KR101318112B1 - Payment apparatus for preventing a business using settlement system from changing payment-network arbitrarily - Google Patents

Abstract

PURPOSE: A payment terminal is provided to prevent an affiliated store from illegally replacing one communication service provider by another communication service provider while neglecting a contract with the existing communication service provider by blocking bootstrap of the payment terminal itself and controlling itself not to normally be operated if the affiliated store arbitrarily tries to change the communication service providers. CONSTITUTION: A payment terminal (20) is included in a service system with a magnetic card reader (11), a printing portion (13), a display portion (15), a sign pad (17) and a communication modem (19). The payment terminal has a configuration similar to a generally used computer. The payment terminal includes a main board (25), a video adaptor (21), a communication modem (23), and a non-volatile memory with large capacity (29). The main board has a CPU (28), a volatile memory (26) and a non-volatile memory with small capacity (27). [Reference numerals] (11) Card reader; (13) Printing portion; (15) Touch screen and display portion; (17) Sign pad; (19) Communication modem; (20) Payment terminal; (21) Video adaptor; (23) Communication modem; (25) Main board; (26) RAM; (27) ROM; (29) Large-capacity non-volatile memory

Description

PAYMENT APPARATUS FOR PREVENTING A BUSINESS USING SETTLEMENT SYSTEM FROM CHANGING PAYMENT-NETWORK ARBITRARILY}

The present invention relates to a payment terminal for preventing random switching of payment networks, and more particularly, by assigning a dedicated code to each of the bias ROM and a large memory, comparing them with each other, and controlling the operation of the payment terminal according to the resultant value. Or a payment network random switching prevention terminal capable of preventing an affiliated store owner, who has received a payment system from a mobile operator, free of charge, from using a pre-scheduled payment network. will be.

As the electronic payment infrastructure is widely spread, most businesses (merchants) that sell and provide goods or services have a payment system. A payment system is a device for processing card payment (credit card, check card, debit card) authorization or issuance of receipt for cash payment for the sale of goods, and is generally configured to include a payment terminal, a sign pad, and a communication modem. have. Payment-related tasks (card authorization, receipt issuance, etc.) made through such a payment system are handled through the relay of a value added network (VAN) server. Therefore, Van (VAN) has a structure in which a certain amount of revenue (fee) is generated by providing a payment network for payment transactions between the payment terminal and the financial institution server when a customer makes a payment at a business (merchant), In the end, VAN's revenue growth is determined by the number of card payments through its van server. In addition, the payment system is connected to the van (VAN) server through a communication network, such as a public switched telephone network (PSTN), the Internet network, a wireless network or a private line to perform payment related tasks. Therefore, a telecommunication company (eg, KT, SKT, LG) that provides such a payment communication network has a structure in which the increase or decrease of the profit is determined according to the acquisition of its own communication line users.

As a result, the profit structure is different depending on how much the van and telecommunications company installs and supplies payment system using its van server or telecommunication network to merchants. Increasingly, systems are rented or provided free of charge.

Vans or telecommunications companies that have rented or freely provided a payment system to a particular store (franchise) through the van server in the case where the store (merchant) has a payment system provider (VAN) In the case of a payment network / communication company, its communication line) must be used for a certain period of time, so that payment system providers can generate profits. However, a business or merchant that has received a payment system from a specific van or a specific carrier for free may delete or change an OS (Operating System) or a program installed in a payment terminal, or install a hard disk. By changing the storage device, etc., it is possible to negate any profit after randomly switching to the payment network of another ban company (or other carrier), not the van (or carrier) that installed and supplied the payment system free of charge. Acquisitions occur frequently.

As such, when a merchant owner contracts with a specific van or telecommunications company and operates a free payment system to switch to another van or other telecommunication company's payment network, the payment system is initially installed free of charge. Inexpensive leasing providers will suffer a lot of damage.

