KR102395871B1 - A payment terminal apparatus for providing multi van services using a distributed management network of encryption key based on block chains - Google Patents

Abstract

An operating method of a payment terminal device according to an embodiment of the present invention includes the steps of receiving payment information; first encrypting card information corresponding to the payment information with a first encryption key corresponding to a first payment relay server; requesting a second encryption key to a second payment relay server; receiving a second encryption key from the second payment relay server; second encrypting the first encrypted card information with the second encryption key; and transmitting a full payment approval request generated based on the second encrypted card information and the payment information to the second payment relay server, wherein the second encryption key is the first payment relay server and a block chain-based encryption key distributed management service network composed of a plurality of peer devices including the second payment relay server.

Description

A payment terminal device, a payment relay server, and a method of operation that provide a multi-van service using a blockchain-based encryption key distributed management network }

The present invention relates to a payment terminal device, a payment relay server, and an operating method thereof. More specifically, the present invention relates to a payment terminal device that provides a multi-van service using a blockchain-based encryption key distribution management network, a payment relay server, and an operating method thereof.

With the expansion of electronic payment infrastructure, credit payment services based on card payments such as credit cards, debit cards, and debit cards (hereinafter, “credit cards”) have become common. In the credit payment service, after a user purchases goods or services from an affiliated store by card payment, the user pays the use price for the goods or services to a credit card company on the payment date, and the affiliate store receives the sale price of the goods or services from the card company, etc. It refers to a payment method using an electronic payment infrastructure that accepts payments.

The system for providing the credit payment service includes a plurality of card terminals provided in a plurality of affiliated stores, and a value added network (VAN) company that provides a payment agency service related to card payment between a plurality of affiliated stores and card companies. The server (hereinafter, "payment proxy server") and the server of the card company that issued the credit card to the user are connected through a communication network and configured. The VAN refers to a payment network for a payment transaction between card terminals and a card company server.

In the payment system using the payment proxy server between the card terminal and the card company server as described above, the communication network between the payment agent server and the card terminal or between the payment agent server and the card terminal fails, so data (or message) transmission and reception is not smooth. In this case, the corresponding card payment may not be made normally. In addition, in recent years, due to communication delays due to a rapid increase in the number of card payments, the communication failure situation as described above occurs more frequently, and accordingly, there is a problem in that the reliability of the payment system is lowered.

Accordingly, a POS terminal that can communicate with a plurality of VANs and perform payment processing with different payment proxy servers in some cases has been proposed.

However, when configuring a terminal system that communicates with a plurality of VANs as described above, a major problem in terms of security is generated.

For example, a shared encryption key may exist between each of the plurality of VANs, and accordingly, the card reader may perform encryption processing of card information using the shared encryption key, but the POS terminal eventually obtains actual approval among the plurality of VANs. It is a situation that only communicates with the VAN company to be approved.

At this time, if an attacker intercepts encrypted data encrypted with the shared encryption key, if the attacker requests an authorization based on the shared encryption key to other VAN servers that have not been paid, each other VAN company recognizes it as an initial authorization request. A fatal security loophole occurs in the credit approval process.

As a result, there is a problem in that the POS terminal and the entire plurality of VANs contain security flaws, leading to loss of reliability of the system.

To solve this problem, a method of assigning and sharing a serial number to prevent reuse of encrypted data has also been proposed, but there is a problem in that technical interworking is not easy due to the difference in the approval process or data format between each VAN company.

KR 10-2019-0081191 A1 KR 10-2017-0087663 A1

The present invention has been devised to solve the above-described problems, and while the payment terminal can freely perform payment processing with a plurality of VAN servers, card information data encrypted with the first encryption key injected from a specific financial server to the payment terminal To provide a card information processing method for preventing the reuse of card information that can solve security problems caused by being reused by hacking, etc. and improve system reliability based on block chains, and a method for operating the device and financial server. There is a purpose.

