KR101957885B1 - Method of payment processing and security card reader device performing the same - Google Patents

Abstract

In the payment processing method, the security card reader receives the payment request including the transaction information from the merchant terminal, the security card reader receives the card information, and the security card reader generates the approval request text based on the transaction information and the card information The security card reader generates an encryption request telegram by encrypting the approval request telegram using the first key, and the security card reader transmits an approval request including the encryption request telegram to the relay server, and the relay server transmits the encryption request telegram Decrypts and performs payment processing, and the relay server generates an approval response telegram based on the result of the payment processing, and the security card reader receives an approval response including the approval response telegram from the relay server, And transmits a settlement response to the merchant terminal.

Description

[0001] METHOD OF PAYMENT PROCESSING AND SECURITY CARD READER DEVICE PERFORMING THE SAME [0002]

The present invention relates to a payment processing system, and more particularly, to a payment processing method and a security card reader for performing the payment processing method.

An affiliate terminal such as a credit authorization terminal (CAT), a point-of-sale terminal (POS), etc. can perform card settlement through a Value Added Network (VAN) as a relay server. For example, the merchant terminal transmits merchant information, transaction information, and payment information for a credit card, a check card, a debit card, etc. (hereinafter, credit card) to a relay server, The credit card settlement processing can be performed in cooperation with the payment server of FIG.

Meanwhile, various laws have been initiated / enacted to prevent the damage caused by the leakage of payment information. For example, the Credit Financial Business Act introduced a registration system for credit card terminals so that only credit card terminals secured for information security and settlement security can be used. Accordingly, the payment module of the merchant terminal needs to be implemented to maintain the confidentiality of the payment information and to easily receive the security authentication.

KR 10-1720966 B1

An object of the present invention is to provide a payment processing method with improved efficiency and security.

Another object of the present invention is to provide a security card reader for performing the payment processing method.

It should be understood, however, that the present invention is not limited to the above-described embodiments, and may be variously modified without departing from the spirit and scope of the present invention.

In order to accomplish one object of the present invention, a payment processing method according to embodiments of the present invention includes receiving a payment request including transaction information from a merchant terminal by a security card reader, Generating the approval request telegram based on the transaction information and the card information, and the security card reader generating an encryption request telegram by encrypting the approval request telegram using the first key A step in which the security card reader transmits an approval request including the encryption request telegram to a relay server, the relay server decrypts the encryption request telegram and performs a payment processing, Generating an approval response telegram based on the result of the execution of the step And a step in which the security card reader receives an approval response including the approval response telegram from the relay server and transmits a settlement response to the merchant terminal based on the approval response telegram.

According to an embodiment, the encrypted authorization request message may be decrypted by the relay server using the first key.

According to an embodiment, the encrypted authorization request message may be decrypted by the relay server using a second key, which is a private key corresponding to the first key.

According to one embodiment, the relay server performs digital signature on the approval response telegram using the second key, and the secure card reader verifies the digital signature using the first key As shown in FIG.

In order to accomplish one object of the present invention, a payment processing method according to embodiments of the present invention includes the steps of: storing an Initial Pin Encryption Key (IPEK) received from a key management server by a security card reader; Receiving a payment request including transaction information from a terminal, receiving the card information by the security card reader, generating an approval request telegram based on the transaction information and the card information, Generating a One Time Key (OTK) using the IPEK and KSN (Key Serial Number) by the security card reader, and encrypting the approval request telegram using the OTK to generate an encryption request telegram , The secure card reader sends an approval request including the encryption request telegram and the KSN to the relay server The relay server generates the OTK using the IPEK and the KSN. The relay server decrypts the encryption request message using the OTK and performs a payment process. Wherein the secure card reader receives an approval response including the approval response telegram from the relay server, and the secure card reader receives the approval response from the relay server, And transmitting a settlement response to the merchant terminal.

