KR101850705B1 - Pass card issue and operating system by using security module and method thereof - Google Patents

Abstract

The present invention relates to a system for issuing and operating a traffic card by using an application method and a method thereof. The system for issuing and operating a traffic card by using an application method stores security data in an inner security area of a user terminal and stores a non-security data in an additional server. The system for issuing and operating a traffic card by using an application method performs a hardware security module (HSM) process of the user terminal for a part related to a signature and authorization. The system for issuing a traffic card comprises: a portable terminal; an issuing server connected to the portable terminal by a predetermined communication method and receiving data issued from a card company server; and the card company server connected to the issuing server and transmitting data about the traffic card received from the issuing server by generating the data about the traffic card. The system for issuing and operating a traffic card enables a user to use the card which the user has used even if the user loses the card by issuing the traffic card by using information on a user to issue the traffic card. Also, the system for issuing and operating a traffic card stores encoded data which can synchronize the traffic card in a basic security storage area, but not a SIM installed in a smartphone. So, the system for issuing and operating a traffic card can restore an existing traffic card even if the SIM of the smartphone is changed.

Description

BACKGROUND OF THE INVENTION Field of the Invention [0001] The present invention relates to a method and system for issuing and operating a transportation card using an app-

The present invention relates to a system and method for issuing and operating a traffic card using an app system. More specifically, the present invention provides an app-based traffic card, wherein functions that do not require security are performed by an app, The present invention relates to a system and method for issuing and operating a traffic card using an app system, which is capable of operating in a security device of a server, a SIM in a smart device, or an internal security area.

With the development of public transportation and its discounted services, transportation cards are a necessary means of payment for our daily life.

The first-generation traffic card is a form in which a predetermined amount of money is charged to physical media of various shapes similar to a card or a card. Each traffic card has a structure in which a card ID exists, which is charged, paid, and settled based on the card ID. In order to charge and settle, the information is exchanged between the traffic card and payment terminal.

Information exchange takes place using signed data including the card and the unique key of the terminal. That is, when the card is used, the unique key must never be exposed, and when the key is exposed, the third party may charge the card without paying the amount of money, or may issue a serious problem . In the case of a physical card, the unique key of the card is embedded in the card together with the card ID when issuing the card.

Physical first-generation transportation cards had the disadvantage of having to carry them, and also had the problem of losing money because the cards were bearer cards when they were lost.

The second-generation traffic card is a type of so-called app card, in which a virtual traffic card of a smart phone is issued and charged. There is a tremendous advantage in that there are no physical cards.

The app card is also operated using the unique key, and the unique key is stored in the USIM in the smartphone. Since the unique key is stored in the USIM, it can be used without activating the screen of the smartphone.

However, in such a case, if the smartphone is lost, the USIM is lost and there is a problem in security, and it is a good structure to abuse the information in the middle. Therefore, the traffic card usually limits the amount of use per day, so that even if it is exposed, it minimizes damage.

All traffic cards have two problems.

First, it is difficult to recover the charged balance when both the physical card and the app card are lost. In the case of app cards, even if you change a USIM, not a lost one, you must use a new card (a procedure for storing a unique key in USIM).

Second, it is vulnerable to security because it inherits the inherent key physically.

Third, in the case of app cards, there are cases where it can be used depending on the type of USIM, the type of smart phone, the case where it can not be used, cooperation with partner companies is necessary, and the use is very limited .

Korean Patent Application Publication No. 10-2016-0022431

A problem to be solved by the present invention is to encrypt data requiring security from among data necessary for issuing, charging and payment of a transportation card and storing it in an internal security area of a smart phone, so that even if a USIM is lost, So that it is possible to recover the conventional data even when the smartphone device is changed. Therefore, it is an object of the present invention to improve the unnecessary point of downloading the traffic card function to the USIM when the USIM is lost or changed.

In addition, since only the app traffic module can be used for existing apps, the present invention is simple and easy to apply, so that it is possible to apply a variety of available affiliate service apps. Therefore, It has its purpose.

The system for issuing and operating a traffic card using an app system according to an embodiment of the present invention stores security data in an internal security area of a user terminal and stores insecure data in a separate server, A hardware security module (HSM) process of the terminal can be performed,

The transportation card issuing system includes a portable terminal,

An issuing server connected to the portable terminal by a predetermined communication method and capable of receiving data issued from a card issuing server;

And a card issuer server connected to the issuing server to generate and transmit data on the traffic card received from the issuing server.

