KR101545129B1 - System And Method for Electronic Payment - Google Patents

Abstract

Disclosed is an electronic payment system. Provided is an electronic payment system characterized by including: a terminal for being capable of near frequency communications and wired and wireless communications; a shopping mall server for providing shopping information to the terminal and requesting a payment relates to a product to be purchased; a near frequency communications tag for including a serial number assigned uniquely, shopping mall information, and card information; a client authentication server for receiving and processing an authentication request and a payment request from the terminal; and a card payment server for receiving and processing the payment request from the client authentication server.

Description

[0001] System and Method for Electronic Payment [

The present invention relates to an electronic payment system and method.

The following description merely provides background information related to the embodiment of the present invention and does not constitute the prior art.

Recently, mobile devices such as smart phones and tablets have been rapidly spreading, and the market for mobile devices is also rapidly growing. The area of goods and services traded is no different from the conventional Internet shopping mall or offline market.

However, conventional payment methods such as credit card, account transfer, and the like are subject to inconvenience and restriction in use in a mobile environment. When making a payment using a credit card, the card number recorded on the credit card, the validity period, the password, the CVC (Card Validation Code), and the security code must be entered for security reasons, However, they are vulnerable to security.

The present embodiment has a main object to provide an electronic payment system and method. And more particularly, to an electronic payment system and method for enhancing security and convenience by performing settlement by linking a mobile device and a card.

According to an aspect of the present invention, a terminal capable of performing Near Frequency Communication and Wired And Wireless Communication; A shopping mall server for providing shopping information to the terminal and requesting payment for a product to be purchased; A short distance communication tag including a serial number uniquely assigned, shopping mall information, and card information; A client authentication server for receiving and processing an authentication request and a payment request from the terminal; And a card settlement server for receiving and processing the settlement request from the client authentication server.

According to another aspect of the present invention, there is provided a method for a terminal, comprising: receiving a signal from a short range communication tag; Downloading the application when the short-range communication management application is not installed in the terminal; A registration request step in which the application requests registration of the tag to a client authentication server; And receiving, by the application, the result of the registration request,

Receiving a payment request for a product to be purchased from a shopping mall server by a browser of the terminal; The browser transmitting the session token and the price information of the goods to the application and calling the application; An authentication request step of the application requesting authentication to the client authentication server; And transmitting, by the application, a card approval request to the client authentication server based on the result of the authentication, and receiving the result.

As described above, according to the embodiment of the present invention, electronic settlement is performed by linking a mobile device and a card to be used for purchase, thereby making it unnecessary to input more troublesome than when a payment is made using only a card, It is effective.

According to the embodiment of the present invention, information necessary for settlement of purchased goods is separately stored and authenticated by using biometric information of the customer, location information and information of the mobile device, thereby enhancing security, Even if information is leaked, damage can be prevented.

Therefore, according to the present embodiment, it is possible to eliminate the troublesome process of using the card, thereby eliminating the inconvenience of use in the mobile device, and also preventing the use of the card even if the card is lost or personal information is leaked.

1 is a configuration diagram of an electronic settlement system according to an embodiment of the present invention.
2A is a block diagram of a local area communication tag according to an embodiment of the present invention.
2B and 2C are block diagrams of a terminal according to an embodiment of the present invention.
FIG. 2D is a configuration diagram of a terminal including a certificate storage unit according to an embodiment of the present invention.
3A is a configuration diagram of a client authentication server according to an embodiment of the present invention.
3B is a configuration diagram of a shopping mall server according to an embodiment of the present invention.
3C is a configuration diagram of a card settlement server according to an embodiment of the present invention.
4 and 5 are flowcharts of a customer registration process according to an embodiment of the present invention.
6 and 7 are flowcharts of a card settlement process according to an embodiment of the present invention.

Hereinafter, the present embodiment will be described in detail with reference to the accompanying drawings. In this process, the thicknesses of the lines and the sizes of the components shown in the drawings may be exaggerated for clarity and convenience of explanation. In addition, the terms described below are defined in consideration of the functions of the present invention, which may vary depending on the intention or custom of the user, the operator. Therefore, definitions of these terms should be made based on the contents throughout this specification. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

The card of the present embodiment is not limited to a card that can be used as a payment means such as a credit card or a debit card issued by a financial institution including a bank or a credit card company but may be a card issued by an operator of the shopping mall, A card may also be included so that it can be used to purchase services.

