KR20020022158A - method for authentication and settlement with the use of transaction code - Google Patents

Abstract

PURPOSE: An EC(Electric Commerce) authentication payment method using a dealing code is provided to enable an authentication organization to authenticate a dealing fact by the medium of a dealing code issued to a user. CONSTITUTION: The method consists of a client terminal(10), an EC server(20), a financial organization server(30) and an authentication payment server(40). The authentication server includes an authentication processing program, a payment processing program, a member information managing program, a company information managing program and a payment information managing program. The client terminal is a connection device connecting to a wire or wireless network such as a computer, a mobile phone, a PDA(Personal Digital Assistant), a game machine and an Internet TV. The authentication payment server authenticates an EC dealing between the client terminal and the EC server through an authentication procedure and executes an electronic payment between the financial organization server and the EC server through a payment processing procedure.

Description

Electronic transaction verification payment method using transaction code {method for authentication and settlement with the use of transaction code}

The present invention relates to an authentication method using a transaction code, and more particularly, to an authentication payment method using a transaction code that enables more secure electronic commerce through a transaction code issued by a certification authority.

Authentication and payment are relatively simple and secure in general commerce done offline. By signing or stamping the transaction agreement with the customer, the customer cannot deny the transaction, and the customer then pays the transaction by the receipt of the goods or services and cash or the equivalent. The transaction is terminated by issuing.

In contrast, in the case of electronic transactions using the Internet, it is not easy to authenticate the transaction and securely settle the transaction.

In the case of authentication, if the customer denies the transaction itself, the e-commerce company can not authenticate the transaction simply by the fact that the customer's subscription information is stored on the server side of the e-commerce company. Must be extinguished, and therefore must bear the disadvantages involved. Therefore, a method of authenticating the transaction by introducing the customer through the reputable certification body to verify that the customer has signed up for the transaction should be introduced.

In the case of payment, conventionally used methods include a method using a credit card, a method of using a passbook, and a method using an electronic fund transfer. Among them, a payment method using a credit card is most widely used. Customers can make payments by simply entering credit information such as card numbers online, which is easier to use than other payment methods, and from a commerce company's existing credit card payment network. This is because the payment service is easy to construct and the payment can be made quickly and reliably.

However, the following serious problems are inherent in the payment method using a credit card.

In the case of the credit card payment method, the credit information entered by the customer is transmitted to the server of the e-commerce company, so the information is stored in the e-commerce server. Therefore, even after the settlement is completed, there is a possibility that the commerce company may abuse this credit information. In the case of off-line commerce, serious damages such as illegally copying and stealing the credit card using the customer's credit information have been reported.In the case of online transactions, simply paying the customer's credit information online to the credit card company The inherent risk is much higher than in the offline case.

Since the above problems act as obstacles to prevent the activation of electronic commerce, a method for solving these problems is required.

The present invention was devised to solve the above problems, and an object thereof is to provide an electronic transaction authentication method using a transaction code that can authenticate a transaction fact through a transaction code issued to a member by a certification authority. .

Still another object of the present invention is to provide a payment method using a transaction code that enables secure payment without leakage of customer credit information through the transaction code.

The following drawings attached to this specification are illustrative of preferred embodiments of the present invention, and together with the detailed description of the invention to serve to further understand the technical spirit of the present invention, the present invention is a matter described in such drawings It should not be construed as limited to.

1 is a schematic diagram showing a system configuration for implementing electronic transaction authentication payment using a transaction code according to the present invention.

2 is a diagram showing the configuration of the authentication settlement server shown in FIG.

3 is an attribute table of a member information database stored in an authentication settlement server according to the present invention.

4 is an attribute table of a company information database stored in the authentication settlement server according to the present invention.

5 is an attribute table of a payment information database stored in the authentication settlement server according to the present invention.

6 is a flowchart illustrating a schematic process of performing an authentication payment according to the method of the present invention.

7 is a flowchart illustrating the process of membership registration and transaction code assignment.

8 is a flowchart illustrating a process of subscription and authentication request of an electronic transaction.

9 is a flowchart illustrating a process of confirming transaction authentication.

10 is a flowchart showing a payment processing process.

11 is a diagram illustrating an electronic transaction subscription form screen.

12 is a diagram illustrating an authentication payment confirmation request screen.

