KR19990084820A - Off-line approval agency module and on-line / off-line approval system using the same - Google Patents

Abstract

The present invention relates to an off-line authorization agent module and an on-line / off-line authorization system using the same, wherein an off-line inquiry that does not go through a black list for a good credit card and an on-line inquiry for a relatively bad card is performed. Enables to obtain approval for use by on-line inquiry, enabling true off-line inquiries, and recording changes in usage limits directly on the card, allowing customers to dynamically record their card from a distance It is to limit the use.

To this end, the present invention includes card reading / recording means capable of reading or writing information from various types of credit or debit cards having different information recording media or different card issuers; The card number system or the card identification number (or code) detected from the card information read by the card reading / writing means is verified and the authorization number is given by inquiring the usage degree in the off-line state. Or one or more off-line security modules (SAMs) for assigning additional information according to the off-line inquiry result; When the card information is read from the card reading / writing means while connected to communicate with an external card terminal capable of on-line inquiry, the card number is detected and checked for each card issuer to determine whether the card is valid. The card information is sent to the off-line security module for a valid card to be inquired and approved, and the additional information or the change of usage according to the use authorization given as a result of the inquiry in the off-line security module is returned to the card. The card reading / recording means is controlled to record, and if the additional information provided as the off-line inquiry result includes information indicating the necessity of on-line inquiry, an on-line inquiry using the external card terminal is automatically performed. The card to record on-line additional information received from the on-line inquiry path on the customer card. It provides an off-line authorization agent module including an off-line inquiry control means for controlling reading / writing means, and an on-line and off-line authorization system using the same, and also recognizes card information on a credit or debit card. Detects the card issuer's unique number from the card information, selects the off-line security module of the corresponding card company, establishes the off-line inquiry path, and checks whether the card is valid and on-line. Checking transaction usage; Verifying the validity of the card number system or the card identification number (or code) through the established off-line inquiry path for the card that is valid as a result of the determination and does not exceed the on-line transaction usage limit; If the card is verified as a result of the verification, the additional information is checked to determine whether the current credit condition and usage limit for the off-line transaction are exceeded. Generating additional information indicative of a change in usage or a rejection of approval and the need for on-line inquiry accordingly; An off-line approval proxy method comprising the steps of recording the generated additional information on a card and displaying the status thereof, and an on-line and off-line approval method using the same.

Description

Off-line approval agency module and on-line / off-line approval system using the same

The present invention relates to an off-line authorization agent module in a true sense without passing through a black list and an on-line / off-line authorization system using the same, particularly for a credit or debit card having a good credit status. The card is approved by off-line inquiry that does not go through to allow fast card payments. On-line inquiry of credit or debit cards with relatively poor credit status is not allowed. To allow for more accurate card payments, and to allow the card to record changes in usage limits resulting from the off-line and on-line card authorizations, thereby real off-line without blacklisting. Not only can you be quickly served by off-line inquiry, but you can also Card authorization that allows customers to dynamically limit the use of their cards from a distance without directly inquiring card information, reducing customer waiting time due to card payments, and allowing payment by credit card merchants for reliable use authorization It is about the system.

In general, a method for inquiring a credit or debit card currently used includes an on-line inquiry method for inquiring card information by direct communication with a card issuer, and a direct method with a card issuer. There is a slightly modified form of off-line (not via wired or wireless) query, which is a true variant of off-line in which card information is indirectly inquired through an intermediate off-line host without communication. .

For example, Figure 1 is a block diagram showing an example of a conventional card terminal in order to explain the card inquiry method, the key input unit 11 capable of key input according to the user's intention, and the key input unit required for payment A display unit 12 and an alarm generating unit 13 for displaying service information regarding a key operation state and an operation state, a card inlet (or a card viewing window) and a card reader for card recognition may be provided as an internal type or an external type. When the card is inserted into the card slot (or through the card viewing window), the card reader unit 14A and 14B are provided to drive the reader to recognize the card information. Built-in a security access module (SAM) for querying the card information read from the card recognition means in an off-line manner, and a card issuer (or card approval agency) to query the card information on-line To the communication unit 16 and the memory unit 17 and the card issuer for supporting data transmission / reception with the card issuer or value-added network operator, etc. And a large black list memory unit 18 for storing the black list downloaded by communication. And a sales slip output unit 15 for issuing a receipt for the transaction amount.