1 is a configuration diagram of an electronic settlement system according to an embodiment of the present invention.

The electronic payment system according to an embodiment of the present invention stores customer information for performing customer authentication in cooperation with the short distance communication tag 110, the terminal 120, the customer authentication server 140, and the customer authentication server 140 A customer authentication database 142, a shopping mall server 150, a card payment server 160, a card information database 162 for storing card information, and a communication network 130 for connecting terminals and servers.

However, the communication network 130 is not limited to a specific type of communication, and may be various types including wired, wireless, and short distance communication as well as other types of combined modes.

The customer authentication database 142 and the card information database 162 may be part of each interworking server or may be separate devices. The customer authentication server 140, the shopping mall server 150, and the card payment server 160 may be individual devices, but any combination of two or more of them may be combined into one device. Hereinafter, each component of the electronic payment system will be described in detail.

2A is a configuration diagram of a local area communication tag according to an embodiment of the present invention.

Near-field communication is widely used for settlement, traffic, access control lock, etc. by using data transmission between near-distance terminals by non-contact communication technology. The Near Field Communication Tag (NFC Tag) 110 may be issued by a business including a credit card issuer, a shopping mall operator, and a Value Added Network (VAN) company. However, the local communication is not limited to NFC, and may be any of various forms including Bluetooth and RFID (Radio Frequency Identification). The short-range communication tag 110 may be inserted into a credit card or may be in various forms including an SD memory card, a Universal Subscriber Identity Module (USIM) of a smart phone.

The short range communication tag 110 according to the present embodiment includes a serial number (S / N) storage unit 111 and a short range communication management application 124 (described in detail in FIG. 2B) A URI storage unit 113 for storing Uniform Resource Identification (URI) information that is a downloadable location, an Internet address (Internet) of a shopping mall server 150 that has issued or supports the short- A shopping mall information storage unit 115 for storing an identifier and a password used by a customer who has been issued a URL (Uniform Resource Locator), a URL (Uniform Resource Locator) and a short distance communication tag 110 and a card number, A card information storage 117 for storing card information including a name and a card password, and a communication unit 119 for communicating with the terminal.

However, in the case of the short distance communication tag 110 issued by a third party including a financial institution such as a credit card company, the short distance communication tag 110 may not include the URI storage unit 113. When the URI storage unit 113 is not included, the local communication management application 124 can be downloaded from an online application market such as an app store. Also, the shopping mall information is not necessarily limited to be stored in the shopping mall information storage unit 115 of the short-range communication tag 110. The shopping mall information may be stored in the short distance communication management application 124 in the terminal 120 as well as the short distance communication tag 110.

The issuer of the short distance communication tag 110 assigns a serial number, which is a unique number to each tag, to manage the issued tag. The terminal 120 receives the serial number from the short distance communication tag and transmits the serial number to the client authentication server 140 when the short distance communication tag 110 is issued to register the customer or purchase goods or services from the shopping mall server and make payment. The customer authentication server 140 inquires the customer authentication database 142 to verify the serial number.

Information stored in the serial number storage unit 111, the shopping mall information storage unit 115, and the card information storage unit 117 can be encrypted to prevent information stored in the short-range communication tag 110 from flowing out during communication, When data is transmitted from the communication unit 119 to the terminal 120, the data can be encrypted and transmitted.

Meanwhile, in order to enhance the security of the shopping mall information and the card information, the shopping mall information and the card information can be divided and stored in the short distance communication tag 110 and the terminal. The technical idea of dividing and storing the shopping mall information and the card information in Fig. 2C will be described in detail.

2B and 2C are block diagrams of a terminal according to an embodiment of the present invention.

The terminal 120 according to an embodiment of the present invention may be a personal computer (PC), a notebook computer, a tablet, a personal digital assistant (PDA), a game console, a portable multimedia player (PMP) A multimedia player, a PSP (PlayStation Portable), a wireless communication terminal, a smart phone, a TV, a media player, and the like. In addition, the terminal 120 according to the present embodiment can be used for mobile communication including Near Field Communication (NFC) and 2G, 3G, Long Term Evolution (LTE), and TD-LTE (Time- And a wired / wireless communication including a wireless LAN (Local Area Network) including a wireless LAN (WLAN) and a wired LAN (LAN).

