KR20010096373A - Settlement method using cellular phone and method of authentication for secure settlement thereof - Google Patents

Abstract

PURPOSE: A settlement method using a mobile telephone and a security authentication method to the settlement is provided to be convenient because a consumer carries a cash card, a credit card, or a prepayment accumulation card by using the mobile telephone when performing the settlement to an accomplished transaction on the Internet. CONSTITUTION: A consumer inputs items and an amount of money of selected goods in a terminal or a money register for requesting a settlement to a main server(s16). The main server informs the requested items and an amount of money to a mobile telephone of the consumer using a bidirectional SMS(Short Message Service), a TWM(Two Way Message) service, a UMS(Unified Message Service), or an ARS(Audio Response System) for requesting buying approval(s18). The consumer confirms the informed items and an amount of money and inputs a predetermined mobile telephone password to approve buying when the informed items and an amount of money are identical to items and an amount of money of the consumer(s20). If the mobile telephone password is identical to a password of a subscriber database of a mobile communication company, the mobile communication company requests position information composed as a zip code number or a coordinate(s22). A current position of a consumer mobile telephone is compared with a position of a member store constructed in a database of the main server or a position of a mobile member store grasped by a wireless communication device for judging whether the mobile telephone and the member store are located in a same position(s24). If the mobile telephone and the member store are located in the same position, an identification number of the mobile communication company, a newly generated approval number, a mobile telephone number, an amount of settlement money are transmitted to the member store and the mobile communication company for requesting a charge and performing a billing as the telephone number(s26).

Description

Settlement method using cellular phone and method of authentication for secure settlement

The present invention relates to a payment method using a mobile phone and a method for authenticating security of the payment. In the case of purchasing an object or using a service offline or online, the cost of the payment or the fee is used as PCS. Or it relates to a method of securely paying by secure authentication of the payment by the mobile phone (Cellular Phone), such as simple but mobile phone location confirmation.

Generally, when a consumer purchases an item off-line or receives a service at a restaurant, the method of paying the price is paid directly by cash or by using a credit card. Patent application No. 1997-52802 (name: communication network Taxi fare collection system, filed on October 15, 1997, hereinafter referred to as "first application", the system to pay the taxi fare to the telephone fare of the consumer using the wireless communication network to pay the price Doing.

When paying with the above cash, consumers have to carry cash at all times, and there is a risk of losing cash, and there is a fear of tax evasion if the seller or service provider does not report income seriously. There is a problem, in the case of payment by credit card, payment is made by the presentation of the card without confirmation of the password, so payment is made without judging the authenticity of the cardholder. There is a problem that arises, and also in the case of elected application, if you know only the telephone number and password of the consumer, the problem of being charged to the telephone number of the telephone owner regardless of whether the payer and the telephone owner match and the telephone number mounted on the taxi On the terminal to enter the password and the consumer Is recorded so the remaining phone number and password, etc. By direct input terminal there is a problem with security holes.

In addition, when purchasing goods online or using the service provided for a fee, enter a card number and a payment password using an e-Credit card or an e-Coin card in the form of a prepaid card. Make a payment or use a credit card to make a payment.

The above e-Credit card or e-Coin card is inconvenient to use only when a certain amount is prepaid first, and there is no problem to prevent this when the acquirer decrypts the password when the card is lost. If you pay by credit card, there is a risk of leaking personal information of the cardholder.If you enter your credit card number or password on the Internet, you can use it for malicious hacking such as tracking or copying. If it is deciphered or if the credit card is copied, personal information is leaked or a victim of good faith is caused, which is a result of the harm of the credit society. In order to protect the security of transactions on the Internet, security or authentication is performed by encryption programs to prevent malicious hacking or illegal leakage of information, but this requires complex and sophisticated technology and programs to be realized. The problem is that it is not easy.

In the payment method using the conventional technology, in the case of off-line cash payment, the consumer must always carry cash and there is concern about loss, fear of tax evasion due to unfaithful income report of the seller or service provider, credit card In the case of payment by using a password, there is a problem that a victim of good faith does not have to verify that the user is a true card holder because there is no verification of the password, and there is a damage to illegal use by copying the card. In the case of acquiring only, there is a problem of being charged without other security authentication procedures, and payment by prepaid card on the Internet is inconvenient to prepay the cost, and it is impossible to determine whether or not the true card holder and malicious hacking of password. May be used by others The problem is that in the case of payment by credit card, the cardholder's personal information can be leaked or the password can be known by malicious hacking, and security or authentication by encryption program is complicated and requires high technology. There is a problem that is difficult.

