KR101809732B1 - Method and system for encrypting card data to charge - Google Patents

Abstract

The present invention provides a method for encrypting a card claim not generating exposure danger of a credit card number on a network. The method for encrypting a card claim comprises the following steps of: transmitting a request for a card approval by a payment terminal to a VAN company server when the amount and card reading information are input as an input for performing payment to the payment terminal; encrypting the card number by using an encryption module provided from the VAN company server by the payment terminal, when the approval with respect to the card approval request is input from the VAN company server to the payment terminal; transmitting the encrypted card number from the payment terminal to an ASP server; and recording and managing the encrypted card number in the ASP server, and transmitting the encrypted card number to the VAN company server for calculation.

Description

[0001] METHOD AND SYSTEM FOR ENCRYPTING CARD DATA TO CHARGE [0002]

The present invention relates to a method and system for protecting credit card information for a secure EDI claim, and provides a method for secure and convenient encryption of a card executed in a card terminal.

Recently, since the use of the card has become common, the franchisees place each of the card terminals, and the use of the card is increased rather than the cash, but the description of the security of the card number is still hacked on the network. have.

At this time, the VAN related system using the card can increase the number of mobile terminals so that the payment application and the merchant server can be operated in conjunction with the payment server without using a card reader (Korean Patent Laid-Open Publication No. 2016-0099514 ), The settlement sales information is transferred to the accounting ASP web server, converted into sales information on the accounting ASP program, and the other service profit information is added to the accounting ASP service (Korean Patent Publication No. 2001-0067830 2001.07.13 open)) in the past.

However, even if the mobile terminal is used, the merchant server still reads the card number and the like for payment, and issues an EDI request to the VAN company through the ASP server. There is a risk that the credit card number is exposed on the network , There is a problem that an encryption key server is required for each merchant for self-encryption processing.

In an embodiment of the present invention, an encryption solution provided by the VAN company is used to perform an encryption process, a separate key server is not necessary due to the encryption solution provided by the VAN company, the credit card number is encrypted even when the POS card is approved, It is possible to provide a card billing encryption method in which the risk of exposing a credit card number on the network does not occur because the encryption is maintained even when charged. It should be understood, however, that the technical scope of the present invention is not limited to the above-described technical problems, and other technical problems may exist.

As a technical means for accomplishing the above technical object, an embodiment of the present invention is characterized in that when an amount and card reading information are input as an input for making a payment to a payment terminal, The payment terminal encrypts the card number using the encryption module provided by the VAN server server, and transmits the authentication request to the ASP server from the payment terminal Transmitting the encrypted card number, and recording and managing the encrypted card number in the ASP server, and transmitting the encrypted card number to the VAN company server for settlement.

In another embodiment of the present invention, an input for performing settlement is input and the card reading information is input. A card approval is requested using the Internet network. When the approval is received, the card number is encrypted using the provided encryption module And records and manages the encrypted card number, generates an EDI charge file using the disposable key provided by the payment terminal, an EDI (Electronic Data Interchange) billing card number encrypted with the disposable key, and the encrypted card number And a VAN company server that provides an encryption module with a payment terminal and is connected to a payment terminal and an ASP server through a VPN exclusive line and receives an EDI charge file and requests payment to a credit card company server.

According to any of the above-mentioned objects of the present invention, an encryption solution provided by VAN Corporation is used for encryption processing, a separate key server is not necessary due to the encryption solution provided by VAN Corporation, By encrypting the card number, it keeps the encryption even when EDI is charged, so there is no risk of exposing the credit card number on the network.

1 is a block diagram for explaining a card billing encryption system according to an embodiment of the present invention.
FIG. 2 is a configuration diagram for explaining the configuration of the merchant terminal shown in FIG. 1. FIG.
3 is a diagram for comparing a card billing encryption system according to one embodiment of the present invention and a card billing encryption system of the prior art.
4 is a view for explaining a payment terminal according to an embodiment of the present invention.
5 is a flowchart illustrating a card billing encryption method according to an exemplary embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "including" an element, it is to be understood that the element may include other elements as well as other elements, And does not preclude the presence or addition of one or more other features, integers, steps, operations, components, parts, or combinations thereof.

