KR101496437B1 - Card reader apparatus, authentication server and control method thereof - Google Patents

Abstract

A card reader apparatus is disclosed. The card reader includes: a communication unit; a magnetic head unit to generate an electric signal with respect to a track of an MS (Magnetic Stripe) card; a card information generation unit to generate card information of the MS card from the electric signal; a waveform feature information generation unit to generate waveform feature information illustrating a waveform feature of the electric signal; and a controller to control the communication unit such that a card authentication request including the card information generated by the card information generation unit and the waveform feature information generated by the waveform feature information generation unit when the MS card is read.

Description

[0001] CARD READER APPARATUS, AUTHENTICATION SERVER AND CONTROL METHOD THEREOF [0002]

The present invention relates to a card reader terminal, an authentication server, and a control method thereof, and more particularly, to a card reader device, an authentication server, and a control method thereof that can prevent a card from being illegally copied from another person.

In the modern society, credit cards, check cards, debit cards, and cash cards (hereinafter referred to as cards) are widely used as a means of replacing cash settlement in online / offline merchants.

In the case of an offline settlement through a card, for example, the customer first hands a payment card to the merchant clerk, the clerk of the merchant inputs a price for the goods or service in the payment terminal equipped with the card reader function, . In this case, the payment terminal transmits the payment request telegram to the card company (or financial company) server through a predetermined payment network (for example, VAN (Value Added Network) A payment is made for a predetermined amount of money through the process of receiving the payment, and after the payment is approved, the receipt is issued to the customer.

The above-mentioned payment-enabling cards are implemented in various ways such as an MS (Magnetic Stripe) card, an IC (Integrated Circuit) card, and the like.

In particular, since a magnetic stripe (MS) card stores customer information in a magnetic portion, when the magnetic portion of the MS card is passed through the reader portion of the MS card reader, the MS card reader recognizes the information stored in the magnetic portion of the MS card .

Therefore, in the case of an MS card, it is possible to illegally copy (skimming, skimming) the information recognized by the MS card reader by using an MS card writer (Writer) on another card.

The amount of damages caused by such duplicate MS cards is increasing worldwide. Accordingly, a method for preventing the use of a duplicated MS card is being demanded.

It is an object of the present invention to provide a card reader device, an authentication server, and a control method thereof that can prevent a card from being illegally copied and used by another person.

According to another aspect of the present invention, there is provided a method of controlling a card reader device, the method comprising: reading, from an electrical signal for a track of the MS card, card information of the MS card, Generating waveform characteristic information indicating a waveform characteristic of the electrical signal, and transmitting a card authentication request including the generated card information and waveform characteristic information to an authentication server.

According to another aspect of the present invention, there is provided a method of controlling an authentication server, the method including: mapping and storing card information and waveform characteristic information for each of a plurality of MS cards; Receiving the card authentication request including the card information and the waveform characteristic information for the authentication request card, comparing waveform characteristic information about the received authentication request card information and the authentication request card with the stored card information and waveform characteristic information And transmitting a response to the card authentication request to the card reader device according to a result of the determination, wherein the waveform characteristic information is recorded in a track of the MS card And may be information indicating the waveform characteristic of the corresponding electric signal.

According to another aspect of the present invention, there is provided a card reader apparatus including a communication unit, a magnetic head unit for generating an electric signal for a track of an MS (Magnetic Stripe) card, A waveform characteristic information generating unit for generating waveform characteristic information indicating the waveform characteristic of the electric signal; and a control unit for controlling the operation of the card And a controller for controlling the communication unit to transmit the card authentication request including the waveform characteristic information generated by the waveform characteristic information generation unit to the authentication server.

According to another aspect of the present invention, there is provided an authentication server comprising: a storage unit for mapping and storing card information and waveform characteristic information for each of a plurality of MS cards; And waveform characteristic information for the authentication request card, a waveform comparison unit for comparing the waveform characteristic information about the received authentication request card information and the authentication request card with the card information and the waveform characteristic information stored in the storage unit And a control unit for controlling the communication unit to transmit a response to the card authentication request to the card reader according to a result of the determination, , And information indicating the waveform characteristics of the electric signal corresponding to the track of the MS card.

According to various embodiments of the present invention, when the MS (Magnetic Stripe) card is read, the card reader apparatus reads the card information of the MS card and the waveform of the electric signal for the track of the MS card from the electric signal for the track of the MS card And transmits the waveform characteristic information representing the characteristic of the card to the authentication server. The authentication server carries out the authentication operation using the waveform characteristic information and the card information received from the card reader device, thereby preventing the card from being illegally copied .

