KR20010000805A - Improved credit card settlement system in e-commerce and the method thereof - Google Patents

Abstract

PURPOSE: A system and method of credit card settlement are provided to prevent leakage of credit card data by using a cyber credit card and dual settlement process for electronic commercial transaction on the internet. CONSTITUTION: A server(200) of credit card company issues a cyber credit card in response to the request of a customer. A computer(300) for a customer is connected to a computer network(400). The customer logs on the server(200) using the computer(300) and sets up an amount of money to be approved of cyber credit card and a term of validity of the money. A web server(100) of internet shopping mall is connected via the computer network(400) to the computer(300) and the server(200) of credit card company. The customer selects a products to be purchased and inputs cyber credit card number and an amount of money for payment settlement. The web server(100) transmits the cyber credit card number and the amount of money for payment settlement to the server(200) of credit card company. The server(200) sends an approval message of the cyber credit card to the web server(100) only when the amount of money for payment settlement received and the amount of money set by the customer are equal each other.

Description

Improved credit card settlement system in e-commerce and the method

The present invention relates to an improved payment method and system in Internet electronic commerce, and more particularly, to a method and system for paying a commodity price using a credit card available only online in internet electronic commerce.

The most commonly used methods of payment currently used in electronic commerce are bank transfer, credit card payment, and electronic money.

The payment method using a bank transfer is made by a method in which a customer selects a product to be purchased in an internet shopping mall and deposits the product price into an internet shopping mall account, and then the Internet shopping mall operator checks the bank transfer and delivers the product to the customer.

In the payment method using a credit card, a customer selects a product to be purchased at an internet shopping mall, enters credit card number, credit card expiration date, etc. into the credit card payment item, and the internet shopping mall provider provides the card information. Inquiry to the card company, and when the card is approved, the goods are delivered to the customer.

In the payment method using electronic money, when a customer selects a product to be purchased in an internet shopping mall, the customer enters electronic money information into a payment item, the internet shopping mall company requests the product price to an electronic money company, and the electronic money company Payment is received from the customer and then delivered to the customer.

In the case of the bank transfer method of the payment method, since the goods are delivered only after the customer transfers the price of the goods and the payment status is confirmed by the Internet shopping mall operator, the goods are actually delivered from the time the customer requests to purchase the goods. There is a problem that it takes a long time to receive.

In the case of a payment method using a credit card, payment for a product purchase is convenient, but since the customer's card information remains in the shopping mall, there is a risk of the credit card number theft due to the leakage of the credit card number. Moreover, in the case of a credit card, the usable limit is set considerably higher than that of electronic money, and the leakage of credit card information causes enormous economic damage to customers and credit card companies.

In addition, in the case of electronic money payment method, although safe, it is inconvenient to recharge the amount of money if you need to recharge it whenever necessary and cancel the product purchase after charging for the product purchase. Because it is in units of money, consideration should be given to future consumption issues of the balance remaining after the purchase of goods. In addition, since the unit of electronic money is relatively small, in case of purchasing a product more than the amount payable by electronic money, the settlement process becomes quite cumbersome.

Therefore, there is a need for a new payment method that is convenient and secure in internet electronic commerce.

SUMMARY OF THE INVENTION The present invention has been made in view of such a prior art, and aims to solve the problem of credit card number theft risk due to credit card number exposure when paying for a product using a credit card in Internet electronic commerce.

Another object of the present invention is to provide a new payment system that can replace the conventional payment system in the Internet e-commerce by providing a convenient and secure payment system improved credit card payment method in the Internet e-commerce.

1 is a schematic diagram showing a schematic configuration of an improved credit card payment system in Internet electronic commerce according to the present invention.

2 is a flowchart illustrating a process in which a user issues a cyber credit card at a bank or a card company.

Figure 3 is a block diagram illustrating the form of a cyber credit card according to the present invention.

4 is a flowchart illustrating a process in which a customer purchases a product in an internet shopping mall using the payment method according to the present invention.

