KR101739119B1 - A Credit/Debit Card Registration Method for Privacy Protection in RFID Systems for Mobile Payment Environments, Enhancing Security and User Convenience - Google Patents

Abstract

The present invention relates to a method for registering a financial payment card in a mobile payment environment which comprises a user terminal, a first and a second payment gateways (PG), and a credit card company server, and registers a financial payment card of a user issued by a credit card company of the credit card company server. The method comprises the steps of: (a) the user terminal being issued a certificate of the financial payment card from the credit card company server through the first PG, and registering the certificate of the financial payment card encrypted by user authentication information on the first PG; and (b) the user terminal receiving the authentication from the credit card company server through the second PG by means of the issued certificate, and registering the certificate of the financial payment card encrypted with the user authentication information on the second PG. In the step of (a), the user terminal transmits the card authentication information of the financial payment card to the credit card company server. In the step of (b), the user terminal transmits only card identification information, a part of the card authentication information of the financial payment card, to the credit card company server. According to the above method for registering a financial payment card, if a financial payment card is registered on one mobile payment service, the financial payment card can be registered on another payment service. Therefore, the financial information and personal data exposure can be minimized and the information can be protected from malicious Android apps stealing the financial information.

Description

[0001] The present invention relates to a method and apparatus for registering a financial settlement card in a mobile payment and settlement environment in which security and user convenience are enhanced.

In order to minimize the exposure of financial information and personal information caused by a malicious Android app attack which masquerades as a mobile payment payment application (App), the mobile phone stores credit card information in one mobile payment service The present invention relates to a method for registering a financial settlement card in a mobile payment settlement environment in which a user can subscribe to another mobile payment settlement service.

Especially, as the number of companies that have personal information and financial information increases due to the proliferation of mobile payment service and the number of customers who use the service, and the frequency of use of mobile payment application (app) of people increases, Of malicious Android apps that are stealing financial information are increasing. Therefore, there is a need to minimize exposure of financial information and personal information.

Existing mobile payment services and related studies are mostly focused on transaction protection. In order to use the mobile payment service, users have to input their own financial payment card information for each service.

Mobile commerce is the use of electronic commerce using the user's mobile device. Mobile commerce has the advantage of allowing users to pay for their desired goods or services anytime, anywhere [Non-Patent Document 1]. Due to these advantages, the mobile commerce market is getting bigger and more recently, the PINTECH service, which is a combination of financial service and IT technology, is continuously being released, and the number of users is increasing rapidly [Non-Patent Documents 2-3, 11].

The problem is that a user who wants to use a mobile payment service can not pay for his or her goods or services in an online shopping mall that supports all mobile payment, even if he or she registers with a mobile payment service. For example, in Korea, there are mobile payment services such as Cacao Pay, Naver Pay, Smile Pay, Syrup Pay, and Paynaw. The major online shopping malls in Korea are 11th Street, G Market, and Auction. Users who use KakaoPay can not make payments through 11th Avenue, Auction, and Gakka through PayPal, but Smile Pay is available in Auction and Gmarket. In addition, Siruppay users can use the 11th Avenue shopping mall [Non-Patent Document 12].

Since each mobile payment provider has different affiliated shopping malls and users are different in their preference for the goods, services or services they want to purchase, users who want to use mobile payment are required to subscribe to various mobile payment services Lt; / RTI >

This means that users are required to enter their credit card information each time they sign up for each mobile payment service and that each mobile payment provider has a large number of users' card information and personal information, And the risk of mobile phishing attacks is increased for users through camouflage ads.

 Elfakharany, S., Amin, A. F., Zaki, M .: Secure Mobile Payment Protocol using Asymmetric Encryption for Authorization. Journal of Network Communications and Emerging Technologies (JNCET). 2 (2), 34-40 (2015)  Boannews, http://www.boannews.com/media/view.asp? idx = 31476  Giyoon, S.: Convenience and stability of FinTech in terms of payment: Tokenization perspective. the Journal of Information Science. 33 (5), 13-16 (2015)  Luo, J. N., Yang, M. H., Huang, S. Y .: An Unlinkable Anonymous Payment. Computers and Electrical Engineering. 49, 198-206 (2016)  Chen, W., Hancke, G. P., Mayes, K. E., Lien, Y., Chiu, J. H .: NFC mobile transactions and authentication based on GSM network. In: 2nd International Workshop on Near Field Communication (NFC), pp. 83-89. IEEE Press, Monaco (2010)  Moon, J., Choi, Y., Kim, J., Won, D .: An Improvement of Robust and Efficient Biometrics Based Password Authentication Scheme for Telecare Medicine Information Systems Using Extended Chaotic Maps. Journal of medical systems. 40 (3), 1-11 (2016)  Choi, Y., Lee, Y., Won, D .: Security Improvement on Biometric Based Authentication Scheme for Wireless Sensor Networks Using Fuzzy Extraction. International Journal of Distributed Sensor Networks. 2016, Article ID 8572410 (2016)  Moon, J., Choi, Y., Jung, J., Won, D .: An Improvement of Robust Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments Using Smart Cards. PloS one. 10 (12), e0145263 (2015)  Choi, Y., Nam, J., Lee, D., Kim, J., Jung, J., Won, D .: Security anonymous multiserver authenticated key agreement scheme using smart cards and biometrics. The Scientific World Journal. 2014, Article ID 281305 (2014)  Kim, J., Lee, D., Jeon, W., Lee, Y., Won, D.: Security analysis and improvements of two-factor mutual authentication with key agreement in wireless sensor networks. Sensors. 14 (4), 6443-6462 (2014)  Statista, http://www.statista.com/statistics/244487/ number-of-us-proximity-mobile-payment-transaction-users /  www.venturesquare, http://www.venturesquare.net/592442  EMVCo, https://www.emvco.com/specifications.aspx?id=263

It is an object of the present invention to solve the above-mentioned problems, and it is an object of the present invention to provide a mobile payment service in a mobile payment environment, Thereby providing a card registration method.