1 is a block diagram illustrating an authentication system in accordance with an embodiment of the present invention.
2 is a timing diagram illustrating the operation of an authentication system in accordance with an embodiment of the present invention.
3 is a block diagram illustrating a card reader according to an embodiment of the present invention.
4 is a block diagram showing the card reader device according to Fig. 3 in more detail.
5 is a diagram illustrating an operation of a card reader apparatus according to an original MS card and a replica MS card according to an embodiment of the present invention.
6 is a flowchart illustrating a method of controlling a card reader according to an exemplary embodiment of the present invention.
FIG. 7 is a flowchart showing the first embodiment of the control method according to FIG. 6 in more detail.
FIG. 8 is a flowchart specifically showing a second embodiment of the control method according to FIG.
9 is a block diagram illustrating an authentication server according to an embodiment of the present invention.
10 is a flowchart illustrating a control method of an authentication server according to an embodiment of the present invention.
11 is a flowchart specifically showing the control method according to Fig.

The following merely illustrates the principles of the invention. Thus, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. Furthermore, all of the conditional terms and embodiments listed herein are, in principle, only intended for the purpose of enabling understanding of the concepts of the present invention, and are not to be construed as limited to such specifically recited embodiments and conditions do.

It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. It is also to be understood that such equivalents include all elements contemplated to perform the same function irrespective of the currently known equivalents as well as the equivalents to be developed in the future, i.e., the structure.

Thus, it should be understood that all flow diagrams, state transitions, pseudo code, etc. are representative of various processes that may be substantially represented on a computer-readable medium and executed by a computer or processor, whether the computer or processor is explicitly shown .

The functions of the various elements shown in the figures, including the functional blocks depicted in the processor or similar concept, may be provided by use of dedicated hardware as well as hardware capable of executing software in connection with appropriate software. When provided by a processor, the functions may be provided by a single dedicated processor, a single shared processor, or a plurality of individual processors, some of which may be shared.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings, in which: There will be. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail.

Various embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating an authentication system in accordance with an embodiment of the present invention. 2 is a timing diagram illustrating the operation of an authentication system in accordance with an embodiment of the present invention. 1 and 2, the authentication system 1000 includes a card reader device 100, a communication network 300, and an authentication server 200.

Here, the card reader device 100 is a concept that collectively refers to all electronic devices that read a card. The card reader device 100 includes a settlement terminal device provided in an affiliate store and performing a settlement function, a customer terminal device separately provided to a customer terminal device such as a smart phone, A portable payment terminal device that can be used, and an automated teller machine (ATM).

Here, the authentication server 200 may be a server provided by a Value Added Network (VAN) company or a credit card company that can participate in settlement, cash deposit, or the like of a customer.

The card reader device 100 can read the magnetic stripe of the MS (Magnetic Stripe) card (S201).

For example, a customer who has purchased a product or service (hereinafter, referred to as a product) can use the MS card as a payment means for the purchased product. In this case, the customer performs an operation to use the MS card, such as handing the MS card to the shop clerk for payment, or sliding or inserting the MS card directly into the card input unit of the card reader (or payment terminal) can do. Accordingly, the card reader device can read the magnetic stripe of the MS card.

Alternatively, customers who deposit and withdraw cash can use MS cards for cash withdrawals. In this case, the customer can perform an operation for using the MS card such as sliding or throwing the MS card directly into the card input unit of the card reader (or automatic teller machine) for cash withdrawal. Accordingly, the card reader device can read the magnetic stripe of the MS card.

On the other hand, if the magnetic stripe of the MS card is read, the card reader device 100 can generate the card information of the MS card from the electrical signal for the track of the MS card (S202).

Specifically, the MS card has a magnetic stripe adhered thereto, and the magnetic stripe may have three tracks (a magnetic track). Here, the track may be a band-like portion in which information is recorded and along the longitudinal direction of the magnetic stripe.

In the first track, for example, magnetic data including the name of the owner of the MS card, date of birth, card number, and validity period may be recorded.

In the second track, for example, magnetic data including a card number and a validity period may be recorded.

In the third track, for example, magnetic data including a card number and a validity period may be recorded.

In this case, when the magnetic stripe of the MS card is read, a magnetic stripe of the first track, a magnetic stripe of the second track, and a magnetic stripe of the third track included in the MS card are recorded in the magnetic head part of the card reader device 100 A first electrical signal corresponding to the magnetic stripe of the first track, a second electrical signal corresponding to the magnetic stripe of the second track, and a third electrical signal corresponding to the magnetic stripe of the third track are induced .