The terminal 120 according to the present embodiment includes an input unit / biometric information input unit 121, a display unit 122, a communication unit 123, a NFC Management Application 124, a browser for accessing a shopping mall server 128, and a location information collection unit 129 for collecting location information. The browser 128 is an application capable of web browsing, and is not limited to a general purpose browser, and is not limited to any name as long as it is an application program capable of processing HTML (Hybrid Text Markup Language).

The terminal 120 includes an input unit 121 through which a customer can input various types of characters including letters and numbers and a biometric information input unit 121 capable of receiving biometric information including at least one of a camera, ). The input unit 121 may include an input means for designating a position including a password and a latitude and longitude coordinates and an address. The terminal 120 includes a display unit 122 for transmitting various information to a customer.

The terminal 120 activates the local area communication management application 124 when the local area communication tag 110 is close to the terminal 120 and the communication unit 123 in the terminal 120 transmits the authentication information stored in the local area communication tag 110 And payment information, and decrypts the encrypted information if it is encrypted.

When the connected local communication tag 110 is not already registered in the customer authentication server 140, the local communication management application 124 performs a customer registration process for performing a customer registration process, And a card settlement processing unit 127 for requesting a card approval.

When the local area communication tag 110 is close to the terminal 120 and the local area communication management application 124 is not installed in the terminal, the URI of the local area communication management application 124 stored in the local area communication tag 110 Go to download. At this time, the short-range communication management application 124 is not limited to a specific program form, but may be a plug-in or an independent application that is interlocked with a browser.

The customer registration unit 125 receives the authentication information including the serial number, the shopping mall information, and the card information from the short distance communication tag 110, transmits the authentication information to the customer authentication server 140, and receives the result. It is also possible to inquire whether the card connected to the short distance communication tag 110 is already registered and to receive the result, and to transmit the customer identification (ID) and password of the shopping mall included in the shopping mall information to the shopping mall server 150 And verifies that it is valid. The card number, validity period, name, CVC, and card password included in the card information are transmitted and verified. When validity is confirmed in all of the above verifications, the biometrics information input unit 121 receives the biometric information, receives the short-range communication tag password from the input unit 121, and transmits it to the client authentication server 140. If the short distance communication tag 110, the shopping mall information, and the card information are registered in this manner, the short distance communication tag 110 can be automatically logged in to the shopping mall server 150 only by bringing the short distance communication tag 110 close to the terminal 120, You will be able to pay.

However, when the password of the shopping mall server 150 and the card password are not stored, it is also possible to store the input password in the terminal 120 and use the password.

The customer authentication processing unit 126 accesses the shopping mall server 150 through a browser, and processes the process of purchasing goods and services and making a payment. When the short distance communication tag 110 is connected to the terminal 120, the browser 128 automatically moves to the address of the shopping mall. When the user selects an item to be purchased at the shopping mall and requests payment, the browser 128 calls the local communication management application 124. At this time, the session token and the price information of the article to be purchased are transmitted to the client authentication processing unit 126. The customer authentication processing unit 126 receives the authentication information including the serial number of the short distance communication, the customer ID of the shopping mall, and the card number from the short distance communication tag 110 and transmits the received authentication information and the MAC (Media Access Control) , Face image, and iris to the client authentication server 140 and transmits the authentication information to the client authentication server 140. The client authentication server 140 transmits the biometric information including the unique number of the terminal including the ID, the International Mobile Equipment Identity (IMEI), the International Mobile Subscriber Identity (IMSI) .

Upon completion of authentication for payment, the card payment processing unit 127 transmits a card approval request to the customer authentication server 140, receives the card payment approval result, and transmits the approval details to the display unit 122. [

The short-range communications management application 124 may additionally have a one-time password generator to provide the highest level of security. The security level can be improved by transmitting the code generated by the one-time password generator in the customer registration and payment authentication process and authenticating the same together with the customer authentication server 140. [ However, the disposable password generator is not limited to being included in the short-range communication management application, and may be included in the short-range communication tag 110 as well. When the short distance communication tag 110 includes the one-time password generator, the password generated through the short distance communication is transmitted to the terminal 120, and the terminal 120 transmits the received password to the client authentication server 140 or the shopping mall server 120. [ (150). In addition, if the one-time password generator requires the input of a password, it is possible to separate and store the one-time password generator and the password, so that it can be conveniently used. When the short-range communication tag 110 includes a one-time password generator, it is also possible to store a password in the terminal 120, store the password in the short-range communication tag 110, and allow the terminal 120 to include a disposable password generator Do.