In addition, the traffic card issuing and operating system using the app-

And a security server for separating data received from the issuing server into data requiring security and data not requiring security.

In addition, the portable terminal of the present invention may include a traffic card module for transmitting / receiving data on basic information about the issuing server and the traffic card, And an authentication module for separately storing only the data.

In addition, the basic information of the traffic card of the present invention does not include a unique key.

In addition, the authentication module of the present invention can recover the information of the application traffic card used before the change even when the user terminal is changed, in a security area configured in the user terminal, .

In addition, the data generated at the time of issuing the transportation card of the present invention may be divided into data requiring security and data not requiring security, data requiring security may be encrypted and stored in the authentication module of the user terminal, To be transmitted to the server of the card company and stored.

In addition, the present invention provides a traffic card issuing method using a traffic card issuing and operating system using an app system,

(S10) for executing a traffic card application or a bank app using a user terminal, and issuing a traffic card for transmitting traffic card issuance application data to the issuance server using the traffic card module included in the user terminal (S30) of receiving the issuance data from the card issuer server and transmitting the issued issuance data to the user terminal (S30), receiving the data related to the issuance of the traffic card, And completing the issuance of the traffic card by separately storing data that does not require security (S40).

In addition, the application step (S20) of issuing the traffic card according to the present invention may be performed when the application is executed through the traffic card application execution step (S10)

(S21) of accepting whether or not to request the issuance of a traffic card presented by the traffic card module, a user information receiving step (S22) of allowing a user to input information necessary for issuing a traffic card, A step S24 of requesting a card ID to the card issuer server when it is determined that the issuance of the transportation card is possible; And transmitting the data to the issuing server by matching the card ID and the user ID provided by the card issuing server (S25).

In addition, the step of fetching the issuance data of the present invention and transmitting the issuance data to the user terminal (S30) includes a step (S31) of requesting the issuing SAM for a unique key matching the card ID issued in the issuing step (S20) (S32) of receiving, from the issuing server, a signature for determining the accuracy of the inherent key received from the issuing SAM; comparing the signature and the inherent key provided by the issuing server with each other to determine authentication; (S34) of decrypting the encrypted inherent key to verify the signature (S34); and transmitting the issued signature, signature, and password to the security server when the inherent key is correct, (S35) of separating data such as a card ID, a user ID, and option information into data that requires security and data that does not require security (S35), and a step And the encryption, and wherein both the step (S36) of generating a signature, the encrypted data that does not require a secure required data security and a step (S37) for transmitting the issued server.

In addition, a step S200 of executing the application using the terminal of the present invention by the user of the present invention, a step S200 of transmitting a request message for requesting issuance of the real traffic card using information appearing on the app screen through the traffic card module , The issuing server that has received the traffic card issuance request signal transmits a user ID, card ID, option information, and the like to the card issuer server to check whether there is an issuable transportation card (S300) The issuing server requests data to be synchronized stored in the card issuer server and receives the data, which is stored in the card issuing server, in step S400. In step S400, the issuing server fetches and stores the data stored in the authentication module in order to authenticate and synchronize the received data A transportation card synchronization step (S500), and a physical card delivery step (S600).

According to the embodiments of the present invention, at least the following effects are obtained.

The present invention is advantageous in that the card used by the user can be used as it is by issuing a traffic card by issuing the card using the user's information, and a SIM It is possible to restore the conventional traffic card even if the SIM of the smartphone is changed by storing it in the basic security storage area.

In addition, the present invention utilizes user information and stores basic data in a card company server, so that even if a smartphone is lost, it is easy to re-issue a traffic card using user information, and the card information can be recovered to the last used card.

1 is a conceptual diagram of a traffic card issuing system according to an embodiment of the present invention.
FIG. 2 and FIG. 4 are flowcharts of a method of issuing a traffic card in a traffic card issuing system according to an embodiment of the present invention.
FIG. 5 is a flowchart of a conventional method for issuing a card using a transportation card issuing system according to an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

The terms first, second, A, B, etc. may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. Many expressions represent plural expressions unless the context clearly dictates otherwise. It is to be understood that the term "comprises" or "having" in the present application does not preclude the presence or addition of features, numbers, steps, operations, components, parts, or combinations thereof described in the specification .

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, a system and method for issuing and operating a traffic card using the security module according to the present invention will be described in detail with reference to the accompanying drawings.

The issuing and operation system of the traffic card is divided into three functions.

