KR20000037129A - Electronic commerce security system and method thereof on internet - Google Patents

Abstract

PURPOSE: An electronic payment system and method are provided to basically prevent the exposure of a personal credit information necessary for the electronic commerce. CONSTITUTION: An electronic payment system comprises a buyer's terminal, a shopping mall's terminal, a banking authorization organization's terminal, a buyer's payment security program, and a banking authorization organization's terminal. An electronic payment method comprises steps of the buyer selecting goods or service provided at a shopping mall site(610), the buyer requesting a payment on the goods or service to the banking authorization's terminal(620), the banking authorization notifying an approval of the transaction to the shopping mall(630), the shopping mall notifying the transaction bargain to the buyer and sending the selected goods or service(640), the banking organization paying the shopping mall for the goods or service(650), the banking organization requesting the payment of the goods or service and transaction fee(660), the buyer paying the banking organization for the requested cost.

Description

Electronic payment security system and method for purchasing goods and services through internet shopping mall {electronic commerce security system and method about on internet}

The first factor to consider when expanding the service system to the Internet environment is whether security is guaranteed. This is because even a point of error in the e-commerce field causes a huge loss. Threats, such as hacking, can be a major cause, but ordinary human mistakes can have fatal consequences.

In the present invention, when purchasing goods, services, etc. through an existing Internet shopping mall, a credit card number and password are transmitted to an internet shopping mall company, and a purchase procedure of goods, services, etc. is made according to the approval status. Customers who purchase goods and services through this can not only secure their e-commerce transactions without exposing their credit card and cash card information to the outside, but also minimize the damage to consumers by identifying the credit status of shopping mall companies. It aims to do it.

Electronic commerce means any commerce activity conducted electronically by the place of purchase, customer and business partner. Increasingly, as the Internet is used as a universal network, the Internet is being used for commerce as a whole, and a wide range of advertisements for electronic publishing and companies and products are included. Internet e-commerce can provide better services and reduce the hassle of payment methods by introducing new management techniques that were not available before. It is also expected to greatly maximize work efficiency by significantly reducing the time spent on transactions.

The biggest advantage of e-commerce is that there is no intermediate distribution. Direct connections can be made between manufacturers and consumers without going through an intermediate distribution phase, enabling manufacturers to reduce intermediate margins and logistics costs with mass production and direct sales systems. It's no wonder that consumer prices are cheaper. In addition, companies can use it as part of their corporate advertising and promotion strategy. In 2000, there will be an explosion of demand, with 1.6 million networks connected to the Internet and 3.5 million hosts. As such, the number of Internet subscribers is expected to increase steadily globally so that new business opportunities can be targeted to the global audience without being limited to domestic markets. In addition, the use of a computer enables numerical verification of when, where and how many times it is searched, which can be effectively reflected in marketing strategies. On the other hand, users are able to select high-quality products by comparing products of various companies in a range of choices at low prices, and e-commerce using the Internet is being watched.

The current form of e-commerce is the Internet cyber mall. By implementing virtual stores of manufacturers and distributors who want to sell products or services on the Internet, domestic and international Internet users can obtain product information by searching, and pay and receive payments by credit card or other payment method. In order for e-commerce to be settled, it must be provided in a stable cycle, reflecting a series of processes such as searching for and ordering products, paying for and ordering products.

The industry is conducting multifaceted research, and some in the US, such as the US, are already implementing practical commerce. More than 120 shopping malls such as Branch Mall, World Mall, Open Market, Shopping 2000, and Internet Mall are being implemented on the Internet, and Korea Mall, Korea Web, Cyber Land, and Interpark are open in Korea. The handling items mainly consist of formal products such as books, records, frames, clothing, hardware and software. Most payments are made by credit card, and you will need to register your bank account, card number and expiration date in order to purchase the goods. It would be ideal if a number of techniques, such as encryption technology, would solve the security problem and exchange this information over the network, but there is no solution yet. Therefore, in order to prevent information leakage, the number is registered by bypassing cipher text, keypad, password, or conventional methods. That is to say, by phone, fax, and e-mail. First Virtual, for example, registers a bank account on the Internet, but provides a personal ID for e-mail and a visa or credit card number over the phone.

