KR101948285B1 - System and Method for managing Secure Application Module of payment service - Google Patents

Abstract

The present invention relates to a security application module management system and method for a payment service, and in the case where payment terminal information including terminal identification information is received, an effective period of a security application module applet is set according to an effective period setting policy, A billing authority management apparatus that transmits a security application module applet installation file including an expiration date to a corresponding user terminal and manages the billing authority of the user terminal by managing the validity of the security application module applet; And installing a security application module applet when the application module applet installation file is received, and activating a settlement right for the validity period to operate as a settlement terminal.

Description

Technical Field [0001] The present invention relates to a security application module management system and method for a payment service,

The present invention relates to a security application module management system and method for a payment service, and more particularly, to a payment application management module for managing a security application module (SAM) To a security application module management system and method for a payment service for allowing a user terminal to operate as a payment terminal.

2. Description of the Related Art In recent years, mobile communication terminals such as mobile phones and smart phones have become commonplace, and technology for enabling mobile payment services to be used by using mobile communication terminals has become an issue.

For example, there is a method of using a subscriber identity module (SIM), in which a SIM card storing credit card information and financial information is inserted into a mobile phone or a smart phone, Can be provided.

However, such a mobile payment service using a SIM card may cause a security vulnerability. For example, when a SIM card or a mobile terminal equipped with a SIM card is lost, payment by a third party is easy.

In order to utilize the mobile communication terminal as a payment terminal, it is necessary to install a security application module for reading card information in the communication between the card and the terminal. In order to install the security application module, There was.

In addition, since the mobile communication terminal is equipped with a card on which the security application module is installed and the mobile communication terminal is used as a payment terminal, it has been difficult to perform maintenance work such as improving the function of the security application module.

Korean Patent No. 1,109,928 entitled " System and Method for Enhancing Financial Services Security, and Apparatus Applied to It "

It is an object of the present invention to provide a security application module in a storage unit of a user terminal (for example, a USIM card, an internal SD card, an external SD card, etc.) The present invention provides a security application module management system and method for a payment service that enables a user terminal to be utilized as a payment terminal without installing a device.

Another object of the present invention is to remotely install and manage a security application module in a storage unit of a user terminal (for example, a USIM card, an internal SD card, an external SD card, etc.) And to provide a security application module management system and method for a payment service that can be strengthened.

Another object of the present invention is to provide a security application module management system and method for a payment service that can improve the management efficiency of a security application module by remotely performing a maintenance operation such as a function of a security application module through a communication network .

It is another object of the present invention to provide a security application module in a storage unit (for example, a USIM card, an internal SD card, an external SD card, etc.) on which a security solution is installed to prevent the outflow of card information And to provide a security application module management system and method for a payment service.

According to an aspect of the present invention, there is provided a method of setting a validity period of a security application module applet according to a validity period setting policy when payment terminal information including terminal identification information is received, A billing authority management apparatus for managing a billing authority of the user terminal by managing the validity of the security application module applet; There is provided a security application module management system for a payment service including a security application module applet when a file is received and a user terminal operating as a payment terminal by activating a payment authority during the validity period.

The billing authority management apparatus, when the validity period has expired, re-sets the valid period of the security application module applet and transmits a settlement authority update signal including the reset validity period to the user terminal, When the settlement function cancellation is requested, the settlement right revocation signal for discarding the settlement right of the security application module applet may be transmitted to the user terminal.

Wherein the user terminal updates the settlement right by resetting the validity period of the security application module applet to the validity period when the settlement right update signal is received and if the settlement right revocation signal is received, Permissions can be revoked.

According to another aspect of the present invention, there is provided a billing management apparatus comprising: a communication unit for communicating with a billing authority management apparatus via a communication network; a storage unit in which a security application module applet is installed; and a security application module applet installation file including a security key and a validity period, And a settlement authority processor for installing a security application module applet in the storage unit and activating the security application module applet during the validity period to control the client terminal to operate as a settlement terminal.

Wherein the storage unit is at least one of a USIM card, a built-in SD card, and an external SD card, and the payment authority processing unit installs the security application module applet in a secure element area of at least one of a USIM card, an internal SD card, You can do that.

The payment authority processing unit may update the validity period of the security application module applet stored in the storage unit to the reset validity period when a payment authorization update signal including a validity period for resetting is received from the payment authority management apparatus.

The payment authority processing unit may discard the payment authority of the security application module applet stored in the storage unit when the payment authority revocation signal is received from the payment authority management apparatus.