The terms "about "," substantially ", etc. used to the extent that they are used throughout the specification are used in their numerical value or in close proximity to their numerical values when the manufacturing and material tolerances inherent in the stated meanings are presented, Accurate or absolute numbers are used to help prevent unauthorized exploitation by unauthorized intruders of the referenced disclosure. The word " step (or step) "or" step "does not mean" step for. &Quot;

In this specification, the term " part " includes a unit realized by hardware, a unit realized by software, and a unit realized by using both. Further, one unit may be implemented using two or more hardware, or two or more units may be implemented by one hardware.

In this specification, some of the operations or functions described as being performed by a terminal, a device, or a device may be performed instead in a server connected to the terminal, device, or device. Likewise, some of the operations or functions described as being performed by the server may also be performed in a terminal, device or device connected to the server.

In this specification, some of the operations or functions described in the mapping or matching with the terminal are used for mapping or matching the unique number of the terminal or the identification information of the individual, which is the identification data of the terminal . ≪ / RTI >

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram for explaining a card billing encryption system according to an embodiment of the present invention. 1, a credit card information protection system 1 for secure EDI charging may include a payment terminal 100, an ASP server 300, a VAN company server 400 and a card issuer server 500 . However, since the card billing system 1 of FIG. 1 is only an embodiment of the present invention, the present invention is not limited to FIG.

At this time, the respective components of FIG. 1 are generally connected through a network 200. For example, as shown in FIG. 1, the payment terminal 100 may be connected to the ASP server 300 and the VAN company server 400 through the network 200. The ASP server 300 may be connected to the VAN server 400 through the network 200. [ In addition, the VAN company server 400 may be connected to the card issuer server 500 through the network 200. At this time, the network 200 may be a private line VPN.

Here, the network 200 refers to a connection structure capable of exchanging information between nodes such as a plurality of terminals and servers. One example of such a network 200 is a 3rd Generation Partnership Project (3GPP) network, A 5th Generation Partnership Project (5GPP) network, a World Interoperability for Microwave Access (WIMAX) network, an Internet, a LAN (Local Area Network), a Wireless LAN (Local Area Network) But are not limited to, a Wide Area Network (PAN), a Personal Area Network (PAN), a Bluetooth network, an NFC network, a satellite broadcast network, an analog broadcast network, a DMB (Digital Multimedia Broadcasting)

The payment terminal 100 may be a terminal that receives card information by swipe or chip reading of the card and transmits the input information to the VAN server 400 to request and receive approval. At this time, the payment terminal 100 may be a credit card reader, a card reader, or a POS terminal, but the present invention is not limited thereto. At this time, when the credit card is searched, the payment terminal 100 automatically reads the issuer and the member number displayed on the credit card, and sends the credit card information to the VAN company server 400 and the card issuer server 500 via the communication line It may be a terminal that finds the creditworthiness. At this time, the payment means may be a cash card or the like even if it is not a credit card. The settlement terminal 100 encrypts the card number using the encryption module received from the VAN company server 400 and transmits the encrypted card number to the ASP server 300 so as to use the encrypted card number in the ASP server 300 VAN company server 400 to generate and transmit an invoice. At this time, since the billing terminal 100 can use up to one by the VAN company server 400 with encryption, efficient management becomes possible.

The ASP server 300 may be a server that receives the payment information and the encrypted card information from the payment terminal 100 and generates an EDI (Electronic Data Interchange) bill and transmits it to the VAN server 400. At this time, the ASP server 300 may be implemented as a computer capable of connecting to a remote server or terminal through the network 200. [ Here, the computer may include, for example, a notebook, a desktop, a laptop, and the like on which a WEB browser is installed. At this time, the ASP server 300 may be implemented as a terminal capable of connecting to a remote server or terminal through the network 200. [ The ASP server 300 is a wireless communication device that ensures portability and mobility, for example, as a navigation device, a PCS (Personal Communication System), a GSM (Global System for Mobile communications), a PDC (Personal Digital Cellular) Handyphone System), PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication) -2000, Code Division Multiple Access (CDMA) -2000, W-Code Division Multiple Access (W-CDMA), Wibro (Wireless Broadband Internet) A handheld based wireless communication device such as a smartphone, a smartpad, a tablet PC, and the like.

