KR20010073982A - Method and System for Approving One Time Virtual Credit Card Transaction for e-Commerce - Google Patents

Abstract

PURPOSE: A method and system for approving a transaction of a disposable virtual credit card in an electronic commercial transaction is provided to prevent a risk caused by using a credit card in an electronic commercial transaction and to use regardless of member store without using an additional hardware. CONSTITUTION: A virtual card issuing requesting signal including member's credit card information is received and the signal is inquired by a credit card server and decides whether a virtual card is issued(S1¯S2). A virtual card number corresponded to the member's credit card is created, informed and stored in a virtual card database(S3). An approval requesting signal is received through a network and it is decided whether the card number requesting an approval is corresponded to a virtual card number(S6). The credit card information being responded to the virtual card number is extracted from the virtual card database and approved and inquired to the credit card server(S8). An approval inquiry result is reported from the credit card server(S10).

Description

Authorization method and system for one-time virtual credit card transaction in electronic commerce system {Method and System for Approving One Time Virtual Credit Card Transaction for e-Commerce}

The present invention relates to a transaction approval method for a one-time virtual card, and more particularly, to a method for issuing and transaction approval of a one-time virtual card executable by a computer in an electronic commerce using a network.

E-commerce means that consumers receive and pay for a certain product or service through a network represented by the Internet. The rapid spread of the Internet allows consumers to obtain various information without directly visiting stores. It has been attracting much attention recently due to its advantages of being able to trade easily. However, in the case of paying for the e-commerce, it is common to use a credit card, which poses a security risk due to the use of the credit card. Despite the many advantages of e-commerce, in the process of transmitting credit card information through the network, risk factors such as exposure of personal information and hacking of others due to hacking, etc., impede the activation of e-commerce. It is becoming.

Various efforts to solve the above problems have been made in the related art, and credit card security schemes using an OTP (One Time Password) scheme or a logon scheme have been developed.

OTP method is to prevent the leakage of the credit card password to achieve the security of the credit card as a result, to allow the user to use a new password every time you use the credit card. However, in order to use such a method, there is a problem that a credit card user must always carry physical hardware for receiving a new password from the authentication server at every user authentication.

The logon method is a method in which a credit card user stores his information on a specific server, and when using it, accesses a specific server where his information is stored by entering a password and a password and extracts his information. However, this method is not only to directly enter the information of the credit card at the time of e-commerce, there is a problem that the use is limited because the e-commerce server must be affiliated in order to use this method.

Conventionally, a method of using electronic money for the purpose of using electronic commerce without using a credit card is also used. This method uses a prepaid system, and the amount of money purchased by the user directly before the electronic commerce is used for the electronic commerce. However, this method is cumbersome due to the purchase of electronic money, the inconvenience of having to purchase again when the amount of money used up and there is a problem that the merchants that can use electronic money is extremely limited.

In order to solve the above problems, the present invention can prevent various risks caused by the use of credit cards during electronic commerce, and does not require the use of separate hardware, and is a one-time virtual that can be used without using restrictions such as merchants. The purpose of the card is to provide a method for approving a transaction.

1 is a schematic block diagram illustrating one preferred embodiment of the present invention.

2 is a schematic block diagram illustrating another embodiment of the present invention.

3 is a schematic flowchart for explaining a preferred embodiment of the present invention.

4 is a diagram schematically showing a table of a virtual card database for explaining a preferred embodiment of the present invention.

10: member computer 20: e-commerce server

30: virtual card server 40: credit card server

50: virtual card database 60: member database

70: payment server

According to a preferred aspect of the present invention for achieving the above object, the present invention is a computer-implementable one-time virtual card transaction approval method in an electronic commerce using a network, the virtual card issuance request including the member's credit card information Receiving a signal and querying the credit card server to determine whether to issue a virtual card (A); (B) generating a virtual card number corresponding to the member's credit card, notifying the user of the virtual card number and registering it in the virtual card database; Receiving an authorization request signal for the virtual card through the network and determining whether the card number requesting authorization corresponds to the virtual card number; Extracting credit card information corresponding to the virtual card number from the virtual card database and querying the credit card server for approval; And a step (E) of notifying the approval inquiry result from the credit card server. The virtual card may be used to securely perform electronic commerce without exposing information of the credit card.