According to an embodiment of the present invention, the step of storing the IPEK may include performing the RSA key-based reliability authentication with the key management server using the RSA public key and the reader unique information, Generating a use key and encrypting the use key using the RSA public key to generate an encryption use key; transmitting the IPEK creation request including the encryption use key to the key management server , The key management server generates the IPEK from a BDK (Base Derivation Key), and the key management server decrypts the encryption use key using an RSA private key corresponding to the RSA public key, thereby deriving the use key Generating, by the key management server, an encrypted IPEK by encrypting the IPEK using the use key; Receiving a response from the key management server to generate an IPEK including the encrypted IPEK from the key management server, and deriving the IPEK from the encrypted IPEK using the use key have.

According to an embodiment of the present invention, the step of performing the RSA key-based reliability authentication includes the steps of: the security card reader transmitting a reliability authentication request including the RSA public key and the reader unique information to the key management server; Wherein the key management server generates a first verification value based on the RSA public key and the reader specific information, the secure card reader receiving a reliability authentication response including the first verification value from the key management server , The secure card reader generating a second verification value based on the RSA public key and the reader specific information, and the secure card reader comparing the first verification value and the second verification value can do.

According to another aspect of the present invention, there is provided a security card reader including a merchant terminal interface interlocked with an affiliated merchant terminal, a communication interface interlocking with a relay server, a card reader receiving card information, A request message generator for generating an approval request telegram based on the transaction information received from the mobile terminal and the card information, an authentication request generation unit for generating an encryption request telegram by encrypting the approval request telegram, And a payment response unit for receiving an approval response including the approval response telegram from the relay server and transmitting a payment response to the merchant terminal based on the approval response telegram.

According to an embodiment, the approval request unit may encrypt the approval request message using a first key, which is a public key. The payment response unit may receive an electronic signature for the approval response telegram from the relay server, and verify the integrity of the electronic signature using the first key.

According to an embodiment of the present invention, the RSA public key and the reader specific information are used to generate a use authentication key for performing a reliability authentication based on the RSA key with the key management server, and the use key is generated using the RSA public key. An IPEK requesting unit for generating an encryption-use key by encrypting the encryption key, and transmitting an IPEK creation request including the encryption-use key to the key management server, and an IPEK requesting unit for encrypting the IPEK from the encrypted IPEK received from the key management server using the use- And an IPEK storage unit for extracting the IPEK. The approval request unit may generate an OTK using the IPEK and the KSN, and may encrypt the approval request message using the OTK.

The payment processing method according to embodiments of the present invention can easily receive the security authentication by separating the merchant terminal that processes the transaction information from the merchant store terminal and the security card reader that processes the payment information and performs the payment approval request. In addition, the payment processing method may block access to the payment information from the merchant terminal and may encrypt transmission and reception messages between the security card reader and the relay server. Accordingly, it is possible to prevent information leakage to the payment information, and to improve the confidentiality between the security card reader and the relay server.

The security card reader according to the embodiments of the present invention can reduce the construction cost of the settlement processing system by performing the settlement processing method.

However, the effects of the present invention are not limited to the above effects, and may be variously extended without departing from the spirit and scope of the present invention.

1 is a block diagram showing a payment processing system according to an embodiment of the present invention.
2 is a block diagram illustrating an example of a secure card reader included in the payment processing system of FIG.
3 is a flowchart illustrating an example of a settlement processing method using the secure card reader of FIG.
4 is a flowchart showing another example of a settlement processing method using the secure card reader of FIG.
5 is a block diagram illustrating a payment processing system according to another embodiment of the present invention.
6 is a block diagram illustrating an example of a secure card reader included in the payment processing system of FIG.
7 is a flowchart illustrating an example of a key download method of the secure card reader of FIG.
8 is a flowchart illustrating an example of a payment processing method using the security card reader of FIG.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The same or similar reference numerals are used for the same components in the drawings.

1 is a block diagram showing a payment processing system according to an embodiment of the present invention.

1, the payment processing system may include an affiliate shop terminal 100, a secure card reader 300A, a relay server 500, and card issuer servers 700-1 to 700-n.

The merchant terminal 100 may register transaction information and send a payment request to the card reader 300A. For example, the merchant terminal 100 registers transaction information as a point-of-sale (POS) terminal and transmits payment information (for example, credit card payment, debit card payment, point settlement, etc.) The transaction information may be provided to the security card reader 300A.