Transportation card issuance, transportation card recharging, and payment using a transportation card (purchase). Conventionally, a device for issuing, a device for charging, and a device for payment have been constituted. The issuing device has issued and delivered a transportation card, and the device for charging has been installed in a separate place. , A taxi, and a convenience store. The reason for this operation is to manage the security of the card ID for distinguishing the card and the unique key for generating the corresponding encrypted signature in order to issue, charge, and settle the card.

In the case of the issuance, a process of generating a unique key corresponding to the card ID is required. An issuing SAM (Security Access Module) connected with the issuing device by a predetermined communication method (USB, TCP / IP, etc.) is used as the inherent key. The issuing SAM may be in the form of a card, a memory stick, or a separate device.

Based on the information including the card ID, the issuing SAM generates a unique key to be issued using the unique key possessed by the issuing SAM, encrypts the unique key, generates a signature, In the process of storing and storing the information including the unique key in the new card, it is checked whether the correct unique key is stored using the signature. At this time, the inherent key may or may not be encrypted, but it is desirable to encrypt the inherent key to enhance security.

The issued card can store various data including the card ID, unique key, balance, and whether the transportation card is for the youth or general use, the area, and the card manufacturing information.

The charging device receives the signature information including the card ID and the bridge key from the issued traffic card and identifies the normal traffic card or the normal charging device to charge the desired amount.

The settlement apparatus also receives the signature information including the card ID and the unique key from the issued traffic card, and identifies the normal traffic card or the normal payment apparatus, thereby paying the desired amount.

In the case of a conventional method of issuing and operating a traffic card, a card ID (an anonymous name in the case of a traffic card) capable of identifying a unique key and a traffic card is used. That is, although the inherent key and the amount information are important information, they are usually stored without encryption. The reason is that ordinary traffic cards are charged in small amounts, and postpaid cards also have an upper limit on the amount of money.

However, the method of payment using a transportation card has been variously extended, such as a convenience store charge, in addition to the traffic fee, and there has been a constant problem of exposing the inherent key, resetting the conventional amount when the card is re- . The present invention has been made to solve the above-mentioned problems.

The transportation card of the present invention may be a physical transportation card, but may be an application card in a smart phone or a function (module) of a banking application.

In this embodiment, when a request for issuing a traffic card is made through an app program included in a smart terminal owned by a user, the issuance system receives issuance data from a server of the card issuer, It is possible to separate necessary data from unnecessary data and not to store data requiring separate security on a separate server but to store the data in the internal security area of the terminal, The information of the application traffic card can be restored as it is.

FIG. 1 is a conceptual diagram of a transportation card issuing system 1000.

1, the transportation card issuing system 1000 includes a portable terminal 10, a portable terminal 10 connected to the portable terminal 10 by a predetermined communication method, The issuing server 20 is connected to the issuing server 20 and is capable of generating and transmitting data on the traffic card received from the issuing server 20 And a card issuer server (30).

It is preferable to understand that the portable terminal 10 is provided with an application for activating the NFC function through HCE (Host Card Emulation), and a settlement process is performed by terminal occupancy authentication based on HSM (Hardware Security Module).

In addition, the portable terminal 10 includes a traffic card module 11 and an authentication module 12, and the module is configured as software.

The traffic card module 11 may be included in a traffic card application or may be included in a bank app. The traffic card module 11 transmits traffic card issuance request data to the issuing server 20 (When the traffic card issuance request data is transmitted from the traffic card module 11, it includes the user ID and the email information when the application is the transportation card, and in the case of the bank app, the user CI information To be transmitted.

In addition, the traffic card module 11 can store data on basic information about the traffic card received from the issuing server 20. [ The basic information received from the issuing server 20 includes a card ID, a user ID, option information, etc., and a transportation card is included in the transportation card module 11 so that the issuance of the transportation card can be completed. The balance of the transportation card is 0 yen. However, the basic information does not include a unique key.

The authentication module 12 receives the data generated when issuing the traffic card from the issuing server 20 and separates the received data from the data requiring security and the encrypted data due to security, , And the encrypted data includes a function of decrypting it, so as to identify whether the unique key is correct using the signature. In addition, the authentication module 12 enables verification of a signature or generation of a signature. Therefore, the authentication module 12 can store only the encrypted secure data, and the unencrypted general data can be transmitted to the card issuer server 30 and stored.