In order to achieve the above object, the present invention provides a mobile payment system, comprising a user terminal, a first and a second payment relay server (PG), and a card issuer server, A method for registering a financial settlement card in a payment settlement environment, the method comprising the steps of: (a) the user terminal issuing a certificate of the financial settlement card from the card issuer server via the first PG to the financial settlement card; Registering a certificate of a financial settlement card encrypted with user authentication information; And (b) causing the user terminal to receive a certificate from the card issuer server via the second PG with the issued certificate, and to register a certificate of the financial settlement card encrypted with the user authentication information in the second PG , The user terminal transmits all of the card authentication information of the financial settlement card to the card issuer server in the step (a), and in the step (b), the user terminal is part of the card authentication information of the financial settlement card And only the card identification information is transmitted to the card issuer server.

Further, the present invention provides a method for registering a financial settlement card in a mobile payment settlement environment, wherein in the step (a) or (b), the user terminal generates and encrypts a first random number, Is transmitted to the card company server via the first or second PG, and only when the first random number is verified by receiving the response message including the first random number from the card issuer server, Transmits the encrypted third random number to the user terminal, receives the third random number included in the message from the user terminal, and transmits the third random number to the user terminal And transmits the certificate of the financial settlement card only when it is verified.

Further, the present invention provides a method for registering a financial settlement card in a mobile payment environment, wherein the user terminal and the first or second PG share a first or a second shared key in advance, and the first or second PG And the card company server shares the third shared key in advance and transmits the first random number to the first or second PG by encrypting the first random number using the first or second shared key in the user terminal, Alternatively, the second PG generates a second random number, encrypts the second random number with the third shared key, and transmits the first random number to the card issuer server by encrypting the first random number with the third shared key.

Further, the present invention provides a method for registering a financial settlement card in a mobile payment environment, wherein the user terminal, the first or second PG, or the card issuer server first transmits a first, second, or third random number Second, or third random number, and generates a private key and a public key, which are asymmetric keys, when the encrypted first, second, or third random number is received, And encrypts and transmits the encrypted data using the asymmetric key.

In the method of registering a financial settlement card in a mobile payment settlement environment, the user terminal, the first or second PG, and the card issuer server together transmit a time stamp indicating a current time when a message is transmitted And to process the message only when the message is received within a predetermined time.

를 발급하고, 카드 인증서

를 PG의 공개키 PK_PGi, 단말의 공개키 PK_Ui로 각각 암호화하여 제1 인증서 메시지 Z₂, 제2 인증서 메시지 Z₃를 생성하고, 사용자 아이디 ID_i, 제1 인증서 메시지 Z₂, 제2 인증서 메시지 Z₃를 제1 PG로 전송하는 단계; (a7) 상기 제1 PG는 제1 인증서 메시지 Z₂를 복호화하고, 카드 인증서

와 사용자 인증정보 ID_i∥PWD_i를 저장하고, 제2 인증서 메시지 Z₃를 사용자 단말 U_i로 전송하는 단계; (a8) 상기 사용자 단말 U_i은, 제2 인증서 메시지 Z₃를 복호화하고, 카드 인증서

를 저장하는 단계를 포함하는 것을 특징으로 한다.In addition, the present invention relates to a financial payment card registration method in a mobile payment environment, step (a), (a1) the user terminal U _i is the user's password PW _i, biometric information BIO _i, Financial payment card Receiving authentication information UCI _i of the authentication information; (a2) The user terminal U _i generates a first random number n ₁ , generates a second password PWD _i with the password PW _i and the biometric information BIO _i , and generates the second password PWD _i with the user ID ID _i and the second password PWD _i Encrypts the user authentication information ID _i ∥PWD _i with the first shared key PSK _{Ui - PGi} , and the first random number n ₁ to the first PG ID PID _i and the first shared key PSK _{Ui - PGi} and the encrypted user authentication information a _i generates a first random number encrypted by a message M _1, and generating a request message M ₂ including the credential ID ∥PWD _{i i} and the first random number n _1, and the user identity ID _i, 2 Transmitting a password PWD _i , a first random number message M ₁ , a request message M ₂ to the first PG PG _i ; (a3) The first PG PG _i checks the user ID ID _i and the second password PWD _i , decrypts the first random number message M ₁ to obtain a decrypted first random number n ₁ ', and transmits a request message M ₂ , generates a second random number n ₂ , generates a public key PK _PGi and a private key SK _PGi , which are asymmetric keys of the PG, and transmits the second PG ID PID _i and the third shared key PSK _{Ui - Si} to the second Generates a second random number message M ₃ by encrypting the random number n ₂ , encrypts the first random number n ₁ 'decrypted with the third shared key PSK _{Ui - Si} to generate a second random number message M ₄ , identity ID _i and the 1 PG ID PID _i, and generating the second request message M ₅ including a second random number n _2, and the user identity ID _i, the public key of the PG PK _PGi, second random message M of _3, Transmitting a secondary first random number message M ₄ , a secondary request message M ₅ to the card issuer server S _i ; (a4) The card issuer server S _i decrypts the second random number message M ₃ to obtain a decoded second random number n ₂ ', checks the secondary request message M ₅ , generates a third random number n ₃ , the resulting asymmetric key is a public key PK _Si, a private key SK _Si on the server, and obtains the secondary first random message M ₄ decodes the decrypted first random number n ₁ ", and decrypting the third random number n ₃ the first random number n ₁ "as the user ID ID _i generates a response message M ₆ encrypted, and decrypted first random number n _1", the third random number n _3, user identity ID _i, public key digital signature by PK _Si of the server Generating a first signature message S ₁ and transmitting the response message M ₆ , the first signature message S ₁ , and the server's public key PK _Si to the user terminal U _i through the first PG; (a5) terminal U _i is, to obtain the third random number n ₃ 'decoded from the response message, M _6, and checks the first signed message S ₁ , The second signed message S ₂ generates an asymmetric key, the public key PK _Ui, a private key SK _Ui of the terminal and the user identity ID _i, and a third random number n ₃ 'The public key of the terminal PK _Ui, decoding the electronic signature generation, and card authentication information of a financial payment card UCI _i and the second signed message S ₂ to encrypt the public key PK _Si on the server to generate a first card message, Z _1, the public key of the terminal PK _Ui as the first card transmitting the information messages Z ₁ to the card company server S _i; (a6) the card company server, S _i is, first decodes the first card message, Z _1, and checks the second signature messages S _2, the card authentication information UCI _i And the card certificate