The security card reader 300A receives the card information, generates an approval request message including the transaction information and the card information received from the merchant terminal 100, and transmits the approval request message to the relay server 500. [ That is, the credit card reader 300A receives the card information and communicates with the relay server 500, so that the merchant terminal 100 can be settled in a state where access to the card information is limited. The security card reader 300A will be described in detail with reference to FIG.

The relay server 500 can relay the card settlement processing in cooperation with the plurality of card company servers 700-1 to 700-n. For example, the relay server 500 may be a VAN corporation server. The relay server 500 may receive the encryption request telegram from the secure card reader 300A and decrypt the encryption request telegram. The relay server 500 can relay the settlement processing by transmitting the settlement request to the card company server corresponding to the settlement information.

Accordingly, since the merchant terminal 100 of the payment processing system only receives the result of the payment processing through the secure card reader 300A such as a black box, access to payment information can be fundamentally blocked in the merchant terminal 100 have. That is, the outflow of the card information can be fundamentally blocked by processing the payment information in the security card reader 300A having enhanced security.

2 is a block diagram illustrating an example of a secure card reader included in the payment processing system of FIG.

2, the secure card reader 300A may include a control unit 310A, an affiliate shop terminal interface 320, a communication interface 330, a card reader, a data memory 360, and a key memory 370 have.

The control unit 310A can encrypt the approval request message in response to the payment request received from the merchant terminal and control the communication between the relay server and the secure card reader 300A. In one embodiment, the control unit 310A may include a request telegram generation unit 311, an approval request unit 313, and a payment response unit 315. [

The request specialization creator 311 can generate an approval request text based on the transaction information received from the merchant terminal, the card information received from the card reader, the merchant information stored in the data memory 360, and the like.

The approval requesting unit 313 may generate the encryption request telegram by encrypting the approval request telegram, and may transmit the telegram of the encryption request to the relay server. In one embodiment, the authorization requesting unit 313 may encrypt the entire authorization request telegram. In another embodiment, the approval requesting unit 313 may encrypt a part of the approval request telegram (for example, payment information such as a card number, card validity period, etc.).

The payment response unit 315 receives an approval response including the approval response telegram from the relay server, and can transmit a payment response to the affiliate terminal based on the approval response telegram.

In one embodiment, the request telegram generation unit 311 generates an encryption request telegram by encrypting the approval request telegram using the first key of the symmetric key scheme such as DES, 3DES, SEED, AES, etc., Lt; RTI ID = 0.0 > 1 < / RTI > key. In this case, the relay server generates the encrypted response message by encrypting the approval response message using the first key, and the settlement response unit 315 can decrypt the encrypted response message using the first key. In another embodiment, the request telegram generator 311 generates an encryption request telegram by encrypting the approval request telegram using the first key, which is a public key of an asymmetric key scheme, such as RSA, ECC, May decrypt the encryption request message using the second key, which is a private key corresponding to the first key. In this case, the relay server performs digital signature on the approval response telegram using the second key, and the request telegram creator 311 verifies the integrity of the response telegram by verifying the digital signature using the first key .

The merchant terminal interface 320 is connected to the merchant terminal through various wired / wireless communication methods, and can transmit and receive a payment request / response, and the like. For example, the merchant terminal interface 320 may be connected to the merchant terminal using a wired communication method such as USB, RS232, etc. or a wireless communication method such as Bluetooth.

The communication interface 330 is connected to the relay server through various wired / wireless communication methods, and can transmit / receive an approval request / response.

The card reader can receive payment information from the user. In one embodiment, the card reader may include a magnetic reader 340 and an IC reader 350. The magnetic reader 340 can receive payment information of the credit card when the magnetic card type credit card is swiped. The IC reader 350 can receive payment information of a credit card when an IC card type credit card is inserted.

The data memory 360 may store reader specific information, merchant information, and transaction information. The reader-specific information may include an identification ID, a firmware version, etc. of the secure card reader 300A, and the identification ID may have a unique value for each card reader 300A. The merchant information may include merchant ID, merchant name, representative name, merchant address, and the like.

