. Or storing the usage or execution information of the application (or data) and the client card information and / or personal information through a card terminal when the application is stored in the server, and when the application (or data) mounted on the IC card is used. And an application previously stored in association with the client card information and / or personal information in the storage medium or the server based on the client card information and / or personal information provided from the card terminal at the server. Data) to extract management information And comparing the extracted application (or data) management information with the use or execution information of the application (or data) provided from the card terminal to determine whether the use or execution of the application (or data) is appropriate. The present invention relates to a method for managing an application for an IC card, which makes it easier to manage an application provided to the client IC card, including providing the card terminal or a client with a result of the determination of the proper use of the application (or data). .

In the present invention, the storage medium may be located at the application management server, at a card terminal, or at a VAN.

In addition, in the present invention, the IC card may be mounted or detached from the wireless terminal.

Hereinafter, a preferred embodiment of the method for managing an application for an IC card according to the present invention will be described in detail with reference to the accompanying drawings. First, predetermined reference numerals are added to the components shown in the drawings. However, it is noted that the same components shown in different drawings are denoted by the same reference numerals as much as possible.

In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present invention. For example, the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. It will be obvious to those skilled in the art. In describing the present invention, when it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

1 shows a usage management system for an application (or data) mounted on the client card 135 including a client card 135, a usage management server 100 on a network, and a card terminal 130; It is a simple diagram.

Storing application (or data) management information for at least one or more applications (or data) mounted on the client card 135 in the server 100 in association with the client card information and / or personal information; Providing the application (or data) usage information to the server 100 when the application (or data) mounted on the card is used through the server 130, and the card terminal 130 at the server 100. Checking the application (or data) management information stored in the server 100 based on the application (or data) usage information provided from the application, and using the application (or data) through the application (or data) management information. Determining whether this is done properly and for proper use of the application (or data). A determination result comprises the step of providing to the card terminal 130 or client.

The application (or data) usage information includes at least one or more of card information and / or application (or data) information and / or personal information and / or payment information.

According to the present invention, the system for managing the use of the application (or data) includes a client card 135 loaded with at least one application (or data) and an application (or data) loaded on the client card 135. A server 100 on a network including management information and a card terminal 130 for identifying and using applications (or data) mounted on the client card 135 and providing the usage information to the server 100. It is characterized by.

According to the present invention, the server 100 for determining and managing the proper use of the application (or data) mounted on the client card 135 is connected to the card terminal 130 through a network, and the card terminal ( The application (or data) usage information provided from 130 may be checked to extract associated application (or data) management information to manage whether the application (or data) is properly used.

In addition, the server 100 manages the usage information acquisition unit 105, the management information extraction unit 110, the determination unit 115, the determination information providing unit 120 and the application (or data) for the implementation of the present invention. And an information database 125 or the like.

The usage information acquisition unit 105 in the server 100 is connected to the card terminal 130 through a network such as a VAN, and checks application (or data) usage information provided from the card terminal 130.

For example, the application (or data) usage information may be a series of information (eg, card information, payment information, etc.) on the use of an application (or data) mounted on the client card 135 used through the card terminal 130. Application (or data) information, etc.). In addition, the application (or data) usage information proposed in the present invention is included in transaction data (full card approval request, etc.) generated from the card terminal 130 and provided to the server 100, and is transmitted through a network such as a VAN. It is preferably provided to the server 100.

The management information extraction unit 110 manages the application (or data) management information database 125 in the server 100 based on the application (or data) usage information of the corresponding client identified through the usage information acquisition unit 105. Extracts application (or data) management information associated with the usage information from the;

For example, the application (or data) management information is established in association with client card information and / or personal information provided with the corresponding application (or data), and the application (or data) identified through the usage information acquisition unit 105. It is preferably extracted based on usage information (eg, card information, payment information, etc.).

The determination unit 115 in the server 100 may use the client (or data) management information extracted based on the application (or data) usage information. Judge.

For example, when the application (or data) usage information provided from the card terminal 130 is payment information including card information, the determination unit 115 checks the payment information and checks the corresponding client application (or data) ( For example, a coupon or the like) is checked and determined with reference to the application (or data) management information whether the application is correctly applied.

In addition, the determination unit 115 provides the identification and determination result data to the determination information providing unit 120 to provide the determination result information (or error information, etc.) through the determination information providing unit 120. Data) to the terminal 140 or the card terminal 130 of the requesting client.