In this case, the card reader apparatus 100 can convert the analog signal corresponding to the electric signal into a digital signal, and generate card information including the card number and validity period of the MS card.

Then, the card reader apparatus 100 can generate waveform characteristic information indicating the waveform characteristic of the electric signal (S203). Here, the waveform characteristic information may be information generated by digitizing the shaking characteristic of the waveform of the analog signal corresponding to the electric signal. The specific operation of generating the waveform characteristic information of the card reader apparatus 100 will be described later.

Then, the card reader apparatus 100 can transmit the card authentication request including the generated card information and the waveform characteristic information to the authentication server 200 via the communication network 300 (S204). Here, when the MS card is used as a payment means for a product purchased by the customer, the card authentication request may be a card payment approval request. If the customer uses the MS card as the cash deposit / withdrawal means, It may be an authorization request.

On the other hand, the authentication server 200 can map and store the card information and the waveform characteristic information for each of a plurality of MS cards (S205). Here, the authentication server 200 stores card information and waveform characteristic information received from the card reader apparatus 100 at the first use of each of a plurality of MS cards, and stores the card information and the waveform characteristic information in advance as in step S205 described above.

In addition, the authentication server 200 can receive a card authentication request including card information and waveform characteristic information from the card reader device 100 via the communication network 300 (S206).

The authentication server 200 may compare the received authentication request card information and waveform characteristic information of the authentication request card with previously stored card information and waveform characteristic information to determine whether to approve the card authentication request (S 207) . The specific operation of the authentication of the authentication server 200 will be described later.

The authentication server 200 can transmit a response to the card authentication request to the card reader 100 through the communication network 300 according to the determination result (S208). Specifically, the authentication server 200 can transmit an approval response when the card authentication is approved, and the disapproval response to the card reader device 100 via the communication network 300 when the card authentication is not permitted.

On the other hand, the card reader device 100 can receive a response to the card authentication request from the authentication server 200 through the communication network 300 (S209).

In this case, the card reader apparatus 100 can display a result screen corresponding to the received response (S210). Specifically, when an approval response is received, the card reader device 100 may indicate that the card authentication request has been approved, and when the disapproval response is received, the card reader device 100 may indicate that the card authentication request is not approved have.

3 is a block diagram illustrating a card reader according to an embodiment of the present invention. 3, the card reader apparatus 100 includes all or a part of the MS card reader unit 110, the communication unit 120, and the control unit 130. [ Here, the MS card reader unit 110 may include all or part of the card input unit 111, the magnetic head unit 112, the card information generation unit 113, and the waveform characteristic information generation unit 114. 3, the card input unit 111, the magnetic head unit 112, the card information generation unit 113, and the waveform characteristic information generation unit 114 are included in the MS card reader unit 110. However, And may be implemented in a form not included in the MS card reader unit 110. [

The card input unit 111 can receive a user's card input operation such as sliding or inputting an MS card to use a MS (Magnetic Stripe) card for settlement or cash withdrawal.

The magnetic head unit 112 may generate an electrical signal for a track of an MS (Magnetic Stripe) card. Specifically, when the card input unit 110 receives a user input for using the MS card, the magnetic head unit 112 reads the magnetic stripe of the first track, the magnetic stripe of the second track, A first electric signal corresponding to a magnetic stripe of a first track, a second electric signal corresponding to a magnetic stripe of a second track, and a second electric signal corresponding to a magnetic stripe of a third track, An electrical signal can be induced. Accordingly, the magnetic head portion 112 can generate electrical signals for at least one of the plurality of tracks of the MS card.

The card information generating unit 113 can generate the card information of the MS card from the generated electric signal. Specifically, the card information generating unit 113 converts an analog signal corresponding to an electrical signal for one of a plurality of tracks of the MS card into a digital signal using an A / D converter, It is possible to generate the card information. Here, the track used to generate the card information may preferably be the second track. However, the present invention is not limited to this, and the card information generating unit 113 may generate the card information using the first track or the third track. Here, the card information may include the card number and validity period of the MS card.

The waveform characteristic information generation section 114 can generate waveform characteristic information indicating the waveform characteristic of the generated electric signal.