In one embodiment, the data memory 360 may store the request telegram and the response telegram processed in the secure card reader 300A to perform transaction backup. For example, the data memory 360 may store the cryptographic request message and / or the cryptographic response message to ensure confidentiality of the payment information. In one embodiment, the data memory 360 may comprise a non-volatile memory. Non-volatile memory can store data in a power-off state, is relatively inexpensive, and can store large amounts of data. In one embodiment, the data memory 360 includes a flash memory, an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a phase change random access memory (PRAM) (Random Access Memory), Nano Floating Gate Memory (NFGM), Polymer Random Access Memory (PoRAM), Magnetic Random Access Memory (MRAM), and Ferroelectric Random Access Memory (FRAM).

The key memory 370 may store an encryption key (e.g., a first key) for encrypting the authorization request telegram. Various techniques for preventing copying and modulation of data may be applied to the key memory 370. For example, the key memory 370 may apply a physical unclonable function (PUF) to protect key data using inherent characteristics existing in a semiconductor.

Although the merchant information is stored in the data memory 360 of the secure card reader 300A in FIG. 2, the merchant information is stored in the merchant terminal and the merchant information is provided from the merchant terminal to the security card reader 300A .

3 is a flowchart illustrating an example of a settlement processing method using the secure card reader of FIG.

3, the secure card reader 300A receives the card information and communicates with the relay server 500, so that the merchant terminal 100 can perform settlement processing in a state where access to the card information is limited. Here, security can be improved by encrypting / decrypting the transmission / reception message between the security card reader 300A and the relay server 500 using the first key.

Specifically, the merchant terminal 100 can receive transaction information (S105). For example, the user can input transaction information including a product name, a quantity, an amount, a tax classification, etc. to the merchant terminal 100 and click the card payment button to request payment.

The secure card reader 300A can receive a payment request including transaction information from the merchant terminal 100 (S110) and receive card information (S115). For example, a user swipes a magnetic card type credit card into the security card reader 300A or inserts an IC card type credit card into a card including a card number of a credit card, an expiration date, a CVC, You can enter information.

The secure card reader 300A can generate an approval request message based on the transaction information received from the merchant terminal 100, the card information received from the card reader, and the merchant information (S120).

The secure card reader 300A can generate the encryption request telegram by encrypting the approval request telegram using the first key (S125), and transmit the approval request including the encryption request telegram to the relay server 500 (S130) have. In one embodiment, the secure card reader 300A may encrypt the authorization request message using a first key of a symmetric key scheme, such as DES, 3DES, SEED, AES, and the like.

The relay server 500 can decrypt the encryption request telegram (S140) and derive information (for example, transaction information, card information, merchant information, etc.) necessary for the payment processing.

The relay server 500 transmits an approval request to the card issuer server 700-k corresponding to the merchant information and payment information at step S145 and the card issuer server 700-k performs the payment processing at step S150, To the relay server 500 (S155).

The relay server 500 generates an approval response telegram based on the payment processing result (S160), and the relay server 500 generates the encryption response telegram (S165) by encrypting the approval response telegram using the first key have.

The security card reader 300A receives an approval response including the encryption response telegram from the relay server 500 in step S170, decrypts the encrypted response telegram in step S175 using the first key, And transmits a response to the franchise terminal 100 (S180).

4 is a flowchart showing another example of a settlement processing method using the secure card reader of FIG.

4, the secure card reader 300A receives the card information and communicates with the relay server 500, so that the merchant terminal 100 can perform settlement processing in a state where access to card information is restricted. Here, the transmission / reception message between the secure card reader 300A and the relay server 500 is encrypted / decrypted using the first key, which is a public key, and the second key, which is a private key corresponding to the first key, . However, the settlement processing method according to the present embodiment is substantially the same as the settlement processing method of FIG. 3 except for encrypting / decrypting, integrity verification, and transaction storing operation of the transmission / reception specialist, and thus a duplicate description will be omitted.

The merchant terminal 100 can receive transaction information (S205). The secure card reader 300A can receive the payment request including the transaction information from the merchant terminal 100 (S210) and receive the card information (S215). The secure card reader 300A can generate an approval request telegram based on the transaction information received from the merchant terminal 100, the card information received from the card reader, and the merchant information (S220).

The secure card reader 300A may encrypt the authorization request message with the asymmetric key scheme using the first key, which is the public key, to generate the encryption request message (S225).

