KR102395870B1 - A payment terminal apparatus for providing payment services using a distributed management network of encryption key based on block chains - Google Patents

Abstract

An operating method of a payment terminal device according to an embodiment of the present invention includes the steps of receiving payment information; requesting an encryption key corresponding to payment method information of the payment information to a payment relay server; receiving the encryption key from the payment relay server; encrypting the payment method information with the encryption key; and transmitting the encrypted payment method information and a full payment approval request generated based on the payment information to the payment relay server, wherein the encryption key is a plurality of peer devices including the payment relay server. It is characterized in that it is issued from a blockchain-based encryption key distributed management service network composed of

Description

A payment terminal device that provides a payment service using a blockchain-based distributed encryption key distribution management network, a payment relay server, and an operation method thereof

The present invention relates to a payment terminal device, a payment relay server, and an operating method thereof. More specifically, the present invention relates to a payment terminal device that provides a payment service using a blockchain-based encryption key distribution management network, a payment relay server, and an operating method thereof.

With the expansion of electronic payment infrastructure, credit payment services based on card payments such as credit cards, debit cards, and debit cards (hereinafter, “credit cards”) have become common. In the credit payment service, after a user purchases goods or services from an affiliated store by card payment, the user pays the use price for the goods or services to a credit card company on the payment date, and the affiliate store receives the sale price of the goods or services from the card company, etc. It refers to a payment method using an electronic payment infrastructure that accepts payments.

The system for providing the credit payment service includes a plurality of card terminals provided in a plurality of affiliated stores, and a value added network (VAN) company that provides a payment agency service related to card payment between a plurality of affiliated stores and card companies. The server (hereinafter, "payment proxy server") and the server of the card company that issued the credit card to the user are connected through a communication network and configured. The VAN refers to a payment network for a payment transaction between card terminals and a card company server.

In the payment system using the payment proxy server between the card terminal and the card company server as described above, the communication network between the payment agent server and the card terminal or between the payment agent server and the card terminal fails, so data (or message) transmission and reception is not smooth. In this case, the corresponding card payment may not be made normally. In addition, in recent years, due to communication delays due to a rapid increase in the number of card payments, the communication failure situation as described above occurs more frequently, and accordingly, there is a problem in that the reliability of the payment system is lowered.

Accordingly, a POS terminal that can communicate with a plurality of VANs and perform payment processing with different payment proxy servers in some cases has been proposed.

However, when configuring a terminal system that communicates with a plurality of VANs as described above, a major problem in terms of security is generated.

For example, a shared encryption key may exist between each of the plurality of VANs, and accordingly, the card reader may perform encryption processing of card information using the shared encryption key, but the POS terminal eventually obtains actual approval among the plurality of VANs. It is a situation that only communicates with the VAN company to be approved.

At this time, if an attacker intercepts encrypted data encrypted with the shared encryption key, if the attacker requests an authorization based on the shared encryption key to other VAN servers that have not been paid, each other VAN company recognizes it as an initial authorization request. A fatal security loophole occurs in the credit approval process.

As a result, there is a problem in that the POS terminal and the entire plurality of VANs contain security flaws, leading to loss of reliability of the system.

To solve this problem, a method of assigning and sharing a serial number to prevent reuse of encrypted data has also been proposed, but there is a problem in that technical interworking is not easy due to the difference in the approval process or data format between each VAN company.

KR 10-2019-0081191 A1 KR 10-2017-0087663 A1

The present invention has been devised to solve the above problems, and it is possible to solve the security problems caused by reusing card information data itself encrypted with an encryption key by hacking, etc., and to improve the system reliability based on the block chain. An object of the present invention is to provide a method for processing card information for preventing reuse of card information, an apparatus for the same, and a method for operating a financial server.

A method according to an embodiment of the present invention for solving the above-described problems, a method of operating a payment terminal device, comprising: receiving payment information; requesting an encryption key corresponding to payment method information of the payment information to a payment relay server; receiving the encryption key from the payment relay server; encrypting the payment method information with the encryption key; and transmitting the encrypted payment method information and a full payment approval request generated based on the payment information to the payment relay server, wherein the encryption key is a plurality of peer devices including the payment relay server. It is characterized in that it is issued from a blockchain-based encryption key distributed management service network composed of