Specifically, the first electrical signal, the second electric signal, and the third electrical signal corresponding to the magnetic strips of the first track, the second track, and the third track included in the MS card are made of the material of the magnetic strip And / or the application state of the magnetic particles. That is, even though the same information is recorded on the magnetic strip of the second track of the first MS card and the second track of the second MS card generated by the duplication of the first MS card, If the magnetic strip of the track and the magnetic strip of the second track of the second MS card are different or the magnetic particle application state is different, the waveform characteristic of the second electrical signal corresponding to the magnetic stripe of the second track of the first MS card And the second electric signal corresponding to the magnetic stripe of the second track of the second MS card are different.

Accordingly, the waveform characteristic information generation section 114 generates waveform characteristic information (waveform characteristic information) by using the analog signal corresponding to the electrical signal for the track used for generating the card information in the card information generation section 113 among the plurality of tracks of the MS card Lt; / RTI > Specifically, when the track used to generate the card information is the second track, the waveform characteristic information generation unit 114 can generate the waveform characteristic information using the analog signal corresponding to the electrical signal for the second track.

That is, at present, the domestic credit card approval system uses only the information of the second track, and most of the replicated MS cards only have information of the second track. However, as described above, the waveform characteristic of the second electrical signal corresponding to the magnetic stripe of the second track of the first MS card and the waveform characteristic of the second electrical signal corresponding to the magnetic stripe of the second track of the second MS card are different do. Therefore, even if the waveform characteristic information is generated by using the analog signal corresponding to the electrical signal for the track used to generate the card information, the first MS card and the duplicate MS card have different waveform characteristic information, Can be prevented from being illegally copied and used.

Alternatively, the waveform characteristic information generation unit 114 can generate waveform characteristic information using an analog signal corresponding to an electrical signal for each of at least two tracks among a plurality of tracks of the MS card. In this case, it is possible to more reliably prevent the card from being illegally copied and used by another person.

Specifically, the waveform characteristic information generation unit 114 can generate waveform characteristic information of an analog signal corresponding to an electrical signal for each of at least two or more tracks among a plurality of tracks of the MS card. For example, when the first track and the second track are used, the waveform characteristic information generation section 114 generates first waveform characteristic information of an analog signal corresponding to an electrical signal for the first track, The second waveform characteristic information of the analog signal corresponding to the second waveform characteristic information.

Alternatively, the waveform characteristic information generation unit 114 may combine predetermined areas of analog signals corresponding to the electrical signals of at least two tracks among a plurality of tracks of the MS card, and generate waveform characteristic information Lt; / RTI > For example, in the case of using the first track and the second track, the waveform characteristic information generation section 114 generates a waveform characteristic information of the first track and the second track, (For example, subtracting, adding, convolving, etc.) a predetermined area of the second analog signal corresponding to the first area, and generating waveform characteristic information indicating the waveform characteristic of the combined area.

Thus, the waveform characteristic information generation section 114 can generate waveform characteristic information indicating the waveform characteristic of the analog signal corresponding to the generated electric signal.

Here, the waveform characteristic information may be information indicating the waveform characteristic by converting the waveform characteristic of the waveform into data.

However, this is only an embodiment of the present invention, and the present invention is not limited thereto. Therefore, according to another embodiment of the present invention, the peak value and the average value of the analog signal corresponding to the electrical signal can be converted into data, and the waveform characteristic information indicating the waveform characteristic can be generated.

Alternatively, according to another embodiment of the present invention, an interval in which a predetermined level or more is maintained in an analog signal corresponding to an electrical signal may be used to generate a waveform characteristic indicative of waveform characteristics by data length.

That is, the waveform characteristic information generation unit 114 can generate the waveform characteristic information using various methods capable of indicating characteristics of a waveform of an analog signal corresponding to the generated electric signal.

The communication unit 120 enables the card reader apparatus 100 to perform communication with another apparatus. In particular, the communication unit 120 enables communication between the card reader device 100 and the authentication server 200. [

Here, the communication unit 120 may be connected in a wireless or wired manner via a local area network (LAN) and the Internet, a form connected through a USB (Universal Serial Bus) port, a mobile communication network Or a short-range wireless communication method such as NFC (Near Field Communication), Radio Frequency Identification (RFID), Wi-Fi, or the like.

The control unit 130 controls the overall operation of the card reader apparatus 100. More specifically, the control unit 130 can control all or a part of the MS card reader unit 110 and the communication unit 120.

In particular, when the MS card is read through the MS card reader unit 110, the control unit 130 controls the card information generation unit 113 to generate card information, and generates a waveform characteristic information generation unit 114 can be controlled.