The determination information providing unit 120 provides the determination information checked and determined by the determination unit 115 to the client terminal (mobile phone, PC, etc.) 140 via a wired network and / or the card terminal 130. ) Serves to provide.

When a valid (available) application (or data) is not properly applied (or used) through the determination unit 115, for example, there is a coupon available, but has not been applied. Provided to the terminal 140 or merchant card terminal 130, so that the client can retry the use of the card or to be mounted again later.

The application (or data) management information database 125 includes comprehensive information about the application (or data) provided to the client card 135 in accordance with the present invention, wherein the application (or data) management information is the client card. In using the application (or data) mounted in the 135, the reason for determining whether it is properly used according to a suitable period, a product, a merchant, etc. is provided.

For example, the application (or data) management information may further include client personal information, the application (or data) usable merchant information, the application (or data) available product information, the application (or data) available validity period Information and the like.

In addition, according to FIG. 1, the application (or data) management information is illustrated as being mounted in the server 100. This is to help understanding of the present invention. It may be separately present (in the form of a server or a storage medium), and may be located in the card terminal 130 or the VAN.

The card terminal 130 has a card interface capable of interworking with the client card 135, and extracts and uses (executes) at least one or more applications (or data) from the client card 135. Accordingly, it serves to provide the application (or data) usage information to the server 100.

In addition, the card terminal 130, the card interface for obtaining the card information and / or application (or data) information from the client card 135, for example, chip interface, wireless data communication (RF, Bluetooth, WLAN) At least one interface, or the like.

The card terminal 130 may include at least one of a credit authentication terminal (CAT), a point of sales (POS) system, a personal computer (PC), an auto teller machine (ATM), and a CD device. .

The client card 135 shown in this figure is in accordance with an integrated circuit chip (ICC) standard including ISO / IEC 7816 and / or ISO / IEC 14443, and the integrated circuit chip (ICC) includes at least one arithmetic processing element. (For example, a central process unit (CPU), a micro process unit (MPU), a coprocessor), and at least one memory device (for example, read only memory (ROM), random access memory (RAM), and electrically EEPROM) Erasable and Programmable Read Only Memory (FM), Flash Memory (FM)), and a bus (BUS) for connecting the operation element and the memory element, and the like for contact and / or data communication with the card terminal 130. And non-contact contacts.

In addition, the client card 135 is loaded with smart card-related service information in the form of smart card storage information through the hierarchical structure of the smart card in the smart card application area, the smart card-related service information is COS ( It can be loaded in the form of system command and / or system information included in Chip Operating System) or card management command and / or card management information included in an open platform Card Manager. I will.

For example, a smart card file structure in which an application (or data) for a smart card service of a client is stored may include one master file (MF) corresponding to a root file, and a smart card service and an application. According to the general smart card file structure consisting of at least one dedicated file (DF) classified according to the above, and an element file (EF) for storing data and / or information for the smart card service. This is preferred.

2 is a simple flowchart in which management of the application (or data) used in the use of an application (or data) mounted on the client card 135 is performed.

FIG. 3 is a flow chart of a preferred embodiment of the present invention, wherein application (or data) management information for at least one or more applications (or data) mounted on a client card 135 includes the client card information and / or personal information. The application (or data) usage information to the server 100 when the application (or data) mounted on the card is used through the card terminal 130. Check the application (or data) management information stored in the server 100 based on the application (or data) usage information and determine whether the application (or data) is properly used through the application (or data) management information. To provide the result to the card terminal 130 or the client. By way of example, the present invention relates to a process for managing the use of an application (or data) mounted on the client card 135.

At least one or more application (or data) information provided to the client card 135 (eg, general information about the application including at least one of available period information, merchant information, product information, etc.) and the client personal information. In operation 200, an application (or data) management information database 125 for managing an application (or data) is constructed in association with (card information and the like).

An application (or data) from the server 100 is loaded on the client card 135 (205), and a client visiting a merchant or the like for use of the application (or data) is loaded on the card through the card terminal 130. Upon requesting the use of the specified application (or data) (210), the card terminal 130 obtains and executes (uses) card information and / or application (or data) from the card (215).

Through the above process, the card terminal 130 checks application (or data) usage information (card information, payment information, application information, etc.) for the application (or data) and provides it to the server 100 (220). The server 100 extracts application (or data) management information associated with the application (or data) usage information based on the application (or data) usage information provided from the card terminal 130 (225).