A method according to an embodiment of the present invention for solving the above-described problems, a method of operating a payment terminal device, comprising: receiving payment information; first encrypting payment method information corresponding to the payment information with a first encryption key corresponding to a first payment relay server; requesting a second encryption key to a second payment relay server; receiving a second encryption key from the second payment relay server; second encrypting the first encrypted payment method information with the second encryption key; and transmitting the second encryption-processed payment method information and a full payment approval request generated based on the payment information to the second payment relay server, wherein the second encryption key is the first payment relay It is characterized in that it is issued from a blockchain-based encryption key distributed management service network composed of a plurality of peer devices including a server and the second payment relay server.

According to an embodiment of the present invention, there is provided an apparatus for solving the above problems, in a payment terminal device, the steps of: receiving payment information; The payment method information corresponding to the payment information is first encrypted with a first encryption key corresponding to the first payment relay server, and the second encryption key is requested from the second payment relay server to receive the second encryption from the second payment relay server. an encryption processing unit that receives a key and performs a second encryption process on the first encrypted payment method information with the second encryption key; and a communication unit for transmitting the second encrypted payment method information and a payment approval request generated based on the payment information to the second payment relay server, wherein the second encryption key is the first payment relay It is characterized in that it is issued from a blockchain-based encryption key distributed management service network composed of a plurality of peer devices including a server and the second payment relay server.

According to an embodiment of the present invention, the payment terminal performs double encryption processing of payment means information encrypted with a first encryption key stored in advance in response to the first VAN server with a second encryption key using a blockchain-based encryption key distribution management service network. However, the second encryption key is deleted from the block chain ledger database so that it cannot be reused according to the use processing process, thereby solving the security problem caused by the reuse of card information encryption data by hacking, etc., and it is possible to improve the system reliability. .

1 is a conceptual diagram schematically illustrating an entire system according to an embodiment of the present invention.
2 is a block diagram for describing a payment terminal device according to an embodiment of the present invention in more detail.
3 is a diagram for explaining a blockchain-based encryption key distribution management service network according to an embodiment of the present invention.
4 is a ladder diagram for explaining the overall system operation according to an embodiment of the present invention.

Hereinafter, with reference to the accompanying drawings, a payment terminal device, a payment relay server, and an operation method thereof that provide a multi-van service using a blockchain-based encryption key distribution management network in an embodiment of the present invention will be described in detail.

The above-described objects, features and advantages of the present invention will become more apparent through the following detailed description in conjunction with the accompanying drawings. Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings. Like reference numerals refer to like elements throughout. In addition, if it is determined that a detailed description of a known function or configuration related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted.

Hereinafter, a server device and a terminal device related to the present invention will be described in more detail with reference to the drawings. The suffixes "module" and "part" for components used in the following description are given or mixed in consideration of only the ease of writing the specification, and do not have distinct meanings or roles by themselves.

1 is a view showing an entire system according to an embodiment of the present invention.

Referring to FIG. 1 , the entire system according to an embodiment of the present invention includes a first VAN server 100 , a second VAN server 200 , a payment terminal 300 , a blockchain-based encryption key distribution management service network 400 and It may be configured to include the card company server 500, the payment terminal 300 may be configured to include at least one of a POS terminal and a card reader module.

First, the first VAN server 100 and the second VAN server 200 are disclosed as examples of a financial server, and a Van (Value Added Network: VAN) company that provides a payment proxy service in an electronic payment system using a credit card It may be a server on the side.

Here, the "financial server" may mean a server that processes information related to financial transactions. For example, the financial server includes a bank server that relays transactions between financial accounts, a server of a van (VAN) company that relays electronic payments for financial cards, a card company server that processes payment approval of credit card transactions, and other various types of servers may be applicable. Also, there may be a form in which the actual financial transaction function and other additional functions are separated into a separate server type according to a specific function.

And, in general, the card reader module and the POS terminal may be configured separately, but are often combined, and this is generally referred to as a 'POS terminal' or POS. However, hereinafter, for clarity of distinction, a form in which the card reader module and the POS terminal are all or partly combined may be referred to as the payment terminal 300 .