The control unit 130 controls the communication unit 130 to transmit the card authentication request including the card information generated by the card information generation unit 113 and the waveform characteristic information generated by the waveform characteristic information generation unit 114 to the authentication server 200. [ Lt; RTI ID = 0.0 > 120 < / RTI &

4 is a block diagram showing the card reader device according to Fig. 3 in more detail. 4, the card reader apparatus 100 includes an MS card reader unit 110, a communication unit 120, a controller 130, an IC card reader unit 140, a display unit 150, a key input unit 160, A storage unit 170, and a printing unit 180, all of which are shown in FIG. Hereinafter, a card reader device according to an embodiment of the present invention will be described in detail with reference to the configuration of FIG.

The IC card reader unit 140 may include a contact type IC card reader unit and a contactless IC card reader unit.

The contact type IC card reader unit includes at least one contact point which is in electrical contact with a COB (Chip On Board) provided on the contact type IC card, and the contact type IC card reader unit is connected to the IC chip of the IC card And can read predetermined information or data from the IC chip through the half-duplex transaction using an APDU (Application Protocol Data Unit).

Also, the non-contact type IC reader unit may include at least one antenna that makes electrical contact with the non-contact type IC card in a non-contact manner by using capacitive coupling and / or inductive coupling, Power is supplied to the IC chip of the IC card, and predetermined information or data can be read from the IC chip through the half-duplex transaction using the APDU.

The display unit 150 functions to display a screen. In particular, when a response to the card authentication request is received from the authentication server 200 through the communication unit 120, the display unit 150 may display a result screen corresponding to the received response.

Here, the display unit 150 may be a liquid crystal display, a thin film transistor-liquid crystal display, an organic light-emitting diode, a flexible display, A display (3D display), a transparent display, a head up display (HUD), a head mounted display (HMD), and a prism projection display.

The key input unit 160 may include at least one of a number key, a character key, and a function key to receive a user input for inputting a key.

Here, the key input unit 160 may include various types of buttons, a touch sensor that receives a touch input to the display unit 110, a proximity sensor that receives motion that is not directly connected to the surface of the display unit 110, And at least one of a microphone for receiving input. However, the present invention is not limited to this, and may be implemented in any form capable of receiving a user's key input.

The storage unit 170 stores various data and programs necessary for the operation of the card reader apparatus 100. [ In particular, the storage unit 170 may store algorithms required to generate waveform characteristic information.

The printing unit 180 prints out predetermined information or data (for example, payment processing result information, payment processing result information, etc.) generated as a result of the card reader apparatus 100 performing a predetermined function Cash-in / cash-out information).

5 is a diagram illustrating an operation of a card reader apparatus according to an original MS card and a replica MS card according to an embodiment of the present invention. Here, the original MS card is an MS card issued by a non-replicating card company, and the replicated MS card is an MS card generated by replicating a original MS card.

Referring to FIG. 5, the magnetic head part 112 includes magnetic strips of the first track, the second track, and the third track included in the original MS card, and a first electric signal (Track 1 ), A second electric signal (Track 2), and a third electric signal (Track 3).

According to an embodiment of the present invention, the card information generating unit 113 can generate the card information 501 of the MS card from the second electric signal (Track 2).

According to an embodiment of the present invention, the waveform characteristic information generation section 114 generates waveform characteristic information for the track (Track 2) used for generating the card information in the card information generation section 113 among the plurality of tracks of the original MS card, The waveform characteristic information 502 can be generated using the analog signal corresponding to the signal.

On the other hand, the domestic credit card approval system is a system for approving only using the information of the second track. In most cases, most of the replicated MS cards have only information of the second track.

Thus, when a duplicate MS card is used, the magnetic head unit 112 can generate a second electrical signal (Track 2) corresponding to the magnetic stripe of the second track included in the duplicated MS card.

Here, the second electric signal (Track 2) corresponding to the magnetic stripe of the second track included in the duplicated MS card has the same information as the magnetic stripe of the second track of the original MS card, The waveform of the electric signal of the track 2 of the original MS card and the waveform of the electric field of the track 2 of the replica MS card are different as shown in Fig. 5, because the magnetic strip of the second track of the replica MS card is different, The waveform of the electrical signal may be different.

Accordingly, the card information 503 of the replica MS card generated by the card information generating unit 113 may be the same as the card information 501 of the original MS card, The waveform characteristic information 504 of the MS card may be different from the waveform characteristic information 502 of the original MS card.

6 is a flowchart illustrating a method of controlling a card reader according to an exemplary embodiment of the present invention. Referring to FIG. 6, when an MS (Magnetic Stripe) card is read first, card information of an MS card can be generated from an electrical signal for a track of the MS card (S601).