On the other hand, discussions about electronic money, which makes people feel as if they are using cash or cards with electronic payment systems on the Internet, are also exciting. E-money, such as cyber cash, digital cash, electronic credit cards, and electronic checks, is one of the leading forces of Digicash Inc.'s Ecash. Ecash has been criticized for its excellent security because there is no record of who uses cash as a bearer. It interfaces with a bank that manages the accounts of electronic money using client software called digital wallets. Just as there is no institution that manages the Internet, Internet e-commerce is a lawless world with no standardization. Sovereignty disputes are intensifying to lead the market related to the payment system so many companies are reminiscent of the Spring and Autumn National Day. Based on the credit card, First Virtual and Cyber Cash are fighting for technology, and they are also struggling with credit card companies such as MasterCard and Visa. Since MasterCard and Visa have agreed to support an electronic payment protocol called Secure Electronic Transaction (SET), they continue to develop protocols to reduce transaction costs.

The technical field to which the present invention belongs is the technical field of payment security through electronic commerce.

1 is a diagram of a conventional purchase and payment procedure.

As shown in FIG. 1, the conventional electronic commerce can be made only when the purchaser 100 accesses the Internet shopping mall 200 and provides personal information.

The purchaser 100 provides a credit card number, a password, and the like to the Internet shopping mall company, and the Internet shopping mall company 200 requests the financial institution 300 to approve the sale and sells the goods and services to the customer according to the result. A deal is taking place.

However, since the credit card number and password that the customer provides to the Internet shopping mall are provided without any security device, they can be stolen or disclosed to third parties at any time.

In addition, there is a lot of potential that can be caused by social and economic problems if abused. In addition, even if an internet shopping mall company is not a financial institution, it is not guaranteed that the customer's personal information is provided with financial information or confidential information for commerce.

The most central problem of electronic commerce can be divided into the problem of payment and the problem of security, and there are problems to be solved, and the present invention is one way of solving the problem.

As described above, when purchasing a product service through an internet shopping mall, a purchaser has always been in a state of anxiety, and a problem has been raised through the internet shopping mall. So that damage can be minimized.

The present invention has been made to solve the above problems, and an object of the present invention is to provide a security system and method for ensuring that their credit information is secure and confidential to the purchaser.

Most importantly, security issues such as access, card number, password, etc. The present invention proposes a system and method that can solve this problem.

If someone knows your card number, password, etc., you may have a tremendous financial accident, and financial transactions on the Internet are handled by yourself.

1 is a conventional purchase and payment procedure.

2 is a purchase and payment procedure of the present invention.

3 is a flow chart of the purchase and payment of the present invention.

<Description of Major Symbols in Drawing>

100: buyer terminal 200: shopping mall terminal

300: financial institution terminal 400: buyer payment security department

500: Financial Security Agency

Hereinafter, with reference to the accompanying drawings for the configuration and operation of the embodiment for achieving the present purpose.

Looking at the general structure or procedure of electronic commerce, shopping mall companies must provide product information to buyers with intention to purchase. The most common method is to use a web that can provide multimedia information such as 3D virtual reality, video, and voice as well as general images. E-commerce is the main reason for the web environment. You can also use e-mail. The present invention is directed to the web environment.

In the next step, the buyer selects a product he / she likes and places an order, and sends information about the payment to the shopping mall. The mall vendor must then accept the order and review the buyer to see if he is trustworthy. What is needed is a certification authority. The Certification Bureau is a trusted authority that can legally guarantee the credit and legitimacy of shopping mall companies and buyers. If the credit certification of the consumer falls from the certification authority, the shopping mall company can safely deliver the goods and receive the payment. In the present invention, the certification authority is set as a financial institution.

2 is a purchase and payment procedure of the present invention.