Here, the card reader module of the payment terminal 300 may exist separately from the POS terminal, and if it is connected through an appropriate interface, it is combined with a PC, a mobile computing device such as a smart phone, a personal digital assistant (PDA), or a tablet. can be used for

Hereinafter, one embodiment of the present invention will be described by taking as an example that the payment terminal 300 includes a POS terminal, but the present invention is not limited thereto. It may be performed by various other terminal devices, such as a tablet.

In addition, the card reader module is a device for obtaining card information including a card number, for example, MSR (Magnetic Strip Reader) that reads card information from a magnetic card, IC (Integrated Circuit) Card information is read from the card It may be a variety of devices, such as an IC card reader that reads card information using an IC card reader, an NFC reader that receives card information using a short-range wireless communication method, or a barcode reader that reads card information using a barcode.

However, the card reader module according to the present invention is not limited to the device for reading or receiving card information as described above, and may be an input device for receiving card information from a user.

Referring to FIG. 1 , the payment terminal 300 includes a POS terminal and a card reader module, and the POS terminal performs a function of generating a full text of an approval request using card information received from the card reader module. Often, when a payment action occurs at an affiliated store, the card information read by the card reader module, the payment amount entered through the input interface of the POS terminal or computerized and stored in advance, information on payment details, etc., and the signature information of the payer A function of receiving and transmitting an approval request message to the first VAN server 100 or the second VAN server 200 is performed in the POS terminal.

The approval request message generated as described above is connected to the corresponding payment terminal 300 by a network or is directed to the VAN server (eg, any one of the VAN servers shown in FIG. 1 ) of the approval request message send

In an embodiment of the present invention, the payment terminal 300 may select any one of a plurality of VAN servers to transmit a selective payment approval request message, and this may be referred to as a multi-van (MULTI VAN) service.

Then, the VAN server that has received the approval request message from the payment terminal 300 relays the approval request to the card company and transmits the approval result message, which is a response to the approval request message, to the payment terminal 300 .

Here, as described above, the card information transmitted from the card reader module to the POS terminal and used to generate the full text of the approval request is the connection interface between the POS terminal and the card reader module, inside the POS terminal or the POS terminal and the first VAN server ( 100) or the second VAN server 200 includes a risk of hacking at the network end, etc., respectively.

Accordingly, in order to prevent leakage due to hacking and safely protect the customer's card information, the card information (eg, card number) obtained by the card reader module is first encrypted and transmitted to the POS terminal. . The first encryption key for this purpose may be pre-distributed from the first VAN server 100 to the payment terminal 300 or may be pre-injected into the payment terminal 300 .

For the first encryption of the card information as described above, a symmetric encryption algorithm or an asymmetric encryption algorithm may be used, and the first VAN server 100 has a first encryption key corresponding to the first encryption key for decrypting the encrypted card information. You may be storing your private key.

However, when the first encrypted card information itself is reused by another VAN server, the first VAN server only approves the first encrypted card information decryption request of the other VAN server, There is a problem in that re-approval of a transaction cannot be prevented in advance.

In order to solve this problem, the payment terminal 300 according to an embodiment of the present invention requests a second encryption key for the second encryption of the first encrypted card information to the second VAN server 200, and the second Receives a second encryption key from the VAN server 200, performs a second encryption process on the first encrypted card information with the second encryption key, and generates generated based on the second encryption-processed card information and the payment information. A full payment approval request may be transmitted to the second VAN server 200 .

And, the second encryption key is a block chain-based encryption key distributed management service network composed of a plurality of peer devices including the first VAN server 100 and the second VAN server 200 (400). It may be an encryption key issued from

Here, in the blockchain-based encryption key distributed management service network 400, each device constituting the network operates as a peer device, and each peer device shares and distributedly stores a second encryption key related ledger database. It may be a network.

The information processed in the blockchain-based encryption key distributed management service network is configured in the form of a transaction (transaction), and may be formed as a block that is distributed and stored in each peer device. Transaction details that match the data of a majority of each peer device can be verified as a normal ledger and stored in a block chain. In addition, since the transaction details of each peer device are collated during a transaction, the authenticity of the transaction details can be identified through this, and data forgery can be prevented.