According to still another aspect of the present invention, the present invention provides a method, comprising the steps of: (B) randomly or sequentially generating and notifying a card generation key for generating a virtual card number; And storing the virtual card number generated from the card generation key in a virtual card database, thereby enabling secure electronic commerce by further strengthening the security of the virtual card.

According to another aspect of the present invention, the present invention includes the step (A) to determine the amount of use limit of the virtual card in a certain amount or a predetermined rate within the use limit of the credit card; C) determining whether the usage amount of the virtual card is within the usage limit amount of the virtual card; thereby limiting the usage limit of the virtual card, thereby reducing the loss of the user of the virtual card even when another person steals the virtual card. It is characterized by being.

According to another aspect of the present invention, the present invention includes the step (A) is to determine the expiration date of the virtual card in a certain period or a predetermined rate within the expiration date of the credit card; Determining whether the use of the virtual card is within the expiration date of the virtual card; thereby limiting the expiration date of the virtual card, thereby reducing the loss of the virtual card user even when another person steals the virtual card. It features.

According to still another aspect of the present invention, the present invention provides a method for issuing a one-time virtual card that can be executed by a computer in an electronic commerce using a network, wherein the member computer connected to the network is asked to issue a virtual card and receives a response signal thereto. Steps; Transmitting a credit card issuing request signal by transmitting credit card information of a member to a virtual card server connected through a network; Receiving a virtual card generation key for generating a virtual card number from the virtual card server; Driving a virtual card issuing module to generate a virtual card number from the virtual card generation key; And notifying the virtual card number to the member computer, so that the e-commerce users can easily receive a virtual card and safely perform the electronic commerce.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily understand and reproduce the present invention.

1 is a schematic block diagram illustrating a computer-executable electronic commerce using a virtual card according to an embodiment of the present invention. As shown, this embodiment is a network of a plurality of member computers 10, the e-commerce server 20 networked with the member computer 10, the member computer 10 and the e-commerce server 20 in a network It includes a virtual card server 30 connected and having a virtual card database 50 and a credit card server 40 connected to the virtual card server 30 by a network and having a member database 60.

The member computer 10 is a general purpose personal computer that members access to the e-commerce server 20 and the credit card server 40 through a network and use them for the transmission and reception of information. The e-commerce server 20 receives and processes a request for purchasing a product or providing a service from members. The e-commerce server 20 provides a product or service to members for commercial purposes and receives a predetermined price from the members. Represents a server. The virtual card server 30 extracts credit card information corresponding to the issuance of the virtual card and the request for approval of the virtual card, and has a virtual card database 50 that stores a plurality of virtual card information corresponding to the credit card. . The credit card server 40 has a member database 60 to perform issuance of credit cards, member information management, and approval processing, similarly to servers used by existing credit card companies.

In this embodiment, the virtual card server 30 is configured to be separated from the credit card server 40, but the module in charge of processing the virtual card and the virtual card database 50 are integrated in the form of the credit card server 40. It is also possible to configure.

Referring to Figure 1 describes how a credit card member performs an e-commerce transaction using a virtual card. The member accesses the virtual card server 30 using the member computer 10 and transmits his or her member information or personal information to apply for virtual card issuance. Although it is not necessary to use the member computer 10 and the member may visit the virtual card issuer or credit card company directly and request the issuance of the virtual card, the description of this embodiment will only describe the process online. do. When the virtual card is issued, the member pays the same way as the actual credit card using the virtual card after completing the desired e-commerce transaction. Since the virtual card number is composed of a plurality of number combinations like the actual credit card number, the user can conveniently use the virtual card. The same applies to the case where a member makes a payment with a virtual card using a terminal of a general affiliated store. However, in the present embodiment, only the use of a virtual card in an electronic commerce through a network will be described.