Here, the step S601 of generating the card information includes a step of converting an analog signal corresponding to an electric signal for one of the plurality of tracks of the MS card into a digital signal, May be detected.

Then, the waveform characteristic information indicating the waveform characteristic of the electric signal can be generated (S602).

Then, the card authentication request including the generated card information and the waveform characteristic information may be transmitted to the authentication server (S603).

Meanwhile, the method of controlling a card reader according to an exemplary embodiment of the present invention may further include receiving a response to a card authentication request from an authentication server and displaying a result screen corresponding to the received response.

FIG. 7 is a flowchart showing the first embodiment of the control method according to FIG. 6 in more detail. Referring to FIG. 7, when an MS (Magnetic Stripe) card is first read, card information of an MS card can be generated from an electrical signal for a track of the MS card (S701).

Then, the waveform characteristic information can be generated using the analog signal corresponding to the electrical signal for the track used for generating the card information among the plurality of tracks of the MS card (S702).

Then, the card authentication request including the generated card information and the waveform characteristic information may be transmitted to the authentication server (S703).

FIG. 8 is a flowchart specifically showing a second embodiment of the control method according to FIG. Referring to FIG. 8, when an MS (Magnetic Stripe) card is first read, card information of an MS card can be generated from an electrical signal for a track of the MS card (S801).

Then, the waveform characteristic information can be generated using the analog signals corresponding to the electric signals for at least two or more tracks among the plurality of tracks of the MS card (S802).

Here, the generating step S802 may generate waveform characteristic information of an analog signal corresponding to an electrical signal for each of at least two tracks among a plurality of tracks of the MS card.

Alternatively, the creating step (S802) may combine predetermined areas of the analog signals corresponding to the electrical signals for at least two tracks among a plurality of tracks of the MS card, and generate waveform characteristic information indicating waveform characteristics of the combined area Can be generated.

Then, the card authentication request including the generated card information and the waveform characteristic information may be transmitted to the authentication server (S803).

9 is a block diagram illustrating an authentication server according to an embodiment of the present invention. 9, the authentication server 200 includes all or a part of the storage unit 210, the communication unit 220, the authentication unit 230, and the control unit 240.

The storage unit 210 stores various data and programs necessary for the operation of the authentication server 200.

In particular, the storage unit 210 may map and store card information and waveform characteristic information for each of a plurality of MS cards. Specifically, the storage unit 210 may map and store card information and waveform characteristic information for each of a plurality of MS cards issued to a plurality of customers. Here, the storage unit 210 may store and store the card information and waveform characteristic information received from the card reader unit using the MS characteristic information.

Here, the first usage means a case where the customer uses the card for the first time after receiving the card or uses it for cash withdrawals or the like.

Generally, the MS card illegal copying occurs through network hacking or the like during use of the MS card. The storage unit 210 stores the card information for the normally issued MS card and the waveform characteristic information thereof Can be stored and mapped.

Herein, the storage unit 210 may be implemented as a random access memory (RAM), a flash memory, a ROM (Read Only Memory), an EPROM (Erasable Programmable ROM), an EEPROM (Electronically Erasable and Programmable ROM) Card, or the like, as well as a detachable type storage device such as a USB memory, a CD-ROM, or the like.

The communication unit 220 enables the authentication server 200 to perform communication with another device. In particular, the communication unit 220 enables communication between the authentication server 200 and the card reader apparatus 100. Accordingly, the communication unit 220 can receive the card authentication request including the card authentication information from the card reader device 100 and the waveform characteristic information for the authentication request card.

Here, the communication unit 220 may be connected in a wireless or wired manner via a local area network (LAN) and an Internet network, a form connected through a USB (Universal Serial Bus) port, a mobile communication network Or a short-range wireless communication method such as NFC (Near Field Communication), Radio Frequency Identification (RFID), Wi-Fi, or the like.

The authentication unit 230 may compare the waveform information of the authentication request card and the waveform information of the authentication request card with the card information and waveform characteristic information stored in the storage unit 210 to determine whether the card authentication request is approved.

Specifically, the authentication unit 230 may detect the waveform characteristic information mapped to the authentication request card information among the stored waveform characteristic information using the received authentication request card information.

Then, the authentication unit 230 can compare the detected waveform characteristic information with the waveform characteristic information of the received authentication request card.

Then, the authentication unit 230 can determine whether or not to approve the card authentication according to whether or not the difference according to the comparison satisfies the predetermined error range. That is, if it meets the card authentication request, and if not, the card authentication request can be disallowed.