As described above, in order to prevent the payment system random switching by the payment system provider, the conventional payment system encrypts the authorization module, manages the MAC address and the hard disk number, and displays the logo of the company on the appearance of the device. Various methods such as attachment are adopted. However, all of these conventional techniques are implemented depending on software (S / W), and can be used by other methods such as OS re-installation, program change, replacement of a storage device (eg, hard disk), exterior coating, and the like. The payment network could be switched to a carrier. In addition, a communication modem is installed as a unique terminal manufactured according to different specifications according to each carrier, and in the case of a sign pad, a unique identifier is embedded in each bansa such as an encryption module or a bansa code unique to a ban operator. Modem and sign pad are relatively inexpensive and easy to purchase compared to payment terminal, so merchants purchase and replace communication modem or sign pad newly at random switching of payment network, and payment terminal replace software, change program, storage device ( For example, if only the operation such as replacement of the hard disk) was performed, it was possible to switch to another bansa or another carrier while using the payment terminal initially provided for free. For this reason, there are frequent cases where a payment system provider randomly switches a payment system provider's payment network to another payment company's payment network in order to obtain a separate profit.

In order to solve such a problem, the applicant of this application showed the structure regarding patent document 1, and acquired the patent registration. Patent Literature 1 stores a dedicated code unique to a sign pad or a communication modem, and the payment terminal includes a dedicated code reading unit for checking whether the dedicated code matches. The payment terminal user or another van company newly installs the OS of the payment terminal. In addition, when a new sign pad or communication modem is newly installed, a configuration and a method of preventing a random switching are presented. However, the technology proposed in Patent Document 1 uses a method of checking a dedicated code only when a payment terminal attempts to transmit data with a pad or a communication modem. Therefore, the payment network of a payment system provider is used by another payment company's payment network. There is still a problem that cannot completely solve the problem of random switching.

Patent Document 1: Korea Patent Publication 10-2012-29042 (Published: March 26, 2012)

The present invention has been made to solve the above problems, the object of the present invention is that if the payment system provider (owner / merchant owner) changes the bansa or telecommunications company arbitrarily change the booting terminal itself without hardware normal It provides a payment network tamper-proof payment terminal that can prevent the payment system provider from ignoring the contract with the payment system provider and illegally switching to another bansa or another carrier by controlling the operation to be inoperative.

In the payment terminal for processing the payment business using the read card information to achieve the above object, the program code and other dedicated code mounted on the motherboard to perform a series of processing steps to perform the BIOS (Basic Input Output System) And a small capacity nonvolatile memory and an operating system for storing an identifiable first dedicated code, a larger capacity than the nonvolatile memory, and a large capacity nonvolatile memory for storing a second dedicated code. The processing step includes a first step of withdrawing a second dedicated code from the large capacity nonvolatile memory between the powering of the payment terminal and loading an operating system into the large capacity nonvolatile memory; and the first dedicated code and the second dedicated code. Are not matched with each other in the second and second steps of determining whether And a third step of terminating booting, wherein the large-capacity nonvolatile memory includes a control unit, and the control unit deletes the sector in which the second dedicated code is stored according to an externally inputted format command and operating system change command. It is characterized in that it is configured to include a payment terminal random switching prevention payment terminal, characterized in that for performing a command.

According to the payment system random switching prevention system and prevention method by the payment system provider according to the present invention, the merchant system provided with a payment system free from a specific bansa (or a specific carrier) payment system received from a specific bansa (or a specific carrier) By using the payment system, the payment system provider's payment network can be used to prevent the payment process of other payment companies using other payment companies from other payment companies. There is a remarkable effect of inducing progress and thereby preventing unexpected financial damages of the free supplier.

1 is a block diagram of a payment system according to the present invention.
2 is an example of a large capacity nonvolatile memory in which an operating system is stored.
Figure 3 is a flow chart illustrating the POST step of the BIOS performed in the payment system of the present invention.
4 is an exemplary diagram for explaining a case where a payment terminal provided by a payment system provider operates normally.
5 is an exemplary diagram for explaining a case in which a payment terminal provided by a payment system provider is abnormally operated.