<Description of main reference numerals in the drawings>

10. Client terminal 20. Electronic transaction server

30..Financial institution server 40..Certificate payment server

45A..Member Information Database 45B..Member Information Database

45C. Payment Information Database 90. Electronic Transaction Subscription Form Screen

110..Certification payment confirmation request screen

In order to achieve the above object, an authentication payment method using a transaction code according to the present invention includes: (a) granting a transaction code to a specific client by an authentication settlement server; and (b) the client sends the transaction code to the electronic device. Subscribing an electronic transaction by transmitting to a transaction server, (c) the electronic transaction server accepting the subscription, and transmitting the transaction code to the authentication settlement server for authentication of the transaction, (d) In order to confirm the transaction, the authentication settlement server transmits the transaction history to the client terminal associated with the transaction code in an encrypted packet, (e) the client decrypts the encrypted packet to confirm the transaction history, and the packet Notifying the authentication settlement server of the decrypted fact; (f) the authentication settlement server confirming the fact that the client decrypted the packet; (G) the authentication settlement server requesting payment to the transaction financial institution of the client that has been authenticated; and (h) the financial institution paying the transaction price to the electronic transaction service provider. It includes a step.

Preferably, the electronic transaction authentication payment method using the transaction code of the client accessing the electronic transaction server to select a specific electronic transaction, the electronic transaction server the electronic transaction subscription details and the electronic transaction service provider Transmitting the company number of the client to the authentication settlement server; and, when the authentication settlement server inquires the balance of the client from the financial institution server, if the balance is less than the electronic transaction payment amount or there is no balance, the client Notifying the terminal and the electronic transaction server that the payment is not possible; the financial institution server notifying the authentication settlement server of the completion of payment; the authentication settlement server notifying the client of the completion of payment; The electronic transaction server receives the payment and the electronic transaction confirmation to the client Further comprising the step of notifying.

According to the authentication payment method using the transaction code of the present invention as described above, it is possible to authenticate the transaction facts through the transaction code issued to the member by the certification authority, and to securely pay while protecting the customer credit information.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Prior to this, terms or words used in the present specification and claims should not be construed as being limited to the common or dictionary meanings, and the inventors should properly explain the concept of terms in order to best explain their own invention. Based on the principle that can be defined, it should be interpreted as meaning and concept corresponding to the technical idea of the present invention. Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiment of the present invention and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

1 is a schematic diagram showing a system configuration of an electronic transaction authentication and payment method using a transaction code according to the present invention. As shown, the authentication payment system of the present invention is composed of a client terminal 10, an electronic transaction server 20, a financial institution server 30 and the authentication payment server 40.

The client terminal 10 is a connection device for connecting to a network by wire or wirelessly, and includes all devices that can be connected to the network such as a computer, a mobile phone, a PDA, a game machine, and an Internet TV.

The electronic transaction server 20 is an electronic transaction server operated by a cyber shopping mall selling tangible goods through a network or an electronic transaction company providing intangible goods or services.

The financial institution server 30 is a server installed in financial institutions such as banks and credit card companies that provide cash or credit transactions through a network.

The authentication settlement server 40 authenticates an electronic transaction between the client terminal 10 and the electronic transaction server 20 through an authentication process indicated by a solid line in FIG. 1 and performs a payment process indicated by a dotted line in FIG. It is an authentication payment server for performing the electronic payment between the financial institution server 30 and the electronic transaction server 20 through.

As shown in FIG. 2, the authentication settlement server 40 includes an authentication processing program 47A, a payment processing program 47B, a member information management program 47C, and a company information management program 47D, and payment information management. Program 47E is installed.

The authentication processing program 47A performs a role of authenticating and controlling an electronic transaction generated between the client terminal 10 and the electronic transaction server 20. Here, as illustrated in FIG. 10) and a transaction code, and transmits an encrypted packet for transaction confirmation, and if the client 10 notifies the fact that the encrypted packet is decrypted, it includes the role of confirming this to complete the authentication.

The payment processing program 47B controls the electronic payment process occurring between the financial institution server 30 and the electronic transaction server 20. Here, as shown in FIG. Accessing the institution server 30, the client inquires the balance in the transaction account, and if there is a balance, the financial institution server 30 includes a role for requesting payment (6).

The member information management program 47C shows information related to a member, such as subscriber information registered when the client joins the authentication payment server 40 as a member, and transaction codes issued to a client whose membership has been approved. As described above, the program is stored and managed in the member information database 45A through the database interlocking module 45.

