KR101751887B1 - Method for generating one-time card code, approving card payment, reader and server thereof - Google Patents

Abstract

The present invention relates to a method of generating a one-time card code, a card payment acceptance method using the same, a card reader and a server, and more particularly, to a card reader and a server. Generating a random code using a secret key and time information assigned to the card reader; And generating a one-time card code for identifying the card using the generated random code and the acquired card number.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method of generating a one-time card code, a card payment method using the same, a card reader and a server,

The present invention relates to a method of generating a disposable card code using a card number obtained using a card reader in a payment system.

Typically, a card payment terminal is equipped with a magnetic stripe reader (MSR) module for reading the encoded card information on the magnetic strip of the card. At this time, the card information read through the magnetic strip reader is in the form of an analog signal and is in an unencrypted plaintext information state.

In addition, an IC card called a smart card is a card having a microprocessor and a memory, and can store and process information in the card, thereby minimizing the risk of forgery and alteration of the magnetic card and providing a variety of services . The storage capacity is higher than that of the conventional magnetic card, so that it is possible to perform various additional functions requiring additional information storage, and the security problem can be improved.

IC card is divided into contact type and non-contact type depending on the method of use. The contact type IC card is a type of IC card having a metal pattern on the front face of a card. The contactless type IC card includes a module and an antenna So that card information can be read through an IC card reader provided in the card payment terminal.

Such a card settlement terminal is generally connected to a relay server or a VAN company server through a dedicated on / off line to perform a credit card settlement service. In this case, there is a problem that personal information such as a card number used for payment is leaked to the outside by hacking or the like and is abused.

It is an object of the present invention to provide a method of generating a one-time card code capable of improving the security of a card number and the like, a card payment acceptance method using the same, a card reader and a server.

According to another aspect of the present invention, there is provided a method of generating a one-time use card code, the method comprising: generating a disposable card code to be used for settlement in a card reader; reading a card to be used for settlement; Generating a random code using a secret key and time information assigned to the card reader; And generating a disposable card code for identifying the card using the generated random code and the acquired card number.

The method of accepting a credit card according to an embodiment of the present invention includes the steps of: accepting a card settlement using a disposable card code in a settlement server; receiving an approval request text generated using a disposable card code from a settlement terminal; Generating a random code using a secret key and time information of a card reader connected to the payment terminal; Obtaining an actual card number to be used for settlement using the generated random code and the disposable card code extracted from the approval request telegram; And processing approval for card settlement using the obtained card number.

A card reader according to an embodiment of the present invention includes a reader unit for reading a card to be used for settlement and obtaining a card number; A code generator for generating a random code using the secret key and the time information given to the card reader and generating a disposable card code for identifying the card using the generated random code and the obtained card number; And an interface unit for transmitting the generated disposable card code to the payment terminal.

The payment server according to an embodiment of the present invention includes a communication unit for receiving an approval request telegram generated using a disposable card code from a payment terminal device; A code generator for generating a random code using a secret key and time information of a card reader connected to the payment terminal; A card number obtaining unit for obtaining an actual card number to be used for settlement using the generated random code and the disposable card code extracted from the approval request text; And an approval processing unit for processing approval for card settlement using the obtained card number.

Meanwhile, the disposable card code generation method may be embodied as a computer-readable recording medium on which a program for execution by a computer is recorded.

According to an embodiment of the present invention, a one-time use card code is generated in a card reader by using a secret key and a card number unique to the card reader, and used for payment, thereby preventing leakage of a card number due to hacking, .

In addition, the disposable card code generated using the secret key and the card number has randomness according to the time information, and uniqueness for identifying the card can be assured.