Fig. 5 is a flowchart showing a process in which a customer sets an authorization amount and an expiration date for the authorization amount on the web site of the cyber credit card company according to the present invention.

6 is an exemplary diagram of a web page provided for a customer to set an authorization amount and an expiration date for the authorization amount in a cyber credit card company web site according to the present invention.

7 is a diagram showing a data structure managed by a cyber credit card company web server to implement a payment method according to the present invention.

8 is an exemplary diagram of a web page provided for a customer to make a payment according to the present invention in an internet shopping mall.

* Description of the symbols for the main parts of the drawings *

100: e-commerce web server 200: cyber credit card company server

300: customer computer

In order to achieve the above object, in the present invention, the payment is made using a credit card (hereinafter referred to as a cyber credit card) that can be used only online when paying in electronic commerce.

The cyber credit card according to the present invention is issued to a customer by a financial institution such as a bank or a credit card company, and may be directly delivered to the customer in the form of a card having a shape similar to that of a general credit card, and the number and expiration date of the cyber credit card. It can also be issued virtually by assigning to the customer.

Cyber credit cards are designed to correspond to bank accounts (hereinafter referred to as mother accounts) or credit cards (hereinafter referred to as mother credit cards) that customers already have. It is made from the mother account or the mother's credit card. Therefore, in order for a customer to make a payment using a cyber credit card according to the present invention, a customer must first visit a financial institution such as a bank or a credit card company to obtain a cyber credit card.

After the cyber credit card is issued, the customer checks the price of the product to be purchased in the Internet shopping mall, and then accesses the web server of the financial institution that issued the cyber credit card (hereinafter referred to as a cyber credit card company server). The price of the product is set as the approved amount, and the expiration date for the approved amount is also set.

Thereafter, the customer selects a payment method of a product to be purchased in the Internet shopping mall as a credit card, and inputs a cyber credit card number, a cyber credit card expiration date, and a card authorization amount in the payment item. Since the card authorization amount entered by the customer matches the authorization amount previously set in the cyber credit card company server, the card authorization is performed, and thus, the purchase of the product in the internet shopping mall is terminated.

If the customer does not use the cyber credit card, the authorization amount is always zero, and if the customer does not use the authorization amount on the cyber credit card company's server, the authorization amount is not valid after the validity period of the authorization amount. It becomes zero. In addition, since the card payment is made only when the authorization amount set in the cyber credit card company server and the payment amount in the Internet shopping mall are matched, it is safe even if the cyber credit card number is leaked to a third party.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a system structure according to the present invention.

As shown in FIG. 1, the system according to the present invention includes an e-commerce web server 100, a cyber credit card company server 200, a customer computer 300, and the e-commerce web server 100 and cyber credit. The card company server 200 and the customer computer 300 are connected to the communication network 400. Here, the communication network means the Internet, but other networks, for example, a LAN, a WAN, a Public Switched Telephone Network (PSTN), a Public Switched Data Network (PSDN), a cable TV network, a wireless communication network, and the like, are also possible.

The customer's computer 300 accesses the e-commerce web server 100 to purchase a product or service, and accesses the cyber credit card company server 200 to set an expiration date for the approved amount and the approved amount. The customer's computer 300 inputs the cyber credit card number, the cyber credit card expiration date, and the authorization amount into the e-commerce web server 100 at the time of payment by the payment method according to the present invention.

The e-commerce web server 100 transmits the received cyber credit card number, the cyber credit card expiration date, and the authorization amount to the cyber credit card company web server 200, and the cyber credit card company web server 200 transmits the received data. After confirming, determine whether the card is approved and transmits to the e-commerce web server 100.