The user terminal comprises: a card recognition unit for recognizing card identification information from a card through short-range communication; a card recognition unit for recognizing the card identification information recognized by the card recognition unit and a settlement request signal To the settlement apparatus through the communication unit.

According to another aspect of the present invention, there is provided a billing system including a communication unit for communication with a user terminal through a communication network, a payment terminal information database storing information on user terminals for use as payment terminals for each merchant, A validity period of the security application module applet is set according to a predetermined validity period setting policy and a security application module applet installation file including the set validity period is transmitted to the corresponding user terminal through the communication module, And a SAM management unit managing the validity of the applet to manage the settlement right of the user terminal.

Wherein the SAM management unit resets the validity period of the security application module applet when the validity period of the security application module applet has expired and transmits a settlement right update signal including the reset validity period to the user terminal, The payment authority of the user terminal can be updated.

In addition, the SAM management unit may set or reset the validity period according to a valid period setting policy based on at least one of a business type of the merchant, a payment frequency of the user terminal, and a safe settlement rate of the user terminal.

The SAM management unit may transmit a payment right revocation signal to the user terminal to discard the payment right of the security application module applet when receiving the lost terminal report or releasing the payment function.

According to another aspect of the present invention, when the settlement terminal information including the terminal identification information is received, the settlement authority management apparatus sets the valid period of the security application module applet according to the preset valid period setting policy, The security application module applet installation file, the security application module applet installation file, the security application module applet installation file, and the security application module applet installation file, A security application module management method for a payment service is provided.

In the security application module management method for a payment service, the payment authority management apparatus may further include managing the payment authority of the user terminal by managing the validity of the security application module applet.

According to another aspect of the present invention, there is provided a method of managing a security application module for a payment service, the method comprising: when a security application module applet installation file including a security key and a validity period is received from a billing authority management device, Installing a security application module applet, activating a settlement right through the security key, and activating a function of the security application module applet during the validity period to operate as a settlement terminal. Method is provided.

And when the settlement right update signal including the validity period reset from the settlement right management device is received, resets the validity period set in the security application module applet to the validity period, And discarding the payment authority of the security application module applet if received.

According to another aspect of the present invention, there is provided a security application module applet installation method comprising: installing a security application module applet when a security application module applet installation file including a security key and a validity period is received from a settlement authority management device; And activating a function of the security application module applet during the expiration period to operate as a payment terminal, the security application module management method for a payment service being recorded in a program and being readable in an electronic device.

According to another aspect of the present invention, there is provided a method for managing a security application module for a payment service by a payment authority management apparatus, the method comprising the steps of: Setting a valid period of the applet and transmitting a security application module applet installation file including the set valid period to the corresponding user terminal; if the validity period of the security application module applet has expired, And transmitting a settlement right update signal including the reset validity period to the user terminal. According to another aspect of the present invention, there is provided a method for managing a security application module for a payment service, the method comprising:

The security application module management method for a payment service may further include transmitting a payment right revocation signal to the user terminal to discard a payment right of the security application module applet when the terminal is lost or the payment function is canceled have.

According to another aspect of the present invention, there is provided a method of setting a validity period of a security application module applet according to a preset validity period setting policy when payment terminal information is received from a merchant, And transmitting the settlement right update signal including the reset validity period to the user terminal when the validity period of the security application module applet has expired, And a method of managing a security application module for a payment service including a step of transmitting to a terminal a recording medium readable by an electronic device is provided.

According to the present invention, it is necessary to mount a security application module in order to read card information in communication between a card and a terminal in order to utilize the user terminal as a payment terminal of an RF loading payment card. (For example, a USIM card, a built-in SD card, an external SD card, etc.) in the form of an applet so that an existing user terminal can be used as a payment terminal.

In addition, it is possible to remotely install and manage a security application module in a storage unit of a user terminal (for example, a USIM card, an internal SD card, an external SD card, etc.) to enhance the settlement right management as a settlement terminal for a user terminal.

Also, it is possible to improve the management efficiency of the security application module by remotely performing the maintenance work such as the function improvement of the security application module through the communication network.

In addition, a security application module can be installed in a storage unit (for example, a USIM card, an internal SD card, an external SD card, etc.) on which a security solution is installed, thereby preventing the outflow of card information that may occur during a payment process.

In addition, it is possible to remotely manage the installation function of the security application module applet and the payment function in the storage unit (for example, a USIM card, a built-in SD card, an external SD card, etc.)