The control unit 240 controls the overall operation of the authentication server 200. Specifically, the control unit 240 may control all or a part of the storage unit 210, the communication unit 220, and the authentication unit 230.

In particular, the control unit 240 may control the storage unit 210 to store the card information and the waveform characteristic information received from the card reader apparatus 100 when the MS card is used for the first time.

The control unit 240 may control the communication unit 220 to transmit a response to the card authentication request to the card reader device 100 according to the determination result of the authentication unit 230. [

10 is a flowchart illustrating a control method of an authentication server according to an embodiment of the present invention. Referring to FIG. 10, card information and waveform characteristic information for each of a plurality of MS cards may be mapped and stored (S1001). The storing step S1001 may store the card information and the waveform characteristic information received from the card reader apparatus when the MS card is first used. Here, the waveform characteristic information may be information indicating the waveform characteristic of the electric signal corresponding to the track of the MS card.

Then, the card authentication request including the authentication request card information and the waveform characteristic information for the authentication request card can be received from the card reader device (S1002).

In step S1003, the received authentication request card information and the waveform characteristic information about the authentication request card are compared with stored card information and waveform characteristic information to determine whether the card authentication request is approved.

Then, a response to the card authentication request may be transmitted to the card reader device according to the determination result (S1004).

11 is a flowchart specifically showing the control method according to Fig. Referring to FIG. 11, card information and waveform characteristic information for each of a plurality of MS cards may be mapped and stored (S1101).

Then, the card authentication request including the authentication request card information and the waveform characteristic information for the authentication request card may be received from the card reader device (S1102).

Then, the waveform characteristic information mapped to the authentication request card information among the stored waveform characteristic information can be detected using the received authentication request card information (S1103).

Then, the detected waveform characteristic information may be compared with the waveform characteristic information of the received authentication request card (S1104).

Then, it can be determined whether the difference according to the comparison satisfies a predetermined error range (S1105)

If YES, the card authentication request can be approved (S1106).

However, if it is not satisfied (S1105: N), the card authentication request can be disallowed (S1107).

Then, a response to the card authentication request according to the determination result can be transmitted to the card reader device (S1108).

Meanwhile, the control method according to various embodiments of the present invention described above is implemented in the form of installation data to be executed in the card reader apparatus or the authentication server, and is stored in various non-transitory computer readable media. Server or devices. Thereby, the card reader apparatus or the authentication server can connect to the server or the apparatus storing the installation data, and download the installation data.

A non-transitory readable medium is a medium that stores data for a short period of time, such as a register, cache, memory, etc., but semi-permanently stores data and is readable by the apparatus. In particular, the various applications or programs described above may be stored on non-volatile readable media such as CD, DVD, hard disk, Blu-ray disk, USB, memory card, ROM,

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and detail may be made therein without departing from the spirit and scope of the present invention.

100: card reader unit 110: MS card reader unit
120: communication unit 130:
140: IC card reader unit 150:
160: key input unit 170:
180: printing unit 200: authentication server
210: storage unit 210, 220: communication unit
230: authentication unit 230, 240:

Claims (20)