If the customer brings the near field communication tag 110 close to the terminal 120 in the case where the shopping mall information storage unit 115 is placed in the short distance communication application 124 instead of the short distance communication tag 110, The short distance communication management application 124 can move to the shopping mall by transmitting the Internet address or URL of the shopping mall in the shopping mall information to the browser.

2C includes a split shopping mall information storage unit 210 and a split card information storage unit 220 for storing the shopping mall information and the card information in the short distance communication management application 124 in a manner to be divided with the short distance communication tag 110 . It is necessary to combine the information stored in the shopping mall information storage unit 115 and the card information storage unit 117 of the short distance communication tag 110 with the shopping mall information and the card information stored in the local communication management application to access the shopping mall and settle the payment .

 A part of the shopping mall information including the internet address of the shopping mall, the customer identifier of the shopping mall, and the password is stored in the divided shopping mall information storage unit 210 of the local communication management application 124 and the rest is stored in the shopping mall information And may be stored in the storage unit 113. For the sake of security, it is preferable that the customer identifier and the password of the shopping mall are separately stored.

Some of the card information including the card number, the validity period, the name, the CVC, and the card password is stored in the card information storage 117 of the short distance communication tag 110 and the rest is stored in the short distance communication management application 124 And may be stored in the divided card information storage unit 220 to further enhance security. That is, if the card number, the name, and the CVC are stored in the card information storage unit 117, the validity period and the card password are stored in the partition card information storage unit 220, Even if one loses one and acquires the lost local communication tag 110 or the terminal 120, it becomes impossible to settle by that alone. When the shopping mall information and the card information are divided and stored, the customer registration unit 125, the customer authentication processing unit 126 and the card payment processing unit 127 in the local communication management application 124 store the shopping mall received from the short- Information and card information and information stored in the short-range communication management application 124, and transmits the combined information to the customer authentication server 140. [

FIG. 2D is a configuration diagram of a terminal including a certificate storage unit according to an embodiment of the present invention.

The terminal 120 may include a certificate storage unit 230 for storing a certificate used for identity verification and digital signature. The certificate storage unit 230 includes a private certificate issued by a private certificate issuing organization including a financial institution or a private institution including a certificate generated by the shopping mall operator itself. The short-range communication tag 110 may include a password of the certificate. When the short-range communication tag 110 is connected to the terminal 120 at the time of payment, the terminal 120 reads the password of the certificate from the short- The payment process may be performed using the certificate included in the certificate storage unit 230. [ Of course, it is also possible that the terminal 120 includes the password of the certificate, and the short-range communication tag 110 performs the above process including the certificate. The technical idea of the present invention is to secure the security of the certificate by storing the password of the certificate and the certificate separately on another medium, and to eliminate the hassle of inputting the password in the certificate.

The use of the certificate according to the technical idea of the present invention is not limited to payment at the Internet shopping mall but may be applied to any form of payment or authentication if a certificate is used. The certificate according to the technical idea of the present invention can be used not only for payment at an Internet shopping mall but also for bank transfer and payment of bills. When transferring money from a specific bank account to another account using the terminal 120, an application provided by a bank in the terminal 120 is driven, and the application logs in using a public certificate. At this time, the application can log in using the certificate stored in the certificate storage unit 230 and the password stored in the short-range communication tag 110, receives the account transfer information, receives the one-time use password number generator included in the terminal 120, Receives the disposable secret code from the one-time secret password generator included in the tag 110, and transmits the account transfer information to the server using the public certificate of the certificate storage unit 230 and the public certificate password input from the local communication tag 110 To transfer money to perform the account transfer.

3A is a configuration diagram of a client authentication server according to an embodiment of the present invention.

The customer authentication server 140 includes a communication unit 143, a customer registration processing unit 145, a customer authentication processing unit 147, and a payment processing unit 149, which can be connected to the terminal 120 through various media including wired, wireless, ). Hereinafter, the components of the client authentication server 140 will be described in detail.