In the purchase system between a shopping mall and a buyer through the Internet,

A purchaser terminal unit 100 applying for a purchase to an internet shopping mall and applying for a payment for a purchase through a payment security system to a financial institution;

The shopping mall terminal 200 to notify and deliver the contract to the buyer terminal,

A financial institution terminal unit 300 which charges a purchaser to the purchaser terminal and sends a transaction approval notification and a payment to the shopping mall terminal;

Located in the buyer terminal unit and the buyer payment security unit 400 for security when exchanging information with the financial institution terminal unit,

The electronic payment security system including the financial institution payment security unit 500 which is located in the financial institution terminal unit and is responsible for security when exchanging information with the buyer terminal unit is illustrated.

When paying with a credit card, if a credit card number is passed to a shopping mall with an application for purchase of goods, the shopping mall will inquire the card number to a card company, request a card approval, and then make a sale. In the case of online deposit, buyers pay first and receive goods and services later. The present invention complements these.

If cash is going through the network electronically, is it safe? The encryption technique is to solve this problem. One of them is SET (Secure Electronic Transaction), which is a security protocol that guarantees secure transactions in open network systems such as the Internet, including Visa, Mastercard, IBM, Microsoft, Netscape, VeriSign, and GTE. Of companies are involved in the development. SET is an e-commerce-wide business protocol that includes encryption technology (RSA) that prevents others from opening or intercepting money or credit card information when making payments using credit cards. There is also SSL (Secure Socket Layer) method and encrypts only credit card information. The present invention can apply any or all of the above security method.

The purchaser payment security unit 400 is connected to the shopping mall terminal 200 in the purchaser terminal 100 to search for the register of the buyer terminal 100 when the item of the shopping mall is selected and installed in the buyer terminal 100. If not, it includes the program to be installed automatically by requesting the server.

When the program is automatically installed in the purchaser payment security unit 400, the server is automatically installed after being downloaded to the buyer payment security unit.

While the program is downloaded to the buyer payment security unit from the server, the buyer payment security unit 400 may enjoy advertisement revenue, including providing living information or advertisements of other companies in the margin.

Data related to security between the purchaser payment security unit 400 and the financial institution payment security unit 500 is characterized in that the encrypted data is stored in the server corresponding to the financial institution as it is kept secure and only those with a certain authority can read the data. It can be prepared for financial accidents.

In addition, the purchaser terminal unit 100 may install a credit card or a cash card reader on a keyboard or a mouse so that the purchaser can easily enter the card number.

In the purchaser terminal unit 100, the goods purchased at different shopping malls are placed in a shopping cart at once and collectively ordered and paid to each shopping mall company.

After the buyer accesses the internet shopping mall and goes through the application for purchase of necessary goods and services, the buyer passes the desired shopping mall and selects the item to be purchased, and at the same time, the product is placed in the tentative shopping cart (shopping bag) installed at the buyer's terminal. The unit price, amount and the contents of the shopping goods company are recorded.

3 is a flow chart of a purchase and payment of the present invention.

3, in the purchase and payment method between the shopping mall and the buyer through the Internet,

A purchase application step 610 in which a buyer selects an item of a shopping mall from a buyer terminal and sends a purchase intention to a shopping mall company;

A purchase price payment request step 620 for paying the shopping mall company for the price of the item calculated in the purchase request step in the financial institution terminal part determined by the buyer in the buyer terminal part;

The financial institution of the financial institution terminal unit may notify the transaction approval step 630 of trading with the shopping mall company;

The shopping mall company sends a contract notification and delivery step 640 to the buyer with the transaction approval notification, and

The shopping mall company and the financial institution is a transaction payment payment step 650 in which the financial institution pays the price of the goods to the shopping mall company as made by a bilateral contract;

A purchase billing step 660 in which the financial institution requests the buyer for a payment including a transaction price and a fee;

A purchase and electronic payment method is shown, which comprises a purchase price payment step 670 in which the buyer pays the requested price from a financial institution.