An apparatus according to an embodiment of the present invention for solving the above problems, a payment terminal device, comprising: an input unit for receiving payment information; an encryption processing unit that requests an encryption key for encrypting payment method information corresponding to the payment information from a payment relay server, receives the encryption key from the payment relay server, and encrypts the payment method information with the encryption key; and a communication unit for transmitting the encrypted payment method information and a full payment approval request generated based on the payment information to the payment relay server, wherein the encryption key includes a plurality of peer devices including the payment relay server. It is characterized in that it is issued from a blockchain-based encryption key distributed management service network composed of

According to an embodiment of the present invention, payment method information is encrypted with an encryption key using a blockchain-based encryption key distributed management service network, but the encryption key is deleted from the block chain ledger database so that it cannot be reused according to the use processing process. , it is possible to solve security problems caused by reuse of card information encryption data by hacking, etc., and improve system reliability.

1 is a conceptual diagram schematically illustrating an entire system according to an embodiment of the present invention.
2 is a block diagram for describing a payment terminal device according to an embodiment of the present invention in more detail.
3 is a diagram for explaining a blockchain-based encryption key distribution management service network according to an embodiment of the present invention.
4 is a ladder diagram for explaining the overall system operation according to an embodiment of the present invention.

Hereinafter, with reference to the accompanying drawings, a payment terminal device, a payment relay server, and an operation method thereof that provide a payment service using a blockchain-based encryption key distribution management network in an embodiment of the present invention will be described in detail.

The above-described objects, features and advantages of the present invention will become more apparent through the following detailed description in conjunction with the accompanying drawings. Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings. Like reference numerals refer to like elements throughout. In addition, if it is determined that a detailed description of a known function or configuration related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted.

Hereinafter, a server device and a terminal device related to the present invention will be described in more detail with reference to the drawings. The suffixes "module" and "part" for components used in the following description are given or mixed in consideration of only the ease of writing the specification, and do not have distinct meanings or roles by themselves.

1 is a view showing an entire system according to an embodiment of the present invention.

Referring to FIG. 1 , the entire system according to an embodiment of the present invention is to be configured including a VAN server 200 , a payment terminal 300 , a block chain-based encryption key distribution management service network 400 , and a card company server 500 . In addition, the payment terminal 300 may be configured to include at least one of a POS terminal and a card reader module.

First, the VAN server 200 is disclosed as an example of a financial server, and may be a payment relay server of a value added network (VAN) company that provides a payment proxy service in an electronic payment system using a credit card.

Here, the "financial server" may mean a server that processes information related to financial transactions. For example, the financial server includes a bank server that relays transactions between financial accounts, a server of a van (VAN) company that relays electronic payments for financial cards, a card company server that processes payment approval of credit card transactions, and other various types of servers may be applicable. Also, there may be a form in which the actual financial transaction function and other additional functions are separated into a separate server type according to a specific function.

And, in general, the card reader module and the POS terminal may be configured separately, but are often combined, and this is generally referred to as a 'POS terminal' or POS. However, hereinafter, for clarity of distinction, a form in which the card reader module and the POS terminal are all or partly combined may be referred to as the payment terminal 300 .

Here, the card reader module of the payment terminal 300 may exist separately from the POS terminal, and if it is connected through an appropriate interface, it is combined with a PC, a mobile computing device such as a smart phone, a personal digital assistant (PDA), or a tablet. can be used for

Hereinafter, one embodiment of the present invention will be described by taking as an example that the payment terminal 300 includes a POS terminal, but the present invention is not limited thereto. It may be performed by various other terminal devices, such as a tablet.

In addition, the card reader module is a device for obtaining card information including a card number, for example, MSR (Magnetic Strip Reader) that reads card information from a magnetic card, IC (Integrated Circuit) Card information is read from the card It may be a variety of devices, such as an IC card reader that reads card information using an IC card reader, an NFC reader that receives card information using a short-range wireless communication method, or a barcode reader that reads card information using a barcode.

However, the card reader module according to the present invention is not limited to the device for reading or receiving card information as described above, and may be an input device for receiving card information from a user.

Referring to FIG. 1 , the payment terminal 300 includes a POS terminal and a card reader module, and the POS terminal performs a function of generating a full text of an approval request using card information received from the card reader module. Often, when a payment action occurs at an affiliated store, the card information read by the card reader module, the payment amount entered through the input interface of the POS terminal or computerized and stored in advance, information on payment details, etc., and the signature information of the payer A function of receiving and transmitting an approval request message to the VAN server 200 is performed in the POS terminal.

In addition, the VAN server 200 that has received the full text of the approval request from the payment terminal 300 relays the approval request to the credit card company and sends the full text of the approval result, which is a response to the full text of the approval request, to the payment terminal 300 . send.