The customer registration processing unit 145 receives a customer registration request from the terminal 130. Card information and shopping mall information of the short distance communication tag 110 from the terminal 120 and searches and confirms whether the serial number is valid or not in the customer authentication database 142, The card payment server 160 inquires of the card payment server 160 whether or not the card is valid. The shopping mall server 150 inquires and confirms that the customer identifier and the password of the shopping mall are valid. In addition, the customer registration processing unit 145 can check the validity of the terminal 120. Authenticate the unique number including the MAC (Media Access Control) address, IMEI, IMSI, and telephone number of the terminal 120. When validation of the local communication tag 110 and the terminal 120 is completed, the terminal 120 receives the biometric information and the local communication password for managing the local communication tag 110. The customer registration processing unit 145 registers the authentication information including the received local communication tag information, the terminal information, the biometric information, and the local communication tag 110 password in the customer information database 142.

The customer authentication processing unit 147 inquires of the customer database 142 about the serial number of the local communication tag 110 received from the terminal 120, the unique number of the terminal, the biometric information, and the location information, The shopping mall information and the session token including the customer identifier and the password of the shopping mall are transmitted to the shopping mall server 150 to be inquired and the reception result and the card information are transmitted to the card settlement server 160 to inquire whether or not the card is a valid card, And performs authentication. The customer authentication processing unit 147 transmits the customer authentication result to the terminal 120.

The payment processing unit 149 transmits the price information received from the terminal 120 to the card payment server 160 when the customer authentication is successful. Of course, it is natural that the price information can be received simultaneously with the authentication information. The payment processing unit 149 transmits the price information and the card information to the card settlement server 160 to request card approval, and receives the result of the card approval request and transmits the result to the terminal 120. [ Upon receiving the card approval result information, the terminal 120 transmits the card approval result to the display unit 122.

3B is a configuration diagram of a shopping mall server according to an embodiment of the present invention.

The shopping mall server 150 includes a shopping mall authentication unit 152 and a shopping mall processing unit 154. The shopping mall authentication unit 152 receives the shopping mall customer identifier, the password, and the session token from the customer authentication server 140 to check whether the customer is a subscriber in the shopping mall, confirms whether or not a purchase request is being made using the session token, To the client authentication server (140). The shopping mall server 150 includes a site for performing electronic settlement via the Internet, and is not limited to a site for selling goods or services.

The shopping mall processing unit 154 performs a shopping procedure through the browser 128 of the terminal 120. [ That is, a procedure for purchasing goods or services including the display of goods, providing detailed information on the selected goods, and a payment process is performed.

Meanwhile, the shopping mall server 150 may include a receipt storage box for storing the receipt after the settlement is completed. However, the receipt storage box is not necessarily limited to the shopping mall server 150, and a receipt storage box may be provided in any one of the terminal 120 and the customer authentication server 140. The receipt bin may include a search function to retrieve receipts over a specified period of time.

3C is a configuration diagram of a card settlement server according to an embodiment of the present invention.

The card payment server 160 includes a card authentication unit 164 and a payment processing unit 166. [ The card authentication unit 164 inquires of the card authentication database 162 whether or not the card number received from the customer authentication server 140 is valid, and confirms whether or not the card number is valid based on the result. And transmits the determination result to the client authentication server 140. When the card number authentication is completed and the card authentication request is received from the customer authentication server 140, the payment processing unit 166 performs the card authentication and transmits the result to the customer authentication server 140. [

4 and 5 are flowcharts of a customer registration process according to an embodiment of the present invention.

FIG. 4 shows an example of a process of processing a customer registration in the terminal 120 of the present embodiment, and FIG. 5 shows an example of a customer registration process among the components of the electronic payment system of the present embodiment. Hereinafter, Fig. 4 and Fig. 5 will be described in detail.

4, the terminal 120 receives the NFC tag (NFC tag) and transmits the NFC tag (S410) and receives the information stored in the short distance communication tag 110 (S420) . Upon receiving a signal from the short distance communication tag 110, the terminal 120 checks whether a short distance communication management application (NFC application) 124 is installed (S430). If the short distance communication management application The received local communication management application 124 accesses the stored URI to perform download (S432).