The secure card reader 300A stores the encryption request telegram (S230), and transmits an approval request including the encryption request telegram to the relay server (S235). In one example, if a failure occurs during the payment process, the secure card reader 300A may retransmit the request message by comparing the sequentially incremented sequence numbers of the stored encrypted request message with the encrypted response message. In another example, if the communication state between the secure card reader 300A and the relay server 500 is unstable, the authorization request may be transmitted asynchronously using the stored encryption request telegram.

The relay server 500 decrypts the encryption request message using the second key as a private key in step S240 and derives the information necessary for the payment process (for example, transaction information, card information, merchant information, etc.) .

The relay server 500 transmits an approval request to the card issuer server 700-k corresponding to the merchant information and the payment information in step S245 and the credit card company server 700-k performs the payment process in step S250, To the relay server 500 (S255).

The relay server 500 generates an approval response telegram based on the payment processing result (S260), and performs electronic signature on the approval response telegram (S265) using the second key which is the private key corresponding to the first key . For example, the relay server 500 may derive a first hash value for the authorization response telegram and derive an electronic signature value for the first hash value using the second key.

The security card reader 300A receives an approval response including the approval response telegram, the first hash value, and the digital signature value from the relay server 500 (S270), and uses the first key to generate an electronic signature (S275). For example, the secure card reader 300A may derive a second hash value from the digital signature value using the first key, and verify the digital signature by verifying whether the first hash value and the second hash value are the same .

The secure card reader 300A stores the approval response telegram (S280), and transmits a payment response indicating the payment processing result to the affiliate shop terminal 100 (S285).

5 is a block diagram illustrating a payment processing system according to another embodiment of the present invention. 6 is a block diagram illustrating an example of a secure card reader included in the payment processing system of FIG.

5 and 6, the payment processing system includes a merchant terminal 100, a secure card reader 300B, a key management server 400, a relay server 500, and card issuer servers 700-1 to 700-n ). The secure card reader 300B may include a control unit 310B, an affiliate shop terminal interface 320, a communication interface 330, a card reader, a data memory 360, and a key memory 370. [ However, except that the security card reader 300B according to the present embodiment downloads the initial PIN Encryption Key (IPEK) generated by the key management server 400 and generates a new key value each time the settlement process is performed, 1 and 2, the same reference numerals are used for the same or similar components, and redundant description will be omitted.

The key management server 400 may generate an IPEK from a Base Derivation Key (BDK) and send IPEK to the secure card reader 300B. The key management server 400 may encrypt and transmit the IPEK in order to improve the security between the key management server 400 and the secure card reader 300B. For example, the key management server 400 may decrypt the encryption use key received from the secure card reader 300B with the RSA private key, and encrypt the IPEK using the decrypted use key. In one embodiment, the key management server 400 may include a hardware security module (HSM) to securely store the keys.

In the secure card reader 300B, the control unit 310B encrypts the approval request message in response to the payment request received from the merchant terminal, and controls the communication between the relay server and the secure card reader 300B. The control unit 310B includes a request telegram generation unit 311, an approval request unit 313, a payment response unit 315, a reliability authentication unit 317, an IPEK request unit 318, Lt; RTI ID = 0.0 > 319 < / RTI >

The request specialization creator 311 can generate an approval request text based on the transaction information received from the merchant terminal, the card information received from the card reader, the merchant information stored in the data memory 360, and the like.

The approval requesting unit 313 may generate the encryption request telegram by encrypting the approval request telegram, and may transmit the telegram of the encryption request to the relay server. In one embodiment, the authorization requesting unit 313 generates an OTK (One Time Key) using IPEK and KSN (Key Serial Number), and encrypts the authorization request message using the OTK. Here, the KSN is a serial number and can be updated (for example, incremented by one) each time the encryption request specialization is generated. Therefore, a new OTK can be generated for each settlement process.

The payment response unit 315 receives an approval response including the approval response telegram from the relay server, and can transmit a payment response to the affiliate terminal based on the approval response telegram.

The reliability authentication unit 317 can perform reliability authentication based on the RSA key with the key management server using the RSA public key and the reader specific information. Specifically, the reliability authentication unit 317 can transmit a reliability authentication request including the RSA public key and the reader specific information to the key management server. The key management server may generate the first verification value based on the RSA public key and reader specific information. The reliability authenticating unit 317 can generate the second verification value based on the RSA public key and the reader specific information, and can perform the reliability authentication by comparing the first verification value and the second verification value.