Therefore, in order to solve the above-mentioned problems, the present invention is based on the number of subscribers in February 2000, using 25.248 million subscribers using mobile phones (PCS and cellular phones), which account for 53.8% of the total population of 74.72 million. (Generally referred to as a merchandise store, service provider, Internet shopping mall, or paid site, etc.), a primary mobile phone subscriber is checked first, and the second consumer is a mobile phone password, and the purchase is approved by a mobile phone password. In the server providing the payment method according to the present invention) by verifying whether the merchant and the consumer is located in the same region at the time of payment approval by securely verifying the payment by using a mobile phone owned by the majority of people, but not simple Provides a way to secure payments (generally referred to as item purchase cost or service fee) through security certification There is a technical challenge.

1 is a flow chart of payment according to the present invention made offline.

2 is a flowchart of payment according to the present invention made on the Internet.

Figure 3 is a conceptual diagram showing the correlation between the consumer, the main server, merchants and mobile operators of the present invention.

※ Explanation of code about main part of drawing ※

100: merchant 200: consumer or mobile phone

300: main server 400: mobile communication provider

The technical problem of the present invention described above is the main server (server providing the payment method and the security authentication method according to the present invention, hereinafter referred to as the "main server" affiliated stores (item store, taxi, logistics vehicle, service provider, Internet) General name for shopping malls, Internet Service Providers (ISPs) or Internet paid sites, and the like, and a database of names, identification numbers, and locations of the "affiliate stores", and the affiliated stores and mobile communication providers (Mobile phone provider such as PCS or cellular phone) is achieved by establishing a real-time information exchange system between both the main server and

When paying by using a mobile phone, enter the mobile phone number of the customer who selects the goods or services (collectively referred to as the buyer or service user, hereinafter referred to as the "consumer") at the merchant or the Web site. A mobile phone number input step of inputting a mobile phone number by the consumer himself; A consumer identification information sending step of requesting information of a true consumer such as a name and a social security number of a consumer corresponding to the mobile telephone number from the main server to the server of the mobile communication provider and sending the information to the affiliated store; A consumer authenticity verification step of confirming whether the merchant is a genuine mobile phone owner as an ID card or verbally or comparing it with consumer information registered on a website such as a shopping mall; A payment request step of inputting an item and an amount of an item to be purchased or a service provided by the consumer at the affiliate store or requesting a payment to the main server for an item and an amount selected by the consumer on a web site if it is determined that the user is a true consumer; Two-way short message service (SMS), two-way wireless data communication (TWM) service, unified message service (UMS, Unified Message Service) or voice response system (ARS) A purchase approval request step of informing the goods or the service and the amount by the Audio Response System and requesting the consumer for approval; A purchase approval step of approving the purchase by inputting the mobile phone password set by the consumer when the consumer approves the purchase; A mobile phone location request requesting the location of a mobile phone of a consumer, which is recognized by a mobile carrier as a cell (cell, base station) method, a global positioning system (GPS), or a geographic information system (GIS) on a main server. step; The current location of the consumer's mobile phone transmitted as a coordinate or postal code on the map, the location of the affiliated store built in the affiliate database of the main server, and a mobile affiliated store, such as a taxi or a logistics vehicle, is identified by a wireless communication device installed in a taxi. Location checking step to check whether the location of the merchant and the current location of the consumer are in the same area by comparing the location of the consumer that the location or ISP identifies as the consumer's IP, and the location of the merchant mobile phone and the location of the merchant are the same If you are in a local area, the main server can bill the mobile carrier by sending the authorization number (if there are multiple mobile operators, including an identification number to identify the mobile carrier), the mobile phone number and the amount to the merchant. At the same time or subsequently to the carrier's server. By sending the approval number and the amount of such payments made by constructing an approval step that allows charging a phone bill.

After the payment is made using the mobile phone, the affiliated store bills the mobile communication company, and the mobile communication company charges the phone fee to make the payment.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a flowchart of a payment according to the present invention made offline, FIG. 2 is a flowchart of a payment according to the present invention made online, i.e., on the Internet, and FIG. 3 is a flowchart of a consumer, a main server, a merchant and a mobile communication company of the present invention. Conceptual diagram showing correlation.

