KR101395315B1 - Near field communication based payment security authentication system and security authentication method thereof - Google Patents

Abstract

The present invention relates to a near field communication based payment security authentication system. The system of the present invention comprises a client terminal receiving and processing payment request information including account information for payment by using a seller terminal and near field communication; and a payment gate server authenticating the client terminal by communicating with the client terminal over the communication network and processing account transfer request information requested by the client terminal when the client terminal is authenticated. The payment gate server exchanges a public key retained by itself with a private key retained by the client terminal when the client terminal is accessed over the communication network. When the user authentication information registered in the main database is matched with the user authentication information sent from the client terminal, the payment gate server processes the payment in the registered account of the client terminal with regard to the payment information requested by the client terminal by communicating through a predetermined security method.

Description

Field of the Invention [0002] The present invention relates to a settlement security authentication system based on short-range wireless communication,

The present invention relates to a settlement security authentication system based on a local area wireless communication and a security authentication method thereof, and more particularly, to a settlement security authentication system based on a local area wireless communication with enhanced security authentication process for payment settlement and a security authentication method thereof will be.

2. Description of the Related Art Communication apparatuses that perform Near Field Communication (NFC) are implemented to be capable of transmitting and receiving data.

In recent years, a smart card or a mobile communication terminal having a chip supporting a traffic card or a transportation card function supporting a payment or settlement of a fare using a short distance wireless communication or a subway has been used.

However, electronic settlement by the short-distance wireless communication function is automatically performed when the terminal approaches within the area where the wireless communication of the payment processing terminal having the short-range wireless communication function is possible, so that even in the case of unintended access, There is a problem to be processed. In addition, a method of supporting mutual settlement using a short-distance wireless communication function for a variety of goods at various prices sold by sellers is not provided at present, and a security payment enhanced payment method is required.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide a method and system for exchanging information corresponding to a settlement amount and a deposit account, The present invention also provides a settlement security authentication system based on a short-distance wireless communication and a security authentication method thereof.

According to another aspect of the present invention, there is provided a settlement security authentication system based on a near field wireless communication, comprising: a client terminal for receiving and processing settlement request information including settlement account information through a short distance wireless communication with a seller terminal; And a payment gate server for processing the account transfer request information requested by the client terminal when the client terminal is authenticated after the authentication process with respect to the client terminal while communicating with the client terminal via the communication network, When the client terminal is connected through the communication network, exchanges the private key held by the client terminal with the public key held by the client terminal, and if the user authentication information registered in the main database matches the user authentication information transmitted from the client terminal And processes the payment information requested by the client terminal so that the payment information can be processed in the registration account of the client terminal while communicating by the established security method.

The client terminal includes a client short range communication module for performing short range wireless communication; A client main communication module for communicating with the payment gate server; A client-client decryption module for decrypting information received through the client main communication module and encrypting transmission information to be transmitted to the payment gate server; Processing a signal received via the client local communication module, processing a signal received from the payment gate server via the client main communication module, and transmitting the private key held in communication with the payment gate server to the public And a client control module for controlling the client-arm decoding module to encrypt and transmit the pay-gate server and transmission object information using the symmetric key provided by the payment gate server after interchanging with the key.

According to another aspect of the present invention, there is provided a method for authenticating electronic settlement security based on short-distance wireless communication, the method comprising: a client terminal for receiving and processing settlement request information including settlement account information through short- And a payment gate server for processing the account transfer request information requested by the client terminal after authentication through the client terminal while communicating with the client terminal via the communication network and processing the normal authentication. Exchanging a private key held by the client terminal with a public key held by the payment gate server when the connection of the client terminal is confirmed in the payment gate server; I. Encrypting the symmetric key with the private key provided by the client terminal in the payment gate server and transmitting the encrypted symmetric key to the client terminal; All. Decrypting the symmetric key received by the client terminal with the private key; la. And encrypting transmission object information between the client terminal and the payment gate server using the symmetric key to perform transmission / reception processing.

In addition, the step (a) The payment gateway server performs a user registration process if the user authentication information requested to the client terminal is not registered in the payment gate server after the symmetric key is transmitted to the client terminal, Storing the user authentication information of the client terminal in the main database, generating a token to the client terminal, encrypting the token, and transmitting the token.

According to the billing security authentication system and the security authentication method based on the short range wireless communication according to the present invention, payment processing is performed by information communication using a cryptographic key between a client terminal supporting near field wireless communication and a server supporting payment processing This provides the advantage of being able to support personal information protection and security enhanced settlement.

FIG. 1 is a diagram showing a payment security authentication system based on a local area wireless communication according to the present invention,
FIG. 2 is a block diagram showing the configuration of the client terminal and the payment gate server of FIG. 1,
FIG. 3 is a flowchart showing a payment support processing process of the payment gate server of FIG. 1. FIG.

Hereinafter, a short-range wireless communication-based payment security authentication system and its security authentication method according to a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram showing a payment security authentication system based on a local area wireless communication according to the present invention.

