KR20020045763A - System for electronic payment of E-commerce - Google Patents

Abstract

PURPOSE: An on-line payment system for electronic commerce is provided to implement the procedure of a payment in the electronic commerce by performing the procedure on the Internet. CONSTITUTION: The system includes a transaction report standard generating module(11) to standardize the transaction report data, an encoding module(12) to encode the transaction report data, an authentication module(13) to apply a specific transaction authentication key to the transaction report data, a reporting module, a payment request module(14) to request a financial organization server for a payment with response to the request of a supplier server, a transaction history generating module(15), a client server monitoring module(19), a non-processed payment history management module(18), a security module(20), a database, and a control unit(10). After a payment between transaction subjects is finished, the transaction history generating module generates the particular data related with the payment. The monitoring module monitors the normal performance of all payment processes.

Description

E-commerce online payment system {System for electronic payment of E-commerce}

The present invention relates to an e-commerce online payment system, and more specifically, the process of payment for payments arising from commerce as well as commerce between economic entities (individual-individual, individual-corporate, corporate-corporate) on the Internet It relates to an e-commerce online payment system that can all be implemented.

In the current payment method of payments caused by commerce, buyers usually pay cash and receive goods or services in reality.In the era of electronic payment, payment methods using credit cards owned by buyers It's getting more and more. However, the payment method by credit card has a very high risk of card loss, and in the case of small transactions, the use of the card for small payments is not properly performed due to the fee burden caused by the use of the card. In addition, if lost, it also contains a problem that is very easy to steal others.

In order to solve these problems, the spread of computers has spread rapidly throughout society, including at home and at work, and more and more people purchase goods and services through e-commerce between individuals and individuals, individuals and companies, and companies and companies. As a result, electronic billing, which is directly processed through the Internet, has been recognized as a very popular field. Such e-billing is actively used not only in the e-commerce field but also in other areas requiring payment, and the explosive growth of the e-billing-related market is anticipated due to the current environment where the proliferation of e-commerce is increasing. do.

Currently, these e-billing services are generally operated by having a billing module in the site by opening a unique e-Market place for each specific company, which is usually linked to a financial institution where a consumer's payment account is opened. As a matter of fact, they simply transfer money for goods and services, and due to security incompleteness of data related to payment processing transmitted on the Internet, they have amplified distrust about e-commerce to the trading parties. It is working badly. In addition, even if the payment is made by electronic payment method, there is an inconvenient point in that the authentication process for the transaction has to be carried out separately. As the trend is increasing, each company is increasing its cost burden for payment.

Therefore, the present invention was devised to solve the above problems and meet the trend of activation of electronic payment. The object of the present invention is to occur in electronic commerce between economic entities (individual-individual, individual-corporate, corporate-corporate). It is to provide an e-commerce online payment system that can realize all the procedures of the payment settlement on the Internet.

1 is a conceptual diagram of an electronic payment implementation using the present invention.

2 is a block diagram of the present invention.

In order to achieve the above object, the electronic commerce online payment system proposed by the present invention, which authenticates and setstles the transaction price generated in the electronic commerce between a consumer, a supplier, a provider server, and a financial institution server, is a product purchased by a consumer, Standardized transaction generation module that generates standardized transaction data including purchasing time, purchase price, supplier name, payment financial institution, payment date, etc., encryption module for encrypting transaction data, and transaction data An authentication module that receives a transaction authentication from an authorized authentication server and grants a transaction authentication key unique to the transaction text data, a notification module for notifying predetermined matters, and the supplier server that received the notification of authentication performs payment of the price presented in the transaction text data. Payment request for payment to the financial institution server Module, payment history generation module that generates relevant details data about the payment after the payment between the trading partners, client server monitoring module that monitors the abnormal operation of the supplier server and the financial institution server, and payment procedures Monitoring module to monitor whether the transaction is successful, unprocessed payment history management module to manage unsettled payment history between transaction entities, and security module to secure transaction specialized data, transaction history data and the transaction information by preventing malicious access from outside And a storage database (DB) for storing data calculated from each module or necessary for driving each module, and a controller for transferring information between the modules and proper processing of the information.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a conceptual diagram showing how the electronic payment is made using the present invention.

A: The consumer 2 connects via the Internet to the supplier server 3 providing the desired goods or services to purchase them. At this time, the consumer 2 is simultaneously connected to the electronic commerce online payment system (1, the following system). When the consumer 2 completes the purchase, data related to purchase (transaction related data) is transmitted to the system 1.

B: The system 1 transmits the password of the consumer 2 to the authentication server 5 in order to determine whether to authenticate the transaction related data transmitted by the consumer 2.

C: The authentication server 5 gives a unique authentication key for the transaction and sends it to the system 1.

D: The system 1 notifies the consumer 2 and the supplier server 3 whether or not to authenticate the transaction.

E: The supplier server 3, which has received the notification of authentication, requests the transfer of the price.

F: The system 1 that has received the payment request requests the transfer of money from the financial institution server 4.

G: The financial institution server 4 transfers the price to the supplier server 3 after confirming the authentication of the transaction.