Here, the card information transmitted from the card reader module to the POS terminal as described above and used to generate the full text of the approval request is the connection interface between the POS terminal and the card reader module, inside the POS terminal or the POS terminal and the VAN server 200 Each network level between them has a risk of hacking.

Although card information is internally encrypted to prevent such a risk, when the encrypted card information itself is reused as another VAN server, there is a problem that the transaction approval cannot be prevented in advance.

To solve this problem, the payment terminal 300 according to an embodiment of the present invention requests an encryption key for encryption of card information from the VAN server 200, receives the encryption key from the VAN server 200, and the Card information may be encrypted with the encryption key, and a full payment approval request generated based on the encrypted card information and the payment information may be transmitted to the VAN server 200 .

In addition, the encryption key may be an encryption key issued from the blockchain-based encryption key distributed management service network comprising a plurality of peer devices including the VAN server 200 .

Here, the blockchain-based encryption key distributed management service network 400 is a P2P network in which each device constituting the network operates as a peer device, and each peer device shares and distributedly stores an encryption key related ledger database. can

The information processed in the blockchain-based encryption key distributed management service network is configured in the form of a transaction (transaction), and may be formed as a block that is distributed and stored in each peer device. Transaction details that match the data of a majority of each peer device can be verified as a normal ledger and stored in a block chain. In addition, since the transaction details of each peer device are collated during a transaction, the authenticity of the transaction details can be identified through this, and data forgery can be prevented.

In particular, the blockchain-based encryption key distributed management service network 400 according to an embodiment of the present invention distributes and combines an encryption key for encryption of card information, or configures a network according to processing using the generated encryption key. It can be deleted from all peer devices. In this process, according to the shared update of transaction details, all peer devices constituting the blockchain-based encryption key distributed management service network 400 form the same ledger database, so the encryption key is used only once, and deletion information can be shared. and reuse is fundamentally impossible.

Accordingly, encrypted card information can be generated with the encryption key received from the payment terminal 300 and the VAN server 200, and a full payment approval request including the encrypted card information can be transmitted to the VAN server 200. .

The VAN server 200 may acquire card information by decrypting the encrypted card information identified from the full payment approval request using an encryption key issued from a blockchain-based encryption key distributed management service network. Here, the VAN server 200 may share the usage information of the encryption key with the blockchain-based encryption key distributed management service network 400, and the encryption key according to the usage information of the encryption key is distributed management of the blockchain-based encryption key. It may be deleted from the ledger database of the service network 400 .

Accordingly, the VAN server 200 may transmit the card transaction approval request to the card company server 500 based on the final decrypted card information and the payment information included in the full payment approval request. The VAN server 200 may receive an approval result response of the card company server 500 and transmit it to the payment terminal 300 .

For this series of operations, the payment terminal 300 is an external server such as a POS module (not shown, VAN server 200) for generating a full text of an approval request using card information received from a card reader module (not shown). A communication module (not shown) to communicate with, a gateway module (not shown) that serves as a kind of gateway for distributing data, stores data such as VAN code list, or temporarily stores encrypted card information It may be configured to include a registry (not shown) for doing so.

This method of operation of the payment terminal 300 may be performed by a gateway module provided in the payment terminal 300, and the configuration of the gateway may include a PC program or a communication process inside the POS terminal depending on the type of the card reader module. It may be implemented in various forms.

Accordingly, encryption using the encryption key issued from the blockchain-based encryption key distributed management service network is processed, and when the encryption key is used, the blockchain-based encryption key distributed management service network database is deleted and processed, so the encrypted data is then hacked Even if it is reused for other VAN servers, etc., other VAN servers cannot check the encryption key or can only check the deleted history on the blockchain-based encryption key distributed management service network, so the transaction may be rejected. It is possible to solve problems and improve system reliability.

2 is a block diagram for describing a payment terminal device according to an embodiment of the present invention in more detail.

Referring to FIG. 2 , the payment terminal 300 according to an embodiment of the present invention includes a control unit 310 , a communication unit 320 , an input unit 330 , an encryption processing unit 340 , a transaction information processing unit 350 , and a storage unit. 360 and an output unit 370 .

The communication unit 320 may include one or more communication modules for transmitting and receiving data for wired/wireless communication with the plurality of VAN servers 100 , 200 , ... . The communication module may include a modem that encodes and modulates a transmitted signal, demodulates and decodes a signal received through a cable, an antenna, and the like, and an RF front end that processes an RF signal.