And a card certificate

The public key PK _PGi of the PG, and the public key PK _Ui of the terminal to generate the first certificate message Z ₂ and the second certificate message Z _{3, respectively,} and generates the user ID ID _i , the first certificate message Z ₂ , Sending a message Z ₃ to the first PG; (a7) wherein PG 1 decrypts the first message certificate Z _2, card certificate

Storing the user authentication information ID _i ∥PWD _i, and sends the second credentials Z ₃ message to the user terminal U _i; (a8) The user terminal U _i decrypts the second certificate message Z ₃ ,

The method comprising the steps of:

를 입력받는 단계; (b2) 상기 사용자 단말 U_i은, 제1 난수 n₁를 생성하고, 상기 비밀번호 PW_i와 생체정보 BIO_i로 제2 비밀번호 PWD_i를 생성하고, 사용자 아이디 ID_i와 제2 비밀번호 PWD_i로 구성된 사용자 인증정보 ID_i∥PWD_i를 제2 공유키 PSK_{Ui - PGj}로 암호화하고, 상기 제1 난수 n₁를 제2 PG의 아이디 PID_j와 제2 공유키 PSK_{Ui - PGj}, 및 암호화된 사용자 인증정보 A_i로 암호화하여 제1 난수 메시지 M₁를 생성하고, 상기 사용자 인증정보 ID_i∥PWD_i와 상기 제1 난수 n₁를 포함하는 요청메시지 M₂를 생성하고, 사용자 아이디 ID_i, 제2 비밀번호 PWD_i, 제1 난수 메시지 M₁, 요청메시지 M₂를 상기 제2 PG PG_j로 전송하는 단계; (b3) 상기 제2 PG PG_j는, 사용자 아이디 ID_i, 제2 비밀번호 PWD_i를 체크하고, 상기 제1 난수 메시지 M₁를 복호화하여 복호화된 제1 난수 n₁'를 획득하고, 요청메시지 M₂를 체크하고, 제2 난수 n₂를 생성하고, PG의 비대칭키인 공개키 PK_PGj, 개인키 SK_PGj를 생성하고, 제1 PG 아이디 PID_j와 제3 공유키 PSK_{Ui - Si} 로 제2 난수 n₂를 암호화하여 제2 난수 메시지 M₃를 생성하고, 제3 공유키 PSK_{Ui - Si} 로 복호화된 제1 난수 n₁'를 암호화하여 2차 제1 난수 메시지 M₄를 생성하고, 상기 사용자 아이디 ID_i와 제2 PG의 아이디 PID_j와 상기 제2 난수 n₂를 포함하는 2차 요청메시지 M₅를 생성하고, 사용자 아이디 ID_i, PG의 공개키 PK_PGj, 제2 난수 메시지 M₃, 2차 제1 난수 메시지 M₄, 2차 요청메시지 M₅를 상기 카드사 서버 S_i로 전송하는 단계; (b4) 상기 카드사 서버 S_i는 상기 제2 난수 메시지 M₃를 복호화하여 복호화된 제2 난수 n₂'를 획득하고, 2차 요청메시지 M₅를 체크하고, 제3 난수 n₃를 생성하고, 서버의 비대칭키인 공개키 PK_Si, 개인키 SK_Si를 생성하고, 2차 제1 난수 메시지 M₄를 복호화하여 복호화된 제1 난수 n₁"를 획득하고, 제3 난수 n₃를 복호화된 제1 난수 n₁"와 사용자 아이디 ID_i로 암호화한 응답 메시지 M₆를 생성하고, 복호화된 제1 난수 n₁", 제3 난수 n₃, 사용자 아이디 ID_i, 서버의 공개키 PK_Si로 전자서명하여 제1 서명 메시지 S₁를 생성하여, 응답 메시지 M₆, 제1 서명 메시지 S₁, 서버의 공개키 PK_Si,를 제2 PG를 통해 사용자 단말 U_i로 전송하는 단계; (b5) 상기 사용자 단말 U_i은, 응답 메시지 M₆로부터 복호화된 제3 난수 n₃'를 획득하고, 제1 서명 메시지 S₁를 체크하고, 사용자 아이디 ID_i, 단말의 공개키 PK_Ui, 복호화된 제3 난수 n₃'를 전자서명하여 제2 서명 메시지 S₂를 생성하고, 금융결제카드의 카드 식별정보 uci_i와 카드 인증서