2A and 2B are flowcharts illustrating a conventional card approval process by on-line inquiry. The card issuer or the card approval agent is checked by checking the expiration date and password of the card from the card information of the credit or debit card. After accessing the on-line communication network leading to the company and the like, when the card approval is received in the receiving state, it can be seen that the card sales number is displayed and the sales slip is printed out. When necessary (e.g. getting on and off taxis, large retail stores, large nightlife restaurants, etc.), there are various inconveniences such as waiting for customers due to the lack of speed.

3a and 3b is an operation flow chart for explaining the conventional card approval process by the off-line inquiry, the black list (bad trader statement) periodically through the on-line communication network connected to the card issuer, card approval agency, etc. If the card information for the credit or debit card is recognized in the state of downloading and renewing, the black list is checked after checking the card issuer's unique number or card number system or expiration date from the card information. For cards that do not belong to the blacklist, the online usage limit (amount or number of times) is checked and the card is approved through an on-line inquiry. Otherwise, the card is approved off-line. The inquiry shows that the card is approved for use.

In this process, however, the most recent black list must be modified and stored. The amount of black list (card company * 2 million * 16 bytes) is quite large, and actually the black list is transmitted from all card companies and banks. Sending to a card terminal is practically uneconomical.

The reason for this is that the time to send the blacklist down to all card terminals that perform off-line authorization by the current available communication speeds (1200, 2400, 4800, 9600, 19600, 28800, ..... 56000, etc.) As it takes from hours to as many as tens of hours, it is impractical and uneconomical to grant a reliable authorization for a bad card in practice.

In particular, in the conventional off-line card terminal, the CVV or CVC value must be verified in the international convention by granting the card approval without verifying the card verification value (CVV) or the card verification code (CVC). In order to use this type of offline card terminal, a card merchant and a card issuer can only be used by making a separate special contract.

Therefore, the present invention was created to solve the above problems, and the present invention permits the use of a card by an off-line inquiry that does not go through a black list for a good credit or debit card. In addition, by allowing the card to record the change in the usage amount according to the off-line approval again, the card issuer or the like can quickly serve the off-line inquiry. Its purpose is to provide an off-line authorization agency module and method that can dynamically limit the customer's card usage at a distance without directly inquiring the card.

In addition, the present invention is to approve the use of the card by on-line inquiry for the credit or debit card with a relatively poor credit status, and to record the change in the usage limit according to the on-line authorization, so that the card On-line not only allows more accurate card payments by credit card holders, but also restricts customer's card usage from a distance, without directly checking card information from card issuers or card approval agencies. And for providing off-line approval systems and methods.

In order to achieve the above object, the present invention provides card reading / recording means capable of reading or writing information from various types of credit or debit cards having different information recording media or different card issuers; The card number system or the card identification number (or code) detected from the card information read by the card reading / writing means is verified and the authorization number is given by inquiring the usage degree in the off-line state. Or one or more off-line security modules (SAMs) for assigning additional information according to the off-line inquiry result; When the card information is read from the card reading / writing means while connected to communicate with an external card terminal capable of on-line inquiry, the card number is detected and checked for each card issuer to determine whether the card is valid. The card information is sent to the off-line security module for a valid card to be inquired and approved, and the additional information or the change of usage according to the use authorization given as a result of the inquiry in the off-line security module is returned to the card. The card reading / recording means is controlled to record, and if the additional information provided as the off-line inquiry result includes information indicating the necessity of on-line inquiry, an on-line inquiry using the external card terminal is automatically performed. The card to record on-line additional information received from the on-line inquiry path on the customer card. An off-line authorization agent module including off-line inquiry control means for controlling read / write means is provided.

In addition, when the card information for the credit or debit card is recognized, the present invention detects the card issuer unique number from the card information and selects the off-line security module of the card company corresponding to the off-line. After establishing an inquiry path, checking the validity of the card and the on-line transaction usage rate; Verifying the validity of the card number system or the card identification number (or code) through the established off-line inquiry path for the card that is valid as a result of the determination and does not exceed the on-line transaction usage limit; If the card is verified as a result of the verification, the additional information is checked to determine whether the current credit condition and usage limit for the off-line transaction are exceeded. Generating additional information indicative of a change in usage or a rejection of approval and the need for on-line inquiry accordingly; An off-line authorization proxy method comprising recording the generated additional information on a card and displaying the status thereof.