In addition, maintenance such as improvement of function of security application module can be remotely managed wirelessly, thereby reducing labor costs and other costs for replacing a security application module.

1 illustrates a security application module management system for a payment service according to the present invention.
2 is a block diagram schematically illustrating a configuration of a user terminal according to the present invention;
FIG. 3 is a block diagram schematically showing a configuration of a billing authority management apparatus according to the present invention; FIG.
4 illustrates a security application module management method for a payment service according to the present invention.
5 is a flowchart illustrating a method of managing a security application module of a user terminal according to an embodiment of the present invention.

The foregoing and other objects, features, and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: FIG.

FIG. 1 illustrates a security application module management system for a payment service according to the present invention.

Referring to FIG. 1, a security application module management system for a payment service includes a security application module for using a user terminal 100 as a payment terminal in an applet form in a user terminal 100, And a management device 200.

When the security application module applet installation file is received from the settlement authority management device 200, the user terminal 100 installs the security application module applet and activates the settlement right for a valid period to operate as a settlement terminal. Here, the security application module applet installation file may include a security key, an expiration date, and the like. At this time, the user terminal 100 may install a security application module in a secure element area such as a built-in or enclosed SD card in a storage unit, for example, a USIM card or a user terminal 100. [ Then, the user terminal 100 activates the settlement right through the security key received together with the security application module applet installation file, activates the function of the security application module applet for the valid period, and operates as the settlement terminal. As a result, And enables payment of the payment card equipped with the function. The secure application module (SAM) authenticates the validity of the card and the terminal, encrypts the communication data to prevent information disclosure, and authenticates and verifies the communication message. The security application module also stores the electronic value transferred from the card. The security application module generally exists in the form of hardware, but it exists in a software form, and a SAM for card authentication is embedded in the program when using the Internet electronic commerce or a personal computer (PC). In addition, the security application module issues an authentication key during the payment process of the payment card including the postpaid and prepaid transportation card, and accesses the memory area of the card so that the payment terminal can read the card information.

In addition, since the security module is installed in the secure element area of the storage unit (for example, USIM card, built-in or external SD card), the user terminal 100 can access and access information by other programs in the user terminal So that security for utilizing the user terminal 100 as a payment terminal can be enhanced.

When the user terminal 100 operates as a payment terminal, the user terminal 100 reads the card identification information from the card through the short-distance communication when the payment amount is input after driving the payment application, And transmits a settlement request signal including a settlement amount to a settlement apparatus (not shown). At this time, the user terminal 100 reads out the card identification information of the RF card (contactless credit card, prepaid card, mobile card) only by installing the payment application using the reader function of the installed local communication function, The payment can be completed by reading the card from the user terminal. An execution RTD having a record type definition (RTD) format defined in an NFC (Near Field Communication) forum is defined in the card, and card identification information is encoded in the execution RTD of the card. If the card is a smart card, the card identification information is recorded in a field that can be recorded by the issuer of the card of the smart card CSN. Such a card refers to a card that communicates with the user terminal 100 via a short distance communication such as a contactless credit card, a non-contact prepaid card, a mobile card, or the like.

The user terminal 100 equipped with the short-range communication module for recognizing the card identification information is a billing application that allows the user to use the card identification information of a card (credit card, prepaid card, mobile card) Payment information such as personal identification information (PIN, electronic signature), payment amount, and product information can be transmitted to and received from the payment apparatus to process payment.

The user terminal 100 can be applied to any user apparatus equipped with a communication function and a local communication function. For example, a notebook computer, a wireless communication terminal, a smart phone, a portable media player (PMP), a personal digital assistant (PDA), a tablet PC, a set- It can be a variety of devices.

A more detailed description of the user terminal 100 will be made with reference to FIG.

The user terminal 100 and the settlement authority management apparatus 200 are connected through a communication network, and the communication network may include a local area network, a wired communication network, a wireless communication network, and the like.

When the settlement terminal information is registered from the merchant (or seller), the settlement authority management apparatus 200 transmits the security application module applet installation file having the valid period to the user terminal, manages the validity of the security application module applet, (100). That is, when the seller registers the payment terminal information including the identification information of the user terminal to be used as the payment terminal, the payment authority managing apparatus 200 sets the valid period of the security application module applet according to the valid period setting policy, And transmits the security application module applet installation file including the period to the user terminal 100. Here, the payment terminal information may be terminal identification information such as a phone number of a user terminal to be used as a payment terminal, an International Mobile Equipment Identity (IMEI) registration number, and a media access control (MAC) address.