와 제2 서명 메시지 S₂를 서버의 공개키 PK_Si로 암호화하여 제1 카드정보 메시지 Z₁를 생성하여, 제1 카드정보 메시지 Z₁를 상기 카드사 서버 S_i로 전송하는 단계; (b6) 상기 카드사 서버 S_i는, 제1 카드정보 메시지 Z₁를 복호화하여 제2 서명 메시지 S₂를 체크하고, 카드 인증정보 UCI_i와 카드 인증서

를 검증하고, 사용자 아이디 ID_i와 카드 인증서

를 PG의 공개키 PK_PGi로 암호화하여 제1 인증서 메시지 Z₂를 생성하고, 사용자 아이디 ID_i, 제1 인증서 메시지 Z₂를 제2 PG로 전송하는 단계; (b7) 상기 제2 PG는 제1 인증서 메시지 Z₂를 복호화하고, 카드 인증서

와 사용자 인증정보 ID_i∥PWD_i를 저장하는 단계를 포함하는 것을 특징으로 한다.(B1): (b1) the user terminal U _{i transmits} the password PW _{i of the} user, the biometric information BIO _i , the financial settlement card Identification information uci _i , card certificate

; (b2) consisting of the user terminal U _i is first generates a random number n ₁ and generates the password PW _i and the biometric information a second password by BIO _i PWD _i, and the user identity ID _i and the second password PWD _i Encrypts the user authentication information ID _i ∥PWD _i with the second shared key PSK _{Ui - PGj} , and transmits the first random number n ₁ to the second PG's ID PID _j , the second shared key PSK _{Ui - PGj} , and the encrypted user authentication information a _i generates a first random number encrypted by a message M _1, and generating a request message M ₂ including the credential ID ∥PWD _{i i} and the first random number n _1, and the user identity ID _i, 2 Transmitting a password PWD _i , a first random number message M ₁ , a request message M ₂ to the second PG PG _j ; (b3) The second PG PG _j checks the user ID ID _i and the second password PWD _i , decrypts the first random number message M ₁ to obtain the decrypted first random number n ₁ ', and transmits a request message M ₂ , generates a second random number n ₂ , generates a public key PK _PGj , a private key SK _PGj , which is an asymmetric key of the PG, and generates a second PG ID PID _j and a second shared key PSK _{Ui - Si} Generates a second random number message M ₃ by encrypting the random number n ₂ , encrypts the first random number n ₁ 'decrypted with the third shared key PSK _{Ui - Si} to generate a second random number message M ₄ , identity ID _i and a second PG ID PID _j and generating said second request message M ₅ including a second random number n _2, and the user identity ID _i, the public key of the PG PK _PGj, second random message M of _3, Transmitting a secondary first random number message M ₄ , a secondary request message M ₅ to the card issuer server S _i ; (b4) The card issuer server S _i decrypts the second random number message M ₃ to obtain a decoded second random number n ₂ ', checks the secondary request message M ₅ , generates a third random number n ₃ , the resulting asymmetric key is a public key PK _Si, a private key SK _Si on the server, and obtains the secondary first random message M ₄ decodes the decrypted first random number n ₁ ", and decrypting the third random number n ₃ the first random number n ₁ "as the user ID ID _i generates a response message M ₆ encrypted, and decrypted first random number n _1", the third random number n _3, user identity ID _i, public key digital signature by PK _Si of the server Generating a first signature message S ₁ and transmitting the response message M ₆ , the first signature message S ₁ , and the server's public key PK _Si , to the user terminal U _i via the second PG; (b5) terminal U _i is, to obtain the third random number n ₃ 'decoded from the response message, M _6, and checks the first signed message S ₁ , User identity ID _i, the public key PK of the terminal _Ui, the decoded third random number n ₃ 'to the digital signature generating a second signed messages S _2, and the identification of the financial card payment card information and a card certificate uci _i

And a second step of transmitting a signed message S ₂ to produce a first card message, Z ₁ is encrypted with the public key PK of the server _Si, the first card information messages Z ₁ to the card company server S _i; (b6) The card issuer server S _i decrypts the first card information message Z ₁ to check the second signature message S ₂ , and transmits the card authentication information UCI _i and the card certificate

The user ID < _RTI ID = 0.0 > ID _<

A step of encrypting a public key PK _PGi PG for generating the first certificate message Z _2, and transmits the user identity ID _i, the first certificate to the message, Z ₂ 2 PG; (b7) wherein PG 2 decrypts the first message certificate Z _2, card certificate

And storing the user authentication information ID _i? PWD _i .

The present invention also relates to a computer-readable recording medium on which a program for performing a method of registering a financial settlement card in a mobile payment settlement environment is recorded.

As described above, according to the method for registering the financial settlement card in the mobile payment settlement environment according to the present invention, if a financial settlement card is registered in one mobile payment settlement service, , The disclosure of financial information and personal information can be minimized, and the effect of being protected against malicious Android app attacks which seize financial information can be obtained.

BRIEF DESCRIPTION OF THE DRAWINGS Fig. 1 is a diagram showing a configuration of an overall system for carrying out the present invention; Fig.
FIG. 2 is a table showing a notation for explaining a method of registering a financial settlement card according to the present invention; FIG.
3 is a flowchart illustrating an initial registration method of a financial settlement card in a mobile payment settlement environment according to an embodiment of the present invention.
FIG. 4 is a flowchart illustrating a method of registering another PG of a financial settlement card in a mobile payment settlement environment according to an embodiment of the present invention; FIG.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the drawings.