2 is a block diagram of the present invention.

The transaction professional standardization generation module 11 standardizes transaction specialized data reflecting purchase information including the goods purchased by the consumer 2, the purchase time of the service, the purchase price, the supplier name, the payment financial institution, and the payment date. As the generated part, the consumer 2 accesses an e-market place provided by the supplier server 3 and selects the desired goods and services to purchase. At this time, when the consumer 2 logs on to the supplier server 3 to make a purchase, the payment system link module provided in the supplier server 3 executes a transaction authentication agency and payment settlement contract with the supplier server 3. The password that is simultaneously logged on to the system 1 that is entered and entered upon logon is transmitted to the system 1 for use in the authentication procedure described later. The controller 10 applies the recording signal to the consumer password DB 32 to record the consumer password. When the consumer 2 completes the purchase, data related to the purchase (transaction related data) is transmitted to the system 1 and the control unit 10 recognizes this and standardizes the transaction specialized data in the transaction specialization generation module 11. The reason for standardization is that the consumer's payment method can take a variety of methods such as PC banking, ARS, Internet banking, EDI, CMS, etc. To create a. When the transaction specialization standardization module 11 generates the transaction specialization data, the purchase time may be enabled by a real-time clock embedded in the system 1 itself, and the purchase price, payment settlement institution, payment date, etc. By extracting from transaction-related data that has been sent to the system 1. The generated transaction specialized data becomes reference data for monitoring to be described later. The transaction specialization standardization generation module 11 transmits the transaction specialization data thus obtained to the encryption module 12.

The encryption module 12 encrypts transaction specialized data. As the encryption method, a widely used standard algorithm such as SEED, RSA, SSL is applied. Encryption is the procedure to take in order to stabilize the transaction and secure the transaction information between the trading entities. The more complex the encryption algorithm, the more effective the security of the information will be. The encrypted transaction text data is recorded by the controller 10 applying a recording signal to the transaction text DB 31.

The authentication module 13 is a part for granting a unique transaction authentication key to the transaction data by receiving the authentication status from the authorized authentication server 5 with respect to the transaction data, and the control unit 10 from the consumer password DB 32. The consumer password, the supplier server password from the supplier server DB 34, and the financial institution server password are read from the financial institution server DB 36, and the authentication server 13 is read through the authentication module 13 and the external interface module 21. These passwords are stored in a DB (not shown) of the authentication server 5 for use as authentication passwords for subsequent transactions.

Authentication is applied to maintain security in a computer system shared by multiple users or in a communication network shared by multiple computer systems. Authentication is used to identify the identity of a person who wants to perform work using a shared computer system or shared network. It is a method of maintaining the security of the system by inspecting and checking the legality of the work performed by such a user so that illegal work cannot be performed by an illegal user. Authentication in the present invention is to determine the validity (validity) of the authentication cryptography of the above-mentioned trading subjects, and if any one of the cryptography is not legal, the non-authenticated data is transmitted to the system (1) and the system (1) is a notification module. (16) through the authentication failure of the transaction subject is notified by the payment failure due to the authentication failure, because the transaction process was not performed normally, the unprocessed payment history management module 18 displays the transaction history data of the transaction as unprocessed history DB ( 30) and notify the relevant transaction subject of abnormal progress in the transaction through the notification module 16.

If the authentication password is legitimate, the authentication server 5 generates a transaction authentication key and sends it to the system 1. When the authentication module 13 receives the authentication key, it grants a unique authentication key to the transaction specialized data, and at the same time, the controller 10 applies a recording signal to the authentication key DB 33 to store the authentication key. 16) informs the consumer 2 and the supplier server 3 that the transaction has been authenticated.

The payment request module 14 requests a payment to the financial institution server 4 when the supplier server 3, which has received the authentication notification, requests payment of the payment based on the transaction data, and the controller 10 controls the transaction text. From the DB 31, the transaction target data is read from the authentication key DB 33, and the authentication key given to the transaction data is read and transmitted to the financial institution server 4, and the financial institution server 4 authenticates. The payment procedure of the payment is completed by making payment to the supplier server 3 for the transaction details and notifying the system 1 of the payment.

The payment history generation module 15 generates the relevant details data on the payment of the transaction after the payment between the transaction entities is completed. The payment history generation module 15 performs payment on the purchase date, authentication status, and the financial institution server 4 of the consumer. Generate payment history data including the time of notification, the time when the payment was made to the supplier server 3, and the payment, if the payment is in installment, whether the remaining payment or the payment is normally paid and stored in the payment history DB 35. do. In the case where the supplier server 3 and the financial institution server 4 request the payment to be confirmed correctly, the control unit 10 applies the readout signal to the payment history DB 35 to settle the price through the notification module 16. The situation is provided to the supplier server 3 and the financial institution server 4.

The monitoring module 17 checks whether each step operates according to the prescribed procedure in a task defined as a series of steps in the information terminal system, which is monitoring as a part of monitoring whether the above procedures of the transaction are normally performed. In this case, a task defined as a series of steps is called a transaction, and a transaction is usually embedded in a ROM in a system as an operation program. Transactions in the present invention can be defined as follows as a step in general payment.