The present invention provides a dedicated code to a ROM of a nonvolatile memory (ROM) and a large capacity nonvolatile memory (SSD) included in a main board constituting a payment terminal, and compares the dedicated code from time to time according to the result value. By controlling the operation of the payment terminal, it is possible to prevent the merchant owners who receive the payment system from a certain bansa (or telecommunication company) for free from randomly switching to the other bansa (or other telecommunication company) payment network without using a predetermined payment network. The technical characteristics that can be presented.

In the following, preferred embodiments, advantages and features of the present invention will be described in detail with reference to the accompanying drawings.

Prior to the description, the term 'payment system provider' used in the following is a low-cost lease of a payment system including a payment terminal to a business (merchant) in order to secure electronic payments using its van server or its communication network. It means a subject that provides or provides for free, and the 'payment system provider' refers to a subject provided with a payment system from the payment system provider.

In addition, the payment network random switching by the payment system provider means a payment network of a specific van (VAN) or a specific telecommunication company that installs and supplies the payment system (i.e., in the case of a van, a payment network including its van server, In the case of a telecommunication company, it means that its communication line) is arbitrarily changed to another van or another telecommunication company. That is, a specific business (merchant) that receives a payment system (especially a payment terminal) from a specific bansa or a specific carrier free of charge dedicates the payment system supplied from the specific bansa or a specific carrier, and thus, the payment network of the specific bansa or a specific carrier It refers to the processing of the electronic payment business using the payment network of another bansa or other carriers without using.

1 is a block diagram of a payment system according to the present invention. The payment system of the present invention includes a payment terminal 20, a card reader (MSR) 11, a printing unit 13, a display unit 15 provided with a touch screen, a sign pad 17, a communication modem 19, and the like. It consists of input and output devices. The card reader (MSR) 11, the printing unit 13, the display unit 15 provided with the touch panel, the sign pad 17 and the communication modem 19 are the same as those of the conventional payment system. Since the operation is the same, a description thereof will be omitted. As a representative example of a payment system, a point-of-sale system may be mentioned.

The payment terminal 20 has a configuration similar to that of a normal computer. The payment terminal 20 includes a main board 25 having a central processing unit (CPU) 28, a RAM 26 serving as a volatile memory and a ROM 27 serving as a small amount of nonvolatile memory, and a main board ( 25) a hard disk drive or a solid state drive (SSD) connected to the video adapter 21, the communication module 23, and the main board 25, which are connected through a slot. A large-capacity nonvolatile memory 29 or the like. Of course, other input / output interfaces, sound cards, etc. may be added to the payment terminal 20. Typically, an operating program for operating the payment terminal 20 is stored in the large-capacity nonvolatile memory 29, and after being formatted by a user, a new operating system may be installed or replaced with a new memory. The first dedicated code is stored in the small capacity nonvolatile memory 27 that performs the BIOS, and the second dedicated code matching the first dedicated code is stored in the large capacity nonvolatile memory 29. The first dedicated code and the second dedicated code may be implemented in the same code, or may be implemented in other codes matched by a predetermined rule.

On the other hand, the BIOS (BIOS, Basic Input Output System) is a kind of program, the central processing unit 28 is driven when the payment terminal is turned on. In general BIOS, CPU speed, memory capacity, hard disk information, etc. are checked and provided to the user through a display. The BIOS may include peripherals and operating systems such as memory 29 such as hard disks and solid state drive (SSD) memory, touch screens, video adapters 21, sign pads 17, communication modems 19, and the like. It also manages the data flow with the OS). The BIOS is stored in a ROM (Read-Only Memory, 27), and more recently in a ROM that can be modified, such as an EPROM or an EEPROM.

Power On Self Test (POST) is a series of diagnostic tests run by the BIOS to verify that the touchscreen, RAM, disk drives, SSD drives, and other hardware are operating properly when the computer is powered on. The BIOS checks the system for initialization and abnormality through the POST process at the beginning of the system. If all the necessary hardware is detected during the POST and is operating properly, the payment terminal will start booting. However, if it is determined that the hardware is not detected or not operating properly, the BIOS displays an error message on the screen and emits a series of beeps. Errors found during the POST are usually fatal and usually cause the boot process to stop.