In the description of the present invention, the same parts are denoted by the same reference numerals, and repetitive description thereof will be omitted.

First, examples of the configuration of the entire system for carrying out the present invention will be described with reference to Fig.

In the present invention, a method of registering a financial settlement card such as a credit card for improved security and user convenience will be described. Even if the user uses various mobile payment services, the user only has to input all his card information once. When a user registers his / her card information in a certain mobile payment service, the user receives a certificate authenticated by a certificate authority (CA) through a credit card company, which registers the user with another mobile payment service .

1, the overall system for carrying out the present invention comprises a mobile terminal 10, a payment application 20, a card issuer server 50, and a plurality of payment relay servers (PG servers) 30 do.

The mobile terminal or user terminal 10 is a mobile terminal such as a smart phone, a tablet PC, a tablet, a PDA, a notebook, etc., which is used by a user. A user performs a payment service using the mobile terminal 10. [

The user holds at least one financial settlement card such as a credit card or a check card, and the financial settlement card is a card issued by a credit card company.

Next, the payment application 20 is an application installed in the mobile terminal 10, and is a mobile application (or an app, an application) that performs payment using a credit card or a credit card such as a check card.

In particular, the payment application 20 is a mobile payment payment application (app) provided by a payment gateway (PG) 30. The user registers a financial payment card such as his credit card, You want to use the registered financial payment card when you pay.

Next, the payment relay server (PG) 30 is a mobile payment service provider that authenticates a user for purchase in a mobile shopping environment. That is, the payment relay server 30 is a server of a mobile payment service provider that authorizes the payment of a financial payment card such as a credit card for purchasing a user in a mobile shopping environment (or a mobile payment settlement environment).

The payment relay server PG may be constituted by a plurality of PGs. The PG which the mobile terminal 10 registers the user's financial settlement card for the first time is referred to as a first PG 31, PG (32).

Next, the card issuer server 50 is a server of a financial institution issuing a financial settlement card such as a credit card / check card to the user. That is, the card company is a financial institution that issued a credit card to the user. The card company or card company server 50 stores and manages the information of the cardholder and issuance information (card number, CVC, expiration date, issue date, etc.) of the financial settlement card issued to them. When the authentication processing of the card holder (or the user) is completed, the card company issues a certificate authenticated to the cardholder using the mobile payment service through the certification authority (CA).

Also, the notations used for the following explanation are shown in the table of FIG.

On the other hand, the overall system for carrying out the present invention is as follows.

That is, the user assumes that he / she has registered his / her mobile terminal 10 with the payment relay server (PG) using the International Mobile Subscriber Identity (IMSI) and the MAC address. The user terminal 10 and the payment relay server (PG) 30 share the pre-shared key PSK _{Ui - PGi} and the PG 30 and the card issuer server 50 also share the pre-shared key pre-shared key PSK _{PGi - Si} . It is assumed that the user's ID, password, and biometrics are already registered in the payment relay server (PG) 30.

Next, a method of registering a financial settlement card in a mobile payment settlement environment according to an embodiment of the present invention will be described with reference to FIGS. 3 and 4. FIG.

The financial settlement card registration method according to the present invention is divided into an initial registration step (S10) of a financial settlement card and a registration step (S20) of another PG.

First, the initial registration step S10 of the financial settlement card will be described.

At this stage, the user first tries to use the mobile payment service and wants to register his / her credit card information. When the user inputs all of his / her card information and is authenticated, a certificate is issued. The detailed steps are shown in FIG.

First, the user of the mobile terminal U _i must enter the password PW _i, biometric information BIO _i, all the information about the financial payment cards such as credit cards UCI _i (your name, card number, expiration date, card password, CVC) (S11 ).

All the information of the financial settlement card is all information (predetermined information) for authenticating card possession, hereinafter referred to as card authentication information. In addition, some of the card authentication information may be used as information for identifying the card. For example, some of the card information such as a part of the card number and the user name can be used as the card identification information. Hereinafter, a part of all information of the card (or a part of the card authentication information) will be referred to as card identification information. That is, the card authentication information is information capable of authenticating the card as all card information, and the card identification information is information that can identify the card as a part of the card authentication information. In addition, the card can not be authenticated only by the card identification information.

Then, the user terminal U _i generates a random number n ₁ and calculates PWD _i , A _i , M ₁ , and M _{2 according} to the following equation (S12).

[Equation 1]

,

,

&Quot; (2) "

&Quot; (3) "

&Quot; (4) "

And transmits the login request message {ID _i , PWD _i , M ₁ , M ₂ , T ₁ } to the payment relay server (or the payment gateway) PG _i . Where T ₁ is the current timestamp.

Then checks, after receiving a message to the user terminal U _i, a payment transaction server PG _i is T ₁ is checked for within that the (fresh) a predetermined time (the time determined in advance), and ID _i and PWD _i a registered user or do.

Then PG _i calculates n ₁ '(S13).

&Quot; (5) "

이 같은지 검사한다.And M ₂ and had sent

Check if this is the same.

If equal, U _i generates a random number n ₂ and asymmetric keys PK _PGi , SK _PGi .

Then, M ₃ , M ₄ , and M ₅ are calculated as shown in the following equation.

&Quot; (6) "

&Quot; (7) "

&Quot; (8) "

를 카드사 서버 S_i에게 전송한다. 이때 T₂은 현재 타임스탬프(current timestamp)이다.And

To the card company server S _i . Where T ₂ is the current timestamp.