In particular, the blockchain-based encryption key distribution management service network 400 according to an embodiment of the present invention distributes and combines a second encryption key for second encryption of card information, or uses the generated second encryption key. Depending on the processing, it becomes possible to delete it from all peer devices constituting the network. In this process, according to the shared update of transaction details, all peer devices constituting the blockchain-based encryption key distributed management service network 400 form the same ledger database, so the second encryption key is used only once, and deletion information is shared and reuse is fundamentally impossible.

Accordingly, double-encrypted card information can be generated with the second encryption key received from the payment terminal 300 and the second VAN server 200, and a full payment approval request including the double-encrypted card information is provided. 2 may be transmitted to the VAN server 200 .

The second VAN server 200 decrypts the double-encrypted card information identified from the full payment approval request using the second encryption key, thereby acquiring card information encrypted with the first encryption key. Here, the second VAN server 200 may share the usage information of the second encryption key to the blockchain-based encryption key distribution management service network 400, and according to the usage information of the second encryption key, the second encryption key may be deleted from the ledger database of the blockchain-based encryption key distributed management service network 400 .

In addition, the second VAN server 200 may transmit the decryption of the card information encrypted with the first encryption key to the first VAN server 100 that issued the first encryption key. The first VAN server 100 may process decryption of card information encrypted with the first encryption key, and transmit the decrypted card information to the second VAN server 200 .

Accordingly, the second VAN server 200 may transmit the card transaction approval request to the card company server 500 based on the final decrypted card information and the payment information included in the full payment approval request. The second VAN server 200 may receive an approval result response of the card company server 500 and transmit it to the payment terminal 300 .

For this series of operations, the payment terminal 300 uses the card information received from the card reader module (not shown) to generate a POS module (not shown, the second VAN server 200) for generating a full text of an approval request. A communication module (not shown) for communicating with an external server, a gateway module (not shown) serving as a kind of gateway for distributing data, storing data such as VAN code list, or storing encrypted card information It may be configured to include a registry (not shown) for temporary storage.

This method of operation of the payment terminal 300 may be performed by a gateway module provided in the payment terminal 300, and the configuration of the gateway may include a PC program or a communication process inside the POS terminal depending on the type of the card reader module. It may be implemented in various forms.

Accordingly, the payment terminal 300 according to an embodiment of the present invention enables card payment through a plurality of payment relay servers (ie, a plurality of VAN company servers), so that even if the VAN company is changed, the POS terminal or The card reader module can be used without replacing it, and when a failure occurs in any one of a plurality of VAN companies, payment can be performed through another payment agency.

Accordingly, encryption is primarily processed with the first encryption key issued by the preset first VAN server 100, and secondly, encryption using the second encryption key issued from the blockchain-based encryption key distribution management service network is processed, and when the second encryption key is used, it is deleted from the blockchain-based encryption key distribution management service network database, so even if the data encrypted with the first encryption key is hacked and reused for other VAN servers, other VAN servers Since the second encryption key cannot be confirmed or only deleted details can be checked, transaction approval can be rejected, thereby solving security problems and improving system reliability.

2 is a block diagram for describing a payment terminal device according to an embodiment of the present invention in more detail.

Referring to FIG. 2 , the payment terminal 300 according to an embodiment of the present invention includes a control unit 310 , a communication unit 320 , an input unit 330 , an encryption processing unit 340 , a transaction information processing unit 350 , and a storage unit. 360 and an output unit 370 .

The communication unit 320 may include one or more communication modules for transmitting and receiving data for wired/wireless communication with the plurality of VAN servers 100 , 200 , ... . The communication module may include a modem that encodes and modulates a transmitted signal, demodulates and decodes a signal received through a cable, an antenna, and the like, and an RF front end that processes an RF signal.

The input unit 330 may include a card reader module for receiving card information and one or more user input interfaces for receiving payment information for a transaction. Card information described in this specification may be an example of payment method information, and such card information may be transformed into various payment method information such as fingerprint information and face information used for payment.