The server 100 determines whether the application (or data) is used without error based on the application (or data) management information (230), and if there is no special error, the application mounted on the client card 135 If (or data) has been normally driven (235), the process according to the invention ends.

On the other hand, in the process of determining whether the application (or data) is used without error based on the application (or data) management information, the application (or data) mounted on the client card 135 is not properly used and thus the error is generated. (240), the server 100 generates an application (or data) usage error information and provides it to the client terminal 140 or the card terminal 130 (245), the client or card terminal 130 Error information of) is checked (250).

For example, on the application (or data) management information, an application (or data) that satisfies application (or data) usage information provided from the card terminal 130 (applicable to the corresponding merchant, product, etc.) is loaded into the client card 135. Although the details are recorded, there are cases in which the usage information (for example, payment information, etc.) does not include the application history of the application (or data). Manage it.

FIG. 3 is an example of a simple database of management information of an application (or data) mounted and used on the client card 135. As shown in FIG.

This figure is a simple data model for an application (or data) management information database 125 that provides a basis for management of the use of an application (or data) mounted on a client card 135 in accordance with the present invention. Exemplary diagrams of the data model shown in the following are merely to help understanding of the present invention, and it is noted that addition, deletion, modification, etc. of management information can be sufficiently performed according to implementation procedures of those skilled in the art.

The application (or data) management information includes at least one client information (eg, card information, mobile phone number information, e-mail information, ID information, etc.), at least one application management history information, and at least one application (or data) error. It is characterized by recording information.

The application (or data) management history information may include the application (or data) information (code, etc.), available merchant information of the application (or data), product information to which the application (or data) is applicable, and the application (or General information about the application (or data), such as the expiration date information of the data) and the date of provision of the corresponding application.

The application (or data) usage error information includes information on various errors (such as information on an application (or data) in which an error occurred when using the error) and date information when the error occurred in the use of the application (or data). Include.

According to the present invention, by presenting a management method for an application (or data) for an IC card, from a service provider's point of view, every time the card is used, the various applications (or data) mounted on the IC card are executed properly and properly. By making it possible to check, there is an advantage of easier management of the application provided by the IC card.

In addition, there is an advantage that the error occurrence rate for the application (or data) can be minimized by systematically recording / managing error information for the application (or data) provided to the client card.

In addition, from the client's point of view, when the application (or data) mounted on the card of the user, the use of the application, there is an advantage that the successful use or proper use of the application can be confirmed.

Claims (9)

When loading at least one application (or data) onto a client IC card, storing application (or data) management information for the application (or data) in a predetermined storage medium or server in association with the client card information; When the application (or data) mounted on the IC card is used, providing the use or execution information of the application (or data) and the client card information to the server by including a card authorization request in a preamble through a card terminal; Extracting, from the server, application (or data) management information previously stored in association with the client card information on the storage medium or the server based on the client card information provided from the card terminal; Comparing the extracted application (or data) management information with the usage or execution information of the application (or data) provided from the card terminal to determine whether the application (or data) is properly used or executed; And And providing the card terminal or the client with the determination result for the proper use of the application (or data). The method of claim 1, wherein the application (or data) management information, The client information including at least one of the client IC card information, mobile phone number information, e-mail information, and ID information; The application (or data) information, usable merchant information of the application (or data), product information to which the application (or data) is applicable, information on the validity of use of the application (or data), and the application Application management history information including at least one of the date information provided, And at least one application (or data) usage or execution error information is recorded. When at least one application (or data) is loaded into a client IC card, application (or data) management information for the application (or data) is linked to a predetermined storage medium or server in association with the client card information and / or personal information. Storing; When using the application (or data) mounted on the IC card, providing the usage or execution information of the application (or data) to the server through a card terminal in a card approval request message; Extracting, from the server, application (or data) management information stored in the storage medium or server based on application (or data) usage or execution information provided from the card terminal; Determining whether use or execution of the application (or data) is appropriately made through the extracted application (or data) management information; And And providing the card terminal or the client with the determination result for the proper use of the application (or data). The method of claim 3, wherein the application (or data) usage or execution information is An application management method for an IC card, characterized in that it comprises at least one or more application (or data) information or payment information. delete The method of claim 3, wherein the application (or data) management information, The client information including at least one of the client IC card information, mobile phone number information, e-mail information, and ID information; At least one application management history information, And at least one application (or data) usage or execution error information is recorded. delete delete delete

Images