In order to use the cyber credit card according to the present invention, the customer must first visit a financial institution such as a bank or credit card company and receive a cyber credit card as shown in FIG. 2. At this time, the customer should designate a mother account or a mother credit card corresponding to the cyber credit card. Even if the payment is made using a cyber credit card in an internet shopping mall, the payment is substantially made from the mother account or the mother's credit card. The customer is issued a cyber credit card similar to a general credit card. The cyber credit card describes the cyber credit card number and the expiration date of the cyber credit card, as shown in FIG. The validity period of the cyber credit card is determined by the policy of the financial institution. When the customer is issued a cyber credit card, it is preferable to directly receive the cyber credit card as shown in FIG. 4, but it is also possible to receive only the cyber credit card number and the expiration date of the cyber credit card without receiving the actual card. It is possible. Customers who have been issued a cyber credit card from a financial institution through the above procedure can use this cyber credit card for payment from this time. However, the cyber credit card according to the present invention cannot be used in a general store, but can only be used in an online store.

Now, a process of purchasing a product in an internet shopping mall using a cyber credit card issued by a customer will be described with reference to FIG. 4. If an Internet shopping mall capable of paying by credit card can purchase a product using a cyber credit card according to the present invention, the process of paying with a cyber credit card in the internet shopping mall is the same as the process of paying with a general credit card.

The customer accesses an internet shopping mall web site and searches for a product to purchase (S401). If the product to be purchased is determined (S402), the price of the product is checked (S403).

In the case of the conventional payment method using a credit card, after determining a product to purchase, a product order is completed by inputting a credit card number, a credit card expiration date and a card authorization amount into a payment item, but the cyber credit according to the present invention. In order to make a payment using a card, a user must first access the cyber credit card company server and set an authorization amount and an expiration date for the authorization amount before entering the above payment items. This process is shown in detail in FIG.

As shown in FIG. 5, after the customer accesses the cyber credit card company server 200, the customer logs in by inputting a customer ID and a password (S501). The customer ID and password may be granted when the customer visits the financial institution and issuing a cyber credit card, or the customer who has been issued the cyber credit card from the financial institution later joins the cyber credit card company server and registers as a member. It may be granted, or it may be used as it is used in existing phone banking or internet banking.

The cyber credit card company server 200 after the authentication for the entered customer ID and password (S502), if determined to be a valid customer, you can enter the authorization amount for the cyber credit card and the validity period for the authorization amount Send the web page to the customer. An exemplary configuration of such a web page is shown in FIG. The customer inputs the price of the article (the shipping cost of the article, including the shipping cost) as the approved amount of the item to be purchased (601), and enters the expiration date (602) for the approved amount as appropriate (S503).

This information is stored in the database of the cyber credit card company server 200.

The configuration of the database of the cyber credit card company server 200 is shown in FIG. As shown in Fig. 7, the database of the cyber credit card company server includes the customer ID 701, the customer's cyber credit card number 702, the mother account or mother credit card number 703, and the expiration date of the cyber credit card 704. The authorization amount 705 and the expiration date 706 for the authorization amount are stored. Before the customer enters the authorization amount for the cyber credit card, the authorization amount is always set to 0 won. If the customer enters the authorization amount separately, the authorization amount is updated to the amount entered by the customer. In addition, the authorization amount renewed to the amount entered by the customer is reset to zero after the customer purchases the product with the cyber credit card, even if the customer sets only the authorization amount and does not actually purchase the product. After the validity period has expired, it is automatically reset to zero.

The cyber credit card company's server, for example, uses a security card to make a final authorization. The security card has about 30-40 random numbers, and the final verification is performed by entering a number in the order required by the financial institution. S505).

Here, the case in which the customer connects to the cyber credit card company server through the Internet to set the authorization amount and the validity period for the authorization amount has been described, but it can also be accessed through an ARS or a telephone.

Through the above process, as shown in FIG. 4, when the customer accesses the cyber credit card company server and sets the expiration date for the authorized amount and the approved amount (S404), the customer returns to the Internet shopping mall website again and purchases the product. The payment item for is entered (S405). The process of paying with a cyber credit card on the website is the same as the process of paying with a normal credit card. However, enter the cyber credit card number in the credit card number field and enter the expiration date of the cyber credit card in the credit card expiration field. There is a difference in typing.