2 is a block diagram illustrating e-commerce using a virtual card according to another embodiment of the present invention. As shown, a payment server 70 connected between the e-commerce server 20 and the virtual card server 30 is connected to the network to relay the business for payment. In financial institutions such as credit card companies or banks, it is difficult to manage all payment requests from numerous companies, so that payment management can be collectively performed through the payment server 70. The payment server 70 receives the approval request from the e-commerce server 20 and relays it to the virtual card server 30, and relays the approval result from the virtual card server 30 to the e-commerce server 20. Notify.

In e-commerce, such a payment server 70 is commonly referred to as a payment gateway (PG) and a network connecting the payment server 70 is called a value added network (VAN). Most e-commerce vendors use such a payment server 70 as a payment gateway. I use it. This aspect is only one additional aspect in understanding the present invention and does not necessarily require a payment server 70, and the description is the same as the configuration of FIG. 1 except that the payment server 70 relays the business for payment. See the description of FIG. 1 above.

3 is a schematic flowchart illustrating a computer-implementable electronic commerce method centering on the virtual card server 30 using a virtual card according to an exemplary embodiment of the present invention. 1 and 3, the present embodiment will be described in detail with reference to the operation of the virtual card server 30.

The member connects to the virtual card server 30 connected to the network using a computer and transmits a virtual card issuance request signal including information of his or her own credit card and his personal information to request issuance of the virtual card ( S1). The request for issuing a virtual card is not limited to one time, and a plurality of virtual cards may be issued several times. When the member computer 10 is connected to the virtual card server 30, the personal virtual card issuing module is downloaded and installed to the member's computer, and the subsequent connection is driven simultaneously with the connection.

The virtual card server 30 inquires the member information corresponding to the received virtual card issuing request signal to the credit card server 40 and receives an inquiry result to determine whether to issue a virtual card (S2). In the present embodiment, a case where the information on the member's credit card is not stored in the virtual card database 50 will be described. However, when the member's credit card information is stored in the virtual card database 50, the virtual card database will be described. It is possible to determine whether to issue the virtual card by extracting the member's information from the 50. If a member's credit is bad or if a number of previously issued virtual cards have not been used, for example, if a virtual card has been issued more than 30 times but has not been used, the issuance is restricted and the previously issued virtual card is discarded. Or issue a lost registration.

If it is determined that issuance of the virtual card is allowed, the virtual card server 30 generates a virtual card number according to the virtual card number generation key and registers the generated virtual card number in the virtual card database 50 to correspond to the member's credit card information. (S3). 4 is a table for explaining a virtual card number stored in the virtual card database 50. As shown, the virtual card database 50 stores the virtual card number so as to correspond to the credit card information of the plurality of members, respectively. There can be multiple virtual card numbers for one credit card, and as shown, the virtual card numbers corresponding to the credit card number 4912 1723 5269 8100 (80) are 4912 1708 2473 8130 and 4912 1708 2304 4243. 90).

The virtual card server 30 transmits the encrypted virtual card number generation key to the member's computer (S4). Similar to a credit card, a virtual card has a virtual card number, password, expiration date, and usage rate, which is a combination of numbers. The expiration date and usage rate can be arbitrarily adjusted within the expiration date and usage of the member's credit card. It is possible. For example, the expiration date can be set to 3 months from the date of issuance of the virtual card and the usage limit can be set to 500,000 won. By setting the expiration date and usage of the virtual card more restrictively than the expiration date and usage of the credit card, the risk can be reduced in preparation for the illegal use of others due to external leakage. Since the transmission of the virtual card number to the encrypted virtual card number generation key is made for security to prevent an external leak of the virtual card number, it is also possible to transmit the generated virtual card number and also includes encryption of a password. As the encryption method, RSA, Elliptic, Curve, etc. may be used as the public key encryption method, and DES, Lucifer, IDEA, FEAL, etc. may be used as the secret key encryption method. If you encrypt the virtual card number, you can use any method. The member computer 10 generates a virtual card number by decrypting a generation key received from the virtual card server 30 by driving a personal virtual card issuing module. The virtual card has a virtual card number, password, expiration date, etc. composed of a plurality of number combinations in a similar format to a credit card, so members can use the virtual card in the same way as using their credit card. The member visits the electronic commerce server 20 through a computer, receives a product or service, and transmits the virtual card information including the virtual card number and password to the electronic commerce server 20 to perform electronic commerce. The same may be applied to a transaction through a terminal of a general affiliated store as described above.