The authentication module 12 is included in a security area configured inside the user terminal 10 and is a configuration different from the USIM. Therefore, the present invention enables the encrypted data to be stored in the user terminal 10, so that the information of the application traffic card used before the change even when the user terminal 10 is changed can be recovered as it is .

The issuing server 20 can be implemented as a single hardware server, and can be configured in a server as a library in software.

When the issuing server 20 receives a new issuance request signal of the transportation card from the transportation card module 11, the issuance server 20 requests the card issuer server 30, which will be described later, to request the issuance of the card ID. At this time, the issuing server 20 can match the card ID and the user ID to each other and transmit it to the issuing SAM 21, and transmits the unique key built in the issuing SAM 21 together with the signature to the issuing server 20 ).

The issuing server 20 allows the issuing server 20 to verify whether the unique key is correctly received using the digital signature of the received unique key and the digital signature. If the correct unique key is received, the issuing server 20 transmits the requested information such as the unique key, the user I, And transmits it to the user terminal 10. At this time, the inherent key may or may not be encrypted, but it is preferable to encrypt it with security.

On the other hand, among the data generated upon issuance of the card, data requiring security is a unique key, an amount, a transaction serial number, and data that does not require security is a card ID.

The data requiring security and the data not requiring security can be separated in the issuing server 20, but a separate security server 40 is configured to enhance security. The security server may be configured in the form of a USB or the like in the issuing server 20 in the form of a card or a module, and may be connected by a communication method such as TCP / IP, USB, or PCI. The security server 40 will be described later.

When the card issuer server 30 receives a new issuance request signal from the issuing server 20, the card issuer server 30 can generate one or a plurality of card IDs, transmit the generated card IDs, So that general information can be received and stored.

Even if the user terminal 10 is lost because the general information of the user is stored even though the card company server 30 does not require security, the balance can be recovered when lost, or issued as card information that is used last when the traffic card is re- (Recovery) can be achieved.

The security server 40 receives the signature-included data from the issuing server 20, decrypts the encrypted inherent key, identifies whether the inherent key is correct or not by using the signature value, The issuing server 20 transmits the data requiring security and the data not requiring security to the issuing server 20 and the issuing server 20 transmits the data to the user terminal 11 so that data requiring security is transmitted to the issuing server 20 To be stored in the authentication module 12, and data not requiring security can be stored in the traffic card module 11. [

The present invention allows non-security data to be stored in a server and security data to be stored in a user terminal so that portions related to signing and authentication can be executed by a user terminal. Thus, even when a smart device is changed, Can be restored as it is.

FIG. 2 and FIG. 4 are flowcharts of a method of issuing a traffic card in a traffic card issuing system according to an embodiment of the present invention.

2, when the user terminal 10 requests the issuance of the transportation card by the user's operation, the user terminal 10 executes the transportation card application (S10) for executing the transportation card application or the bank application, (S20) of transmitting a traffic card issuance application data to the issuance server (20) by using the traffic card module (11) when the traffic card application is executed as described above (S20) The received issuing server 20 fetches the issuance data from the card librarian server 30 and transmits the issuance data to the user terminal 10 (step S30), completing the issuance of the transportation card by receiving data according to the completion of the issuance of the issuance card (S40).

In the traffic card application execution step (S10), a user first drives a transportation card application or a bank application to use an application other than a physical transportation card by using the terminal 10 and executes the transportation card application.

In case of a general transportation card application, the user can input his / her ID and e-mail address to register and execute personal information, and in case of a banking application, CI information for authenticating the user can be input to execute the application.

The application step (S20) of the issuance of the traffic card is a step (S21) of accepting whether or not to request the issuance of a traffic card presented by the traffic card module (11) when the application is executed through the traffic card application execution step (S10) A user information receiving step (S22) of allowing a user to input information necessary for issuing a traffic card; and a step of transmitting information received in the user information receiving step (S22) to the issuing server (20) (S24) of requesting a card ID to the card issuer server (30) when it is determined that the issuance of the transportation card is possible, a step (S23) of confirming the card ID provided by the card issuer server And transmitting the data to the issuing server 20 by matching the IDs (S25).

If the user has previously issued a traffic card, the traffic card module 11 determines whether or not the user ID is stored in the application screen 30 (step S23) To allow the user to check the issuance history, and to confirm whether he wishes to issue an additional issuance or to withdraw the issuance of the transportation card. In addition, the user checks the usage period and payment method of the traffic card the user wants to use through the application screen, and provides the payment server 20 with the payment card. The issuing server 20 then transmits the payment card to the card issuer server 30 So that the card ID reflecting this can be provided.