Next, after receiving the message from PG _i , the card issuer server S _i checks whether T ₂ is fresh (S14).

If so, S _i calculates n ₂ 'as shown in the following equation.

&Quot; (9) "

와 같은지 검사하고, 만약 이 2개가 같다면 S_i는 난수 n₃와 비대칭키 PK_Si, SK_Si를 생성한다.M ₅ is received and transmitted

And if these two are the same, S _i generates random number n ₃ and asymmetric keys PK _Si , SK _Si .

Then, n ₁ , M ₆ , and the signature message S ₁ are calculated.

&Quot; (10) "

&Quot; (11) "

&Quot; (12) "

을 전송한다. 이때 T₃은 현재 타임스탬프(current timestamp)이다.Then, the user terminal U _i

Lt; / RTI > Where T ₃ is the current timestamp.

Next, after receiving the message to S _i , U _i checks if T ₃ is fresh (S 15). If so, U _i computes n ₃ 'and examines S1 as follows:

&Quot; (13) "

Then, U _i generates the PK _Ui, SK _Ui.

Then calculate S ₂ as in the following equation and then calculate Z ₁ .

&Quot; (14) "

&Quot; (15) "

And transmits {PK _Ui , Z ₁ , T ₄ } to the card company server S _i . Where T ₄ is the current timestamp.

Next, after receiving the message from U _i , the card issuer server S _i checks whether T ₄ is fresh (S 16). If so, S _i decodes Z ₁ and checks S ₂ .

(이 인증서는 인증서 시리얼 번호, 발급자, 발급 날짜, 인증서 유효기간, 사용자 카드 유효기간, 사용자 이름, 사용자의 공개키 등을 포함한다)를 발급한다.Then, by verifying the user's card information, it is checked whether U _i is a proper card holder,

(Which includes the certificate serial number, issuer, issuance date, certificate expiration date, user card expiration date, user name, user's public key, etc.).

Then, S _i computes Z ₂ and Z ₃ and sends {ID _i , Z ₂ , Z ₃ , T ₅ } to PG. Where T ₅ is the current timestamp.

&Quot; (16) "

&Quot; (17) "

를 저장한다(S17).Next, after receiving the message to S _i , PG _i checks if T ₅ is fresh, decrypts Z ₂ and gets a certificate

(S17).

It then sends Z ₃ to U _i .

Next, after receiving the message from PG _i , the user terminal U _i checks whether T ₆ is fresh, decrypts Z ₃ , obtains the certificate, and stores it (S 18).

Next, another PG registration step (S20) of the financial settlement card will be described with reference to FIG. That is, a process of registering the financial settlement card in the payment relay server PG will be described.

In this step S10, the user is the user who has already completed the initial credit / debit card registration S10 of the financial settlement card. Therefore, the user already has the certificate issued by the credit card company. In this step (S20) to register other mobile payment services will look similar to the initial registration step (S10), his card all UCI _i to enter their certificate and some card rather than only uci _i It is different in terms of input. Details are shown in Fig.

를 입력한다(S21).First, the mobile terminal U _i of the user inputs some information uci _i of the information on the financial settlement card such as the password PW _i , biometric information BIO _i ,

(S21).

Then, the user terminal U _i generates a random number n ₁ and calculates PWD _i , A _i , M ₁ , and M ₂ as shown in the following equation (S22).

&Quot; (18) "

,

,

&Quot; (19) "

&Quot; (20) "

&Quot; (21) "

And transmits the login request message {ID _i , PWD _i , M ₁ , M ₂ , T ₁ } to the second payment relay server (or the payment gateway) PG _j . Where T ₁ is the current timestamp.

Next, a check whether the user terminal after receiving a message to U _i, a payment transaction server PG _j T ₁ is the fresh (S23).

Then, PG _j computes n ₁ '.

&Quot; (22) "

이 같은지 검사한다.And M ₂ and had sent

Check if this is the same.

If equal, U _i generates random number n ₂ and asymmetric keys PK _PGj , SK _PGj .

Then, M ₃ , M ₄ , and M ₅ are calculated as shown in the following equation.

&Quot; (23) "

&Quot; (24) "

&Quot; (25) "

를 카드사 서버 S_i에게 전송한다. 이때 T₂은 현재 타임스탬프(current timestamp)이다.And

To the card company server S _i . Where T ₂ is the current timestamp.

Next, after receiving the message from the PG _j , the card issuer server S _i checks whether T ₂ is fresh (S24).

If so, S _i calculates n ₂ 'as shown in the following equation.

&Quot; (26) "

와 같은지 검사하고, 만약 이 2개가 같다면 카드사 서버 S_i는 난수 n₃를 생성한다.M ₅ is received and transmitted

And if the two are the same, the card issuer server S _i generates a random number n ₃ .

Then, n ₁ , M ₆ , and the signature message S ₁ are calculated.

&Quot; (27) "

&Quot; (28) "

&Quot; (29) "

을 전송한다. 이때 T₃은 현재 타임스탬프(current timestamp)이다.Then, the user terminal U _i

Lt; / RTI > Where T ₃ is the current timestamp.

Next, after receiving the message to S _i , U _i checks if T ₃ is fresh (S 15). If so, U _i computes n ₃ 'as in the following equation and checks S ₁ .

&Quot; (30) "

Then, U _i computes S ₂ as in the following equation and then computes Z ₁ .

&Quot; (31) "

(32)

And transmits {Z ₁ , T ₄ } to the card company server S _i . Where T ₄ is the current timestamp.