That is, the customer enters the information necessary for ordering the goods, for example, the recipient's name, address, telephone number, sender's name, address, telephone number, e-mail address, delivery method, etc. Upon selecting the card, the Internet shopping mall web server displays a web page as shown in FIG. 8 to the customer. In the web page as shown in Fig. 8, the customer enters the cyber credit card number in the credit card number 801 field, the cyber credit card expiration date in the credit card expiration date 802 field, and the authorization amount 803. Enter the card authorization amount in the field and press the OK button. At this time, the card authorization amount 803 must be identical to the authorization amount set by the customer on the cyber credit card web server, so that the card authorization can be performed.

Hereinafter, a process of card approval between the Internet shopping mall server and the cyber credit card company server will be described.

The internet shopping mall server transmits the received cyber credit card number 801, the cyber credit card expiration date 802, and the authorization amount 803 to the cyber credit card company server, and the cyber credit card company server inquires the database (Fig. 7). By checking the cyber credit card number 702 and the cyber credit card expiration date 704, it is checked whether or not it is a registered cyber credit card, and if it is not registered, a message of this purpose is sent to the Internet shopping mall web server. If the cyber credit card number is registered, the cyber credit card company server checks whether the authorization amount received from the Internet shopping mall web server is the same as the authorization amount 706 stored in its database (Fig. 7), and if the card is the same, After sending the approval message to the shopping mall web server, the authorization amount of the database is reset to zero. If it is not the same, a non-approval message is sent to the shopping mall web server.

The online shopping mall web server displays the message received from the cyber credit card company server on the screen of the customer computer, and if the card is approved, the product order details such as order number order information, product name, quantity, unit price, shipping cost, and recipient information are displayed. Finally, the end of the transaction is signaled to the customer.

The authorization amount 705 for the customer's cyber credit card, which is stored in the database of the cyber credit card company server (Fig. 7), is present only during the expiration date set by the customer, and is reset to zero after the expiration date. Therefore, if the customer tries to pay using the cyber credit card after the expiration date of the cyber credit card, the payment is impossible.

This feature makes it possible to completely block illegal purchase of a product which exploits the credit card number in case the cyber credit card number of the customer is leaked to a malicious third party. Furthermore, if the authorization amount has expired or if the authorization amount has already been used and the authorization amount has been reset to zero, the third party cannot use the cyber credit card.

For example, as of November 1, 2000, if the price of the product that the customer wants to purchase in the Internet shopping mall is 54,000 won, the customer accesses the site of the cyber credit card company server and confirms the authorization amount on the web page as shown in FIG. Enter 54,000 won, and enter the validity period of 24 hours as of November 2, 2000. After that, the customer selects a payment method for the product payment on the Internet shopping mall site as a credit card, and then validates the cyber credit card number (1234-9999-0001-0001) and the cyber credit card number on a web page as shown in FIG. Enter the period (March 2005) and enter 54,000 won, which is the price of the item you want to purchase, as the settlement amount. In this case, since the authorization amount 54000 won set in the cyber credit card company server and 54000 won, which is the amount entered by the customer on the Internet shopping mall Web site, the card is authorized.

If a third party finds out the customer's cyber credit card number (1234-9999-0001-0001) and wants to purchase one million won at an internet shopping mall, the third party may pay the amount of one million won in the web page shown in FIG. Even if it is entered, this amount is different from 54,000 won set by the customer of the cyber credit card company, so that the third party cannot use the cyber credit card number to purchase the product at the internet shopping mall. In addition, if the third party finds the authorization amount after November 2, 2000, or before the expiration date of the authorization amount, or after the customer has already purchased the product using the cyber credit card, the cyber credit card company Since the authorization amount stored in the database of the server is reset to 0 won, the third party cannot use the cyber credit card to purchase goods in the internet shopping mall. In the above example, the validity period of the authorization amount is set to one day from the point of purchase of the product at the Internet shopping mall. However, the shorter the validity period of the authorization amount is, the security is guaranteed when the cyber credit card number is leaked.