1, a billing security authentication system based on a local area wireless communication according to the present invention includes a client terminal 100, a seller terminal 130, a payment gate server 150, and a bank server 180.

The client terminal 100 receives the settlement request information including the settlement account information and the settlement amount through the short distance wireless communication with the seller terminal 130 and proceeds the payment through the payment gate server 150 with respect to the received settlement request information .

Here, the seller terminal 130 is equipped with a short-distance wireless communication module for supporting short-range wireless communication, and the client terminal 100 accessed within the short-range wireless communication area transmits the payment request information corresponding to the sales amount and the deposit account information And can be provided to the client terminal 100 by wireless communication.

The payment gate server 150 communicates with the client terminal 100 via the communication network 170 and performs an authentication process with respect to the client terminal 100. If the payment gateway server 150 receives the account transfer request information requested by the client terminal 100 And processes the settlement amount to be transferred to the withdrawal account bank server 180 registered in the client terminal 100.

The payment gate server 150 exchanges the private key held by the client terminal 100 with the public key held by the payment case server 150 when the client terminal 100 is connected through the communication network 170, If the user authentication information registered in the base 160 matches the user authentication information transmitted from the client terminal 100, the client terminal 100 registers the payment information requested by the client terminal 100 while communicating by the set security method The withdrawal account is processed so that payment can be processed in the registered account of the bank server 180.

The detailed structure of the client terminal 100 and the payment gate server 150 in such a system will be described with reference to FIG.

The client terminal 100 includes a client local wireless communication module 102, a client main communication module 103, a client encryption decryption module 104, a client authentication performing module 105, a client electronic payment database (DB) And a client control module 108.

The client short range wireless communication module 102 is controlled by the client control module 108 to perform short range wireless communication with the seller terminal 130.

The client main communication module 103 is controlled by the client control module 108 to perform communication with the payment gate server 150.

The client encryption decryption module 104 decrypts the information received via the main communication communication module 103 by the private key and the symmetric key described above and encrypts the transmission information to be transmitted to the payment gate server 150. [

The client authentication performing module 105 is a module that is controlled by the client control module 108 and performs an authentication process using the message digest information described above.

The client electronic payment database (DB) 106 is controlled by the client control module 108, such as authentication information and payment processing information, to store various kinds of information.

The client control module 108 processes the signal received via the client short range wireless communication module 102 and processes the signal received from the pay gate server 150 via the client main communication module 103, Exchanges the private key held at the time of communication with the payment gateway server 150 with the public key of the payment gate server 150 and then transmits the payment key to the payment gate server 150 and the transmission object information 150 using the symmetric key provided subsequently by the payment gate server 150 And controls the control target elements including the client-side encryption / decryption module 104 to perform transmission / reception processing.

In addition, the client control module 108 stores processing information and information required to be stored in the client electronic payment database 106.

The payment gate server 150 includes a communication unit 151, a main-encryption / decryption processing unit 152, a registration processing unit 154, a random number module 156, a main database (DB) 160, and a main control unit 158 Respectively.

The communication unit 151 is controlled by the main control unit 158 and communicates with the client terminal 100 and the bank server 180 connected via the communication network 170. [

The main-encryption / decryption processing unit 152 encrypts and decrypts the received key and key exchange, testing, transmission target information, and the like, described above, such as exchange of a private key, a public key, and symmetric key transmission with the connected client terminal 100, (158).

The registration processing unit 154 is controlled by the main control unit 158 to manage the registration support of the user and the registered user information, and authenticates whether or not the user is a registered user.

The random number module 156 is controlled by the main control unit 158 to generate a random number necessary for generating a token.

In the main database 160, a variety of information required to support a payment service including registered user information is controlled and recorded in the main control unit 158.

Hereinafter, a settlement process between the payment gate server 150 and the client terminal 100 will be described with reference to FIG.

First, the payment gate server 150 determines whether the client terminal 100 is connected (step 210). If it is confirmed that the client terminal 100 is connected, the public key is exchanged (step 220).

That is, the client terminal 100 transmits the held private key to the payment gate server 150, and the payment gate server 150 transmits the held public key to the client terminal 100.

Thereafter, the payment gate server 150 tests the private key received from the client terminal 100 (step 230). In addition, the client terminal 100 also tests the public key received from the payment gate server 150.

The payment gate server 150 determines whether the key exchange has failed in the key testing process (step 240). If it is determined that the key exchange has failed (step 250), the payment gate server 150 determines whether the key exchange has exceeded the allowable number. Here, the allowable number may be appropriately set to two or three times.

If it is determined in step 250 that the allowed number of times has been exceeded, the connection with the client terminal 100 is initialized (step 260), and the process returns to step 210.

If it is determined in step 250 that the allowed number of times has not been exceeded, the process returns to step 230.

If it is determined that the information decrypted by the counterpart is normally decrypted by the counterpart, the payment gate server 150 determines the symmetric key to be decrypted by the client terminal 100, The client terminal 100 decrypts the received symmetric key with its own private key and then transmits the encrypted symmetric key to the client terminal 100 and the payment gate server 150 ) Means that the transmission target information is mutually encrypted and the transmission / reception process is enabled.