2 is an example of a large capacity nonvolatile memory in which an operating system is stored. The memory 29 illustrated in FIG. 2 relates to an SSD memory using a SATA communication method. However, since the memory 29 is not very different from a hard disk drive, only the SSD memory will be described. In FIG. 2, ADD BUS means an address bus, DATA BUS means a data bus, and CNT BUS means a bus to which a control signal is transmitted. In addition, since the detailed structure of the SSD memory is not the object of the present invention and is merely a well-known technology, a detailed configuration will be omitted and only the configuration required for the present invention will be described. In the SSD memory, a nonvolatile memory (ROM) 35 is provided. The ROM includes a program coding area for storing program codes executed by the controller 33, a serial number, a model number, a head / cylinder number, A parameter area and a backup area for storing basic information such as interface, speed standard, capacity, and firmware version are provided. The backup area is an area for preliminarily storing the dedicated code in case there is an error in the dedicated code stored in the parameter area. ROM, which is a nonvolatile memory provided in SSD memory, is generally composed of Nor Flash Memory, which is a kind of EEPROM.

Since the conventional payment terminal is not unique to a particular carrier or bansa, it was possible to switch to another bansa or another carrier simply by installing a new driver or application program of the corresponding company. Therefore, the payment system of the present invention stores the first dedicated code in the small capacity nonvolatile memory 27 that performs the BIOS to solve this vulnerability, and also the second dedicated code matching the first dedicated code in the memory 29 Constructing the system to store and determining whether the first dedicated code stored in the small-capacity nonvolatile memory 27 and the second dedicated code stored in the memory 29 are matched codes in the POST step of the BIOS. It features.

3 is a flowchart illustrating a POST step of a BIOS performed in the payment system of the present invention. When the power of the payment terminal is turned on (ST100), the second dedicated code stored in the memory 29, which is stored and loaded by the operating system during the POST step, is performed during the POST step (ST110), and the BIOS is stored in the second dedicated code. Compared with the first dedicated code stored in the small-capacity nonvolatile memory 27 to determine whether it matches (ST120), if it does not match, terminates booting of the payment terminal with a sound output of "beep" (ST130), If there is a match, after continuing the POST step, the operating system is finally loaded into the memory 29 (ST140).

As described above, the operating system is loaded in the memory shown in FIG. 2, and when a user, another bansa, or another communication company requests to format the memory or reinstall the window, the controller 33 provided in the memory is transmitted from the host of the motherboard. Recognizes a format or an operating system update command and deletes the dedicated code " SSD Model (aaa) " stored in the parameter area of the ROM 35; In the case of SSD, data can be erased by sector, and the erase is performed by passing the sector address where the dedicated code is stored along with the "sector erase" command that stores the model name.

However, if the external power supply is unstable due to a power failure, or when a user, another bansa or another carrier performs a memory format or operating system replacement, the dedicated code stored in the parameter area is deleted. We want to establish a service system to request payment from the payment system provider for use. The payment system provider needs to repair the payment terminal from which the exclusive code has been deleted so that it can be used again for normal use, and the payment system provider can use it again for normal use by using a separate utility. The utility copies the dedicated code stored in the backup area back to the corresponding sector in the parameter area so that the memory operates normally. In this case, of course, only the payment system provider is required to enter a password to perform memory recovery, and the recovery reads the backup area and writes it to the previously erased parameter area (sector area in which the dedicated code is stored). The dedicated code recovery is completed.

The first dedicated code stored in the small-capacity nonvolatile memory 27 provided on the motherboard and the second dedicated code stored in the memory 29 loaded with the operating system are preferably composed of letters, numbers, or a combination thereof. The same dedicated code may be provided or may be provided in the form of a code capable of confirming a mutual matching relationship. That is, assuming that Bansa 'A' supplied the payment system to the business 'C' free of charge, the first dedicated code and the second dedicated code stored in the payment system installed in the business 'C' are the same 'aaa' dedicated code. The first dedicated code may be stored as 'AAA', the second dedicated code may be stored as 'aaa', and both of them may be used in the form of a code that matches the case.