In order to achieve the above another object, the present invention provides a plurality of card reading / writing means capable of reading or writing information from various types of credit or debit cards having different information recording media or different card issuers; The card number system or card identification number (or code) for each card issuer detected from the card information read by the card reading / recording means is validated, and the card is proved to be off-line. One or more off-line security modules (SAMs) for querying the usage level and assigning a card authorization number or generating additional information according to the off-line inquiry result; Communication means for enabling on-line inquiry to a card issuer, a card approval agency, a bank, or the like, of the card information read by the card reading / writing means; When the card information is read by the card reading / writing means, the card number is detected and checked according to the card issuer's unique number or expiration date to determine whether the card is valid, and if necessary, the off-line security module. In addition, the card information is transmitted to the on-line communication network to request inquiry and approval, and a change in the usage amount or a change in the usage amount according to the use of the off-line or on-line inquiry result card or the additional information is applied to the card. An on-line and off-line authorization system is provided that includes on / off-line inquiry control means for controlling the card reading / writing means to write the additional information back to the customer card.

In addition, when the card information for the credit card or debit card is recognized, the present invention detects the card issuer's unique number from the card information and selects the off-line security module of the card company to provide an off-line inquiry path. Checking the validity of the card and the on-line transaction usage rate after constructing; The check result selects the established off-line inquiry path for a valid card that does not exceed the on-line transaction usage limit, and uses an on-line communication network for an effective card that exceeds the on-line transaction usage limit. Selecting a line inquiry path; Provides an on-line and off-line approval method comprising transmitting the card information through each selected inquiry path and requesting for inquiry and approval, and then recording additional information obtained as a result of the inquiry on the card and displaying the state. do.

1 is a block diagram schematically showing an example of a configuration of a conventional card terminal;

2A and 2B are flowcharts illustrating a conventional on-line card approval process.

3A and 3B are flowcharts illustrating a conventional off-line card approval process.

Figure 4 is a block diagram showing a brief configuration of the on-line and off-line approval system according to the present invention

5 is a configuration example of the off-line approval agency module of FIG.

6 through 6C are flowcharts illustrating the card approval process executed by the on-line and off-line approval system according to the present invention.

7A and 7B are flowcharts illustrating a card approval process executed by the off-line authorization agent module according to the present invention.

** Explanation of symbols for the main parts of the drawings **

40: on / off-line inquiry control means 41: key input unit

42: display unit 43: alarm generating unit

44A, 44B: Card reader / recorder 45: Sales slip output

46: communication unit 47, 51: memory unit

49, 52: power supply 50A-50Z: off-line approval agency module

53: off-line security module

54: off-line inquiry control means

Hereinafter, an off-line approval agent module and an on-line / off-line approval system and method using the same according to the present invention will be described in detail with reference to the accompanying drawings.

4 is a block diagram schematically showing the configuration of an on-line and off-line approval system according to the present invention. The key input unit 41 enables key input according to a user's intention, and the key input unit required for payment. A display section 42 and an alarm generating section 43 for displaying service information relating to a key operation state and an operation state, and a sales slip output section 45 for issuing a receipt for the transaction amount are provided.

In addition, a card slot (or card viewing window) for card recognition is provided in a built-in type or an external type, so that when a card is inserted into the card slot (or when passing through the card viewing window), different types of information recording media or different card issuers And an internal card reader / writer 44A and an external card reader / writer 44B capable of reading and writing information from a credit or debit card. In this case, the card reader / recorder may be equipped with all or part of a magnetic card recognition module, a high frequency wireless card recognition module, and an IC card recognition module according to a user's request, and may be adjusted according to a required service type.

And a communication unit 46 supporting data transmission / reception with a card issuer or a value-added network operator, a memory unit 47 for storing data, and a security for each card issuer to inquire the read card information in an off-line manner. One or more off-line authorization agents 50A-50Z each having a module (SAM), and the multiple offline authorization agents for inquiring the card information in an off-line or on-line manner as necessary. The module can be controlled, and also includes an on / off-line inquiry control means 40 for communicating with a card issuer (or a card approval agent) through a communication cable.