The IPEK requester 318 generates a use key, encrypts the use key using the RSA public key, generates an encryption use key, and transmits an IPEK creation request including the encryption use key to the key management server.

The IPEK storage unit 319 can derive IPEK from the encrypted IPEK received from the key management server using the use key, and store the IPEK.

Although the key management server 400 and the relay server 500 are described as being separate from each other in FIG. 5, the key management server 400 and the relay server 500 may be implemented in one server.

7 is a flowchart illustrating an example of a key download method of the secure card reader of FIG.

7, the secure card reader 300B stores the IPEK generated by the key management server 400 and generates a new key value (i.e., OTK) every time the payment processing is performed in response to the payment request, It is possible to improve the property.

Specifically, the user can click the key download button of the merchant terminal 100 (S305) and enter the password for the secure card reader 300B (S310).

The merchant terminal 100 transmits a key download request including the inputted password to the secure card reader 300B in step S315 and the secure card reader 300B can verify the password in step S320. For example, the secure card reader 300B may store the encrypted password, and verify the validity by comparing the encrypted value of the received password with the stored encrypted password. Accordingly, the authority for updating the key of the secure card reader 300B can be confirmed.

When the password verification is valid, the secure card reader 300B can perform the RSA key-based reliability authentication with the key management server 400 using the RSA public key and the reader specific information. Here, the RSA public key represents a public key of various asymmetric key algorithms using a public key and a private key.

In detail, the secure card reader 300B may transmit a reliability authentication request including the RSA public key and the reader specific information to the key management server 400 (S325). Here, the reader-specific information may include an identification ID and a firmware version of the secure card reader 300B, and the identification ID may have a unique value for each of the secure card readers 300B. The reader-specific information may be stored in a data memory included in the secure card reader 300B. The key management server 400 may generate the first verification value based on the RSA public key and the reader specific information (S330). The secure card reader 300B may receive a reliability authentication response including the first verification value from the key management server 400 (S335). The secure card reader 300B may generate the second verification value based on the RSA public key and the reader specific information, and perform the reliability authentication by comparing the first verification value and the second verification value (S340). In one embodiment, the first verification value or the second verification value generates a random number using a seed value generated as reader specific information, derives a hash value for a random number, and encrypts the hash value using an RSA public key ≪ / RTI > In another embodiment, a random number is generated using the seed value generated by the reader specific information, the first verification value is set as a hash value for the random number, and the second verification value is set by the key management server 400 as a hash value The signature value generated by the RSA private key corresponding to the RSA public key may be set to a value decrypted with the RSA public key. Therefore, the secure card reader 300B and the key management server 400 can perform the mutual trust authentication using the verification value based on the RSA public key.

The secure card reader 300B may generate the use key and encrypt the use key using the RSA public key to generate the encryption use key (S345). Herein, the use key represents a symmetric key for securely transmitting the IPEK between the secure card reader 300B and the key management server 400. [ For example, the secure card reader 300B may generate the hash value of the SHA256 scheme to a random number using the use key. The secure card reader 300B may transmit the IPEK creation request including the encryption use key to the key management server 400 (S350).

The key management server 400 may generate the IPEK from the BDK (Base Derivation Key) (S355). Here, BDK represents a base key for generating IPEK as a secret key not shared with anyone. For example, the key management server 400 may generate IPEK corresponding to the identification ID of the secure card reader 300B. The key management server 400 can derive the use key by decrypting the encryption use key using the RSA private key corresponding to the RSA public key, and encrypt the IPEK using the use key to generate the encrypted IPEK (S360) .

The secure card reader 300B may receive the IPEK creation response including the encrypted IPEK from the key management server 400 (S365). The secure card reader 300B can derive the IPEK from the encrypted IPEK using the symmetric key as the usage key (S370). Therefore, security can be improved by encrypting and transmitting the IPEK between the secure card reader 300B and the key management server 400 using the use key.