It is determined whether or not the serial number of the short distance communication tag received from the short distance communication tag 110 is valid after the short distance communication management application 124 is installed in the terminal 120 (S440). Whether the serial number of the short distance communication tag is valid (S442) (S444) to the customer authentication server (140). At this time, it is possible to additionally authenticate whether or not the terminal 120 is valid. That is, it is possible to verify whether the MAC address, IMEI, and IMSI unique number of the terminal are valid. If any one of them fails, the further authentication process is not performed and is interrupted.

When verification of the validity of the short distance communication tag 110, the card to be used for purchase, and the shopping mall information is completed, a biometric information input unit 121 including a camera of the terminal 120, a fingerprint reader, Receives the biometric information, and transmits a registration request to the client authentication server 140 (S450). The biometric information used for the customer authentication is not limited to specific biometric information but may be at least one of various forms of biometric information including a fingerprint, a face, an iris, and a voice.

Also, in the customer registration process, the customer can designate a specific location and register it so that it can not be settled in another place. The area where the card can be used, such as his or her residence or workplace, can be designated using the address or the latitude and longitude coordinates, and the card can not be used in a place other than the designated position. When a customer tries to make an electronic settlement using the short distance communication tag 110, the terminal 120 may receive an attached GPS (Global Positioning System) receiver, a gyroscope, an accelerometer and a geomagnetic sensor And transmits the terminal location information to the client authentication server 140. The client authentication processing unit 147 compares the terminal location with the location registered in the client authentication server 140, If the terminal 120 is located in an area outside the range, the card payment can be refused.

The local communication management application 124 receives the password from the input unit 121 and transfers it to the client authentication server 140 in order to manage the local communication tag information, the biometric information, and the terminal information stored in the client authentication server 140 S450). The customer authentication server 140 receives the customer registration request, processes the customer registration request, and transmits the result to the terminal 120. The terminal 120 receives the customer registration result (S460) and transmits the result to the display unit 122 .

5, the terminal 120 receives the authentication information (S510), determines whether or not the local communication management application 124 is installed (S520), and if not installed, Accesses the address of the app store 500 and transmits a download request of the short distance communication application 124 in step S521 and receives it from the app store 500 in step S522.

The local communication management application 124 installed in the terminal 120 transmits the authentication information including the local communication tag serial number, the card information, and the shopping mall information to the client authentication server 140 (S530). However, in the authentication process, the validity can be confirmed by sequentially transmitting the individual information included in the authentication information, and the information necessary for authentication can be collectively transmitted and the result can be received. Fig. 5 shows the latter embodiment.

The customer authentication server 140 inquires the local communication tag serial number to the customer authentication database 142 to check whether it is valid (S531), inquires the shopping mall server 150 about the identifier and the password of the customer who joined the shopping mall (S532), and receives the result (S533). Also, at least one of card information including the card number, validity period, name, CVC, and card password is transmitted to the card payment server (S534), and the result is received (S535). The terminal 120 can also check whether the card is already registered. However, the technical idea of the present invention is not limited by the order of the authentication process of this embodiment.

When the validity check is completed, the customer authentication server 140 transmits the result to the terminal 120 again at step S540. The terminal confirms the validity inquiry result at step S550, and transmits the short distance communication tag 110, 120 are valid, the biometrics information and the local communication password are received and transmitted to the client authentication server 140 (S560). The local communication password can be used for management purposes, such as when the customer authentication server 140 wants to change the customer information. The customer authentication server 140 stores the local communication tag information, the terminal information, the biometric information, and the local communication password in the customer authentication database 142 to register the customer (S561) and transmits the result to the terminal 120. [

6 and 7 are flowcharts of a card settlement process according to an embodiment of the present invention.

FIG. 6 shows an example of a settlement process for purchasing goods in the terminal 120 of the present embodiment, and FIG. 7 illustrates an example of a flow of a settlement process in the electronic settlement system according to the present embodiment. 6 and 7 will be described in detail below.