The virtual card server 30 receives a virtual card approval request signal including the member's virtual card information and transaction information from the e-commerce server 20 (S5). As shown in FIG. 2, when the payment server 70 is used, the virtual card approval request signal transmitted from the e-commerce server 20 is relayed and received through the payment server 70. As described above, the request for approval through the payment server 70 is intended to simplify management and security problems and does not necessarily require the payment server 70.

The virtual card server 30 determines whether the card number included in the virtual card approval request signal is a virtual card number or an actual credit card number (S6). If it is determined that the actual credit card number, the processing in the virtual card server 30 is omitted and the authorization request signal is transmitted to the credit card server 40. If it is determined that the virtual card number, the virtual card server 30 extracts the credit card number corresponding to the virtual card from the virtual card database 50 (S7). As shown in FIG. 4, if the virtual card number is 4912 1708 1925 1013 (100), the credit card number 4912 1723 5269 9100 (110) is extracted.

The virtual card server 30 transmits the extracted credit card number to the credit card server 40 to inquire the approval (S8). The credit card server 40 extracts the credit card information of the member corresponding to the credit card number from the member database 60 to determine whether to approve through a general approval process. The virtual card server 30 receives the authorization inquiry result from the credit card server 40 (S9). The virtual card server 30 notifies the electronic commerce server 20 of the error message when the approval is denied according to the approval inquiry result, and the approval number when the approval is denied (S10).

According to the above configuration, the present invention has a merit that a credit card can be used safely without a risk of leaking credit card information by using a virtual card, and faithfully secures the security of a credit card without greatly modifying a system for processing an existing credit card. Therefore, it is effective to secure transaction safety.

In addition, by arbitrarily adjusting the usage limit and expiration period of the virtual card, there is an advantage of minimizing the loss even when someone steals the virtual card, and it is necessary to possess separate physical hardware in strengthening the security of the credit card. It has the advantage of being able to use credit cards safely without being restricted by merchants.

In addition, the e-commerce company and the credit card company has an effect of increasing the sales as the number of e-commerce users increases by solving the security problem of the credit card.

Although the present invention has been described with reference to the accompanying drawings, it is to be understood that many modifications and variations are possible without departing from the spirit and scope of the invention as set forth in the claims.

Claims (4)

In the method of approving a one-time virtual card transaction that can be executed by a computer in an electronic commerce using a network, (A) receiving a request for issuing a virtual card including the member's credit card information And check it with a credit card server to determine whether to issue a virtual card. Steps; (B) Generate and notify a virtual card number corresponding to the member's credit card Registering with the virtual card database; (C) Receive approval request signal for virtual card through network and win Determine if the card number requesting authorization corresponds to the virtual card number Steps; (D) the virtual card database for credit card information corresponding to the virtual card number Extracting an authorization from the credit card server; (E) notifying the authorization inquiry result from the credit card server; A one-time virtual card transaction approval method executable by a computer comprising a. The method according to claim 1, Step (B) is (F) Random or sequential card generation key for generating one-time virtual card number Creating and notifying it; (G) Virtual card data generated from the virtual card number generated from the card generation key Storing in the base; A one-time virtual card transaction approval method executable by a computer comprising a. The method according to claim 1, Step (A) above, (H) The usage limit of the virtual card is fixed within the usage limit of the credit card. Determining an amount or a predetermined ratio; Including, Step (C) is (I) determine whether the amount of use of the virtual card is within the limit of use of the virtual card Doing; A one-time virtual card transaction approval method executable by a computer comprising a. The method according to claim 1 or 3, Step (A) above, (J) The expiration date of the virtual card within a certain period within the expiration date of the credit card. Or determining at a predetermined ratio; Including, Step (C) is (K) determine whether the use of the virtual card is within the expiration date of the virtual card. step; A one-time virtual card transaction approval method executable by a computer comprising a.