Next, after receiving the message from U _i , the card issuer server S _i checks whether T ₄ is fresh (S26). If so, S _i decodes Z ₁ and checks S ₂ .

를 이용하여 사용자를 검증함으로써 U_i가 적합한 카드 소지자 인지 검사한다.Then, some information of the user's card and the certificate of the uci _i user

To verify that U _i is a suitable cardholder.

Then, S _i computes Z ₂ and sends {ID _i , Z ₂ , T ₅ } to PG. Where T ₅ is the current timestamp.

&Quot; (33) "

를 저장한다(S27).Next, after receiving the message from S _i , PG _j checks if T ₅ is fresh, decrypts Z ₂ and obtains a certificate

(S27).

Although the present invention has been described in detail with reference to the above embodiments, it is needless to say that the present invention is not limited to the above-described embodiments, and various modifications may be made without departing from the spirit of the present invention.

10: user terminal / mobile terminal 20: payment application
30: Payment relay server (PG) 50: Card issuer server

Claims (8)

A financial settlement card registration in a mobile payment settlement environment comprising a user terminal, a first and a second settlement relay server (PG), and a credit card company server and registering a financial settlement card of a user issued by a card company of the credit card company server In the method,
(a) the user terminal issues a certificate of the financial settlement card from the card issuer server through the first PG, and registers a certificate of the financial settlement card encrypted with the user authentication information in the first PG; And
(b) causing the user terminal to receive a certificate from the card issuer server via the second PG with the issued certificate and to register a certificate of the financial settlement card encrypted with the user authentication information in the second PG,
In the step (a), the user terminal transmits all of the card authentication information of the financial settlement card to the card company server,
Wherein the user terminal transmits only the card identification information, which is a part of the card authentication information of the financial settlement card, to the card issuer server in the step (b).
The method according to claim 1,
In the step (a) or (b), the user terminal generates and encrypts a first random number, transmits the encrypted first random number to the card company server via the first or second PG, Transmits the card authentication information or the card identification information of the financial settlement card to the card issuer server only when the response message including the first random number is received from the server and the first random number is verified,
The credit card company generates and encrypts a third random number, transmits the encrypted third random number to the user terminal, and only when receiving and verifying the third random number contained in the message from the user terminal, Wherein the method further comprises the step of transferring the financial settlement card in the mobile payment < RTI ID = 0.0 > environment. ≪ / RTI >
3. The method of claim 2,
Wherein the user terminal and the first or second PG share a first or a second shared key in advance and the first or second PG and the card company server share the third shared key in advance,
Wherein the user terminal encrypts a first random number using the first or second shared key and transmits the first random number to the first or second PG,
Generating a second random number in the first or second PG, encrypting the second random number with the third shared key, encrypting the first random number with the third shared key, and transmitting the encrypted random number to the card issuing server How to register a financial payment card.
The method of claim 3,
When the first, second, or third random number is transmitted first, the user terminal, the first or second PG, or the card issuer server encrypts the first, second, or third shared key using the first, second, or third shared key And generates a private key and a public key, which are asymmetric keys, when the encrypted first, second, or third random number is received, and transmits the encrypted private key and the public key by using the asymmetric key. How to register your financial payment card.
The method according to claim 1,
Wherein the user terminal, the first PG, the second PG, and the card company server together transmit a time stamp indicating a current time when a message is transmitted, and process the message only when the message is received within a predetermined time period How to register a financial payment card in a mobile payment environment.
The method of claim 1, wherein the step (a)
(a1) the user terminal U _i receiving a user's password PW _i , biometric information BIO _i , authentication information UCI _i of the financial settlement card;
(a2) The user terminal U _i generates a first random number n ₁ , generates a second password PWD _i with the password PW _i and the biometric information BIO _i , and generates the second password PWD _i with the user ID ID _i and the second password PWD _i Encrypts the user authentication information ID _i ∥PWD _i with the first shared key PSK _{Ui - PGi} , and the first random number n ₁ to the first PG ID PID _i and the first shared key PSK _{Ui - PGi} and the encrypted user authentication information a _i generates a first random number encrypted by a message M _1, and generating a request message M ₂ including the credential ID ∥PWD _{i i} and the first random number n _1, and the user identity ID _i, 2 Transmitting a password PWD _i , a first random number message M ₁ , a request message M ₂ to the first PG PG _i ;
(a3) The first PG PG _i checks the user ID ID _i and the second password PWD _i , decrypts the first random number message M ₁ to obtain a decrypted first random number n ₁ ', and transmits a request message M ₂ , generates a second random number n ₂ , generates a public key PK _PGi and a private key SK _PGi , which are asymmetric keys of the PG, and transmits the second PG ID PID _i and the third shared key PSK _{Ui - Si} to the second Generates a second random number message M ₃ by encrypting the random number n ₂ , encrypts the first random number n ₁ 'decrypted with the third shared key PSK _{Ui - Si} to generate a second random number message M ₄ , identity ID _i and the 1 PG ID PID _i, and generating the second request message M ₅ including a second random number n _2, and the user identity ID _i, the public key of the PG PK _PGi, second random message M of _3, Transmitting a secondary first random number message M ₄ , a secondary request message M ₅ to the card issuer server S _i ;
(a4) The card issuer server S _i decrypts the second random number message M ₃ to obtain a decoded second random number n ₂ ', checks the secondary request message M ₅ , generates a third random number n ₃ , the resulting asymmetric key is a public key PK _Si, a private key SK _Si on the server, and obtains the secondary first random message M ₄ decodes the decrypted first random number n ₁ ", and decrypting the third random number n ₃ the first random number n ₁ "as the user ID ID _i generates a response message M ₆ encrypted, and decrypted first random number n _1", the third random number n _3, user identity ID _i, public key digital signature by PK _Si of the server Generating a first signature message S ₁ and sending a response message M ₆ , a first signature message S ₁ , a server's public key PK _Si , to the user terminal U _i via the first PG;
(a5) the user terminal U _i is a response message M ₆ obtain the third random number n ₃ 'decoded from the first signed message checks the S _1, and the asymmetric key is a public terminal key PK _Ui, and the private key SK generate _Ui, and the user identity ID _i, the third random number n ₃ 'the public key of the terminal PK _Ui, decrypting the digital signature by generating a second signature messages S _2, and card authentication information of a financial payment card UCI _i and the 2 signed message to the S ₂ encrypted with the public key PK _Si of the server generates a first card message, Z _1, further comprising: transmitting a public key PK _Ui in the first card information messages Z ₁ of the terminal to the card company server S _i ;
(a6) The card issuer server S _i decrypts the first card information message Z ₁ to check the second signature message S ₂ , verifies the card authentication information UCI _i ,