6, the customer can access the shopping mall server 150 through the browser 128 of the terminal 120 to purchase goods or services. When the short distance communication tag 110 is connected to the terminal 120, the browser can automatically access the address of the shopping mall included in the short distance communication tag 110. The browser determines the item to be purchased through the browser and requests payment, and the browser transmits the session token and the price information to the short-range communication management application 124. The local communication management application 124 must transmit the authentication information stored in the local communication tag 110 and the biometric information received from the biometric information input unit 121 to the client authentication server 140 for settlement. At this time, the location information of the terminal 120 received from the location information collection unit 129 may be transmitted to the client authentication server 140 together.

When the customer determines goods or services to be purchased at the shopping mall server 150 through the browser 128, the purchase price is determined. At this time, the browser calls the local communication management application (S610) and transmits the purchase price information and the session token. The called local communication management application 124 waits for the local communication tag 110 to be connected via the communication unit 123 and receives the authentication information and the card information for payment from the local communication tag 110 when the local communication tag 110 is connected ).

The local communication management application 124 determines whether the serial number of the local communication tag 110 is valid (S630), whether the card to be used for the purchase is valid (S632), whether the terminal is valid using the terminal unique number (S634 , It is confirmed whether or not the biometric information collected from the customer matches the previously stored biometric information (S636), and whether or not the shopping mall information is valid (S638). At this time, the location information of the terminal 120 can be received and it can be confirmed whether or not it is within a predetermined range of previously registered location information. When the authentication process is completed, the card payment processing unit 128 of the terminal 120 transmits a card approval request to the customer authentication server 140 (S640).

7, the local area communication management application 124 of the terminal 120 receives authentication information and payment information from the local area communication tag 110 (S710), receives biometric information from the biometric information input unit 121, To the server 140 (S720) and requests authentication. The customer authentication server 140 inquires and verifies the serial number of the short distance communication tag in the customer database 142 (S721), and transmits card information including at least one of the card number, name, validity period, CVC, Transmits it to the payment server 160 to request card verification (S722) and receives the result (S723).

The customer authentication server 140 inquires the customer authentication database 142 to verify whether the terminal 120 is valid or not (S724), and the biometric information received from the terminal 120 is stored in the customer authentication database 142 (S725). The validity of the shopping mall information is inquired to the shopping mall server (S726), the result is received (S727), and the authentication result is transmitted to the terminal 120 (S728). However, when the authentication information is transmitted from the terminal 120 to the client authentication server 140 for authentication, the authentication information can be individually transmitted and checked, and the result can be received, and all the authentication information can be collectively transmitted And the result can be received. Fig. 7 is an example of the latter case.

In step S730, the terminal 120 determines whether the validation of the short-distance communication tag, the terminal, and the client has been completed. If any of the short- (S740). The customer authentication server 140 transmits the result to the card settlement server 160 again in step S741 and receives the result in step S742 and transmits the result to the terminal 120 in step S743.

The above-described client authentication server 140, the shopping mall server 150, and the card payment server 160 may be implemented in one device, and each device may be implemented in a combination of two. .

The foregoing description of exemplary embodiments of the present invention has been presented for purposes of illustration and description, and is not intended to be exhaustive or to limit the invention to the precise forms disclosed. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the technical spirit of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas which are within the scope of the same should be interpreted as being included in the scope of the present invention.

110 short distance communication tag 120 terminal
130 communication network 140 client authentication server
150 shopping mall server 160 card payment server

Claims (24)