In the purchase request step 610, the buyer payment security unit 400 is connected to the shopping mall terminal unit 200 in the buyer terminal unit 100 to check the membership and after logging in to confirm that the membership of the product information on the web Looking at the shopping mall selects the goods, which is a program randomly made in the shopping mall. When the item of the shopping mall is selected, if the security program is not installed in the purchaser terminal unit 100 by searching the register of the purchaser terminal unit 100, the server is automatically installed by requesting the corresponding server and the program is automatically installed in the purchaser payment security unit 400. During installation, the server is downloaded after being downloaded to the buyer's payment security unit, and during the download, it is possible to provide living information or advertisements of other companies in the margin and the goods purchased at different shopping malls in the purchaser terminal unit 100 to the shopping cart. Put them all together and order them in bulk so that you can pay them at each shopping mall.

After the buyer accesses the internet shopping mall and goes through the application for purchase of necessary goods and services, the buyer passes the desired shopping mall and selects the item to be purchased, and at the same time, the product is placed in the tentative shopping cart (shopping bag) installed at the buyer's terminal. The unit price, amount and the contents of the shopping goods company are recorded.

The purchase price payment request step 620 of the purchaser terminal to pay the price of the goods calculated in the purchase application step to the financial institution terminal predetermined by the buyer in the purchaser terminal to the buyer terminal to the buyer's credit Enter your card number and password, or pass your credit or debit card through a reader installed on your keyboard or mouse and enter your password.

The information of the credit institution or the credit card is encoded, or through the reader attached to the keyboard or mouse of the present invention, the credit card or the cash card passes directly through the credit card or the cash card to communicate information with mutually encoded data. Accessing the payment security department, the financial institution decides whether to approve the transaction. At this time, the payment security department of the financial institution checks the credit information of the member, that is, the buyer, checks the transaction amount, etc., and then determines whether to approve it after referring to the database on the server.

That is, the purchaser downloads and installs the payment security program provided by the present invention on his / her purchaser terminal on the Internet or a diskette, and installs the program proposed by the present invention, and encodes and communicates directly with each other. At this time, the purchase data of the tentative shopping cart (shopping bag) is transmitted to the bank while the multi-secure payment program is in operation. This data includes information on a shopping mall company, purchase items, unit price, quantity, and the like. At this time, it is possible to modify and delete the purchased goods.

Transaction approval notification step 630 that the financial institution of the financial institution terminal unit may deal with the shopping mall company is whether the shopping mall affiliated shopping mall by notifying each Internet shopping mall whether or not the transaction approval in the purchase payment request step 620 You can also automatically determine whether or not. In other words, the processing and disguise defective affiliate shopping malls can not be approved, so customers can automatically determine whether or not affiliated shopping malls can minimize damage.

The contract company sends the goods together with the transaction approval notice to the buyer and the contract notification and delivery step 640. The shopping mall company concludes the transaction by notifying the buyer of the transaction approval notification sent by the financial institution to the Internet shopping mall as described above. The shipping procedure is done. The shopping mall company combines its code and the code of the financial institution, receives an arbitrary transaction approval number and a transaction authorization letter determined by a certain function, and notifies the customer of a copy thereof.

The transaction payment step 650, the financial institution pays the transaction approved to each Internet shopping mall company. The method of payment depends on the contract between the financial institution and each shopping mall company. By retrieving the code of each shopping mall company, the financial institution allocates the shopping mall company as much as the amount notified from the buyer.

In the purchase billing step 660, the financial institution bills the buyer for the goods and services including the fee. At this time, the payment is billed based on the transaction approval number, so that the corresponding server database of the financial institution is inquired and updated.

The purchase price payment step 670 is an electronic payment method in which the amount paid by the purchaser to pay the price requested by the financial institution in the purchase billing step 660 is recorded in a database by transacting a corresponding transaction number.

To create an electronic payment system is to apply a cryptographic algorithm appropriately to create a payment protocol. It adopts various security mechanisms and mounts communication protocols for use in real networks.

Security is defined as the concept of building a safeguard against various threats. Information stored on a computer is stored in the form of documents or data, and acting unjustly on such information can be defined as a threat. There are many types of threats. Some of the typical threats are listed below.