A method for controlling a card reader device,
Generating, when an MS (Magnetic Stripe) card is read, card information of the MS card from an electrical signal for the track of the MS card;
Generating waveform characteristic information for authenticating that the card is an unreplicated card, using waveform characteristics of an analog signal corresponding to an electrical signal for the track of the MS card; And
And transmitting a card authentication request including the generated card information and waveform characteristic information to an authentication server. The method according to claim 1,
Wherein the step of generating the card information comprises:
Converting an analog signal corresponding to an electrical signal of one of a plurality of tracks of the MS card into a digital signal; And
And detecting card information of the MS card in the converted digital signal. The method according to claim 1,
Wherein the waveform characteristic information includes:
Wherein the control signal is information generated by digitizing a shaking characteristic of a waveform of an analog signal corresponding to the electric signal. The method according to claim 1,
Wherein the step of generating the waveform characteristic information comprises:
Wherein said waveform characteristic information is generated using an analog signal corresponding to an electrical signal for a track used to generate said card information among a plurality of tracks of said MS card. The method according to claim 1,
Wherein the step of generating the waveform characteristic information comprises:
Wherein waveform characteristic information is generated using an analog signal corresponding to an electrical signal for each of at least two tracks among a plurality of tracks of the MS card. 6. The method of claim 5,
Wherein the step of generating the waveform characteristic information comprises:
Combining a predetermined area of an analog signal corresponding to an electrical signal for each of at least two tracks among a plurality of tracks of the MS card; And
And generating waveform characteristic information indicating a waveform characteristic of the combined region. The method according to claim 1,
Receiving a response to the card authentication request from the authentication server; And
And displaying a result screen corresponding to the received response. A method of controlling an authentication server,
Mapping and storing card information and waveform characteristic information for each of a plurality of MS cards;
Receiving a card authentication request from the card reader device including authentication request card information and waveform characteristic information for the authentication request card;
Comparing waveform characteristic information of the received authentication request card information and the authentication request card with the stored card information and waveform characteristic information to determine whether the card authentication request is approved; And
And transmitting a response to the card authentication request to the card reader device according to the determination result,
Wherein the waveform characteristic information is authentication information for authenticating that the card is a non-duplicated card using a waveform characteristic of an analog signal corresponding to an electrical signal for the track of the MS card. 9. The method of claim 8,
Wherein the storing step comprises:
And stores the card information and the waveform characteristic information received from the card reader device upon the first use of the MS card. 9. The method of claim 8,
Wherein the determining step comprises:
Detecting waveform characteristic information mapped to the authentication request card information among the stored waveform characteristic information using the received authentication request card information;
Comparing the detected waveform characteristic information with waveform characteristic information about the received authentication request card; And
And determining whether the card authentication is approved according to whether the difference according to the comparison meets a predetermined error range. In a card reader device,
A communication unit;
A magnetic head for generating an electrical signal for a track of an MS (Magnetic Stripe) card;
A card information generating unit for generating card information of the MS card from the electric signal;
A waveform characteristic information generation unit for generating waveform characteristic information for authenticating that the card is an unreplicated card using a waveform characteristic of an analog signal corresponding to the electrical signal;
And a controller for controlling the communication unit to transmit to the authentication server a card authentication request including the card information generated by the card information generation unit and the waveform characteristic information generated by the waveform characteristic information generation unit when the MS card is read Includes a card reader device. 12. The method of claim 11,
Wherein the card information generating unit comprises:
Converts an analog signal corresponding to an electrical signal of one of a plurality of tracks of the MS card to a digital signal and detects card information of the MS card in the converted digital signal. 12. The method of claim 11,
Wherein the waveform characteristic information includes:
Wherein the information is information generated by digitizing a shaking characteristic of a waveform of an analog signal corresponding to the electrical signal. 12. The method of claim 11,
Wherein the waveform characteristic information generation unit comprises:
And generates the waveform characteristic information by using an analog signal corresponding to an electrical signal for a track used to generate the card information among a plurality of tracks of the MS card. 12. The method of claim 11,
Wherein the waveform characteristic information generating unit comprises:
And generates waveform characteristic information by using an analog signal corresponding to an electrical signal for each of at least two tracks among a plurality of tracks of the MS card. 16. The method of claim 15,
Wherein the waveform characteristic information generation unit comprises:
And the waveform characteristic information generating means generates waveform characteristic information indicating a waveform characteristic of the combined region by combining predetermined areas of analog signals corresponding to electrical signals for at least two tracks among a plurality of tracks of the MS card, Reader device. 12. The method of claim 11,
Wherein,
Receives a response to the card authentication request from the authentication server,
And a display unit for displaying a result screen corresponding to the received response. In the authentication server,
A storage unit for mapping and storing card information and waveform characteristic information for each of a plurality of MS cards;
A communication unit for receiving a card authentication request including authentication request card information from the card reader device and waveform characteristic information about the authentication request card;
An authentication unit for comparing the received authentication request card information and waveform characteristic information of the authentication request card with card information and waveform characteristic information stored in the storage unit to determine whether the card authentication request is approved; And
And a controller for controlling the communication unit to transmit a response to the card authentication request to the card reader apparatus according to the determination result,
Wherein the waveform characteristic information is authentication information indicating the waveform characteristic of an analog signal corresponding to an electrical signal for a track of the MS card to authenticate that the MS card is a non-duplicated card. 19. The method of claim 18,
Wherein,
Wherein the control unit controls the storage unit to store the card information and the waveform characteristic information received from the card reader unit when the MS card is first used. 19. The method of claim 18,
Wherein,
Detecting waveform characteristic information mapped to the authentication request card information among the stored waveform characteristic information using the received authentication request card information,
Comparing the detected waveform characteristic information with waveform characteristic information about the received authentication request card,
Wherein the authentication server determines whether or not the card authentication is approved according to whether the difference according to the comparison meets a predetermined error range.

Images