First, we will explain the payment according to the present invention made offline.

When a consumer visits a merchant to shop for an item, selects a desired item after shopping

When the merchant 100 asks the mobile phone number of the consumer 200 and the consumer 200 informs the mobile phone number, the merchant 100 uses a terminal or a cash register connected to the main server 300 by a telephone line or a dedicated line. Input the mobile phone number of the consumer 200 and send it to the main server (s10 step);

The main server 300 divides the mobile service provider 400 as a phone number and stores consumer identification information such as the name and resident registration number of the consumer who has subscribed to the mobile phone installed in the server of the mobile service provider connected by a telephone line or a dedicated line. 100) (s12 step);

The affiliated store 100 checks the authenticity of the consumer 200 as data such as an oral or resident registration card to determine whether the consumer is the owner of the mobile phone 200 as information transmitted (step S14);

Inputting the item and the amount of the item selected by the consumer to the terminal or the cash register to request a payment to the main server 300 (step s16);

The main server 300 uses the two-way short message service (SMS), two-way wireless data communication (TWM, Two Way Message) service, integrated message service (UMS) or voice response system (ARS) items requested in step s16 And requesting a purchase approval by informing the customer by a wireless data communication connection or a telephone call to the mobile phone 200 of the consumer (step s18);

In step s18, the consumer 200 confirms the item and the amount informed by the main server, and if the item matches the amount of the item that the consumer wants to purchase, the consumer 200 inputs a mobile phone password selected by the consumer and approves the purchase (step s20). ;

If the above password matches the password of the subscriber's database of the mobile communication provider, the mobile communication provider 400 may use the cell (cell, base station) method, the GPS, the global positioning system (GIS), or the global information system (GIS, Global). Requesting the position information of the mobile phone 200 of the consumer identified as a positioning system, that is, the position information configured as a zip code or coordinates (step S22);

The main server 300 compares the current location of the consumer mobile phone 200 in step s22 with the location of the affiliated store 100 constructed in the database of the main server or the location of the mobile affiliated store determined by a wireless communication device. Determining whether the location of the mobile phone 200 and the location of the affiliate store 100 are in the same area (step s24);

When the consumer's mobile phone and the merchant 100 are located in the same area, the identification number of the mobile carrier and the newly generated serial number, the authorization number, the mobile phone number, and the payment amount, are sent to the merchant 100 and the mobile operator 400. Through the payment approval step (s24 step) to be sent out and billed and charged to the phone number, the payment method and the security authentication method of payment according to the present invention is made offline.

As described above, by confirming the location of the merchant and the location of the mobile phone to confirm whether the payment is in the same area, and approving the payment only when the payment is in the same area, the payment of the present invention through wireless or wired payment is a method of security authentication. The location of merchants and consumers in the middle of wired or wireless, in the case of a real merchant or consumer who is not a true merchant or consumer by a malicious hacking by tracking or copying of code Since is not located in the same area, if the merchant and the consumer location is different, the payment can be authenticated by a simple method to prevent payment by fraudulent means by refusing the payment.

On the other hand, in the case of purchasing goods using a web site such as a shopping mall or a merchant online or using a service such as a paid web site, the payment according to the present invention is the same as the payment method performed in the offline manner.

The step of sending the mobile phone number to the main server, the consumer directly enters the number of the mobile phone that he carries by using the input window implemented on the web site of the affiliate store (step s10a);

Whether or not the authenticity of the consumer is obtained by the main server 300 to obtain the subscriber information for the input mobile phone number from the mobile communication provider 400 and transmits to the server of the web site of the affiliate store (step s12a);

The server of the web site of the affiliate store 100 determines the authenticity of the consumer against the information of the sent consumer and the information of the consumer who is a member registered on the server of the web site (step s14a);

The main server 300 compares the current location of the consumer mobile phone 200 in step s22 with the connection location of the consumer that the ISP knows as the IP of the PC that the consumer accesses the web site. ) (Step s24a) for determining whether the location of the PC and the location of the PC are in the same region is different from the offline payment method.