The input unit 330 may include a card reader module for receiving card information and one or more user input interfaces for receiving payment information for a transaction. Card information described in this specification may be an example of payment method information, and such card information may be transformed into various payment method information such as fingerprint information and face information used for payment.

Then, the encryption processing unit 340 may request the issuance of the encryption key to the VAN server 200 to request payment approval. As described above, the VAN server 200 may receive the encryption key from the blockchain-based encryption key distribution management service network 400 and transmit it to the payment terminal 300 .

Accordingly, the encryption processing unit 340 may encrypt the card information with the encryption key received from the VAN server 200 .

The transaction information processing unit 350 may generate a transaction approval request message using the encrypted card information and the payment information input from the input unit 330 and transmit it to the VAN server 200 .

In addition, the VAN server 200 may request the block chain-based encryption key distribution management service network 400 to use the encryption key, and decrypt the encrypted card information with the encryption key. According to the use processing result, the deletion transaction of the encryption key to prevent reuse of the encryption key may be shared on the block chain-based encryption key distribution management service network 400 .

Accordingly, the VAN server 200 may acquire decrypted card information. Then, the VAN server 200 transmits a transaction approval request generated based on the decrypted card information and the payment information of the payment approval request full text to the card company server, and receives the approval response and transmits it to the payment terminal 300 do.

Meanwhile, the storage unit 360 may include a memory such as a flash ROM or SRAM. The storage unit 360 may store transaction information, an encryption key, card information of a read credit card, received payment information, or unique identification information of a POS terminal or card reader module.

In addition, the output unit 370 may include one or more displays for outputting information related to the payment status and results. In addition, the output unit 370 may emit light using a red LED or a blue LED to inform the current status of the card reader module, or generate a specific signal sound such as a “beep” sound to recognize a signal indicating that payment can be made. there is.

3 is a diagram for explaining a blockchain-based encryption key distribution management service network according to an embodiment of the present invention.

Referring to FIG. 3 , a blockchain-based encryption key distribution management service network 400 according to an embodiment of the present invention may be formed as a private blockchain network including a plurality of peer devices.

The private block chain network allows blocks to be maintained by the distributed agreement of some authorized peer devices, for example, a Hyper Ledger Fabric block chain, etc. may be exemplified.

In the Hyper Ledger Fabric blockchain, only authorized participants can participate as peer devices, and among them, the distributed generation processing of encryption key information will be performed in each peer device according to the request of the endorser peer device to which they are assigned. The execution result information may be configured in the form of a transaction (transaction), and may be updated, stored, and managed according to the ledger database registration processing of the orderer device.

In particular, the endor peer devices may be composed of VAN servers 100, 200, 30, ..., 40 constituting the payment service according to an embodiment of the present invention, respectively, and these are blockchain-based encryption key distributed management. may be respective peer devices of the service network 400 .

More specifically, in the private block chain network according to an embodiment of the present invention based on the Hyper Ledger Fabric block chain, the VAN server requesting each encryption key may transmit a proposal for performing a block chain transaction, which It can be seen that it performs the role of an Endorser Peer device. Each endor peer device may validate a proposal based on an endorsement policy, sign it, and then transmit a proposal response to the orderer device 410 . The orderer device 410 that has received the signed proposal response can sort and distribute the transactions collected from all channels, and then it is delivered to each peer device and finally stored in the blockchain storage in the form of a ledger database. can be

And, in this configuration, the VAN server 200, as an Endoser peer, may request issuance of the encryption key to all peer devices constituting the blockchain-based encryption key distribution management service network, and each peer The devices may generate respective partial encryption keys for issuance of the encryption key and transmit it to the VAN server 200 .

In addition, the VAN server 200 may collect partial encryption keys and configure the connection to form the encryption key. That is, the partial encryption keys may include a random encryption key randomly generated by each of the peer devices, and the encryption key may be a combined encryption key formed by sequentially arranging the random encryption keys.

More specifically, the VAN server 200 operates as a peer device constituting the block chain-based encryption key distribution management service network, collects partial encryption keys of each peer device for issuing the encryption key, and generates the encryption key. It may be a forming device.

In addition, the VAN server 200 may transmit the issuance registration request of the combined encryption key to the orderer device 410 .