The VAN company server 400 may be a server that provides an encryption module to the payment terminal 100 and receives an encrypted card number and EDI bill provided from the ASP server 300. [ In addition, the VAN company server 400 can decrypt the encrypted card number using the encryption module, and can be a server that requests the card issuer server 500 to make a payment. In addition, the VAN server 400 may be a plurality of VAN servers 400, and the VAN server 400 may be implemented as a computer capable of connecting to a remote server or terminal through the network 200. Here, the computer may include, for example, a notebook, a desktop, a laptop, and the like on which a WEB browser is installed.

The card issuer server 500 may be a server that performs payment when a payment request comes from the VAN company server 400 and makes a charge to a customer who holds the card. At this time, a plurality of card issuer server 500 may be implemented, and the card issuer server 500 may be implemented as a computer capable of connecting to a remote server or terminal through the network 200. Here, the computer may include, for example, a notebook, a desktop, a laptop, and the like on which a WEB browser is installed.

FIG. 3 is a diagram for comparing a card billing encryption system according to an embodiment of the present invention and a card billing encryption system according to the related art, and FIG. 4 is a view for explaining a payment terminal according to an embodiment of the present invention.

Referring to FIG. 2, the merchant terminal 600 according to an embodiment of the present invention may include a payment terminal 100 and an ASP server 300. The merchant terminal 600 may include a request unit 610, an encryption unit 620, a first transmission unit 630, and a second transmission unit 640.

A VAN server 400 according to an embodiment of the present invention or another server (not shown) operating in cooperation with a VAN company server 400 transmits a card billing encryption service application, a program, an app page, When transmitting a web page or the like, the payment terminal 100 can install or open a card billing encryption service application, a program, an app page, a web page, and the like. In addition, a service program may be executed in the payment terminal 100 by using a script executed in a web browser. Here, a web browser is a program that enables a WWW (World Wide Web) service, and is a program for receiving and displaying hypertext described in hypertext mark-up language (HTML), for example, Netscape (Netscape) An Explorer, chrome, and the like. Further, the application refers to an application on the terminal, for example, an app (app) running on a mobile terminal (smart phone).

At this time, the connection of the network 200 is performed by the payment terminal 100, the ASP server 300, the VAN company server 400, the card company server 500, To create a communication object. The VAN server 400 can exchange data with each other through a communication object.

The requesting unit 610 may request the approval of the card from the payment terminal 100 to the VAN server 400 when the amount and the card reading information are input as an input for making a payment to the payment terminal 100 have. At this time, the request unit 610 belongs to the payment terminal 100.

The encryption unit 620 receives the authorization for the card approval request from the VAN company server 400 to the payment terminal 100 by using the encryption module provided from the VAN company server 400 The card number can be encrypted. At this time, the encryption unit 620 belongs to the payment terminal 100.

The first transmission unit 630 may transmit the encrypted card number from the payment terminal 100 to the ASP server 300. At this time, the first transmission unit 630 belongs to the payment terminal 100.

The second transmission unit 640 records and manages the encrypted card number in the ASP server 300 and transmits the encrypted card number to the VAN server 400 for settlement. At this time, the second transmission unit 640 belongs to the ASP server 300.

At this time, when the payment terminal 100 transmits the encrypted card number to the ASP server 300, the payment terminal 100 stores the encrypted card number, the EDI (Electronic Data Interchange) billing card number encrypted with the disposable key, The disposable key can be transmitted to the ASP server 300. [

delete

When the ASP server 300 records and manages the encrypted card number and transmits the encrypted card number to the VAN server 400 for settlement, the ASP server 300 transmits the encrypted EDI charge card number And an amount of money to generate an EDI charge file and transmit the EDI charge file to the VAN company server 400.