In addition, the billing authority management apparatus 200 monitors the validity of the security application module, resets the validity period of the corresponding security application module applet when the validity period has expired, and transmits a settlement right renewal signal including the re- To the user terminal (100). Then, the user terminal 100 resets the validity period set in the security application module applet. That is, the billing authority management apparatus 200 manages the authority for using the user terminal 100 as a payment terminal as an expiration period and manages the expiration period of the expiration period differently according to the business type of the seller, You can manage the risk of payment related accidents.

In addition, when the possibility of a merchant's request or payment is detected, the billing authority management apparatus 200 transmits a payment authorization revocation signal to the user terminal 100 to discard the payment authorization of the security application module applet installed in the user terminal 100. [ Lt; / RTI > Then, the user terminal 100 discards the privilege of the security application module applet. That is, when the security authorization application management apparatus 200 manages the validity of the security application module applet and fails to update or when the terminal loss / privilege adjustment due to the seller request has occurred, the billing right management apparatus 200 discards the authorization of the security application module applet remotely, The operation authority of

In addition, the billing authority management apparatus 200 can remotely update a security application module installed in the user terminal 100 when an update of a SAM internal function is required to expand a payment card that can be charged or to improve a security application module have.

In addition, the settlement authority management apparatus 200 supports a function of managing a plurality of security application modules. That is, the settlement authority management apparatus 200 allows the user terminal 100 to install and manage a plurality of security application modules. At this time, the settlement authority management apparatus 200 manages rules that can be driven for each security application module, thereby preventing a collision according to the security application module when performing the settlement.

The billing authority management apparatus 200 may be configured to send a security application module (SAM) for utilizing the user terminal 100 as a payment terminal to a storage unit (for example, a USIM card, an embedded SD card, or the like) And manages the settlement right by remote management of an applet installation of the security application module, an update of a settlement right, a revocation of a settlement right, and the like so that the user terminal 100 operates as a settlement terminal.

In order to use the user terminal 100 as a settlement terminal of the RF loading payment card, the payment authorization managing apparatus 200 needs to install a security application module in order to read card information in the communication between the card and the terminal. Can be remotely issued in the form of an applet to a storage unit (for example, a USIM card, a built-in or an external SD card, etc.) without installing an additional device, thereby making it possible to use the existing user terminal as it is as a payment terminal.

The billing authority management apparatus 200 will be described in detail with reference to FIG.

Although not shown in the figure, the security application module management system for a payment service may further include a TSM (Trusted Service Manager) device. The TSM device mediates the functions of installing the security application module applet, updating the authority, revoking the authority, etc. to the user terminal 100 at the request of the settlement authority management device 200. [

When the settlement authority management apparatus 200 makes a request to install / manage the security application module in the TSM apparatus, the TSM apparatus performs a procedure of installing or managing the security application module applet on the USIM card of the user terminal 200. The TSM apparatus may be a device for connecting the user terminal 100 and the settlement authority management apparatus 200. [

2 is a block diagram schematically illustrating a configuration of a user terminal according to the present invention.

2, the user terminal 100 includes a communication unit 110, a user interface unit 120, a storage unit 130 in which a security application module applet is stored, a payment authority processing unit 140 ).

The communication unit 102 is a communication unit that interconnects the user terminal 100 and the settlement authority management apparatus via a communication network. The communication unit 102 may be a wireless communication module such as mobile communication or satellite communication, a wired communication module such as the Internet, A short range wireless communication module, and the like.

The user interface unit 120 may serve as an input unit for receiving a user command or an output unit for outputting a result according to a user command.

The user interface unit 120 is a means for receiving a user request for controlling the operation of the user terminal 100. The user interface unit 120 converts a user's request into an electric signal according to a user's operation.

The user interface unit 120 includes key input means for inputting character, number and text information from a user, voice recognition means for receiving a user's voice or audio signal through a microphone or the like, a camera for acquiring an image through shooting of a predetermined object, An RFID reader, a code reader, and the like. The key input unit may be implemented by a keyboard, a keypad, a touch screen, or the like.

The user interface unit 120 may display the display information through a display means such as an LCD (Liquid Crystal Display) or OLED (Organic Light Emitting Diodes) for displaying screen information according to application driving.

For example, the storage unit 130 may be a USIM card 135, a built-in SD card (Secure Digital Card), an external SD card, or the like. Hereinafter, a security application module applet is installed in the secure element area of the USIM 135 for convenience of explanation.

In addition, a plurality of security application modules may be installed in the storage unit 130.