A short range communication tag including uniquely assigned serial number, card information, and shopping mall information; And
A near field communication management application for processing information received from the tag and a customer who can access the shopping mall server to perform shopping, And a browser for allowing the user to purchase and purchase the content,
A part of the card information including the card number, the expiration date, the name, the CVC and the card password is stored in the terminal, the rest is divided into the tags,
A part of the shopping mall information including the internet address of the shopping mall server, the customer identifier of the shopping mall server, and the customer secret is stored in the terminal and the rest is encrypted and stored in the tags,
A shopping mall server for providing shopping information to the terminal and requesting payment for a product to be purchased;
A customer authentication server for receiving and processing from the terminal a payment request including the serial number, the unique number of the terminal, the shopping mall information, the authentication request including the card information, and the card information; And
And a card payment server for receiving and processing the payment request from the customer authentication server,
Wherein the local area communication management application is activated when the tag approaches the terminal and receives the serial number and the shopping mall information stored in the tag and the shopping mall information from the tag and combines the card information and the shopping mall information stored in the terminal, Transmits the combined card information to the card payment server through the customer authentication server to receive card authentication, and transmits the encrypted shopping mall information to the customer authentication server through the customer authentication server, And transmits the result to the shopping mall server through the authentication server to perform the customer authentication. When all the authentication is successful, the server accesses the internet address of the shopping mall server received from the tag and logs in the shopping mall server.
Receiving, when the tag is connected to the terminal, the card information stored in the tag and storing the card information stored in the terminal; And transmits the encrypted information together with the price information to the card payment server via the customer authentication server to request card approval
And the electronic settlement system.
The method according to claim 1,
The tag,
A serial number storage unit for storing the serial number;
A URI storage unit for storing an Internet address or a URI from which the terminal can download the local area communication management application;
A card information storage for storing at least one of the card information; And
And a communication unit for performing short-range communication with the terminal,
The shopping mall information includes a shopping mall information storage unit for storing at least one
And an electronic settlement system.
3. The method of claim 2,
Wherein the communication unit encrypts information to be transmitted and decrypts the information when the communication unit communicates with the terminal.
The method according to claim 1,
The terminal comprises:
A display unit;
An input unit for receiving a text input;
A biometric information input unit including at least one of a fingerprint recognizer for acquiring fingerprint information, a camera for acquiring face or iris information, and a microphone for acquiring voice information;
A communication unit capable of transmitting and receiving data with the tag; And
A position information collecting unit including at least one of a GPS (Global Positioning System) receiver, a gyro sensor, a geomagnetic sensor,
Lt; / RTI >
Receives an article to be purchased from the browser customer, and transmits purchase price information on the input article to the local communication management application
And the electronic settlement system.
delete delete 5. The method of claim 4,
The short-range communication management application includes:
A customer registration unit for making a customer registration request to the customer authentication server when the tag is not registered in the customer authentication server;
A customer authentication processing unit for receiving a payment request from the browser and performing authentication for payment;
A card settlement processing unit for processing settlement based on an authentication result of the customer authentication processing unit;
A card information storage for storing the card information; And
A shopping mall information storage unit for storing the shopping mall information,
The electronic settlement system comprising:
delete delete 8. The method of claim 7,
Wherein the customer registration unit and the customer authentication processing unit transmit at least one of a MAC address, an IMSI, an IMEI, and a telephone number of the terminal to the client authentication server to receive authentication for the terminal.
The method according to claim 1,
When accessing the shopping mall server through a browser included in the terminal, shopping, determining purchase of an article and requesting payment,
Wherein the browser transmits a session token and price information of the article to the near field communication management application.
The method according to claim 1,
The client authentication server,
A communication unit capable of transmitting and receiving data with the terminal;
A customer registration processor for receiving a customer registration request from the terminal and adding the customer registration request to the customer authentication database;
A customer authentication processing unit for receiving an authentication request including the serial number, the shopping mall information, the card information, the unique number of the terminal, and the biometric information received from the biometric information input unit and performing an authentication process; And
A payment processing unit for receiving the payment request from the terminal based on the processing result of the authentication request and transmitting the payment request to the card payment server,
The electronic settlement system comprising:
13. The method of claim 12,
Wherein the customer registration request includes a serial number of the tag, a unique number of the terminal, the shopping mall information, and the card information,
The customer registration processing unit,
The serial number, and the unique number in the customer authentication database,
Inquiring the shopping mall server about the shopping mall information,
And inquires the card information to the card payment server
Performs registration authentication,
Receives the biometric information from the terminal based on a result of the registration authentication, and registers the serial number, the shopping mall information, the card information, and the biometric information in the customer authentication database.
13. The method of claim 12,
Wherein the customer registration processing unit includes a step of specifying in advance a position where payment can be made from the terminal and receiving the position information corresponding thereto and registering the position information in the customer authentication database
13. The method of claim 12,
The customer authentication processing unit,
The serial number, the unique number, and the biometric information in the customer authentication database,
Inquiring the shopping mall server about the shopping mall information,
The card information is inquired by the card payment server
And authenticates the electronic settlement system.
13. The method of claim 12,
Wherein the client authentication processing unit receives positional information from the terminal and compares the received positional information with positional information registered in the customer authentication database, and authenticates only when the positional information is within a preset range.
delete delete delete delete delete delete delete delete

Images