1 is a block diagram showing an embodiment of a billing system according to the present invention.
2 is a block diagram showing a configuration of a card reader according to an embodiment of the present invention.
3 is a flowchart illustrating a method of generating a disposable card code according to an embodiment of the present invention.
4 is a diagram showing an embodiment of a configuration of payment approval details stored in a payment terminal device.
5 is a block diagram illustrating a configuration of a payment server according to an embodiment of the present invention.
6 is a flowchart illustrating a card payment approval method according to an embodiment of the present invention.
FIG. 7 is a block diagram illustrating another embodiment of a billing system according to the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when a part is referred to as "including " an element, it does not exclude other elements unless specifically stated otherwise.

In this specification, the term " part " includes a unit realized by hardware, a unit realized by software, and a unit realized by using both. Further, one unit may be implemented using two or more hardware, or two or more units may be implemented by one hardware.

In this specification, some of the operations or functions described as being performed by the terminal or the device may be performed in the server connected to the terminal or the device instead. Similarly, some of the operations or functions described as being performed by the server may also be performed on a terminal or device connected to the server.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings.

FIG. 1 is a block diagram of a billing system according to an embodiment of the present invention. The billing system 10 includes a card reader 100, a payment terminal 200, and a payment server 200 And the like.

1, the card reader 100 includes a reader unit (for example, a magnetic reader, an IC card reader, or an NFC reader) for reading card information from a buyer's card, And supplies the acquired card information to the payment terminal device 200.

In the case where a payment is made using a credit card or the like at an affiliated store equipped with the settlement terminal device 200, the settlement terminal device 200 transmits an approval request for the card settlement using the card number or the like received from the card reader 100 And transmits it to the payment server 300.

The payment terminal device 200 may be a device such as a personal computer (PC), a mobile phone, a tablet, or the like capable of communicating with the payment server 300 using a wired or wireless Internet, but the present invention is not limited thereto.

According to one embodiment of the present invention, besides the functions described above, the payment terminal device 200 may be implemented in the form of a point-of-sale (POS) system in combination with a store sales system, or may be implemented using a wireless Internet or a public telephone network And may be implemented in the form of a CAT (Card Authorization Terminal) that communicates with the payment server 300.

In this case, the card reader 100 may be included in the payment terminal device 200 provided at the merchant.

In addition, the payment terminal device 200 may be implemented by installing an application for payment processing in a portable terminal such as a smart phone. In this case, the card reader 100 may be connected to the payment terminal device 200 ).

In FIG. 1, the payment server 300 is illustrated as a single server type for convenience of description. However, the present invention is not limited thereto. (Or means) can be implemented in the form of two or more server groups, and the present invention is characterized by including all the methods that can be inferred.

For example, the payment server 300 may include a payment agency server operated by a van (VAN) company and a card company server operated by a card company, and the payment terminal device 200 may be a billing agency The transaction can be completed by accepting the card payment approval from the card company server through the server.

The billing terminal 200 and the billing agency server of the company are connected to each other through a predetermined network (for example, the telephone Internet). The billing agency server and the credit card company, which is a transaction approval system of the credit card company, Can be connected.

The settlement proxy server transmits the payment approval request received from the payment terminal 200 to the card company server and receives the approval result message from the card company server that has approved the card payment.

For example, the payment agency server may read the credit card company information included in the user information in the approval request text and transmit data related to the transaction approval request to the card company server of the credit card company in order to request the card payment approval.

Upon receiving the data related to the transaction approval request, the card company server compares the user information, the product order information, the payment amount, and the merchant information included in the data related to the transaction approval request with its member data or merchant data, Confirm whether the transaction between merchants is valid.

On the other hand, the card company server transmits the transaction approval result for the transaction approval request to the payment agent server of the relaying agency of the payment approval request. The payment agent server stores the authorization number data, Lt; / RTI >

Then, the payment agent server transmits the approval result message to the payment terminal device 200, and the payment terminal device 200 that normally receives the approval result message can transmit an acknowledgment (ACK) message to the payment agent server.

On the other hand, the payment agent server that has normally received the confirmation message from the payment terminal device 200 may transmit a completion message to the payment terminal device 200 to notify that the confirmation message is normally received.

Thereafter, the settlement terminal device 200 that has normally received the completion message according to the above-described procedure can output the sales slip according to the payment approval.