When the security application module applet installation file including the security key and the validity period is received through the communication unit 110, the settlement authority processing unit 140 installs a security application module applet in the storage unit 130, And activates the application module applet to operate as a payment terminal. That is, the settlement authority processing unit 140 downloads the security application module applet, installs it in the Secure Element area of the USIM card 135, activates the settlement right through the security key, activates the security application module applet Thereby operating as a settlement terminal. At this time, the security application module applet installation file may be received in the form of a push message, an SMS, or the like.

The payment authority processing unit 140 updates the validity period of the security application module applet stored in the storage unit 130 to the reset validity period when a payment authorization update signal including the validity period of reset is received from the payment authorization management apparatus And updates the payment authority.

In addition, when the settlement right revocation signal is received from the settlement right management device, the settlement right processing unit 140 discards the settlement right of the security application module applet stored in the storage unit 130. [

In addition, when a plurality of security application modules are installed in the storage unit 130, the settlement authority processing unit 140 manages rules that can be driven for each security application module, thereby preventing a collision according to a security application module have.

The user terminal 100 configured as described above may further include a card recognition unit 150 and a payment request processing unit 160 to provide a payment service using a card equipped with an RF function.

The card recognizing unit 150 reads the card identification information by communicating with the card through short-distance communication. That is, the card recognition unit 150 drives the card reader mode to perform communication through transmission and reception of commands between the card and the user terminal 100. At this time, the card recognition unit 150 can read the encrypted card identification information (card number, CVC) from the card.

After the payment application is activated, the payment request processing unit 160 transmits a payment request signal including the card identification information recognized by the card recognition unit 150 and the input payment amount to the communication unit 110 To the payment device.

The payment request processing unit 160 may provide an RF settlement module in the form of an application programming interface (API) so that, when payment is made in another application, the settlement processing unit 160 calls an RF settlement API in another application to perform settlement processing.

For example, when settlement is made in another application such as shopping, content sales, game, etc., the settlement request processing unit 160 may call the RF settlement API to perform the settlement processing. In this case, the RF billing API is called in the currently running application to omit the installation of the additional payment application program and the complicated card information input procedure, and the user terminal can receive the RF card information to complete the settlement.

FIG. 3 is a block diagram schematically showing the configuration of a billing authority management apparatus according to the present invention.

3, the billing authority management apparatus 200 includes a communication unit 210 for communicating with a user terminal through a communication network, a registration unit 220, a SAM management unit 230, an affiliate shop information database 250, And a database 260.

The registration unit 220 receives the merchant information from the merchant terminal (or seller) terminal and stores it in the merchant information database 250. Here, the merchant information may include merchant identification information, business type, merchant location, contact information, merchant number, and merchandise related information that is sold at a merchant. The merchandise related information is linked with the sales management system of the merchant terminal, and may include the merchandise handled by the merchant and the price of the merchandise.

Also, the registration unit 220 receives the payment terminal information for the card settlement processing from the merchant terminal (or seller) terminal and stores it in the payment terminal information database 260. [ Here, the payment terminal information includes identification information of a terminal to be used as a mobile card payment terminal at an affiliated store, and the terminal identification information may include a telephone number, a terminal ID, a password, an IMEI, a MAC address,

The settlement terminal information database 260 stores settlement terminal information, a security application module applet installed at each settlement terminal, a security key, an expiration date, and the like. That is, the payment terminal information database 260 stores information on user terminals to be used as payment terminals for each merchant.

When the payment terminal information is received from the merchant, the SAM management unit 230 sets the valid period of the security application module applet according to the valid period setting policy, and transmits the security application module applet installation file including the set valid period to the corresponding To the user terminal, and manages the payment authority of the user terminal by managing the validity of the security application module applet. That is, when the payment terminal information is received, the SAM management unit 230 sets the valid period of the security application module applet according to the preset validity period setting policy, and sets the security application module applet installation file including the valid period and the security key as the user To the terminal. At this time, the SAM management unit 230 confirms the business type of the merchant from the merchant information database 230, and sets the valid period of the security application module applet based on the confirmed business type. Then, the SAM management unit 230 may transmit the security application module applet installation file through the push system or transmit the SMS to the URL where the security application module applet is stored.

In addition, the SAM management unit 230 manages the security application module applet valid period of the payment terminals registered in the settlement terminal information database 260, and when the security application module applet whose expiration period has expired exists, And transmits a payment authority update signal including the reset validity period to the user terminal, thereby updating the payment authority of the user terminal. At this time, the SAM management unit 230 resets the validity period based on at least one of the business type of the merchant, the settlement frequency of the user terminal, and the safe settlement rate of the user terminal.