Here, the orderer device 410 may be one of the components of a hyper-ledger-type blockchain-based encryption key distribution management service network, and can consistently manage the same ledger database for each peer for a transaction. It performs the function of ensuring communication so that

The orderer device 410 stores and updates the registration transaction corresponding to the encryption key in the blockchain-based ledger database, and shares registration of the stored and updated ledger database with the blockchain-based encryption key distribution management service network. can be processed.

In addition, the orderer device 410 performs a deletion transaction of the encryption key to prevent reuse of the encryption key according to a request for use of the payment relay server corresponding to the encryption key in a block chain-based ledger database It is possible to process the shared registration of the stored and updated ledger database with the blockchain-based encryption key distributed management service network.

According to this processing, the orderer device 410 can perform verification and usage history management of encryption keys and each transaction to prevent reuse, and share registration in the blockchain-based encryption key distributed management service network of the ledger database. can be processed.

4 is a ladder diagram for explaining the overall system operation according to an embodiment of the present invention.

Referring to FIG. 4 , first, the payment terminal 300 executes a payment program (S1005), and receives payment information through the input unit 230 (S1007).

Thereafter, the payment terminal 300 requests an encryption key from the VAN server 200 to request approval of payment (S1009).

Accordingly, the VAN server 200 transmits a request for issuing an encryption key to the blockchain-based encryption key distributed management service network 400 . Accordingly, a shared and combined encryption key may be generated from peer devices constituting the blockchain-based encryption key distributed management service network 400 (S1012).

The VAN server 200 may request issuance and registration of the generated encryption key on the blockchain-based encryption key distributed management service network 400, and the registered encryption key issuance information is transmitted to the VAN server 200 (S1013).

Accordingly, the VAN server 200 transmits the encryption key to the payment terminal 300 (S1015), the payment terminal 300 encrypts the card information with the encryption key (S1017), and requests for approval using the encrypted card information A message is generated (S1019) and transmitted to the VAN server 200 (S1021).

On the other hand, the VAN server 200 extracts the encrypted card information from the full text of the authorization request, and transmits a request for use of the corresponding encryption key to the block chain-based encryption key distributed management service network 400 .

The blockchain-based encryption key distributed management service network 400 deletes the encryption key stored in the distributed ledger database according to the usage processing of the encryption key (S1025), and shares and updates the deletion information, thereby preventing the reuse of the encryption key in advance can be processed

Then, when the VAN server 200 receives the processing result of using the encryption key, the VAN server 200 decrypts the card information with the encryption key to obtain the card information (S1029).

Accordingly, the VAN server 200 transmits the transaction approval request message to the card company server 500 using the decrypted card information and the payment information obtained from the payment approval request message (S1035), and the transaction approval result information is When received (S1037), the payment terminal 300 transmits the full text of the approval result according to the transaction approval (S1039).

In this way, the VAN server 200 receives a request for an encryption key for encryption of card information from the payment terminal 300, and distributes a block chain-based encryption key composed of a plurality of peer devices including the payment relay server. It is possible to request the issuance of the encryption key from the management service network, and according to the request, the encryption key issued from the blockchain-based encryption key distributed management service network can be provided to the payment terminal 300 .

And, as the VAN server 200 requests processing of the use of the encryption key to the blockchain-based encryption key distribution management service network, the deletion transaction of the encryption key to prevent reuse of the encryption key is shared, and accordingly Reuse of the encryption key and card information encrypted with the encryption key can be fundamentally prevented.

The method according to the present invention described above may be produced as a program to be executed by a computer and stored in a computer-readable recording medium. Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape. , a floppy disk, an optical data storage device, and the like, and also includes those implemented in the form of a carrier wave (eg, transmission through the Internet).

The computer-readable recording medium is distributed in a network-connected computer system, so that the computer-readable code can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the method can be easily inferred by programmers in the art to which the present invention pertains.

In addition, although preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above, and the technical field to which the present invention belongs without departing from the gist of the present invention as claimed in the claims Various modifications may be made by those of ordinary skill in the art, and these modifications should not be individually understood from the technical spirit or perspective of the present invention.