FIG. 5 is an exemplary configuration diagram of the off-line authorization agent module of FIG. 4, wherein the card number system or the card identification number (or code) detected from the card information is verified and is in an off-line state. An off-line security module (SAM) 53 for querying the usage degree and granting an approval number or granting additional information according to the off-line inquiry result; A memory section 51 for storing data and the like, and a power supply section 52 for multiplying the operation power to the respective parts.

In addition, it is possible to determine whether the card is valid by detecting and checking a unique number of each card issuer or a card expiration date from the card information transmitted from the card terminal while being connected to communicate with an external card terminal capable of on-line inquiry. When a plurality of off-line security modules are provided, an off-line security module corresponding to a unique number of each card issuer may be selected and the card information may be transmitted and requested for inquiry and approval. Off-line inquiry control means 54 capable of transmitting the additional information provided as a result of the inquiry in Eq.

In this case, the off-line approval agency module may be provided with a separate card reading / recording means that can read or write information from different types of credit card or debit card different information recording medium or card issuer in some cases. Of course, the off-line inquiry control means, when the off-line authorization agent module is used alone, when the information indicating the need for on-line inquiry is included in the additional information provided as the off-line inquiry result The card reading / writing means may be controlled to automatically perform on-line inquiry using the external card terminal to record on-line additional information received from an on-line inquiry path on a customer card.

6A to 6C are flowcharts illustrating the card approval process executed by the on-line and off-line authorization system according to the present invention, and show a card for a credit or debit card from an internal or external card reading / writing means. If the information is recognized, the card issuer unique number (BIN; base company ID and card type) is detected from the card information, and the off-line security module of the card company is selected to be off-line. A step of establishing an inquiry path (611-617), and checks the validity period and the password of the card to determine that the valid password is within the validity period and the inputted password matches the card password within the condition that the password of the card is entered. Steps 618-621 and on-line transaction usage may be checked to selectively off-line route or on-line depending on whether the on-line transaction usage has been exceeded. Views card through a path, it can be seen that comprising the steps (622-637) to write the result back to the card.

At this time, if the on-line transaction usage check result is a valid card that does not exceed the on-line transaction usage limit, the processing flow sends the card information to the off-line authorization agent module to inquire and approve the inquiry result. Waiting for a response (624-626), and if the information indicating that the on-line inquiry needs to be added by checking the off-line inquiry result is added to the on-line inquiry request step again, the off-line inquiry result card If there is an authorization number, recording the card sales data, that is, the usage amount of the off-line transaction changed according to the card usage authorization, displaying the authorization number and outputting the card sales slip (627-630, 630a). It can be seen that it includes.

If the valid card exceeds the usage limit of the on-line transaction, the processing flow transmits the card information through the on-line inquiry path using the on-line communication network to request inquiry and approval, and waits for a response to the inquiry result ( 631-633), and with respect to the card including the risk manager fee in the inquiry information transmitted from the on-line inquiry result from the on-line communication network, recording additional information on the corresponding card and indicating whether the card is authorized (634). -637).

7A and 7B illustrate a card approval process performed by each off-line approval agent module when the off-line approval agent module according to the present invention is mounted in the on / off-line approval system as shown in FIG. 4. An operation flowchart for a step, comprising: verifying (711-716) the validity of a card number system or a card identification number (or code) when card information is received through an off-line inquiry path; Checking the additional information on the card verified by the verification result and determining whether the current credit status and usage limit are exceeded for off-line transactions when risk management is required; As a result of the determination, information indicating the necessity of on-line inquiry is added to the card for which the off-line transaction usage limit is exceeded. It can be seen that steps (721-724) are added to inform the change of the figure, and to the original transmission destination with the information notifying the refusal of the card not verified.

In this case, when the off-line authorization agent module according to the present invention operates alone, when the card information for the credit card or debit card is recognized, the card issuer unique number is detected from the card information. After establishing an off-line inquiry path by selecting an off-line security module, the step of checking whether a card is valid and on-line transaction usage can be set to be executed at an early stage of operation. It goes without saying that the step of controlling the card reading / writing means to record the additional information obtained as the result of the off-line inquiry directly to the card can be set to be executed last.