As described above, the procedure after the card authorization is made is the same as that of the general credit card settlement. That is, the Internet shopping mall company delivers the goods offline to the customer, the customer pays the goods price to the financial institution of the mother account or the mother credit card corresponding to the registered cyber credit card, and the Internet shopping mall company sells from the financial institution. Receive payment for the goods.

According to the present invention, it is a safe and convenient method compared to the credit card payment, bank transfer method, and electronic money payment method, which has been used as a commodity payment method in the conventional electronic commerce on the Internet. There is no risk, there is no need to check the remittance, like the bank transfer method, there is no need to manage the remittance procedure and balance usage of electronic money, it is very convenient because it can be used in the same way as a normal credit card.

Therefore, the payment method using the cyber credit card according to the present invention can be the most efficient and secure payment means in the current Internet e-commerce environment.

Claims (10)

In the method of payment in Internet e-commerce using a cyber credit card issued by a financial institution and available only online corresponding to a real bank account or a real credit card, Setting up an authorization amount of the cyber credit card and an expiration date of the authorization amount by the client accessing a server of the financial institution; Inputting, by the customer, the cyber credit card number and the payment amount to access an e-commerce server for payment of goods; Transmitting, by the electronic commerce server, the input cyber credit card number and a payment amount to a server of the financial institution; Sending a card authorization message to the e-commerce server when the server of the financial institution determines that the transmitted payment amount matches the authorization amount set by the customer on the server of the financial institution. Payment method in e-commerce. The method of claim 1, wherein the cyber credit card is set in a server of the financial institution to correspond to the customer's bank account or credit card. The method of claim 1, wherein the financial institution includes a bank and a credit card company. The method of claim 1, wherein the customer connects to the server of the financial institution using the Internet, ARS, and telephone. The method according to claim 1, wherein when the server of the financial institution determines that the transmitted payment amount matches the approval amount set by the customer on the financial institution server, the approval amount set on the server of the financial institution is determined. The payment method in the Internet e-commerce further comprising the step of resetting to zero. The method of claim 1, further comprising: resetting the approval amount set on the server of the financial institution to zero when the validity period of the approval amount set on the server of the financial institution has elapsed. Payment Method. The method of claim 1, wherein when the server of the financial institution determines that the transmitted payment amount does not match the authorized amount set by the customer on the financial institution server, the non-authorization message is transmitted to the electronic commerce server. The payment method in the Internet e-commerce comprising the step of. The Internet electronic commerce according to claim 1, wherein when the server of the financial institution sends a card approval message to the e-commerce server, the actual payment is made by the bank account or credit card of the customer corresponding to the cyber credit card. How to pay at The payment method of claim 1, wherein the cyber credit card has an appearance of a general credit card. In a system for making a payment using a cyber credit card available only online corresponding to a real bank account or a real credit card in an Internet e-commerce, Issuing the cyber credit card in response to a customer request, and manages the authorization amount of the cyber credit card and the expiration date of the authorization amount set by the computer of the customer, receiving the payment amount from the e-commerce server If the payment amount and the authorization amount of the cyber credit card coincide, the card authorization message is transmitted to the e-commerce server, and when the expiration date of the authorization amount has elapsed or the card authorization message is transmitted to the e-commerce server, the authorization A server of a financial institution that resets the amount to zero; After confirming the product to be purchased, the web server of the financial institution is accessed, the amount to be paid for the purchase of the product is set as the authorized amount of the cyber credit card, the validity period of the authorized amount is set, and the electronic commerce server A computer of a customer, which accesses and makes a payment by inputting an amount to be paid for the product purchase as a payment amount; And Payment system in the Internet e-commerce including the electronic commerce server receives the payment amount from the customer's computer to the server of the financial institution, and completes the payment upon receiving the card approval message from the server of the financial institution .