In performing the payment using the mobile phone according to the present invention, a database for an affiliated store that is built on a main server is Oracle, dBASE, DB2, DB2, Sybase, MWI. The database can be created using database building programs such as mySQL, mSQL, ODBC, Microsoft Access, MS Access, SQL Server, or Infomix. The program that constructs and transmits signals such as mobile phone numbers, items, and amounts of the consumer inputted and received from affiliated stores using DTMF (Dual Tone Multi Frequency), etc., is currently commercialized, and the program that detects and interprets the signals is TAPI. By using a commercialized application program such as Telephony Application Program Interface, it can be linked with the database, and The exchange can be encrypted.

As described above, by using a mobile phone in making a payment for a transaction established offline or on the Internet, a consumer does not have to carry cash, credit card or prepaid card, and hassle to pay a certain amount in advance. There is no risk of loss of personal information by using a credit card, and there is no fear of tax evasion because the deposit and charge of the bill is made through the bank. The merchant checks the authenticity of the consumer, the consumer approves the purchase with the mobile phone password, and goes through three stages of authentication such as whether the merchant and the mobile phone are located in the same area. False payments due to duplication or malicious hacking It does not there is an effect that can be more secure transactions.

Claims (14)

A payment method using a mobile phone, the mobile phone number input step of inputting a mobile phone number of a consumer; A consumer identification information sending step of requesting information from the main server to confirm whether the mobile consumer is a true consumer and sending the information to the affiliated store; A consumer authenticity verification step of confirming whether the merchant is a genuine mobile phone owner; A payment request step of sending an item and an amount to request a payment to the main server; A purchase approval request step of informing the consumer of the item and the amount from the main server to the mobile phone and requesting the consumer for approval; A purchase approval step of approving the purchase by inputting the mobile phone password set by the consumer; A mobile phone location request step of requesting a location of a mobile phone of a consumer grasped by a mobile service provider from a main server; The mobile phone comprising a location confirmation step for confirming whether the location of the merchant and the location of the consumer is in the same region, and a payment approval step of sending the approval number, the mobile phone number and the amount to the merchant and the mobile carrier. Payment method used. The method of claim 1, wherein a database of names, identification numbers, and locations of the affiliated stores is established on the main server before performing the payment method according to the present invention, and information in real time between both the affiliated store and the mobile communication service provider and the main server is established. A payment method using a mobile phone, characterized in that it is achieved by establishing a switching system. The method of claim 1, wherein the method for inputting a telephone number in the mobile telephone number input step is performed by using a terminal of an affiliated store. The method of claim 1, wherein the method for inputting a telephone number in the mobile telephone number input step is directly input by a consumer at a website such as a shopping mall on the Internet. The method of claim 1, wherein in the checking of the authenticity of the consumer, the merchant confirms directly with an oral or resident registration card at a merchant. The method of claim 1, wherein in the consumer authenticity confirming step, the user is verified as compared with the consumer information registered in the affiliated web site. The method of claim 1, wherein in the payment request step, the item and the amount of money are directly input through a terminal or the like at the affiliate store. The method of claim 1, wherein the item and the amount selected by the consumer are transmitted to the Internet through the web site of the affiliated store in the payment request step. The method of claim 1, wherein the purchase approval request step includes a two-way short message service (SMS), a two-way wireless data communication (TWM) service, and an integrated message service (UMS) from the main server to the mobile phone of the consumer. Payment method using a mobile phone, characterized in that to inform the goods or services and the amount by the Unified Message Service (ARS) or Audio Response System (ARS). The method of claim 1, wherein the mobile communication provider determines the location of the mobile phone of the consumer in the mobile phone location requesting step. The cell (cell, base station) method, the global positioning system (GPS), or the geographic information system (GIS). Global Positioning System) payment method using a mobile phone, characterized in that. 11. The method of claim 10, wherein the location of the consumer's mobile phone can be identified by latitude or longitude. The method of claim 1, wherein in the location checking step, when the affiliated store is mobile, such as a taxi or a logistics vehicle, the location of the mobile communication device installed in the taxi and the location of the consumer mobile phone are compared to determine whether they are in the same area. Payment method using a mobile phone, characterized in that the security authentication method for the payment. The mobile station of claim 1, wherein when the consumer connects to the Internet web site using the PC in the positioning step, the location is identified as the IP of the consumer's PC which is recognized by the ISP to which the PC is connected. Payment method by phone and secure authentication method for the payment. [Claim 2] The payment method of claim 1 and the payment method of claim 1, wherein the location of the merchant and the current location of the consumer mobile phone can be compared to prevent illegal payment due to duplication of code or malicious hacking. Security authentication method for.