The card reader 100 encrypts at least a part of the acquired card information, for example, the card number, with a predetermined encryption key by reading the card for security purposes, and transmits the encrypted card information to the payment terminal device 200 And the payment terminal device 200 can transmit the payment approval request message including the encrypted card number to the payment server 300. [

The payment server 300 can extract the encrypted card number from the payment approval request message received from the payment terminal 200 and decrypt the extracted card number to process approval for the payment.

According to one embodiment of the present invention, the card reader 100 generates a one-time card code using a unique secret key and a card number, and allows a virtual one-time card code other than the actual card number to be used for card settlement, It is possible to prevent leakage of a card number due to hacking or the like in communication between the reader 100 and the settlement terminal 200 or between the settlement terminal 200 and the settlement server 300 to improve security.

2 is a block diagram illustrating a configuration of a card reader according to an exemplary embodiment of the present invention. The card reader 100 includes a reader 110, a code generator 120, and an interface 130 can do.

Referring to FIG. 2, the reader unit 110 may acquire a card number by reading a card to be used for settlement.

The code generator 120 generates a random code using the secret key and the time information provided to the card reader 100 and generates a random code using the generated random code and the card number obtained through the reader 110 It is possible to generate a one-time card code for identifying the card.

Here, the secret key is given to the card reader 100 by the payment server 300 for the generation of a random code, and is stored in the memory 140 when the card reader 100 is manufactured, 100 may be connected to the settlement terminal 200 and stored in the memory 140 after being received from the payment server 300 at the time of initial registration for use.

Meanwhile, the interface unit 130 may transmit the disposable card code generated by the code generation unit 120 to the payment terminal apparatus 200. [

FIG. 3 is a flowchart illustrating a method of generating a disposable card code according to an exemplary embodiment of the present invention. Referring to FIG. 3, a method of generating a disposable card code in a card reader 100 having a configuration as shown in FIG.

3, the reader unit 110 of the card reader 100 reads a card to be used for settlement to acquire a card number (step S300), and the code generation unit 120 reads the card number The random code is generated using the secret key and the time information (step S310).

For example, the code generator 181 generates a random code using a secret key given to the card reader 100 and time information corresponding to the current time, and the random code is a disposable May be generated in a manner similar to a password (OTP, One Time Password).

The time information may be set to a current time corresponding to a time point at which the random code is generated, or may be information that is changed in a predetermined time unit. For example, when the time information is changed in units of one minute, the random code generated in the same terminal device may be changed randomly every minute based on the current time.

The secret key may be received from the payment server 300 and stored in the memory 140 before step S310.

If the secret key unique to the card reader 100 for generating the random code is not stored in the memory 140 before the step S310, the card reader 100 transmits the random code to the payment terminal 200 through the settlement terminal 200 The server 300 can request and receive the grant of the secret key.

The code generating unit 120 generates a one-time card code for identifying the card using the random code generated in step S310 and the card number obtained in step S300 (step S320).

For example, the card reader 100 may obtain a character set for mapping the disposable card code in addition to the unique secret key for generating the random code.

In this case, the code generation unit 120 generates the first sub-code by mapping the sum of the random number and the card number generated in step S310 to the character set, maps the random code to the character set, 2 subcode, and generate the disposable card code using the first server code and the second subcode.

More specifically, the code generation unit 120 may generate the first sub-code by mapping the result obtained by adding the card number to the random code to the character set.

Alternatively, the code generation unit 120 may perform a mode operation on the result of summing up the card number and the random code with the size of the character set, map the result of the mode operation to a character set, May be generated.

Also, the code generator 120 may generate a first subcode by applying a preset offset to the sum of the card number and the random code, and mapping the result of applying the offset to the character set.

Then, the code generator 120 performs a mode operation on the result of the summing applied with the offset to the size of the character set, maps the result of the mode operation on the result of the mode operation to the character set, .

