KR20020022441A - Electronic credit card service system and a method thereof - Google Patents

Abstract

PURPOSE: A system and a method for an electronic credit card service are provided to prevent counterfeiting, alteration, and reproduction of credit card information by issuing an electronic credit card using created credit card information and operating the electronic credit card upon wireless approval. CONSTITUTION: The system comprises an electronic credit card issuing organization(13), a management organization(14), and a purchase organization(15). The electronic credit card issuing organization issues an electronic credit card(16) by receiving necessary information from an electronic credit card application device(17) of a customer, verifies the validity of the credit card information of a user after issuing a credit card, and manages the credit card information. The management organization mediates the information between the issuing organization and the purchase organization by receiving payment information(19) created by the electronic credit card and managing the security related with transaction by the credit card. The electronic credit card application device creates a card information key and a payment confirmation key. The payment confirmation key is stored in an encoded state.

Description

Electronic credit card service system and a method

The present invention relates to an electronic credit card, and more particularly to a system using a credit card in the form of electronic information using an encryption key technology.

Credit cards are called plastic money, and their population is gradually increasing. Credit cards are easier to carry and use than traditional currencies, so many people get, hold and use credit cards. In order to obtain an existing credit card, a user visits the card company or a bank and issues a plastic credit card through identity verification and credit information inquiry. When the issued credit card is validated only through an online credit card checker in a store, Can be used.

However, credit cards have a weak point in that they are very weak in terms of issuance and use.

The credit card records and reads payment information of a user in plain text on a magnetic strip attached to a plastic card at the time of issue, and the following problems occur.

First, since information recorded on magnetic stripe cards (magnetic stripe cards) can be easily read by anyone with a reader device, the cost of magnetic stripe reader devices decreases, and credit cards are frequently copied. Can be. Since the information recorded on the credit card is the information representing the individual's credit, it can be very damaging if it is copied.

Second, knowing the recording format of the payment information recorded on the magnetic strip makes it easy to produce a forged credit card.

The problem with using a credit card is as follows.

Usually, credit cards are required to sign passwords and signatures. Currently, passwords are very weak because they consist of four digits. However, these passwords are rarely used due to the inconvenience of typing them. For this reason, the signature on the receipt is often not verified.

In addition, in order to read a magnetic stripe card, the card must be directly contacted with a card reader, so in case of a gas station or a large restaurant, the card is left to an employee to read the card. In this case, since the card is handed over to another person, there is a possibility that leakage of card information or illegal use may occur.

Lastly, magnetic credit cards are also widely used for electronic payments on the Internet. At this time, the following problems exist.

In general, computers don't have a magnetic reader, so they can't transfer all the information on a credit card. Therefore, the credit card number is the only submitted information when making electronic payments using the Internet. These credit card numbers are a kind of public information and are easily exposed even if the card itself is not obtained. Therefore, there is a risk of accidents, large and small, in the current system of purchasing goods using credit card numbers only. In addition, since the Internet is an open network structure, any member can easily intercept the credit card information transmitted. Therefore, the use of credit cards on the Internet as in the present can be very dangerous. Therefore, in order to securely transmit credit card numbers, it is inconvenient to introduce a separate encryption technology.

The technical problem to be solved by the present invention is to solve the above-mentioned drawbacks, and to generate credit card information so that it is impossible to forge, duplicate, change, etc. of the card information, issue an electronic credit card, and wirelessly approve it. It is to provide an electronic credit card service system and method for operation.

In addition, the present invention prevents the forgery / copy / forgery of the card information by applying the public key cryptography technology in the construction of the credit card information, and to store the card information in a variety of payment means, a new for convenient use It provides a method of organizing credit card information, provides a method of issuing and using such a new credit card, and provides a method of using a credit card that can be electronically verified when using the card.

In addition, the present invention provides an electronic credit card system that takes advantage of the existing credit card system and supplements its disadvantages, to create / issue and distribute new virtual card information in order to improve security and convenience.

In addition, the present invention provides an electronic credit card service system and method that cannot be forged, tampered with, copied, cannot be used except for the user, and can be authenticated to the payer at the time of use.

In addition, the present invention is mounted on a mobile device such as a mobile phone during the issuing process for generating an electronic credit card and payment transactions using the electronic credit card to securely store the electronic credit card, the credit card that can verify the identity of the payer An electronic credit card operating apparatus for generating payment information is provided.

1 is a block diagram of an electronic credit card service system according to an embodiment of the present invention.

2 is a diagram illustrating electronic credit card information distributed in an electronic credit card system according to the present invention.

3 is a flowchart illustrating a method for issuing an electronic credit card in the electronic credit card service method in the electronic credit card system according to the present invention.

4 is a flowchart illustrating a process in which an electronic credit card according to the present invention transmits payment information to a terminal through a wireless electronic card operating apparatus and obtains an approval.