For example, let us consider a case in which the security application module applet has a validity period of 30 days. If the settlement frequency of the payment terminal A is equal to or greater than the threshold frequency, the validity period is reset to be shorter than 30 days (for example, 20 days), and if the settlement frequency is less than the critical frequency, the validity period can be reset to longer than 30 days. If the safe settlement rate of the payment terminal A is less than 50%, the validity period may be set to be shorter than 30 days, and if the settlement rate is 50% or more, the validity period may be set to be longer than 30 days. In addition, the valid period can be set by combining the settlement frequency and the safe settlement rate.

Since the validity period is set differently for each settlement terminal based on the business type, the settlement frequency, the safe settlement rate, and the like, the risk of settlement-related accidents can be reduced.

In addition, when the possibility of a request from an affiliate shop or a payment accident is detected, the SAM management unit 230 transmits a payment right revocation signal to the user terminal to discard the payment right of the security application module applet. Thus, the privilege of the security application module applet installed in the user terminal can be remotely discarded. That is, if the loss notification of the payment terminal is received or the payment function cancellation is requested, the SAM management unit 230 can discard the payment authority of the security application module applet installed in the payment terminal.

In addition, the SAM management unit 230 can remotely update the security application module installed in the user terminal, when the SAM internal function needs to be expanded to enlarge the payment card that can be charged or to improve the security application module. That is, when there is a security application module that requires updating, the SAM management unit 230 checks the terminals installed with the corresponding security application module from the payment terminal information database 260, and transmits the security application module update information to the identified terminals send. Then, the terminals update the previously stored security application module according to the update information.

In addition, the SAM management unit 230 manages rules that can be driven for each security application module, thereby preventing collision according to the security application module when performing the payment.

The billing authority management apparatus 200 configured as described above can remotely manage the installation and billing function activation rights of the security application module applet in the USIM card of the user terminal to cope with a settlement accident that may occur in the event of an emergency, And remediation can be remotely managed wirelessly, thereby reducing labor costs and other costs for replacing security application modules.

4 is a diagram illustrating a security application module management method for a payment service according to the present invention.

Referring to FIG. 4, when the settlement terminal information is registered from the seller (S402), the settlement authority management apparatus sets the valid period of the security application module applet according to the preset validity period setting policy (S404). That is, when the settlement terminal information is registered, the settlement authority management apparatus sets the expiration date for using the terminal as the settlement terminal. At this time, the settlement authority management apparatus sets the valid period of the security application module applet according to the valid period setting policy based on the business type of the merchant.

When the step S404 is performed, the billing authority management device transmits a security application module applet installation file including the valid period and the security key to the user terminal (S406). At this time, the billing authority management device transmits the security application module applet installation file to the user terminal using the push system. When push system is not used, URL can be sent by SMS.

When step S406 is performed, the user terminal installs the security application module applet in the secure element area of the USIM card (S408). At this time, when the security application module applet installation file is transmitted through the push system, the user terminal automatically installs the security application module applet, and when receiving the SMS, the user can access the URL and download and install the security application module applet have.

When the security application module applet is installed, the user terminal activates the settlement right through the security key, activates the function of the security application module applet for a valid period, and operates as a payment terminal (S410).

5 is a flowchart illustrating a method for managing a security application module of a user terminal according to an embodiment of the present invention.

Referring to FIG. 5, when the settlement authority management apparatus receives settlement terminal information from the seller (S502), it sets the valid period of the security application module applet of the user terminal (S504). At this time, the settlement authority management apparatus sets the valid period of the security application module applet according to the valid period setting policy based on the business type of the merchant.

Then, the settlement authority management apparatus transmits a security application module applet installation file including the valid period and the security key to the user terminal (S506).

The settlement authority management unit manages the validity period of the security application module applet, and determines whether the validity period has expired (S508).

If it is determined in step S508 that the validity period has expired, the payment authority management apparatus re-sets the valid period of the security application module applet and updates the payment authority of the user terminal (S510). That is, when the expiration date of the validity period expires, the billing authority management apparatus calculates the settlement frequency and the safe settlement rate of the user terminal and re-sets the expiration date, and transmits a settlement right renewal request signal including the expiration date to the user terminal . Then, the user terminal updates the validity period set in the security application module applet to the updated validity period to update the settlement right.