4 is an exemplary diagram for describing a case in which a payment terminal provided by a payment system provider operates normally. The case where the first dedicated code 'aaa' is stored in the ROM 27 provided on the main board and the second dedicated code 'AAA' is stored in the memory 29 in which the operating system is stored will be described. As shown in FIG. 3, when the payment terminal is powered on (ST100), the second dedicated code 'AAA' stored in the memory 29 in which the operating system is stored during the POST step is extracted (ST110). 2, it is determined whether the dedicated code is matched with the first dedicated code 'aaa' stored in the small capacity nonvolatile memory 27 in which the BIOS is stored (ST120). In this case, since the case is matched with each other, after the POST step is continuously performed, the operating system is finally loaded into the memory 29 (ST140).

5 is an exemplary diagram for describing a case in which a payment terminal provided by a payment system provider is abnormally operated. This is a case where a command such as a memory format or an operating system change is modified by a user, a third party, or another carrier. The first dedicated code 'aaa' is stored in the ROM 27 provided on the main board, and the second dedicated code is deleted in the memory 29 in which the operating system is stored. As shown in FIG. 3, when the payment terminal is powered on (ST100), the second dedicated code stored in the memory 29 in which the operating system is stored during the POST step is extracted (ST110), and the second dedicated code is performed. Is compared with the first dedicated code 'aaa' stored in the small-capacity nonvolatile memory 27 in which the BIOS is stored (ST120). In this case, since the mutual matching is not performed, the booting of the payment terminal is terminated with a sound output of "beep" (ST130).

As described above, in the payment network random switching prevention system by the payment system provider of the present invention, two dedicated codes are respectively assigned to the payment terminals, and the payment codes are compared to each other when they are read. By controlling the normal booting, there is an excellent effect that can prevent the payment system, which is supplied free of charge from a particular bansa or a specific carrier to divert to other companies or other carriers.

11: card reader section 13: printing section
15: touch screen and display unit 17: sign pad
19: communication modem 20: payment terminal
23: communication module 25: main board
26: Ram 27: Romans
28: central processing unit 29: mass memory

Claims (8)

In the payment terminal for processing the payment business using the read card information,
A small amount of nonvolatile memory mounted on the motherboard and storing program code for performing a series of processing steps for performing a Basic Input Output System and other dedicated codes and first identifiable code;
A large capacity non-volatile memory for storing an operating system and having a larger capacity than the non-volatile memory, and storing a second dedicated code;
A series of processing steps for performing the BIOS
A first step of drawing out a second dedicated code from the large capacity nonvolatile memory;
A second step of determining whether the first dedicated code and the second dedicated code match each other; and
If the second step does not match with each other, and comprises the third step of ending the boot,
A control unit is provided in the large-capacity nonvolatile memory, and the control unit performs a command to delete a sector in which the second dedicated code is stored according to a format command and an operating system change command input from the outside. Payment terminal.
The method according to claim 1,
The small capacity nonvolatile memory is a payment network random switching preventing payment terminal, characterized in that write-only memory (ROM).
3. The method according to claim 1 or 2,
The large capacity nonvolatile memory payment network random switching prevention terminal, characterized in that the hard disk drive or SSD (Solid State Drive).
The method of claim 3, wherein
The second dedicated code is stored in a read only memory (ROM) provided in the large-capacity nonvolatile memory payment network random switching prevention terminal.
5. The method of claim 4,
And the second dedicated code is stored in a parameter area of a read-only memory (ROM) provided in the large capacity nonvolatile memory.
6. The method of claim 5,
The read-only memory provided in the large-capacity nonvolatile memory includes a backup area, and the payment network random switching prevention payment terminal, characterized in that the second dedicated code is stored in the backup area.
The method of claim 1,
The payment network random switching preventing payment terminal, characterized in that the first dedicated code and the second dedicated code is the same code.
delete

Images