In the main operation of the present invention configured as described above, the card customer number (credit card number or debit card number), CVV or CVC, expiration date of the card, usage limit information and usage limit information from the internal card reading / writing means Or by using the same information as described above transmitted through communication from an external card reading / recording means separately installed on the outside, the on / off-line inquiry control means 40 interprets the BIN of the card customer number Select the card company's offline card approval module, check the expiration date of the card, and proceed to the next step in the condition that the customer's password is correctly entered for the valid customer card within the expiration date. Then exit.

In the next step, the on-line usage limit amount and the limit of the number of times of use of the card are checked. If the limit amount and the limit number are not exceeded, the off-line inquiry approval path is selected. Automatically select inquiry approval path to process card inquiry approval.

In this case, the on-line inquiry approval path follows the normal on-line inquiry approval path. Especially, when the on-line inquiry is performed, the card issuer manages the risk management information to manage the risk for the customer card whose credit quality is not good. By generating and sending it as additional information, the card approval system checks the additional information obtained as a result of the on-line inquiry so that the credit status of the card can be known.

On the other hand, when the off-line inquiry approval path transfers the necessary information from the card approval system to the off-line authorization agent module, the off-line authorization agent module verifies the card number system validity function in the offline card authorization module, and verifies the CVV or CVC of the card. By executing the card issuer-specific functions such as the function, the card authorization numbering function, and the card risk management function, the off-line card approval module can perform the off-line card inquiry approval task in a practical, realistic and true sense. Will be.

As the off-line approval agency module acts to approve the use of the card, it reduces the waiting time of the card customer and at the same time enhances the card merchant's prompt and reliable card approval, thereby prompting the card merchant to provide the goods or services. It can provide more services in a limited time by processing it in a limited time, and in particular, it is possible to perform a real-time off-line inquiry that does not require a separate black list search when checking off-line cards. Large amounts of blacklists can often be used to communicate with card terminals, eliminating the need for transmission, modification and storage.

In addition, customers who do not meet the requirements for off-line card inquiry approval determine whether the card is accepted through normal on-line card inquiry approval, and the card issuer sends the on-line card inquiry result to the card approval system as needed. The card usage limit, card usage limit, card expiration date and card issuer-specific information are sent together.In this case, the card approval system records the information sent from the card issuer to the customer's card. Remotely and dynamically control customer credit and card usage rights.

According to the present invention as described above, it is possible to obtain the use authorization by off-line inquiry for a credit or debit card having a good credit status, and on-line inquiry for a relatively poor credit or debit card. By allowing the card to record changes in usage limits resulting from authorizations, it can be quickly serviced by true off-line retrieval without blacklists, as well as by the card issuer or card. Authorization agencies, etc. also have the advantage of dynamically limiting the customer's card usage over long distances.

Claims (14)