If the payment authority update of the user terminal fails (S512), the payment authority management apparatus transmits a payment authority revocation request signal to the user terminal (S514). Then, the user terminal discards the privilege of the previously stored security module applet, and suspends the operation right of the applet.

In addition, the payment authority management apparatus performs step S514 if the payment terminal is reported as lost or the payment function is canceled (S516).

Through the above process, the settlement authority management apparatus can remotely install and manage the security application module in the USIM card of the user terminal, use the user terminal as a settlement terminal, and manage payment authority of the settlement terminal.

According to another aspect of the present invention, there is provided a method for managing a security application module for a payment service by a user terminal, the method comprising: receiving a security application module applet installation file including a security key and a validity period from a billing authority management device , Installing a security application module applet, activating a settlement right through the security key, and activating a function of a security application module applet during the validity period to operate as a payment terminal The management method can be recorded in a program and recorded in a recordable medium readable by an electronic device.

According to another aspect of the present invention, there is provided a method for managing a security application module for a payment service by a payment authority management apparatus, the method comprising the steps of: Setting a valid period of the applet and transmitting a security application module applet installation file including the set valid period to the corresponding user terminal; if the validity period of the security application module applet has expired, And transmitting a settlement right update signal including the reset validity period to the user terminal, wherein the security application module management method for the settlement service is recorded in a program and recorded on a recording medium readable by the electronic device, Lt; / RTI >

The security application module management method for such a payment service can be created by a program, and the codes and code segments constituting the program can be easily deduced by a programmer in the field. In addition, a program related to a security application module management method for a payment service can be stored in an information storage medium (readable medium) that can be read by the electronic device, and can be read and executed by the electronic device.

Thus, those skilled in the art will appreciate that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. It is therefore to be understood that the embodiments described above are to be considered in all respects only as illustrative and not restrictive. The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

In order to utilize a user terminal as a settlement terminal of an RF loading payment card, it is necessary to install a security application module in order to read card information in a communication between a card and a terminal. When a security application module is loaded onto a USIM card The present invention can be applied to a security application module management system and method for a payment service that enables an existing user terminal to be used as a payment terminal.

100: user terminal 110, 210:
120: user interface unit 130: storage unit
140: payment authority processing unit 150:
160: Payment Request Processing Unit 200:
220: registration unit 230: SAM management unit
250: Merchant point information DB 260: Payment terminal information DB

Claims (20)