Claims (14)

In the method of operation of a payment terminal device,
receiving payment information;
requesting an encryption key corresponding to payment method information of the payment information to a payment relay server;
receiving the encryption key from the payment relay server;
encrypting the payment method information with the encryption key; and
Transmitting the encrypted payment method information and a payment approval request generated based on the payment information to the payment relay server,
The encryption key is issued from a blockchain-based encryption key distribution management service network composed of a plurality of peer devices including the payment relay server,
The blockchain-based encryption key distribution management service network,
In response to a request to use the payment relay server for decrypting the encrypted payment method information from the full payment approval request, a block chain deletion transaction of the encryption key to prevent reuse of the encrypted payment method information itself Including an orderer device that stores and updates the underlying ledger database
A method of operating a payment terminal device. According to claim 1,
The blockchain-based encryption key distributed management service network is a P2P network in which each peer device constituting the network shares and distributedly stores the encryption key-related ledger database in the form of a block chain.
A method of operating a payment terminal device. According to claim 1,
The encryption key is formed by concatenating partial encryption keys collected from each peer device.
A method of operating a payment terminal device. 4. The method of claim 3,
The partial encryption keys include a random encryption key randomly generated by each of the peer devices.
A method of operating a payment terminal device. According to claim 1,
The orderer device,
A method of operating a payment terminal device, storing and updating a registration transaction corresponding to the encryption key in a block chain-based ledger database, and processing the shared registration of the stored and updated ledger database with the block chain-based encryption key distribution management service network. According to claim 1,
The orderer device processes the shared registration of the stored and updated ledger database with the block chain-based encryption key distribution management service network according to the deletion transaction, and shares the deleted history information with the payment relay server. Accordingly, when the encrypted payment method information is reused, the deleted details are checked and transaction approval in the payment relay server is rejected
A method of operating a payment terminal device. In the payment terminal device,
an input unit for receiving payment information;
an encryption processing unit for requesting an encryption key for encrypting payment method information corresponding to the payment information from a payment relay server, receiving the encryption key from the payment relay server, and encrypting the payment method information with the encryption key; and
A communication unit for transmitting the encrypted payment method information and a payment approval request generated based on the payment information to the payment relay server,
The encryption key is issued from a blockchain-based encryption key distribution management service network composed of a plurality of peer devices including the payment relay server,
The blockchain-based encryption key distribution management service network,
In response to a request for use of the payment relay server to decrypt the encrypted payment method information from the full payment approval request, a block chain deletion transaction of the encryption key to prevent reuse of the encrypted payment method information itself Including an orderer device that stores and updates the underlying ledger database
payment terminal device. 8. The method of claim 7,
The blockchain-based encryption key distributed management service network is a P2P network in which each peer device constituting the network shares and distributedly stores the encryption key-related ledger database in the form of a block chain.
payment terminal device. 9. The method of claim 8,
The encryption key is formed by concatenating partial encryption keys collected from each peer device.
payment terminal device. 10. The method of claim 9,
The partial encryption keys include a random encryption key randomly generated by each of the peer devices.
payment terminal device. 8. The method of claim 7,
The orderer device,
Store and update the registration transaction corresponding to the encryption key in a block chain-based ledger database, and process the shared registration of the stored and updated ledger database with the block chain-based encryption key distribution management service network
payment terminal device. 12. The method of claim 11,
The orderer device processes deletion information sharing registration of the stored and updated ledger database with the block chain-based encryption key distribution management service network according to the deletion transaction, and transmits the deleted history information to the payment relay server When the encrypted payment method information is reused as it is shared, the deleted details are checked and transaction approval from the payment relay server is rejected
payment terminal device. In the method of operation of the payment relay server,
receiving an encryption key request for encrypting payment method information from a payment terminal;
receiving the encryption key from a block chain-based encryption key distribution management service network including a plurality of peer devices including the payment relay server and transmitting it to the payment terminal;
receiving a payment approval request encrypted using the encryption key from the payment terminal;
decrypting the encrypted payment approval request message using the encryption key; and
Transmitting an approval request using the payment method information obtained according to the decryption to a financial server,
The blockchain-based encryption key distribution management service network,
In response to a request for use of the payment relay server for decrypting the encrypted payment method information from the full payment approval request, a block chain-based deletion transaction of the encryption key to prevent reuse of the encrypted payment method information itself Including an orderer device that stores and updates the ledger database
How the payment relay server works. 14. The method of claim 13,
The decoding step is
By sending a request for use corresponding to the encryption key to a blockchain-based encryption key distributed management service network, the encryption key deletion transaction is stored in a blockchain-based ledger database to prevent reuse of the encrypted payment method information itself updating, and allowing the shared registration of the ledger database where the deletion transaction is stored and updated to the blockchain-based encryption key distributed management service network is processed,
When the encrypted payment method information is reused in the received payment approval request message thereafter, further comprising the step of receiving the deleted history information from the deleted transaction and processing the transaction approval to be rejected
How the payment relay server works.

Images