5 is a block diagram of a mobile phone including an electronic credit card operating apparatus according to the present invention.

6 is an internal block diagram of an electronic credit card operating apparatus according to the present invention.

Electronic credit card service system according to one feature of the present invention for solving this problem,

Issuer that issues a customer's electronic card, each with its own public key information:

An electronic credit card operating device for generating electronic credit card application information and for storing and processing electronic credit card information provided by the issuer:

A store terminal for wirelessly receiving payment information generated using an electronic credit card in the electronic credit card operating device:

Includes a governing body that validates and verifies the payment information;

The holder of the electronic credit card transmits the payment information to the store terminal using the electronic credit card operating device, and the paid information is transmitted to the management authority through a wired or wireless network connected to the store terminal, thereby validating the validity of the card information. After the verification process of identity verification, the electronic credit card processing is characterized by.

Electronic credit card service system according to a second aspect of the present invention for solving this problem,

An information storage unit for storing electronic credit card information;

A key generation calculating unit for storing or reading data with respect to the information storing unit and generating a key having information on the corresponding user;

Communication unit for communicating with the outside for issuance and payment,

It includes a payment information generation unit for generating payment information at the time of payment.

Electronic credit card service method according to a feature of the present invention for solving this problem,

Generating a payment information by the electronic credit card operating apparatus when the customer makes a predetermined purchase;

Transmitting and receiving payment information by establishing a session between an electronic credit card operating apparatus and a terminal of a merchant;

A terminal of the merchant transmitting the same to the management system for approval and validation;

The transaction of the transaction information sent by the electronic credit card operating apparatus,

The transaction system records the transaction history information.

Then, with reference to the accompanying drawings will be described a preferred embodiment according to the present invention.

1 is a block diagram of an electronic credit card service system according to an embodiment of the present invention.

The issuing agency 13 is an organization which finally receives the electronic credit card application information from the electronic credit card operating device 17 of the customer and finally issues the electronic credit card information 16. In addition, the issuing authority verifies and continuously manages the validity of the user's card information after issuing an electronic credit card. The management agency 14 is an organization that manages credit card transactions and receives payment information 19 generated using the electronic credit card information 16 stored in the customer's electronic credit card operating device 17. It mediates information between the issuing agency 13 and the buying agency 15 and manages security associated with credit card transactions.

Purchasing agency 15 is an institution that performs a function such as settlement of bills that merchants claim based on a purchase slip after credit card approval.

Initially, for issuing an electronic credit card, the applicant inputs his / her identity information necessary for issuance required by the issuing authority 13 to his electronic credit card operating device 17. After receiving the identification information, the electronic credit card operating device 16 generates its own public key information and private key information according to the public key cryptography. Hereinafter, the public key information is defined as a card information key and the private key information as a payment confirmation key.

The card information key is transmitted to the issuing authority together with the identification information previously input, and the payment confirmation key is encrypted and stored with the unique authentication information input from the user inside the user's electronic credit card operating device.

After the issuing authority 13 confirms the identification information sent from the electronic credit card operating device 17, the issuing key 13 11) creates an electronic credit card 16 by signing. The generated electronic credit card 16 is transmitted to and stored in an electronic credit card operating apparatus mounted on a mobile phone or the like through a wireless method.

The issuing key 11 of the issuing authority is generated together with the issuing confirmation key 12 at the issuing authority according to the public key cryptography method. The issuing confirmation key is disclosed to the outside for verification of the issued electronic credit card. Stored safely inside the issuing authority.

2 is a diagram illustrating electronic credit card information distributed in an electronic credit card system according to the present invention. As shown in FIG. 2, the electronic credit card includes a user's information, a card information key which is the user's public key information, and a signature of the issuer, and may further include various information as necessary.

Next, the operation of the electronic credit card service system according to the embodiment of the present invention having such a configuration will be described in detail.

The electronic credit card is stored in the electronic credit card operating apparatus after issuing according to the method shown in FIG. The stored electronic credit card information is used for future generation of electronic payment information by the electronic credit card operator.

First, an electronic credit card issuing method will be described with reference to FIG. 3.

3 is a flowchart illustrating a method for issuing an electronic credit card in the electronic credit card service method in the electronic credit card system according to the present invention.

In order to receive an electronic credit card, a user first inputs identification information required for issuing a card to the electronic credit card operating apparatus 17 (S300). At this time, since the input method is a general method through key input, detailed description will be avoided.

In this case, the identification information is general information necessary for issuing a credit card and information required for real name verification, and is determined based on each card issuer and existing financial practices.

The electronic credit card operating device 17 first generates a public key information card information key and a private key information payment confirmation key according to the public key encryption method before applying for issuance to the issuing authority 20 (S301).

This key generation may be generated by entrusting to the issuer when hardware capability of the terminal on which the electronic credit card operating device 17 is mounted is insufficient.