◈ Claim 1 is abandoned upon payment of registration fee. When the settlement terminal information including the terminal identification information is received from the merchant, the validity period of the security application module applet is set according to the validity period setting policy, and the security application module applet installation file including the validity period is transmitted to the corresponding user terminal A billing authority managing unit for managing the validity of the security application module applet to manage the billing authority of the user terminal; And
Installing a security application module applet when the security application module applet installation file is received from the settlement authority management device and activating a settlement right for the validity period to operate as a settlement terminal;
/ RTI >
The payment authority management apparatus sets a reset period of the valid period according to a business type of the merchant,
According to the reset period of the valid period
A first result value obtained by comparing a settlement frequency of the user terminal with a predetermined threshold frequency,
Wherein the validity period is reset based on at least one of a first resultant value obtained by comparing the first safe settlement rate of the user terminal with a predetermined second settlement rate, .
delete delete A communication unit for communicating with the settlement authority management apparatus through a communication network;
A storage unit in which a security application module applet is installed;
A secure application module applet is installed in the storage unit when a security application module applet installation file including a security key and a validity period is received through the communication unit and the security application module applet is activated during the valid period, A payment authority processing unit for controlling the payment authority processing unit to operate;
Lt; / RTI >
The payment authority management apparatus sets a reset period of the valid period according to the business type of the merchant,
The payment authority processing unit may be configured to transmit the settlement right processing unit
A first result value obtained by comparing the settlement frequency of the settlement terminal with a predetermined threshold frequency,
And resets the validity period based on at least one of a first resultant value obtained by comparing the first safe settlement rate of the settlement terminal with a predetermined second settlement rate.
delete 5. The method of claim 4,
Wherein the settlement authority processing unit updates the validity period of the security application module applet stored in the storage unit to the reset validity period when a payment authority update signal including a reset validity period is received from the settlement authority management apparatus User terminal.
◈ Claim 7 is abandoned due to registration fee. 5. The method of claim 4,
Wherein the payment authority processing unit discards the payment authority of the security application module applet stored in the storage unit when the payment authority revocation signal is received from the payment authority management apparatus.
◈ Claim 8 is abandoned due to the registration fee. 5. The method of claim 4,
A card recognizing unit for recognizing card identification information from a card through short-range communication; And
And a settlement request processing unit for transmitting a settlement request signal including the card identification information and the settlement amount recognized by the card recognition unit to the settlement apparatus through the communication unit after the settlement application is activated Lt; / RTI >
◈ Claim 9 is abandoned upon payment of registration fee. A communication unit for communicating with a user terminal through a communication network;
A payment terminal information database storing information on user terminals for use as payment terminals for each merchant; And
Setting a valid period of the security application module applet according to a predetermined validity period setting policy when the payment terminal information is received from the merchant and transmitting the security application module applet installation file including the set valid period to the corresponding user terminal A SAM (Secure Application Module) manager for managing the validity of the security application module applet and managing the settlement rights of the user terminal;
Lt; / RTI >
The SAM management unit sets the reset period of the valid period according to the business type of the merchant,
According to the reset period of the valid period
A first result value obtained by comparing a settlement frequency of the user terminal with a predetermined threshold frequency,
Wherein the validity period is reset based on at least one of a first resultant value obtained by comparing the first safe settlement rate of the user terminal with a predetermined second settlement rate.
delete delete delete When the payment terminal information including the terminal identification information is received, the billing authority management apparatus sets the valid period of the security application module applet according to the preset validity period setting policy, and transmits the security application module applet installation file To the user terminal;
The user terminal installing a security application module applet upon receiving the security application module applet installation file, activating a settlement right for the valid period, and acting as a settlement terminal; And
Wherein the settlement authority management apparatus sets a reset period of the valid period according to a business type of the merchant,
According to the reset period of the valid period
A first result value obtained by comparing a settlement frequency of the user terminal with a predetermined threshold frequency,
Resetting the validity period based on at least one of a first resultant value obtained by comparing the first safe settlement rate of the user terminal with a predetermined second settlement rate;
And a security application module management module.
delete ◈ Claim 15 is abandoned due to registration fee. A method for managing a security application module for a payment service by a user terminal,
Installing a security application module applet when a security application module applet installation file including a security key and a validity period is received from a billing authority management device;
Activating a settlement right through the security key and activating a function of a security application module applet during the validity period to act as a settlement terminal; And
Wherein the settlement authority management apparatus sets a reset period of the valid period according to a business type of the merchant,
According to the reset period of the valid period
A first result value obtained by comparing a settlement frequency of the user terminal with a predetermined threshold frequency,
Resetting the validity period based on at least one of a first resultant value obtained by comparing the first safe settlement rate of the user terminal with a predetermined second settlement rate;
And a security application module management module.
delete delete ◈ Claim 18 is abandoned due to registration fee. A method for managing a security application module for a payment service by a payment authority management apparatus,
Setting a valid period of the security application module applet according to a predetermined validity period setting policy when the settlement terminal information is received from the merchant and transmitting the security application module applet installation file including the set validity period to the corresponding user terminal ; And
Resetting the valid period of the security application module applet when the validity period of the security application module applet has expired and transmitting a settlement right update signal including the reset validity period to the user terminal;
Lt; / RTI >
The step of transmitting a settlement right update signal including the reset validity period to the user terminal
The settlement authority management apparatus sets a reset period of the valid period according to a business type of the merchant,
According to the reset period of the valid period
A first result value obtained by comparing a settlement frequency of the user terminal with a predetermined threshold frequency,
Wherein the validity period is reset based on at least one of a first resultant value obtained by comparing the first safe settlement rate of the user terminal with a predetermined second settlement rate, .
delete ◈ Claim 20 is abandoned due to registration fee. Setting a valid period of the security application module applet according to a predetermined validity period setting policy when the settlement terminal information is received from the merchant and transmitting the security application module applet installation file including the set validity period to the corresponding user terminal ; And
Resetting the validity period of the security application module applet and transmitting a settlement right update signal including the reset validity period to the user terminal when the validity period of the security application module applet has expired,
Wherein the step of transmitting the payment authority update signal to the user terminal comprises setting a reset period of the valid period according to a business type of the merchant,
According to the reset period of the valid period
A first result value obtained by comparing a settlement frequency of the user terminal with a predetermined threshold frequency,
And resetting the validity period based on at least one of a first resultant value obtained by comparing the first safe settlement rate of the user terminal with a predetermined second settlement rate, A method of managing a security application module for a payment service, the method comprising: transmitting the program to the electronic device;

Images