And a card certificate

The public key PK _PGi of the PG, and the public key PK _Ui of the terminal to generate the first certificate message Z ₂ and the second certificate message Z _{3, respectively,} and generates the user ID ID _i , the first certificate message Z ₂ , Sending a message Z ₃ to the first PG;
(a7) wherein PG 1 decrypts the first message certificate Z _2, card certificate

Storing the user authentication information ID _i ∥PWD _i, and sends the second credentials Z ₃ message to the user terminal U _i;
(a8) The user terminal U _i decrypts the second certificate message Z ₃ ,

The method comprising the steps of: storing the payment card in a mobile payment < RTI ID = 0.0 > environment. ≪ / RTI >
The method of claim 1, wherein the step (b)
(b1) the user terminal U _i is the identification information of the user's password PW _{i, i} BIO biometric information, financial payment card uci _i, card certificate

;
(b2) consisting of the user terminal U _i is first generates a random number n ₁ and generates the password PW _i and the biometric information a second password by BIO _i PWD _i, and the user identity ID _i and the second password PWD _i Encrypts the user authentication information ID _i ∥PWD _i with the second shared key PSK _{Ui - PGj} , and transmits the first random number n ₁ to the second PG's ID PID _j , the second shared key PSK _{Ui - PGj} , and the encrypted user authentication information a _i generates a first random number encrypted by a message M _1, and generating a request message M ₂ including the credential ID ∥PWD _{i i} and the first random number n _1, and the user identity ID _i, 2 Transmitting a password PWD _i , a first random number message M ₁ , a request message M ₂ to the second PG PG _j ;
(b3) The second PG PG _j checks the user ID ID _i and the second password PWD _i , decrypts the first random number message M ₁ to obtain the decrypted first random number n ₁ ', and transmits a request message M ₂ , generates a second random number n ₂ , generates a public key PK _PGj , a private key SK _PGj , which is an asymmetric key of the PG, and generates a second PG ID PID _j and a second shared key PSK _{Ui - Si} Generates a second random number message M ₃ by encrypting the random number n ₂ , encrypts the first random number n ₁ 'decrypted with the third shared key PSK _{Ui - Si} to generate a second random number message M ₄ , identity ID _i and a second PG ID PID _j and generating said second request message M ₅ including a second random number n _2, and the user identity ID _i, the public key of the PG PK _PGj, second random message M of _3, Transmitting a secondary first random number message M ₄ , a secondary request message M ₅ to the card issuer server S _i ;
(b4) The card issuer server S _i decrypts the second random number message M ₃ to obtain a decoded second random number n ₂ ', checks the secondary request message M ₅ , generates a third random number n ₃ , the resulting asymmetric key is a public key PK _Si, a private key SK _Si on the server, and obtains the secondary first random message M ₄ decodes the decrypted first random number n ₁ ", and decrypting the third random number n ₃ the first random number n ₁ "as the user ID ID _i generates a response message M ₆ encrypted, and decrypted first random number n _1", the third random number n _3, user identity ID _i, public key digital signature by PK _Si of the server the method comprising: the first signature to generate a message S _1, transmitting a response message M _6, the first signed message S _1, the public key PK of the server _Si, the over the PG 2 to the user terminal U _i;
(b5) The user terminal U _i obtains a third random number n ₃ 'decrypted from the response message M ₆ , checks the first signature message S ₁ , decrypts the user ID _i , the public key PK _{Ui of the} terminal, Generates a second signature message S ₂ by digitally signing the third random number n ₃ 'and transmits the card identification information uci _i of the financial settlement card and the card certificate

And a second step of transmitting a signed message S ₂ to produce a first card message, Z ₁ is encrypted with the public key PK of the server _Si, the first card information messages Z ₁ to the card company server S _i;
(b6) The card issuer server S _i decrypts the first card information message Z ₁ to check the second signature message S ₂ , and transmits the card authentication information UCI _i and the card certificate

The user ID < _RTI ID = 0.0 > ID _<

A step of encrypting a public key PK _PGi PG for generating the first certificate message Z _2, and transmits the user identity ID _i, the first certificate to the message, Z ₂ 2 PG;
(b7) wherein PG 2 decrypts the first message certificate Z _2, card certificate

And storing the user authentication information ID _i? PWD _i in the mobile payment environment.
A computer-readable recording medium having recorded thereon a program for performing a method of registering a financial settlement card in a mobile payment and settlement environment according to any one of claims 1 to 7.

Images