The secure card reader 300B may set the KSN to an initial value (for example, 0), and store IPEK and KSN in the key memory (S375). The secure card reader 300B may transmit a key download response to the affiliate terminal 100 in response to the registration processing result of IPEK and KSN (S380).

8 is a flowchart illustrating an example of a payment processing method using the security card reader of FIG.

Referring to FIG. 8, the secure card reader 300B receives the card information and communicates with the relay server 500, whereby the payment processing can be performed in a state in which the merchant terminal 100 has limited access to the card information. Herein, every time the settlement processing is performed between the secure card reader 300B and the relay server 500, encryption / decryption is performed by a DUKPT (Driving Unique Key Per Transaction) method which generates a new key value (i.e., OTK) The security can be improved. However, the payment processing method according to the present embodiment is substantially the same as the payment processing method of FIG. 3 except for the encrypting / decrypting method of the transmission / reception specialization, and thus a duplicate description will be omitted.

The merchant terminal 100 can receive transaction information (S405). The secure card reader 300B may receive a payment request including transaction information from the merchant terminal 100 in step S410 and receive card information in step S415.

The secure card reader 300B may generate an approval request telegram based on transaction information received from the merchant terminal 100, card information received from the card reader, and merchant information (S420)

The secure card reader 300B may generate the OTK using the IPEK and the KSN (S425). For example, the secure card reader 300B may generate a future key that includes 21 keys based on the IPEK and derive an OTK corresponding to the KSN from the future key. In one embodiment, the KSN may be updated each time it generates an OTK. That is, the security card reader 300B can update the KSN every time the OTK is generated to generate a new key each time the settlement process is performed. In one example, the secure card reader 300B may increase the KSN by 1 each time it generates an OTK. In another example, the secure card reader 300B may update the KSN based on the hash value of the previous KSN and the previous request text.

The secure card reader 300B can generate the encryption request telegram by encrypting the approval request telegram using the OTK in operation S430 and send the approval request including the encryption request telegram and the KSN to the relay server 500 in operation S435 have.

The relay server 500 can generate the OTK using the IPEK and the KSN (S440). The relay server 500 can generate the OTK in the same manner as the secure card reader 300B. For example, the relay server 500 may generate a plurality of future keys based on the IPEK received from the key management server 400, and derive an OTK corresponding to the KSN from the future key.

The relay server 500 can decrypt the encryption request telegram using the OTK (S445) and derive information (e.g., transaction information, card information, merchant information, etc.) necessary for the payment processing.

The relay server 500 transmits an approval request to the card issuer server 700-k corresponding to the merchant information and the payment information in step S450 and the credit card company server 700-k performs the payment process in step S455, To the relay server 500 (S460).

The relay server 500 transmits an approval response to the secure card reader 300B based on the payment processing result (S465), and the secure card reader 300B transmits the settlement response to the affiliated shop terminal 100 (S470).

Although OTK is described as generating Future Key based on IPEK in the above description, OTK can be generated in various ways. For example, OTK corresponding to KSN can be directly derived from IPEK.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it should be understood that the same is by way of illustration and example only and is not to be taken by way of limitation in the spirit and scope of the invention. Modifications and alterations may occur to those skilled in the art. For example, in the above description, payment processing is performed using a credit card, but the type of the payment means is not limited thereto.

The present invention can be applied to various payment processing apparatuses that perform settlement processing using a card reader. For example, the present invention can be applied to a payment processing system including a credit card authorization terminal (CAT), a point of sale (POS), and the like.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. You will understand.

100: Merchant terminal 300A, 300B: Security card reader
310A, 310B: Control section 320: Merchant terminal interface
330: Communication interface 340: Magnetic reader
350: IC reader 360: data memory
370: Key memory 400: Key management server
500: Relay servers 700-1 to 700-n:

Claims (10)