-Tapping (Evasdropping)

Authorization violation

Tampering

Denial of Service (DoS)

-Masquerade

Repudiation

Spoofing

Setting a security policy corresponding to such a threat is called a security service. The present invention has been implemented through a buyer payment security unit and a financial institution payment security unit of a financial institution.

As described above, the purchaser's payment security unit on the buyer side and the financial institution's payment security unit on the financial institution are not only devices that can prevent the third party's access to the buyer's data and the data held by the financial institution. In accordance with the protocol between financial institutions, all information stored between them is automatically encoded and communicated so that outsiders, such as third parties, cannot be recognized and deciphered. Even if the employee of the financial institution does not have a certain authority, the private information and financial information of the individual may be leaked in the interim, or the third party may be blocked.

Information infrastructure is constantly threatened with internal and external threats. Such threats are manifested through vulnerabilities in the system. To protect the system from various types of attacks or threats, a safeguard is required that can respond individually or in combination. This is how SafeGuard responds to threats as a Security Service.

The present invention has revolutionized the communication path of personal information and prevents exposure of personal information by conducting the security service in an efficient structure, and ensures a thorough confidentiality by encoding all communication and storage of information. In addition, it is not only securely available to purchasers of goods and services through internet shopping malls, but also cannot deal with defective merchants, processing, or spoofed merchant shopping malls. It can be settled as a means of commerce.

Claims (8)

In the purchase system between a shopping mall and a buyer through the Internet, A purchaser terminal unit 100 applying for a purchase to an internet shopping mall and applying for a payment for a purchase through a payment security system to a financial institution; The shopping mall terminal 200 to notify and deliver the contract to the buyer terminal, A financial institution terminal unit 300 which charges a purchaser to the purchaser terminal and sends a transaction approval notification and a payment to the shopping mall terminal; Located in the buyer terminal unit and the buyer payment security unit 400 for security when exchanging information with the financial institution terminal unit, An electronic payment security system comprising a financial institution payment security unit (500) located in the financial institution terminal unit and responsible for security when exchanging information with a buyer terminal unit. The method according to claim 1, The purchaser payment security unit 400 is connected to the shopping mall terminal 200 in the purchaser terminal 100 to search for the register of the buyer terminal 100 when the item of the shopping mall is selected and installed in the buyer terminal 100. If not, the electronic payment security system that includes a program that is automatically installed by requesting the server. The method according to claim 2, Electronic payment security system, characterized in that the program is automatically installed after being downloaded to the buyer payment security unit from the server when the program is automatically installed in the buyer payment security unit (400). The method according to claim 3, Electronic payment security system including the buyer payment security unit 400 may provide the living information or advertisements of other companies in the margin while the program is downloaded from the server to the buyer payment security unit. The method according to claim 1, Data related to security between the purchaser payment security unit 400 and the financial institution payment security unit 500 is stored as encrypted data in the financial institution corresponding server as it is. The method according to claim 1, The purchaser terminal 100, the electronic payment security system including using a credit card or cash card reader installed on the keyboard or mouse. The method according to claim 1, Electronic payment security system, including the purchaser terminal unit 100 in the shopping cart containing the goods purchased at different shopping malls in a batch order and payment to each shopping mall company. In the purchase and payment method between the shopping mall and the buyer through the Internet, A purchase application step 610 in which a buyer selects an item of a shopping mall from a buyer terminal and sends a purchase intention to a shopping mall company; A purchase price payment request step 620 for paying the shopping mall company for the price of the item calculated in the purchase request step in the financial institution terminal part determined by the buyer in the buyer terminal part; The financial institution of the financial institution terminal unit may notify the transaction approval step 630 of trading with the shopping mall company; The shopping mall company sends a contract notification and delivery step 640 to the buyer with the transaction approval notification, and The shopping mall company and the financial institution is a transaction payment payment step 650 in which the financial institution pays the price of the goods to the shopping mall company as made by a bilateral contract; A purchase billing step 660 in which the financial institution requests the buyer for a payment including a transaction price and a fee; The purchase and payment method comprising a purchase price payment step (670) in which the buyer pays the requested price from the financial institution.