In addition, the encryption processing unit 340 encrypts the card information with the first encryption key issued by the first VAN server 100, but may request issuance of the second encryption key from the second VAN server 200 to request payment approval. there is.

According to the operation of the multi-VAN service of the controller 310 , the first VAN server 100 corresponding to the first encryption key may be a different server from the second VAN server 200 to request payment approval. Accordingly, the encryption processing unit 340 may perform storage and management processing of encryption key information for operating a payment system operated by a plurality of VAN companies.

For example, the encryption processing unit 340 may receive and store the first encryption key corresponding to the first VAN server 100 in advance. Also, the encryption processing unit 430 may communicate with a separate key distribution server (not shown) through the communication unit 320 to receive the first encryption key issued from the first VAN server 100 . Also, the first encryption key may be directly inserted into the card reader module of the input unit 330 .

In addition, as described above, the second VAN server 200 may receive the second encryption key from the blockchain-based encryption key distribution management service network 400 and transmit it to the payment terminal 300 .

Accordingly, the encryption processing unit 340 may double-encrypt the card information encrypted with the first encryption key with the second encryption key received from the second VAN server 200 .

The transaction information processing unit 350 may generate a transaction approval request message using the double-encrypted card information and the payment information input from the input unit 330 and transmit it to the second VAN server 200 .

In addition, the second VAN server 200 requests the use of the second encryption key to the block chain-based encryption key distribution management service network 400, and sets the double-encrypted card information to 1 as the second encryption key. The car can be decrypted. According to the use processing result, a deletion transaction of the second encryption key for preventing reuse of the second encryption key may be shared on the blockchain-based encryption key distribution management service network 400 .

Accordingly, the second VAN server 200 can obtain card information encrypted with the first encryption key, and transmits the card information encrypted with the first encryption key to the first VAN server 100 , Decrypted card information may be received from the VAN server 100 . Then, the second VAN server 200 transmits a transaction approval request generated based on the decrypted card information and the payment information of the payment approval request full text to the card company server, and receives the approval response to the payment terminal 300 send to

Meanwhile, the storage unit 360 may include a memory such as a flash ROM or SRAM. The storage unit 360 may store transaction information, an encryption key, card information of a read credit card, received payment information, or unique identification information of a POS terminal or card reader module.

In addition, the output unit 370 may include one or more displays for outputting information related to the payment status and results. In addition, the output unit 370 may emit light using a red LED or a blue LED to inform the current status of the card reader module, or generate a specific signal sound such as a “beep” sound to recognize a signal indicating that payment can be made. there is.

3 is a diagram for explaining a blockchain-based encryption key distribution management service network according to an embodiment of the present invention.

Referring to FIG. 3 , a blockchain-based encryption key distribution management service network 400 according to an embodiment of the present invention may be formed as a private blockchain network including a plurality of peer devices.

The private block chain network allows blocks to be maintained by the distributed agreement of some authorized peer devices, for example, a Hyper Ledger Fabric block chain, etc. may be exemplified.

In the Hyper Ledger Fabric blockchain, only authorized participants can participate as peer devices, and among them, the distributed generation processing of encryption key information will be performed in each peer device according to the request of the endorser peer device to which they are assigned. The execution result information may be configured in the form of a transaction (transaction), and may be updated, stored, and managed according to the ledger database registration process of the orderer device.

In particular, the Endorser peer devices may be composed of VAN servers 100, 200, 30, ..., 40 constituting a multi-van service according to an embodiment of the present invention, respectively, and these are block chain-based It may be each peer device of the encryption key distributed management service network 400 .

More specifically, in the private block chain network according to an embodiment of the present invention based on the Hyper Ledger Fabric block chain, the VAN server requesting each encryption key may transmit a proposal for performing a block chain transaction, which It can be seen that it performs the role of an Endorser Peer device. Each endor peer device may validate a proposal based on an endorsement policy, sign it, and then transmit a proposal response to the orderer device 410 . The orderer device 410 that has received the signed proposal response can sort and distribute the transactions collected from all channels, and then it is delivered to each peer device and finally stored in the blockchain storage in the form of a ledger database. can be

And, in this configuration, the second VAN server 200 that requires a second encryption key is an Endorser peer, and uses all peer devices constituting the blockchain-based encryption key distribution management service network to perform the second encryption. The issuance of the key may be requested, and each peer device may generate respective second partial encryption keys for issuance of the second encryption key and transmit the generated second partial encryption keys to the second VAN server 200 .