Receiving a settlement request including the transaction information from a merchant terminal receiving transaction information from a security card reader different from the merchant terminal;
Receiving the card information by the security card reader;
The secure card reader generating an approval request telegram based on the transaction information and the card information;
Generating a cryptographic request message by encrypting the authorization request message using the first key;
Transmitting the approval request including the encryption request telegram to the relay server through the communication interface included in the security card reader different from the merchant terminal receiving the transaction information;
The relay server decrypting the encryption request message and performing a payment process;
Generating, by the relay server, an approval response telegram based on a result of the execution of the payment processing; And
Receiving the approval response including the approval response telegram from the relay server and transmitting a settlement response to the merchant terminal based on the approval response telegram,
And the access to the card information by the merchant terminal is limited. The payment processing method according to claim 1, wherein the encrypted approval request message is decrypted by the relay server using the first key. The payment processing method of claim 1, wherein the encrypted approval request message is decrypted by the relay server using a second key that is a private key corresponding to the first key. The method of claim 3,
Performing a digital signature on the approval response telegram using the second key; And
Further comprising the step of the security card reader verifying the digital signature using the first key. Storing an Initial Pin Encryption Key (IPEK) received from the key management server by the security card reader;
Receiving a settlement request including the transaction information from the merchant terminal receiving the transaction information from the security card reader different from the merchant terminal;
Receiving the card information by the security card reader;
The secure card reader generating an approval request telegram based on the transaction information and the card information;
Generating a One Time Key (OTK) using the IPEK and KSN (Key Serial Number);
Generating an encryption request message by encrypting the authorization request message using the OTK;
Transmitting the approval request including the encryption request telegram and the KSN to the relay server via the communication interface included in the security card reader different from the merchant terminal receiving the transaction information;
The relay server generating the OTK using the IPEK and the KSN;
The relay server decrypting the encryption request message using the OTK and performing a payment process;
Generating, by the relay server, an approval response telegram based on a result of the execution of the payment processing; And
Receiving the approval response including the approval response telegram from the relay server and transmitting a settlement response to the merchant terminal based on the approval response telegram,
And the access to the card information by the merchant terminal is limited. 6. The method of claim 5, wherein storing the IPEK comprises:
Performing the RSA key-based reliability authentication with the key management server using the RSA public key and the reader-specific information;
Generating a use key by encrypting the use key using the RSA public key by the secure card reader;
Transmitting the IPEK creation request including the encryption use key to the key management server;
The key management server generating the IPEK from a Base Derivation Key (BDK);
Deriving the use key by decrypting the encryption use key using the RSA private key corresponding to the RSA public key;
Generating an encrypted IPEK by encrypting the IPEK using the use key by the key management server;
Receiving the IPEK generation response including the encrypted IPKE from the key management server; And
And the secure card reader deriving the IPEK from the encrypted IPEK using the use key. 7. The method of claim 6, wherein performing the RSA key-
Transmitting the reliability authentication request including the RSA public key and the reader-specific information to the key management server;
The key management server generating a first verification value based on the RSA public key and the reader specific information;
Receiving from the key management server a reliability authentication response including the first verification value;
The secure card reader generating a second verification value based on the RSA public key and the reader specific information; And
And the secure card reader comparing the first verification value and the second verification value. In a security card reader,
An affiliate terminal interface linked with an affiliate terminal receiving the transaction information;
A communication interface for interworking with a relay server;
A card reader for receiving card information;
A request message creator for generating an approval request message based on the transaction information received from the merchant terminal through the merchant terminal interface and the card information received through the card reader;
An approval request for transmitting the encryption request telegram to the relay server through the communication interface included in the security card reader other than the merchant terminal receiving the transaction information, part; And
And a payment response unit for receiving an approval response including the approval response telegram from the relay server through the communication interface and transmitting a payment response to the merchant terminal based on the approval response telegram,
And the access to the card information by the merchant terminal is limited. The method of claim 8, wherein the approval request unit encrypts the approval request message using a first key, which is a public key,
Wherein the payment response unit receives an electronic signature for the approval response telegram from the relay server, and verifies the integrity of the digital signature using the first key. The apparatus of claim 8, further comprising: a reliability authenticator for performing reliability authentication based on an RSA key with the key management server using RSA public key and reader specific information;
Generating an encryption key by encrypting the use key using the RSA public key, and transmitting an IPEK creation request including the encryption use key to the key management server; And
And an IPEK storage unit for deriving IPEK from the encrypted IPEK received from the key management server using the use key,
Wherein the approval request unit generates an OTK using the IPEK and the KSN, and encrypts the approval request message using the OTK.

Images