The settlement terminal 100 and the ASP server 300 included in the merchant terminal 600 may be connected by a VPN exclusive line and the VAN company server 400 and the ASP server 300 may be connected by a VPN exclusive line. At this time, the VAN server 400 can decrypt the encrypted card number using the encryption module.

Hereinafter, a card billing encryption service having the above-described configuration will be described with reference to FIG.

Referring to FIG. 3, (a) is a card billing encryption system according to the prior art, and (b) is a card billing encryption system according to an embodiment of the present invention.

(a) The card billing encryption system according to the related art requests the approval of the user's card from the payment terminal to the VAN company, confirms the card approval result of the VAN company, transmits the card number to the ASP server, The 16-digit card number is encrypted and recorded and managed in the ASP server. At this time, after the card is approved, the card number itself and the VAN company's encryption operation are inefficient, and there is the complexity of managing a separate encryption module for each merchant.

That is, after reading the credit card, the card number extracted from the information provided by the payment terminal (card reader), the EDI billing card number A encrypted with the disposable key, the disposable key B, B) and the encrypted EDI billing card number (A). In the case of the disposable key, the data can not be stored. Since there is a risk of being exposed on the network, the encryption must be performed immediately after decryption. In addition, it transmits the decrypted card number to the ASP server, encrypts the card number in the ASP server as its own encryption solution, and stores it.

In contrast, (b) the card billing encryption system according to the embodiment of the present invention reads a credit card or the like from the payment terminal 100, encrypts the encrypted card information among the information provided by the payment terminal 100, Extracts the encrypted EDI billing card number (A), and the disposable key (B). Also, the payment terminal 100 decrypts the disposable key B and the encrypted EDI charge card number A. At this time, data can not be stored in the case of the disposable key (B), and since there is a risk of exposure on the network, encryption is performed immediately after decryption. Then, the EDI billing card number is encrypted using the encryption solution provided by the VAN server 400, the encrypted card number is stored in the ASP server 300, the EDI billing file is generated, To the server (400).

Accordingly, since the VAN server 400 can be used as it is by encrypting the card number once after the card is approved, efficient management is possible. Table 1 below compares the conventional billing encryption method and the card billing encryption method according to the present invention.

division Conventional technology Invention Manageability Credit card number must be processed through self-encrypting solution Encryption processing using VAN's encryption solution Encryption KEY Server Need Encryption key server for self-encryption processing required by each merchant Separate KEY SERVER is unnecessary due to encryption solution provided by VAN company Security vulnerability There is a risk of credit card number exposure on EDI billing network Credit cards are encrypted when POS card is approved, and encryption is maintained even when EDI is charged. No risk of network exposure

Referring to FIG. 4, (a) is a configuration diagram of a CAT terminal which is one kind of payment terminal 100. At this time, the main security functions of the CAT terminal related to the credit card settlement function include sensitive credit card information protection, cryptographic operation and cryptographic key generation / distribution, cryptographic key access control and destruction, credit card number protection, and self protection. At this time, the card billing encryption method according to an embodiment of the present invention includes: 1) a period in which sensitive credit card information read from the card reader is transmitted to the application software; 2) the CAT terminal application software located in the CAT terminal processes the information , And 3) a sensitive credit card information transmission interval between the CAT terminal and the VAN server.

(b), the payment terminal 100 of the present invention may be a POS terminal. At this time, the POS terminal is installed in the merchant and provides various transaction management functions such as sales product inquiry, sales inquiry, and a transaction approval function to receive a transaction approval from the credit card company for a credit card transaction. The POS terminal handles financial information related to various financial settlement functions such as credit card settlement, cash settlement, gift certificate settlement, and defines security requirements related to the card settlement function. The key security functions of POS terminal related to credit card payment function include sensitive credit card information protection, cryptographic operation and cryptographic key generation / distribution, cryptographic key access control and destruction, credit card number protection, and self protection. The POS terminal is physically composed of a POS terminal body such as general PC or POS terminal hardware and a card reader. The POS terminal itself and the card reader can be connected by wire or the card reader can be embedded in the POS terminal body. An embodiment of the present invention can be used for: 1) a card reader connected to the POS terminal body, 2) a sensitive credit card information transmission interval between the card reader and the POS terminal body, 3) sensitive credit information processing software located in the POS terminal body, VAN server communication software, and 4) sensitive credit card information transmission interval between the POS terminal and the VAN server.