After generating the key, the proof of ownership information for the card information key is generated using the payment confirmation key. Proof of ownership information is information for proving that the private key itself is not disclosed, indicating that the private key corresponds to a certain public key according to the characteristics of the public key cryptography.

The electronic credit card operating apparatus first transmits the card information key and the identity verification information to the issuing authority among the two pieces of identification information and the generated two keys (S302).

The issuing authority first confirms the identity information by using the identification information transmitted from the electronic credit card operating device (S303). Verification of the received information can be performed either directly from the identity information held by the issuing organization or by using information from a credit card company, bank or other institution acting as a purchasing agency. If the identity is not confirmed, the electronic credit card issuance is suspended (S304).

If the identity verification is successful, the issuing authority checks the proof of ownership of the payment confirmation key by using the transmitted card information key (S305). If the proof of ownership information submitted at this stage is not correct, it is determined that the user does not have a payment confirmation key for the applied card information key and the issuance is suspended (S306).

After the two-step verification is completed, the issuing authority adds an expiration date, owner information, etc. to the user's card information key by using the issuing key, and digitally signs and issues the user's electronic credit card.

All of the issued electronic credit cards are stored in the database of the issuing authority (S308) and then transmitted to the electronic credit card operating device (S309).

The database where the electronic credit card is stored is managed by the issuer, and each information is signed with the issuer's issuing key. Therefore, even if the information in the database is disclosed, the information cannot be forged / modulated. Centralized security management is possible by focusing only on.

Since the electronic credit card information issued as described above cannot be forged / modulated in the communication process without the issuer's issuing key, the electronic credit card information may be secured even when transmitted over an open communication path such as wireless communication or the Internet.

4 is a flowchart illustrating a process in which an electronic credit card according to the present invention transmits payment information to a terminal through a wireless electronic card operating apparatus and obtains an approval.

5 is a block diagram of a mobile phone including an electronic credit card operating apparatus according to the present invention.

The electronic credit card operating device 17 may be configured and stored in software in the flash memory unit 506 of the mobile phone or may be configured as separate hardware. The electronic credit card operating device 17 receives issuance application and issuance information through a wireless interface unit 501 including a mobile communication antenna when issuing, and uses a wireless interface unit 502 such as Bluetooth when paying. To communicate. Here, Bluetooth (blue tooth) is a wireless communication method used for near field communication, such as infrared communication.

6 is an internal block diagram of an electronic credit card operating apparatus according to the present invention.

The electronic credit card operating device 17 includes a communication unit 601 for external input and output, an information storage unit 603 for storing electronic credit card information, a key generation operation unit 602 for generating a key when issuing an application, It consists of a payment information calculation unit 604 for generating payment information at the time of payment.

1 through 6, a process of transmitting payment information to a terminal and acquiring authorization by a wireless method such as Bluetooth through an electronic credit card operating apparatus will be described in detail.

The electronic credit card operating apparatus 17 internally stores the electronic credit card and payment confirmation key information in the electronic credit card information storage unit, generates payment information from such information, and transmits the payment information to the terminal through a wireless method such as Bluetooth.

The electronic credit card operating device 17 must first be converted to a payment mode in order to initiate wireless communication such as Bluetooth with the terminal 18 (S400).

This conversion process is performed by the user using the keypad 503 of the mobile phone. The electronic credit card operating apparatus 17 converted to the payment mode establishes a connection through appropriate negotiation with the wireless interface 502 such as Bluetooth of the terminal (S401).

The terminal 18 enters the amount of money the merchant wants to be paid from the user through the keypad of the terminal 18 (S402).

The input amount is transferred to the electronic credit card operating device 17 via a wireless method such as Bluetooth, and the electronic credit card operating device 17 receives payment request information including the amount of money, a business name, etc. from the terminal 18 ( S403).

When the payment request information is received, the electronic credit card operating apparatus 17 displays payment request information through the screen unit of the mobile phone 500 and receives unique authentication information for activating a payment confirmation key through confirmation of the user (S404). .

When the unique authentication information is input, the electronic signature value generated for the payment request is generated using the payment confirmation key stored in the electronic credit card operating device 17, and the information is transmitted to the terminal 18 through a wireless method such as Bluetooth. (S405).

The terminal 18 transmits the received payment information to the management authority 14 through the wired network environment (S406).

The management authority 14 goes through the following confirmation through the payment information received from the terminal (S407).

First, the management authority 14 verifies the reliability of the electronic credit card information by verifying the electronic signature by using the issuance confirmation key of the issuing authority 20 (S408). In this process, it is checked whether the electronic credit card information is forged or forged. At this time, if it is not authenticated, it is regarded as a payment error and is determined as an invalid electronic credit card (S409).

In addition, the management authority communicates with the issuing authority to check whether the serial number of the electronic credit card is on the revocation list of the issuing authority.