The code generation unit 120 may apply the preset offset to the random code and generate the second subcode by mapping the offset applied random code to the character set.

Alternatively, the code generating unit 120 may perform a mode operation on the size of the character set with respect to the offset-applied random code, and may generate the second sub-code by mapping the result of the mode operation on the character set have.

The code generation unit 120 may acquire a basic character set and obtain the character set by shuffling the elements of the basic character set.

The secret key may be the same for all card readers. In this case, the random number generated by using the secret key may be calculated by using the mode calculation result of the number of elements of the basic character set, You can also swap an element with another element.

Hereinafter, the random code generated using the secret key and time information is "3829012354284164 ", the card number is " 1234-5678-9012-3456 ", and the character set is {0, ... , '9', 'A', 'B', ... , 'Z'} will be described as an example of a method of generating the disposable card code according to an embodiment of the present invention.

First, the card number "1234-5678-9012-3456" is a numeric code of {1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6} Lt; / RTI >

Thereafter, the random code {3,8,2,9,0,1,2,3,5,4,2,8,4,1,6,4} and the numeric code of which the card number is converted { 1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6}, the sum of {4,10,5,13,5,7,9, 11, 14, 4, 3, 10, 7, 5, 11, 10}. Here, a number exceeding 36, which is the total number of elements of the character set in the sum result, may be replaced with a result of performing mode operation by 36.

4, 10, 5, 11, 14, 4, 3, 10, 7, 11, 10} as the sum result is mapped to the character set to generate the first sub-data of "4A5D579BE43A75BA" The code can be obtained.

Further, the second subcode of "3829012354284164" is acquired by the random code {3,8,2,9,0,1,2,3,5,4,2,8,4,1,6,4} And the disposable card code of "4A5D579BE43A75BA3829012354284164" may be generated by connecting the first subcode and the second subcode obtained as described above.

According to another embodiment of the present invention, the first subcode, for example "4A5D579BE43A75BA" may be used as a disposable card code.

As described above, the disposable card code generated using the secret key and the card number assigned to the card reader 100 has randomness according to the time information, and uniqueness for identifying the card can be assured.

Thereafter, the interface unit 130 transmits the disposable card code generated in step S320 to the payment terminal 200 (step S330).

In this case, the payment terminal device 200 can generate an approval request message using the disposable card code transmitted from the card reader 100, and transmit the approval request message to the payment server 300.

4, the settlement terminal device 200 transmits a settlement approval history including a settlement date and time, an amount and an approval number, etc. to the settlement server 300, You can manage transaction details by storing them together with the disposable card code.

The stored disposable card code can be used for later settlement and cancellation of payment approval.

As described above, since a virtual one-time card code other than the actual card number is stored in the settlement terminal device 200 and the transaction details are managed using the same, the card number is leaked due to hacking or the like to the settlement terminal device 200 Can be prevented.

5 is a block diagram illustrating a configuration of a payment server according to an exemplary embodiment of the present invention. The payment server 00 includes a communication unit 310, a code generation unit 320, a card number acquisition unit 330, An approval processing unit 340, a control unit 350, and a memory 360. [

Referring to FIG. 5, the communication unit 310 of the payment server 300 may receive the approval request text generated using the disposable card code from the payment terminal 200.

The code generator 320 may generate a random code using the secret key and time information of the card reader 100 connected to the payment terminal 200. [

Here, the memory 360 of the payment server 300 may store secret keys assigned to each of a plurality of card readers including the card reader 100.

The control unit 320 can extract the identification information for the card reader 100 from the approval request text received from the payment terminal 200 and provide the card reader 100 with identification information using the extracted card reader identification information From the memory 360 and transmits the read secret key to the code generation unit 320.

Alternatively, the control unit 320 may extract the identification information for the payment terminal 200 from the approval request telegram. In this case, the secret information of the card reader 100 connected to the payment terminal using the extracted payment terminal identification information may be extracted Key from the memory 360 and transmit the read key to the code generation unit 320.