(S30) of fetching the issued issuance data and transmitting it to the user terminal 10 is a step (S31) of requesting the issuing SAM 21 to issue a unique key matching the card ID issued in the issuing step (S20) A step S32 of receiving from the issuance server 20 a request for determining the accuracy of the inherent key received from the issuing SAM 21 and a step S32 for comparing the signature and the inherent key provided by the issuance server 20 (S34) of decrypting the encrypted inherent key to confirm the signature, and transmitting the inherent key to the security server 40. The security server 40 transmits the secret key to the security server 40, Card ID, user ID, and option information received in the security server 40 are separated into data requiring security and data not requiring security and transmitting the data to the issuing server 20 (Step S35), and the step S35 And a step (S36) of encrypting the data and generating a signature, all the data that is encrypted by the security required data security is not required a step (S37) to be transmitted to the issuing server (20).

The step of completing the issuance of the traffic card (S40) comprises the steps of: transmitting data encrypted by the issuing server (20) to the traffic card module (11) of the user terminal (10) (S40). The data that does not require security is transmitted to the card issuer server (30), and the encrypted data required for security is transmitted to the authentication module (12) It is possible to restore the existing traffic card information even if the user terminal is changed during use.

FIG. 5 is a flowchart of a conventional method for issuing a card using a transportation card issuing system according to an embodiment of the present invention.

5, a step S100 of executing the application using the terminal 10 by a user and a step S100 of executing a real traffic card issuing request application using the information appearing on the app screen through the traffic card module 11, The issuing server 20 having received the traffic card issuance request application signal transmits the user's ID, card ID, option information, etc. to the card issuer server 30 to determine whether there is an issuable transportation card (step S200) The issuing server 20 requests and requests data to be synchronized stored in the card issuing server 30 in step S400 when there is an issuable transportation card, (S500) of acquiring and matching the data stored in the authentication module (12) to authenticate and synchronize the received data, and delivering the physical card (S600).

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, Those skilled in the art will appreciate that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims.

Therefore, the spirit of the present invention should not be construed as being limited to the above-described embodiments, and all of the equivalents or equivalents of the claims, as well as the following claims, I will say.

10: User terminal
11: Traffic card module
12: Authentication module
20: Issuing server
30: Card issuer server
40: security server

Claims (10)

delete delete delete delete delete delete A method of issuing a traffic card using an application-based traffic card issuing and operating system,
A transportation card application execution step (S10) of executing a transportation card application or a bank application using a user terminal,
(S20) of transmitting a traffic card issuance application data to an issuance server using a traffic card module included in the user terminal,
(S30) receiving the issuance data from the card issuer server and transmitting the issued issuance data to the user terminal,
And a step (S40) of completing the issuance of the traffic card by separately receiving the security-required data and the security-free data by receiving the data according to the issuance of the traffic card,
(S30) of fetching the issuance data and transmitting the issued issuance data to the user terminal (S31), requesting the issuing SAM for a unique key matched with the ID of the card issued in the application step (S20)
A step (S32) of receiving from the issuing server a signature for determining the accuracy of the unique key received from the issuing SAM,
(S33) of comparing and authenticating a signature provided by the issuing server with a unique key and transmitting the data to the security server,
The security server decrypts the encrypted inherent key to confirm the signature (S34)
When the inherent key is correct, data such as an issued signature, an ID of the card, a user ID, and option information received in the security server are separated into data requiring security and data not requiring security and transmitting to the issuing server Step S35,
A step (S36) of encrypting data requiring security from the separated data and generating a signature,
And a step (S37) of transmitting both the data that does not require security and the data that has been encrypted due to security, to the issuing server (S37). 8. The method of claim 7,
If the application is executed through the transportation card application execution step (S10), the application step (S20)
A step S21 of agreeing whether or not to apply for the issuance of the traffic card presented by the traffic card module,
A user information receiving step (S22) for allowing a user to input information necessary for issuing a traffic card,
(S23) of transmitting information received in the user information receiving step (S22) to the issuing server to confirm whether a traffic card can be issued,
A step (S24) of requesting a card ID to the card issuer server when it is determined that the issuance of the transportation card is possible,
And a step (S25) of transmitting data to the issuance server by matching the card ID and the user ID provided by the card issuer server, and issuing a transportation card using the app card issuing and operating system.


delete delete

Images