In addition, the second VAN server 200 may collect the second partial encryption keys and configure the connection to form the second encryption key. That is, the second partial encryption keys may include a random encryption key randomly generated by each of the peer devices, and the second encryption key may be a combined encryption key formed by sequentially arranging the random encryption keys.

More specifically, the second VAN server 200 operates as a peer device constituting the blockchain-based encryption key distribution management service network, and collects second partial encryption keys of each peer device for issuing the second encryption key. Thus, it may be a device for forming the second encryption key.

In addition, the second VAN server 200 may transmit the issuance registration request of the combined second encryption key to the orderer device 410 .

Here, the orderer device 410 may be one of the components of the hyper-ledger-type blockchain-based distributed key distribution management service network, and consistently manages the same ledger database for each peer for a transaction. It performs the function of ensuring communication so that

The orderer device 410 stores and updates the registration transaction corresponding to the second encryption key in the block chain-based ledger database, and stores and updates the stored and updated ledger database with the block chain-based encryption key distribution management service network. It can handle shared registrations.

In addition, the orderer device 410, according to the request for use of the second payment relay server corresponding to the second encryption key, the second encryption key for preventing reuse of the second encryption key It is possible to store and update a delete transaction in a blockchain-based ledger database, and process the shared registration of the stored and updated ledger database with the blockchain-based encryption key distributed management service network.

According to this processing, the orderer device 410 can perform verification and usage history management of each transaction for preventing reuse of the second encryption key, and within the blockchain-based encryption key distribution management service network of the ledger database. It can handle shared registrations.

4 is a ladder diagram for explaining the overall system operation according to an embodiment of the present invention.

Referring to FIG. 4 , the payment terminal 300 executes a payment program ( S1005 ), and receives payment information through the input unit 230 ( S1007 ).

Here, the payment terminal 300 may be a payment terminal 300 in which the first encryption key issued from the first VAN server 100 is pre-stored, and in order to support the multi-van service, 2 It may be a terminal capable of requesting payment approval to the VAN server 200 .

Then, when the second VAN server 200 to request payment approval is different from the first VAN 100 server, the payment terminal 300 requests a second encryption key from the second VAN server 200 (S1009) .

Accordingly, the second VAN server 200 transmits a request for issuing the second encryption key to the blockchain-based encryption key distribution management service network 400 . Accordingly, the second encryption key shared and combined from the peer devices constituting the blockchain-based encryption key distributed management service network 400 may be generated (S1012).

The second VAN server 200 may request issuance and registration of the generated second encryption key on the blockchain-based encryption key distributed management service network 400, and the registered second encryption key issuance information is transmitted to the second VAN server 200 ) is transmitted (S1013).

Accordingly, the second VAN server 200 transmits the second encryption key to the payment terminal 300 (S1015), and the payment terminal 300 first encrypts the card information with the first encryption key, and the second encryption A second encryption process is performed with the key (S1017), and a full text of an authorization request using the double-encrypted card information is generated (S1019) and transmitted to the second VAN server 200 (S1021).

On the other hand, the second VAN server 200 extracts double-encrypted card information from the full text of the approval request, and transmits a request for use of the second encryption key corresponding thereto to the block chain-based encryption key distributed management service network 400 . .

The blockchain-based encryption key distributed management service network 400 deletes the second encryption key stored in the distributed ledger database according to the use processing of the second encryption key (S1025), and shares and updates the deletion information to update the second encryption key reuse can be prevented in advance.

Then, when the second VAN server 200 receives the processing result of using the second encryption key, the card information is first decrypted with the second encryption key to obtain card information encrypted with the first encryption key (S1029).