As shown in FIG. 3, the member information database 45A includes information such as a transaction code, a member ID, a password, a name, a social security number, a phone number, an address, an email, a transaction financial institution name, and a payment account.

The company information management program 47D is associated with a company, such as company information registered when the electronic transaction server-side company registers as a company member in the authentication payment server 40 and a company number issued to a company approved for membership in the company. As shown in FIG. 2, the program stores and manages the information in the company information database 45B through the database interlocking module 45.

As shown in FIG. 3, the company information database 45B includes information such as a company number, a member ID, a password, a company name, a business number, a phone number, an address, an e-mail, a transaction financial institution name, and a payment account.

The payment information management program 47E requests transaction information such as subscription details and company numbers transmitted from the electronic transaction server 20, balance details inquired by the financial institution server 30, and the financial institution server 30. 2 is a program for storing and managing payment information, such as payment amount, processed in the payment information database 45C through the database interlocking module 45 as shown in FIG. 2.

The payment information database 45C includes information such as date, transaction code, company number, order number, order amount, inquiry balance and payment processing.

Next, a method of making an electronic transaction authentication payment according to the present invention using the system configured as described above will be described.

As shown in FIG. 6, the electronic transaction authentication payment includes 4, such as a subscription and transaction code granting routine S70, a transaction subscription and authentication request routine S80, a transaction authentication routine S100, and a payment processing routine S120. This is done through a number of routines.

First, the registration and transaction code assignment routine (S70) will be described.

As shown in FIG. 7, a client who wants to use the authentication service provided by the authentication payment server 40 first accesses the authentication payment server 40 and agrees to the service terms of service in order to register as a service member. After entering the personal information and financial information required for authentication. Such input information includes a member ID, a password, a name, a social security number, a telephone number, an address, an email, a financial institution, a payment account, and the like, as shown in FIG. 3.

The authentication payment server 40 receiving the information input and the member reception request from the client terminal 10 checks whether the client's real name and the presence or absence of a transaction account are based on the input information. The method for confirming the real name and the existence of the transaction account is well known and is not described in detail herein.

The client whose real name verification is completed is approved as a full member, and a transaction code for authentication is issued to the client. The transaction code may be a fixed code issued only once upon registration, or may be a temporary code issued at the request of the client every electronic transaction. The transaction code may be any form as long as the code performs a function for mediating a transaction between the client and the electronic commerce server, and it is preferable to use an unencrypted public code.

Now, the electronic transaction subscription and authentication request routine (S80) will be described.

As shown in FIG. 8, the client terminal 10 having completed the membership accesses the electronic transaction server 20, searches for an appropriate electronic transaction, and then inputs the corresponding information and the transaction code in an electronic transaction subscription form. Enter to subscribe to electronic transactions.

E-commerce may be the purchase of tangible goods in a cyber shopping mall, or may be an application for intangible goods or services. As shown in Figure 9, when purchasing the type of goods in the cyber shopping mall, after entering the product number, product name, selling price, order quantity, order amount, delivery address and the transaction code and press the order button to perform an electronic transaction You are subscribed. While entering the information related to the subscription form screen, the client can directly enter all fields.However, if you select the e-commerce you want to purchase after searching, the order number, product number, product name, and selling price will be automatically entered in the form. It is desirable to. The automatic input method is well known in the art and is not described herein.

The electronic transaction server 20 transmits a transaction history of adding the company number to the subscription to the authentication settlement server 40 to request authentication payment.

Now, the transaction authentication routine (S100) will be described.

As shown in FIG. 10, the authentication settlement server 40 encrypts the transaction details transmitted from the electronic transaction server 20, compresses the transaction details into packets, and then transmits them to the client terminal 10 associated with the transaction code. To request the client's confirmation of the transaction history.

In order to encrypt the transaction details, the authentication settlement server 40 extracts the password of the client stored in the member information database 45A, and encrypts the transaction details by using the password as the decryption key. When the client registers with the authentication payment server 40 when registering a member and uses a password already known by the client as a decryption key, the encrypted packet transmitted from the authentication payment server 40 can be removed without employing complicated authentication means. Detoxification can be easily performed.

Now, the client authentication management program installed in the client terminal 10 requests a decryption key for decryption from the client when the encrypted packet is received (S102). At this time, as shown in FIG. 11, the client decrypts the packet by inputting the password as a decryption key in the password input field 115 of the authentication payment confirmation request screen of the authentication management program (102).