If it is on the revocation list, it is determined that the electronic signature is invalid even in the previous step (S411).

If the payment confirmation information is correct, the management authority approves the payment and transmits the approval information to the terminal of the store (S412).

The process after the approval of the payment is similar to the existing credit card business, so detailed description is avoided.

Thereafter, the merchant pays the receipt of the amount to the user and later charges the purchaser 15 with the purchase slip.

Various embodiments of the present invention described above may be present, and various systems may be integrated into one system as necessary.

In addition, the present invention can be applied to home shopping or various electronic commerce.

As described above, the embodiment of the present invention prevents the forgery / copy / modulation of the card information by electronically converting the credit card itself, and stores the card information by mounting a virtual card operating device in various mobile computing means. Therefore, it is possible to integrate and manage the payment means, and by using a wireless method such as Bluetooth, which is a short-range wireless communication, it is not necessary to hand over a credit card to another person and directly contact the terminal, thereby greatly increasing safety.

In addition, the convenience of the user is increased by the electronic card issuing process, and since all card information is electronically signed by the issuing key of the issuing authority, the security of the user's electronic credit card can be centrally managed. By providing an electronic signature function that allows you to verify your identity at the time of payment, you can safely use both the payer and the merchant when using the card.

Claims (9)

An information storage unit for storing electronic credit card information; A key generation calculating unit for storing or reading data with respect to the information storing unit and generating a key having information on the corresponding user; Communication unit for communicating with the outside for issuance and payment, An electronic credit card service system comprising a payment information generation unit for generating payment information upon payment of a payment. Issuer system for issuing a customer's electronic card, each with its own public key information: An electronic credit card operating apparatus for generating electronic credit card application information and storing and processing electronic credit card information provided by the issuing authority system: A store terminal for wirelessly receiving payment information generated using an electronic credit card in the electronic credit card operating device: A management authority system for validating payment information and determining authorization; The holder of the electronic credit card transmits the payment information to the store terminal using the electronic credit card operating device, and the paid information is transmitted to the management institution system through a wired network connected to the store terminal to verify the validity and identity of the card information. The electronic credit card service system, characterized in that after the verification process, the electronic credit card processing. The method of claim 2, The issuer system for issuing the electronic credit card provided to a customer is An issuing key for electronically signing electronic credit card application information; An electronic credit card service system including an issuance confirmation key for validating an issued electronic credit card. The method of claim 2, The electronic credit card mentioned above, An electronic credit card service system comprising electronically signed information with an issuing key of an issuing authority system in information combined with a card information key generated based on a public key cryptography and the identity of a card holder. The method of claim 2, The terminal for the store, Read the payment information generated by the electronic credit card operating device via Bluetooth wireless method, And transmitting the read payment information to the management authority system to obtain the approval information, and transmitting the result information back to the electronic credit card operating apparatus through the Bluetooth wireless method. The method of claim 2, Electronic credit card operating device for operating the electronic credit card, To apply for an electronic credit card, the card information key (public key) and payment confirmation key (private key) information are generated according to the public key cryptography method. After encrypting the generated payment confirmation key using the unique authentication number entered by the user, Receives the identification information of the user and transmits to the issuing authority system with the card information key information generated in the key generation step, Receives and stores the electronic credit card issued by the issuing authority system. Generate electronically signed payment information using the stored electronic credit card and payment confirmation key, Electronic credit card service system, characterized in that for transmitting the generated payment information to the store terminal via the Bluetooth wireless method. The method of claim 2, The management institution system that receives the payment information sent from the store terminal, Validate the electronic credit card through the issuance confirmation key of the issuing authority system, Verify your electronic signature of payment information using an electronic credit card, An electronic credit card service system, characterized in that the communication with the issuing authority system to confirm the cancellation of the electronic credit card. Generating a payment information by the electronic credit card operating apparatus when the customer makes a predetermined purchase; Establishing a session between an electronic credit card operating apparatus and a terminal of a merchant to transmit and receive payment information; Transmitting, by the terminal of the merchant to the management system, approval and validation; Transmitting, by the electronic credit card operator, the transaction history information; Electronic credit card service method comprising the step of recording the transaction history information management system. An electronic credit card service method of a customer terminal possessed by a customer and a store terminal possessed by a merchant; After the customer makes a predetermined purchase, using a mobile device equipped with the electronic credit card operating apparatus, accessing the merchant terminal using a wireless communication system using the electronic credit card operating apparatus; A customer entering a unique authentication number into an electronic credit card operating device for an electronic signature; Transmitting the electronic payment information generated by the electronic credit card operating apparatus to a merchant terminal in a Bluetooth wireless manner; Electronic credit card service method comprising the step of transmitting the receipt information in the merchant terminal using a Bluetooth wireless method after processing the transaction.