Thereafter, the second VAN server 200 transmits the card information encrypted with the first encryption key to the first VAN server 100 ( S1031 ), and receives the decrypted card information from the first VAN server 100 . (S1033).

Accordingly, the second VAN server 200 transmits the transaction approval request message to the card company server 500 using the decrypted card information and the payment information obtained from the payment approval request message (S1035), and the transaction approval result When the information is received (S1037), a full text of the approval result according to the transaction approval is transmitted to the payment terminal 300 (S1039).

In this way, the second VAN server 200 receives, from the payment terminal 300 , a second encryption key request for the second encryption of the first encrypted card information with the first encryption key distributed in the first VAN server 100 . Receive and request the issuance of the second encryption key to a blockchain-based encryption key distribution management service network including a plurality of peer devices including the first payment relay server and the second payment relay server, Upon request, the second encryption key issued from the blockchain-based encryption key distributed management service network can be provided to the payment terminal 300 .

And, as the second VAN server 200 requests the processing of use of the second encryption key to the blockchain-based encryption key distribution management service network, the second encryption key is used to prevent reuse of the second encryption key. The deletion transaction is shared, and accordingly, reuse of the second encryption key and card information encrypted with the second encryption key can be fundamentally prevented.

The method according to the present invention described above may be produced as a program to be executed by a computer and stored in a computer-readable recording medium. Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape. , a floppy disk, an optical data storage device, and the like, and also includes those implemented in the form of a carrier wave (eg, transmission through the Internet).

The computer-readable recording medium is distributed in a network-connected computer system, so that the computer-readable code can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the method can be easily inferred by programmers in the art to which the present invention pertains.

In addition, although preferred embodiments of the present invention have been illustrated and described above, the present invention is not limited to the specific embodiments described above, and the technical field to which the present invention belongs without departing from the gist of the present invention as claimed in the claims Various modifications may be made by those of ordinary skill in the art, and these modifications should not be individually understood from the technical spirit or perspective of the present invention.

Claims (16)