If it is determined in step 240 that the key exchange has been successfully performed and that the transmission destination information is encrypted between the client terminal 100 and the payment gate server 150 using the symmetric key, The payment gate server 150 requests the user authentication information from the client terminal 100 and determines whether the user authentication information is normally received (step 270).

Here, it goes without saying that the user authentication information may be constructed to be automatically transmitted from the client terminal 100 to the payment gate server 150 without the request of the payment gate server 150. [

If it is determined in step 270 that the user authentication information is not normally received, the payment gate server 150 guides the user registration procedure and performs a user registration procedure (step 280).

Here, the user registration process is a process of registering various kinds of information required for settlement processing including user identification information and user withdrawal account bank information. Here, the user identification information may include various information such as a telephone number of the client terminal 100 or a manufacturing serial number of the client terminal 100.

The payment gate server 150 registers the information in the information-accessible main database 160 entered during the user registration process, and transmits a completion message to the client terminal 100.

In addition, the payment gate server 150 generates a token unique to the client terminal 100, encrypts the generated token information using the symmetric key, and transmits the encrypted token information to the client terminal (step 290).

Here, the token includes a random number portion of a certain bit size and a Hamming code portion, and the random number may be composed of a 6-digit date and a random number. Here, the Hamming code is used to recover errors of random numbers and Hamming codes.

In addition, the random number module 156 for processing the random number generation records '1' in the random number database (not shown) when using the generated random number, '0' in the random number database If the random number is set to 0 in the random number database, a token is generated using the generated random number, and if the generated random number is set to '1', the generated random number is discarded and the random number is regenerated.

Also, if the random number database is used more than 80% and the generated random number is set to '1' continuously more than 30 times, a random number data base is newly generated and the above described random number generation procedure is performed.

The payment gate server 150 may also use a message digest (MD) of arbitrary bit size using information such as user identification information (ID), password, realm, (Step 300). Hereinafter, the message digest is used as user authentication information.

Then, the authentication processing is performed between the payment gate server 150 and the client terminal 100 using the generated message digest.

If it is determined in step 270 that the user authentication information, that is, the message digest information, is normally received, a security module, for example, a send box is executed (step 310) 100) (step 320). Here, the payment information processing is performed by receiving from the client terminal 100 information necessary for settlement such as the transfer amount encrypted using the symmetric key, the deposit account information of the seller terminal 130, decrypting the information, .

When the payment processing is completed, the reporting information on the processing result is transmitted to the clearance terminal (step 340).

100: client terminal 130: seller terminal
150: payment gate server 180: bank server

Claims (4)

A client terminal for receiving and processing settlement request information including settlement account information through short-range wireless communication with a seller terminal;
And a payment gate server that communicates with the client terminal through a communication network and authenticates the client terminal, and processes the account transfer request information requested by the client terminal when the authentication is processed as normal authentication,
The payment gate server
When the client terminal is connected through the communication network, exchanges the private key held by the client terminal with the public key held by the client terminal, and if the user authentication information registered in the main database matches the user authentication information transmitted from the client terminal And processing the payment information requested by the client terminal so that the payment information can be processed in the registration account of the client terminal while communicating with the established security method. The method of claim 1, wherein the client terminal
A client short range wireless communication module for performing short range wireless communication;
A client main communication module for communicating with the payment gate server;
A client-client decryption module for decrypting information received through the client main communication module and encrypting transmission information to be transmitted to the payment gate server;
Processing a signal received via the client proximity wireless communication module, processing a signal received from the payment gate server via the client main communication module, and transmitting a private key held in communication with the payment gate server to the payment gate server And a client control module for controlling the client-arm decoding module to encrypt and transmit the paying-gate server and transmission object information using the symmetric key provided by the payment gate server after exchanging with the public key The electronic settlement security authentication processing system based on the short distance wireless communication. A client terminal for receiving and processing settlement request information including settlement account information through short-range wireless communication with the seller terminal; and a client terminal for communicating with the client terminal through a communication network and authenticating the client terminal, And a payment gate server for processing the account transfer request information requested by the client terminal,
end. Exchanging a private key held by the client terminal and a public key held by the payment gate server when the connection of the client terminal is confirmed in the payment gate server;
I. Encrypting the symmetric key with the private key provided by the client terminal in the payment gate server and transmitting the encrypted symmetric key to the client terminal;
All. Decrypting the symmetric key received by the client terminal with the private key;
la. And encrypting transmission object information between the client terminal and the payment gate server using the symmetric key to perform transmission and reception processing. 4. The method of claim 3,
LA-1. If the user authentication information requested to the client terminal is not registered in the payment gate server after the symmetric key is transmitted to the client terminal,
Wherein the payment gate server stores user authentication information of the client terminal that has undergone a user registration process in a main database and generates a token to be transmitted to the client terminal to encrypt and transmit the token to the client terminal. Of electronic payment security authentication processing method.

Images