The card billing encryption method of FIGS. 2 to 4 may be easily derived from the same or the same contents as the description of the card billing encryption method described above with reference to FIG. 1, do.

FIG. 5 is a diagram illustrating a process in which data is transmitted and received between the respective components included in the card billing encryption system of FIG. 1 according to an embodiment of the present invention. Hereinafter, an example of a process in which data is transmitted and received between the respective components will be described with reference to FIG. 5. However, the present invention is not limited to such an embodiment, It is apparent to those skilled in the art that the process of transmitting and receiving data can be changed.

Referring to FIG. 5, when money and card reading information are input as an input for making a payment to the payment terminal, the payment terminal requests the VAN server to approve the card (S5100).

If approval of the card approval request is input from the VAN company server to the payment terminal, the payment terminal encrypts the card number using the encryption module provided from the VAN company server (S5200).

Then, the payment terminal transmits the encrypted card number to the ASP server (S5300), records and manages the encrypted card number in the ASP server, and transmits the encrypted card number to the VAN company server for settlement (S5400).

The order between the above-described steps S5100 to S5400 is merely an example, but is not limited thereto. That is, the order between the above-described steps S5100 to S5400 may be mutually varied, and some of the steps may be executed or deleted at the same time.

The card billing encryption method according to the embodiment described with reference to FIG. 5 may also be implemented in the form of a recording medium including instructions executable by a computer such as an application or a program module executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer readable medium may include both computer storage media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data.

The card billing encryption method according to an embodiment of the present invention may be executed by an application installed in a terminal (which may include a program included in a platform or an operating system basically installed in the terminal) May be executed by an application (i.e., a program) directly installed on the master terminal through an application providing server such as an application store server, an application, or a web server associated with the service. In this regard, the card billing encryption method according to an embodiment of the present invention described above is implemented in an application installed in a terminal or directly installed by a user (i.e., a program) and stored in a computer- Lt; / RTI >

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

Claims (7)

A card billing encryption method executed in an affiliate terminal including a payment terminal and an ASP server,
Requesting approval of a card from the payment terminal to the server of the VAN server when the amount and the card reading information are input as an input for performing payment to the payment terminal;
When the acceptance of the card approval request is input from the VAN server, the payment terminal encrypts the card number using an encryption module provided from the VAN server;
Transmitting the encrypted card number from the payment terminal to the ASP server; And
And recording and managing the encrypted card number in the ASP server and transmitting the encrypted card number to the VAN server for settlement,
In the step of transmitting the encrypted card number from the payment terminal to the ASP server,
The payment terminal transmits an encrypted card number, an electronic data interchange (EDI) billing card encrypted with a disposable key, and a disposable key to the ASP server,
In the step of recording and managing the encrypted card number in the ASP server and transmitting the encrypted card number to the VAN server for settlement,
The ASP server generates an EDI charge file including the encrypted EDI charge card number and money amount, transmits the EDI charge file to the VAN server,
Wherein the VAN server decrypts the encrypted card number using the encryption module.
delete delete delete delete delete A card billing encryption system comprising:
A payment terminal for inputting money and card reading information as an input for performing settlement, requesting card approval using an Internet network, and encrypting the card number using the provided encryption module upon receiving the approval;
Generates and manages the EDI charge file using the disposable key provided by the payment terminal, the EDI (Electronic Data Interchange) billing card number encrypted with the disposable key, and the encrypted card number. An ASP server; And
The payment terminal is provided with an encryption module, connected to the payment terminal and the ASP server via a VPN exclusive line, receives the EDI charge file, decrypts the encrypted card number using the encryption module, A VAN company server;
A credit card information protection system for secure EDI claims.

Images