In the method of operation of a payment terminal device,
receiving payment information;
first encrypting payment method information corresponding to the payment information with a first encryption key corresponding to a first payment relay server;
requesting a second encryption key to a second payment relay server;
receiving a second encryption key from the second payment relay server;
second encrypting the first encrypted payment method information with the second encryption key; and
Transmitting the second encrypted payment method information and a payment approval request generated based on the payment information to the second payment relay server,
The second encryption key is issued from a blockchain-based encryption key distribution management service network comprising a plurality of peer devices including the first payment relay server and the second payment relay server,
The blockchain-based encryption key distribution management service network,
In response to a request for use of the second payment relay server for decrypting the second encrypted payment method information from the full payment approval request, the first encrypted payment method information and the second encrypted payment method Including an orderer device that stores and updates the deletion transaction of the second encryption key that prevents the reuse of information itself in a block chain-based ledger database
A method of operating a payment terminal device. According to claim 1,
The blockchain-based encryption key distribution management service network is a P2P network in which each peer device constituting the network shares and distributedly stores the second encryption key-related ledger database in the form of a block chain.
A method of operating a payment terminal device. According to claim 1,
The second encryption key is formed by concatenating the second partial encryption keys collected from each peer device.
A method of operating a payment terminal device. 4. The method of claim 3,
The second partial encryption keys include a random encryption key randomly generated by each of the peer devices.
A method of operating a payment terminal device. According to claim 1,
The orderer device stores and updates the registration transaction corresponding to the second encryption key in a block chain-based ledger database, and shares registration of the stored and updated ledger database with the block chain-based encryption key distribution management service network. A method of operating a payment terminal device to process. 6. The method of claim 5,
The orderer device, in response to a request for use of the second payment relay server corresponding to the second encryption key, performs a block chain deletion transaction of the second encryption key to prevent reuse of the second encryption key Store and update the underlying ledger database, and process the shared registration of the stored and updated ledger database with the blockchain-based encryption key distributed management service network
A method of operating a payment terminal device. According to claim 1,
The second payment relay server obtains payment method information encrypted with a first encryption key through decryption of the full payment approval request using the second encryption key, and decrypts the payment method information encrypted with the first encryption key. The server that makes a request to the first payment relay server
A method of operating a payment terminal device. In the payment terminal device,
an input unit for receiving payment information;
First encrypting payment method information corresponding to the payment information with a first encryption key corresponding to a first payment relay server, requesting a second encryption key from a second payment relay server, and receiving a second from the second payment relay server an encryption processing unit for receiving an encryption key and performing a second encryption process on the first encrypted payment method information with the second encryption key; and
A communication unit for transmitting the second encrypted payment method information and a payment approval request generated based on the payment information to the second payment relay server,
The second encryption key is issued from a blockchain-based encryption key distribution management service network comprising a plurality of peer devices including the first payment relay server and the second payment relay server,
The blockchain-based encryption key distribution management service network,
In response to a request for use of the second payment relay server for decrypting the second encrypted payment method information from the full payment approval request, the first encrypted payment method information and the second encrypted payment method Including an orderer device that stores and updates the deletion transaction of the second encryption key that prevents the reuse of information itself in a block chain-based ledger database
payment terminal device. 9. The method of claim 8,
The blockchain-based encryption key distribution management service network is a P2P network in which each peer device constituting the network shares and distributedly stores the second encryption key-related ledger database in the form of a block chain.
payment terminal device. 9. The method of claim 8,
The second encryption key is formed by concatenating the second partial encryption keys collected from each peer device.
payment terminal device. 11. The method of claim 10,
The second partial encryption keys include a random encryption key randomly generated by each of the peer devices.
payment terminal device. 9. The method of claim 8,
The blockchain-based encryption key distributed management service network,
An orderer device that stores and updates a registration transaction corresponding to the second encryption key in a blockchain-based ledger database, and processes shared registration of the stored and updated ledger database with the blockchain-based encryption key distribution management service network containing
payment terminal device. 13. The method of claim 12,
The orderer device, in response to a request for use of the second payment relay server corresponding to the second encryption key, performs a block chain deletion transaction of the second encryption key to prevent reuse of the second encryption key Store and update the underlying ledger database, and process the shared registration of the stored and updated ledger database with the blockchain-based encryption key distributed management service network
payment terminal device. 9. The method of claim 8,
The second payment relay server obtains payment method information encrypted with a first encryption key through decryption of the full payment approval request using the second encryption key, and decrypts the payment method information encrypted with the first encryption key. The server that makes a request to the first payment relay server
payment terminal device. In the operating method of the second payment relay server,
receiving a second encryption key request for second encryption of payment method information encrypted with a first encryption key corresponding to the first payment relay server from the payment terminal;
receiving the second encryption key from a block chain-based encryption key distribution management service network including a plurality of peer devices including the first payment relay server and the second payment relay server, and transmitting it to the payment terminal;
receiving a double-encrypted payment approval request message from the payment terminal using the first encryption key and the second encryption key;
decrypting the double-encrypted full text of the payment approval request using the second encryption key; and
requesting the first payment relay server to decrypt the payment method information encrypted with the first encryption key obtained according to the decryption,
The blockchain-based encryption key distribution management service network,
In response to a request to use the second payment relay server for decrypting the second encrypted payment method information from the full payment approval request, the first encrypted payment method information and the second encrypted payment method information Including an orderer device that stores and updates the deletion transaction of the second encryption key, which prevents its reuse, in a block chain-based ledger database
A method of operating the second payment relay server. 16. The method of claim 15,
The decoding step is
By sending a request for use corresponding to the second encryption key to a blockchain-based encryption key distribution management service network, a deletion transaction of the second encryption key that prevents reuse of the second encryption key is stored in a blockchain-based ledger database updating and allowing the shared registration of the stored and updated ledger database to be processed with the blockchain-based encryption key distributed management service network; and
If the payment method information encrypted with the first encryption key or the payment method information processed with the second encryption is reused in the received payment approval request message after that, the deleted history information is shared from the blockchain-based encryption key distribution management service network. Further comprising the step of processing the transaction approval to be rejected
A method of operating the second payment relay server.

Images