The card number obtaining unit 330 may obtain the actual card number to be used for settlement using the random code generated by the code generating unit 320 and the disposable card code extracted from the approval request message.

For this purpose, the control unit 350 may extract the disposable card code from the authorization request text received from the payment terminal 200 and transmit the extracted disposable card code to the card number acquisition unit 330.

On the other hand, the approval processing unit 340 can process approval for the card settlement using the card number acquired through the card number acquisition unit 330. [

FIG. 6 is a flowchart illustrating a card settlement approval method according to an embodiment of the present invention. In FIG. 6, a payment server 300 having a configuration as shown in FIG. 5 processes a settlement approval using a disposable card code Lt; / RTI >

Referring to FIG. 6, the communication unit 310 of the payment server 300 receives from the payment terminal 200 an approval request text generated using the disposable card code.

The disposable card code may be generated by the card reader 100 using the secret key and card number unique to the card reader 100, as described with reference to FIGS.

The code generator 320 generates a random code using the secret key and time information provided to the card reader 100 (step S610).

As described above, the secret key is given to the card reader 100 for the generation of the random code. The secret key is received from the payment server 300 at the time of manufacture or at the time of initial registration of the card reader 100 and stored in the memory 140 Or may be received from the payment server 300, if necessary, after that.

The method for generating the random code by the code generating unit 320 is the same as the method for generating the random code by the code generating unit 120 of the card reader 100, If the time information used for random code generation is the same in the random code generation unit 300, the generated random code is also the same.

The time information may be set to a current time corresponding to a time point at which the random code is generated, or may be information that is changed in a predetermined time unit. For example, when the time information is changed in units of one minute, the random code generated in the same card reader 100 may be changed randomly every minute based on the current time.

Alternatively, the time information used by the card reader 100 to generate the random code may be transmitted to the payment server 300 through the payment terminal device 200, and the code generation unit 320 of the payment server 300 may transmit the time information, The random codes generated by the card reader 100 and the payment server 300 may be identical to each other by generating the random code using the time information received from the payment server 200. [

Thereafter, the card number obtaining unit 330 obtains the actual card number to be used for payment using the random code generated in step S610 and the disposable card code transmitted from the payment terminal 200 (step S620).

For example, the code generation unit 230 reversely performs the method of generating the one-time card code using the random code and the card number by the code generation unit 120 of the card reader 100, The actual card number can be obtained using the card code.

Hereinafter, it is assumed that the random code generated in step S610 is {3,8,2,9,0,1,2,3,5,4,2,8,4,1,6,4} The extracted one-time card code is " 4A5D579BE43A75BA3829012354284164 ", and the character set shared with the card reader 100 is {0, 1, 2, ... , '9', 'A', 'B', ... , 'Z'} will be described as an example of a method in which the card number obtaining unit 330 of the payment server 300 obtains the actual card number.

First, the first subcode "4A5D579BE43A75BA" which is the first 16 digits of the disposable card code "4A5D579BE43A75BA3829012354284164" is checked, and the first subcode "4A5D579BE43A75BA" and the random code {3,8,2,9,0, 2, 3, 5, 4, 2, 8, 4, 1, 6, 4}.

Specifically, the first subcode "4A5D579BE43A75BA" is set as a character set {'0', '1', '2', ... , '9', 'A', 'B', ... , 'Z'} and converted into a numeric code, it becomes {4,10,5,13,5,7,9,11,14,4,3,10,7,5,11,10}.

Then, in the first subcode {4, 10, 5, 13, 5, 7, 9, 11, 14, 4, 3, 10, 7, 5, 11, 10} Subtracting {3,8,2,9,0,1,2,3,5,4,2,8,4,1,6,4} in {1,2,3,4,5,6,7 , 8, 9, 0, 1, 2, 3, 4, 5, 6}, and "1234-5678-9012-3456" corresponding to the numeric code is the actual card number.