Card reading / recording means for reading or writing information from various types of credit or debit cards having different information recording media or different card issuers; From the card information read by the card reading / recording means, a unique number or a card number system for each card issuer is verified, and an authorization number is assigned by inquiring its usage in an off-line state or the off is made. An off-line security module (SAM) for assigning additional information according to the line inquiry result; When card information is read from the card reading / writing means while connected to an external card terminal capable of on-line inquiry, the card number is detected and checked according to the card issuer's unique number, card number system and expiration date, etc. Determine, transmit a card information to the off-line security module for a valid card, and request an inquiry and approval, and change the usage amount according to additional information or use authorization given as a result of the inquiry in the off-line security module. An off-line authorization agency module comprising off-line inquiry control means for controlling the card reading / writing means to write back to the card. According to claim 1, wherein one or more off-line security module is mounted so that the off-line inquiry control means automatically selects the off-line inquiry path according to the unique number decryption result of each card issuer, the corresponding inquiry path Off-line authorization agent module to request the inquiry through the card information and receive the authorization number or additional information. The method according to claim 1 or 2, wherein when the off-line inquiry control unit decodes the additional information provided as the result of the off-line inquiry, information indicating the necessity of on-line inquiry is included in the information. On-line inquiry using the external card terminal to receive the card authorization number or additional information that can limit the card use of the customer from the on-line inquiry path, the customer received the on-line additional information again An off-line authorization agency module for controlling the card reading / recording means to record the card so that the credit card of the customer card can be managed dynamically remotely. When the card information of various types of credit cards or debit cards with different information recording media or different card issuers is recognized, the card issuer unique number is detected from the recognized card information, and the card company's off-line is detected. Checking the validity of the card and the on-line transaction usage rate after establishing an off-line inquiry path connected to a security module; Verifying the validity of the card number system or the card identification number (or code) through the established off-line inquiry path for the card that is valid as a result of the determination and does not exceed the on-line transaction usage of the card. Wow; If the verification result confirms the validity, the additional information of the card is checked to determine whether the current credit status and usage limit for the off-line transaction are exceeded. Generating additional information indicating a change in usage or a rejection of approval and a need for on-line inquiry accordingly; And recording the additional information generated as a result of the inquiry on a card and displaying the state. The method of claim 4, further comprising determining a card within a validity period as a valid card with respect to a card for which a unique number of each card issuer in the information read from the credit or debit card is verified. . 6. The off-line authorization according to claim 4 or 5, further comprising the step of determining a valid card when the input password matches a card password under the condition that the password of the card read from the credit or debit card is input. How to Act. The risk management according to claim 4 or 5 or 6, wherein the on-line transaction usage level is checked to indicate the necessity of on-line inquiry when a usage amount amount is exceeded or a condition in which the usage frequency is exceeded is detected. Off-line authorization agency method comprising the step of generating information and recording on the card. A plurality of card reading / recording means for reading or writing information from various types of credit or debit cards having different information recording media or different card issuers; The card number system or card identification number (or code) for each card issuer is detected from the card information read by the card reading / writing means, and the validity thereof is verified, and the card is proved to be off-line. An off-line security module (SAM) for generating a card approval number by inquiring the usage degree as a state or generating additional information according to the off-line inquiry result; Communication means for enabling on-line inquiry to a card issuer, a card approval agency, a bank, or the like, of the card information read by the card reading / writing means; When the card information is read by the card reading / writing means, the card number is detected and checked according to the card issuer's unique number or expiration date, and the card is determined to be valid. Card information is sent to the line security module or on-line communication network for inquiry and approval request, and the card with the additional information or the change of usage according to the card approval by checking the off-line or on-line inquiry result And on / off-line inquiry control means for controlling to record the corresponding information via the card reading / writing means. The on-line and off-line approval system of claim 8, wherein one or more off-line security modules are installed to automatically select an off-line inquiry path for each card issuer to query and approve card information. 10. The method according to claim 8 or 9, wherein the on / off-line inquiry control means further restricts the use of the card of the customer according to the credit status of the customer evaluated by the card issuer during the on-line card inquiry. Card credit score (or rating), credit card usage limit, credit card usage limit, credit card expiration date, etc.) and read / record the card to record additional information back to the credit card from the on-line inquiry path. On-line and off-line authorization systems that control the means to allow the credit card's creditworthiness to be remotely and dynamically managed. When the card information of various types of credit cards or debit cards with different information recording media or different card issuers is recognized, the card issuer unique number is detected from the recognized card information, and the card company's off-line is detected. Checking the validity of the card and the on-line transaction usage rate after establishing an off-line inquiry path connected to a security module; For the card that is valid as a result of the determination and does not exceed the on-line transaction usage of the card, the established off-line inquiry path is selected, and the determination is a valid card and the on-line transaction of the card is used. Selecting an on-line inquiry path using an on-line communication network for a card exceeding a degree; The card information is transmitted through the selected card information inquiry path to inquire and approve the request. If there is a response from the off-line inquiry path or the on-line inquiry path in the reception standby state, the additional information generated as a result of the inquiry is displayed as a card. And writing to and indicating the status thereof. 12. The method of claim 11, wherein the valid card determination step includes determining a valid card when the input password matches a card password under a condition that a password of a card read from a credit or debit card is input. And off-line approval method. The on-line inquiry according to claim 11 or 12, wherein when the off-line inquiry result adds information indicating the necessity of the on-line inquiry from the off-line security module, the card information is transmitted to the on-line communication network again. On-line and off-line approval method characterized in that the step of performing a secondary inquiry and request for approval through the path. 15. The method of claim 13, further comprising: recording additional information on the card for the card including the risk manager fee in the inquiry information transmitted from the on-line inquiry result from the on-line communication network. Line and off-line approval method.