When the packet is decrypted by the above-described process, as shown in the same figure, the detailed specification of the transaction details such as the order number 111, the company number 112, the sales amount 113, and the transaction code 114 is displayed. To be displayed. The details of the transaction details are not limited to those shown in the drawings, and are preferably configured to include appropriate items for the client to confirm the transaction facts.

Now, at the same time as the decryption is performed, the client authentication management program notifies the authentication settlement server 40 that the decryption is performed (S103). Such notification of the decryption fact is automatically performed by the authentication management program for the client without the client's intervention.

The authentication payment server 40 notified that the client decrypted the cipher may regard the fact as proving that the client is a legitimate electronic transaction applicant and authenticate the electronic transaction.

As described above, the client authentication management program is an essential component that plays a very important role in the authentication payment process, it is preferable to automatically be installed on the client terminal by the authentication payment server 40 when registering.

Now, the payment processing routine (S120) will be described.

As shown in FIG. 12, the authentication settlement server 40 accesses the financial institution server 30 to query the balance of the client account. Preferably, the account is a transaction account of a financial institution designated by the client at the time of membership registration, and is an account that can be settled electronically, such as a bank account or credit card account of a general bank. In the case of a deposit account, the balance is inquired. In the case of a credit card account, the service balance is inquired.

If the inquiry balance is greater than the payment amount, the authentication settlement server 40 requests the financial institution server 30 to pay the transaction price to the electronic transaction server side company.

If the inquired balance is less or no more than the payment amount, the authentication payment server 40 notifies the client terminal 10 and the e-commerce server 20 that the payment is impossible.

Subsequently, the financial institution receiving the payment request pays the transaction price to the electronic transaction server-side company and notifies the client terminal 10 of the completion of the payment.

The electronic transaction server company receiving the payment from the financial institution notifies the client terminal 10 of the receipt of the payment and the electronic transaction confirmation.

As described above, although the present invention has been described by way of limited embodiments and drawings, the present invention is not limited thereto and is intended by those skilled in the art to which the present invention pertains. Of course, various modifications and variations are possible within the scope of equivalents of the claims to be described.

According to the electronic transaction authentication method using the transaction code of the present invention, by authenticating the electronic transaction facts through the certification authority, the client who subscribed to the electronic transaction can not deny the facts and financial information of the client that is likely to be misused Rather, by making payment through the open transaction code issued by the certification body, the client can use the electronic transaction with confidence, and thus the electronic commerce becomes more active.

Claims (5)

A plurality of client terminals 10, an electronic transaction server 20 for performing electronic transactions with the client terminal 10, and an authentication payment server 40 for approving electronic transactions between the client terminal and the electronic transaction server. As an electronic transaction verification payment method, (a) the authentication settlement server 40 assigning a transaction code to a specific client 10; (b) the client 10 subscribing the electronic transaction by transmitting the transaction code to the electronic transaction server 20; (c) the electronic transaction server 20 accepting the offer and transmitting the transaction code to the authentication payment server 40 for authentication of the transaction; (d) the authentication settlement server 40 transmitting the transaction details in an encrypted packet to the client terminal 10 associated with the transaction code to confirm the transaction; (e) The client 10 decrypts the encrypted packet to confirm transaction details, notifies the authentication settlement server 40 that the packet has been decrypted, and confirms the decryption of the authentication settlement server 40. Authentication method using a transaction code comprising the step of authenticating the electronic transaction. The method of claim 1, Requesting, by the authentication settlement server 40, payment to the transaction financial institution of the client 10 for which authentication has been completed; And The financial institution further comprises the step of paying the transaction price to the electronic transaction service provider authentication payment method using a transaction code. The method according to claim 1 or 2, The transaction code is a code for mediating a transaction between the client 10 and the electronic transaction server 20. The transaction code is a public code assigned to the client 10 by the authentication payment server 40. Electronic transaction authentication payment method using a transaction code. The method of claim 1 Step (c) is The electronic transaction authentication method using the transaction code, characterized in that the electronic transaction server 20 transmits the transaction code, the electronic transaction subscription details and the company number of the electronic transaction service provider to the authentication settlement server 40 together. . The method of claim 2, Inquiring, by the authentication settlement server (40), the balance of the client (10) from the financial institution server (30); And If the balance is less than the electronic transaction payment amount or there is no balance, authentication using the transaction code, characterized in that further comprising the step of notifying the client terminal 10 and the electronic transaction server 20 that the payment is not possible Payment Method.