In the above case, the step S610 of generating the random code is omitted, and the control unit 350 can confirm that the last 16 digits of the disposable card code "4A5D579BE43A75BA3829012354284164" represents a random code.

On the other hand, if the one-time card code extracted from the approval request text is composed of 16 digits of "4A5D579BE43A75BA ", a random code is first generated in step S610, and the generated random code and the one- The actual card number "1234-5678-9012-3456" can be obtained through the process.

Thereafter, the approval processing unit 340 processes approval of the card settlement using the card number obtained in step S620 (step S630).

The control unit 350 causes the payment unit terminal 200 to transmit the approval result message indicating the approval process result in the step S630 to the payment terminal 200 through the communication unit 310. The control unit 350 transmits the disposable card code and the obtained card number together with the settlement date and time And the settlement approval details including the amount and the approval number are stored in the database (not shown).

FIG. 7 is a block diagram illustrating another embodiment of the billing system according to the present invention. The description of the configuration and operations of the billing system shown in FIG. 7 that are the same as those described with reference to FIG. 1 to FIG. .

Referring to FIG. 7, a card reader 100, a POS terminal 210, and a merchant server 230 may be provided on the merchant side.

In this case, the settlement approval details as described with reference to FIG. 4 may be stored in the internal memory of the POS 210, or may be stored in a database (not shown) provided in or linked to the merchant server 230 for management such as settlement approval details and settlement of the merchant DB, 231).

As described above, the card reader 100 transmits the one-time card code generated using the unique secret key and the card number to the POS 210, and the POS 210 transmits the one- And transmits it to the settlement agency server 310. The settlement agency server 310 can transmit the approval request message to the card company server 320. [

The card issuer server 320 extracts the disposable card code from the approval request telegram, acquires the actual card number by using the disposable card code, authenticates whether or not to approve the payment, and transmits the disposable card code and the card number to the database (321).

Meanwhile, when the settlement proxy server 310 can acquire the actual card number using the disposable card code, the settlement approval details together with the disposable card code and the card number are stored in the database 311 of the settlement agency server 310 And may be stored and managed.

When the approval of the payment is requested from the merchant, the POS 210 searches the database 231 of the internal memory or the merchant server 230 for the disposable card code for the settlement and stores the disposable card code including the retrieved disposable card code The payment approval canceling message can be transmitted to the payment agent server 310. [

The settlement proxy server 310 transmits the settlement approval cancellation telegram to the card company server 320. The card company server 320 searches the database 321 using the disposable card code included in the payment approval cancellation telegram, It is possible to process the approval cancellation for the payment by reading the payment approval details.

The above-described methods according to the present invention may be stored in a computer-readable recording medium. The computer-readable recording medium may be a ROM, a RAM, a CD-ROM, a magnetic tape, , A floppy disk, an optical data storage device, and the like.

The computer readable recording medium may be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner. And, functional programs, codes and code segments for implementing the above method can be easily inferred by programmers of the technical field to which the present invention belongs.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and detail may be made therein without departing from the spirit and scope of the present invention.

Claims (20)

A method for generating a one-time card code to be used for payment in a card reader,
Obtaining a card number by reading a card to be used for settlement;
Generating a random code using a secret key and time information assigned to the card reader; And
Generating a one-time card code for identifying the card using the generated random code and the acquired card number; And
And transmitting the disposable card code to the payment terminal through the interface unit,
The settlement terminal transmits the settlement approval request message generated by using the disposable card code instead of the actual card number to the server, and responds to the settlement approval request message in response to the settlement date and time, And the disposable card code is stored together to manage the transaction details, and processing of settlement and approval cancellation using the disposable card code based on the transaction details is performed
How to generate a one-time card code. The method according to claim 1,
And receiving the secret key from a card issuer server or a payment agent server connected to the card issuer server. The method of claim 1,
Wherein the card reader is provided with the card reader at the time of manufacture thereof and stored in the memory. The method of claim 1,
Wherein the card reader is provided with the card reader at the time of initial registration and stored in the memory. The method of claim 1, wherein the generating of the one-time use card code comprises:
Generating a first subcode by mapping the sum of the random number and the card number to a character set;
Mapping the random code to the character set to generate a second subcode; And
And generating the one-time card code using the first and second sub-codes. The method according to claim 1,
Wherein the approval request message generated by the payment terminal device is transmitted from the payment terminal device to a card issuer server or a payment agency server connected to the card issuer server using the disposable card code. delete A method for authorizing a card settlement using a disposable card code in a payment server,
Receiving an approval request telegram generated using the disposable card code from the payment terminal device;
Generating a random code using a secret key and time information of a card reader connected to the payment terminal;
Obtaining an actual card number to be used for settlement using the generated random code and the disposable card code extracted from the approval request telegram; And
And accepting approval for card settlement using the obtained card number,
The settlement terminal transmits the settlement approval request message generated by using the one-time use card code instead of the actual card number to the settlement server, and the settlement date and time and amount received from the settlement server in response to the settlement approval request, The payment approval result including the authorization number and the disposable card code are stored together to manage the transaction details, and settlement and approval cancellation using the disposable card code is performed based on the transaction details
How to approve a card payment. 9. The method of claim 8,
Further comprising the step of providing the secret key to the card reader and transmitting the secret key. 9. The method of claim 8,
The random code is set to correspond to the generation time of the random code, or received from the terminal device. 9. The method of claim 8,
Further comprising the step of storing, in the database, the settlement approval history including the payment date and time, the amount, and the approval number together with the disposable card code and the obtained card number. A recording medium on which a program for causing a computer to execute the method according to any one of claims 1 to 6 and 8 to 11 is recorded. A card reader connected to a payment terminal device for providing card information,
A reader unit for reading a card to be used for settlement to acquire a card number;
A code generator for generating a random code using the secret key and the time information given to the card reader and generating a disposable card code for identifying the card using the generated random code and the obtained card number; And
And an interface unit for transmitting the generated disposable card code to a payment terminal,
The settlement terminal transmits the settlement approval request message generated using the disposable card code instead of the actual card number to the settlement server, And the disposable card code are stored together to manage transaction details, and processing of settlement and approval cancellation using the disposable card code based on the transaction details is performed
Card reader. 14. The method of claim 13,
Wherein said card reader is attached to said card reader when said card reader is manufactured and stored in said memory. 14. The method of claim 13,
Wherein the card reader is assigned at the time of initial registration for use of the card reader and stored in the memory. 14. The apparatus of claim 13, wherein the code generation unit
Generating a first subcode by mapping the sum of the random code and the card number to a character set to generate a second subcode by mapping the random code to the character set, A card reader for generating the disposable card code using sub-codes. 14. The method of claim 13,
Wherein the approval request telegram generated using the disposable card code is transmitted from the payment terminal device to a card issuer server or a payment proxy server connected to the card issuer server. A payment server for processing an approval request telegram received from a payment terminal device to approve card payment,
A communication unit for receiving an approval request telegram generated using the disposable card code from the payment terminal apparatus;
A code generator for generating a random code using a secret key and time information of a card reader connected to the payment terminal;
A card number obtaining unit for obtaining an actual card number to be used for settlement using the generated random code and the disposable card code extracted from the approval request text; And
And an approval processing unit for processing approval for card settlement using the acquired card number,
The settlement terminal transmits the settlement approval request message generated by using the one-time use card code instead of the actual card number to the settlement server, and the settlement date and time and amount received from the settlement server in response to the settlement approval request, The payment approval result including the authorization number and the disposable card code are stored together to manage the transaction details, and settlement and approval cancellation using the disposable card code is performed based on the transaction details
Payment server. 19. The method of claim 18,
And a memory for storing secret keys assigned to each of the plurality of card readers. 19. The method of claim 18,
Wherein the settlement approval history including the settlement date and time, the amount and the approval number is stored in the database together with the disposable card code and the acquired card number.

Images