1. Create Transaction Specialized Data

2. Grant certification to generated transaction data

3. Request payment to financial institution

4. The financial institution transfers the payment to the supplier

5. Settlement

The monitoring module 17 reads the payment related details data from the payment history DB 35 after the transaction is completed, and the processing result for each step of the transaction is determined by the transaction specialized data standardization generation module 11. The integrity of the various data described above is ensured by checking whether it is done as original. If any step is abnormally performed, the transaction is regarded as abnormally terminated and the unprocessed transaction history management module 18 stores the history data in the unprocessed history DB 30 and related through the notification module 16. Inform the trading entity of abnormal progress (for example, inability to pay due to insufficient funds).

The client server monitoring module 19 monitors the normal operation of the supplier server 3 and the financial institution server 4, and the monitoring is performed in real time, and the monitoring target is whether the server is abnormally operated. It is possible by periodically transmitting the normal operation discrimination reference data which the server 3 and the financial institution server 4 mutually contracted to the system 1 beforehand. The controller 10 determines that the two servers are not in a normal operation state if the agreed normal operation determination reference data previously recorded in the supplier server DB 34 and the financial institution server DB 36 do not match. The abnormal date and time of occurrence of the abnormality are recorded in the supplier server DB 34 and the financial institution server DB 36, and the abnormality is notified to the supplier server 3 and the financial institution server 4 through the notification module 16.

The security module 20 prevents malicious access from the outside and secures transaction specialized data and information on the transaction subject. The security module 20 is installed to protect the data from those who do not have permission to use the system 1. do. The security module 20 may be implemented by a program commonly called a firewall, and the specific method of security is applied because the standard information security method (for example, the method proposed by the National Institute of Standards and Technology) applied to the Internet security is applied. The detailed description is weak.

Although the preferred embodiments of the present invention have been described in detail above, those skilled in the art will appreciate that the present invention may be modified without departing from the spirit and scope of the invention as defined in the appended claims. It will be appreciated that modifications or variations may be made. Therefore, modifications to the previous embodiment of the present invention will not be able to deviate from the technology of the present invention.

Use of the present invention has the following advantages.

1. Since the establishment of transaction, authentication of transaction, and settlement of transaction price are made through the Internet, each economic entity can conduct business that is not restricted by construction.

2. The supplier and the financial institution can significantly reduce the cost of the above-mentioned work by performing the transaction authentication and transaction settlement service on behalf of the payment specialized system of the present invention. The load on the system can be reduced as much as possible.

3. Since transaction authentication is made through an authorized certification server, we can do our best to secure the reliability of commerce and can greatly improve the security of transaction data and information on the transaction subjects by adopting the encryption and security module of the transaction specialist. have.

Claims (5)

Act on the Internet to authenticate and settle payments incurred in electronic commerce between the consumer, supplier server and financial institution server, which are parties to the e-commerce, A transaction specialization standardization module configured to receive transaction standardized data about goods and services purchased by the consumer from the consumer and standardize the transaction specialized data; An encryption module for encrypting the standardized transaction text data; An authentication module configured to receive a certification of a transaction from an authorized authentication server with respect to the standardized transaction specialized data and to assign a unique transaction authentication key to the transaction specialized data; A notification module for notifying the consumer and the supplier server whether the transaction specialized data is authenticated; A payment settlement request module for requesting the payment to the financial institution server when the supplier server, which has received an authentication notification from the notification module, requests payment of the payment presented in the transaction specialized data; A payment history generation module for generating related details data on the payment after the payment between the commerce parties is completed; A client server monitoring module configured to monitor an abnormal operation of the provider server and the financial institution server; A monitoring module for monitoring whether the transaction procedure is normally performed by comparing the payment related detail data with the transaction specialized data; An unprocessed payment history management module for managing an unprocessed payment history of a corresponding commerce generated due to an abnormal process of the commerce; A security module for preventing malicious access from the outside to secure the transaction history data and the information of the commerce subject; A storage database (DB) for storing data calculated from each module or necessary for driving each module; E-commerce online payment system, characterized in that it comprises a control unit responsible for the transfer of information between each module and the proper processing of information. The method of claim 1, wherein the storage DB A transaction specialty DB for storing the transaction specialty data; A consumer password DB for storing the consumer password required for authentication of the transaction; An authentication key DB for storing the unique transaction authentication key; A payment history DB for storing related detail data about the payment; A supplier server DB for storing information related to the supplier server and a password of the supplier server required for authentication of the transaction; A financial institution server DB for storing information related to the financial institution server and a password of the financial institution server necessary for authentication of the transaction; E-commerce online payment system, characterized in that it comprises an unprocessed history DB for storing the outstanding payment history. The electronic commerce online payment system of claim 1, wherein when the consumer logs on the supplier server to purchase goods and services, the user is logged on to the financial institution server at the same time by a payment system link module provided in the supplier server. . The method of claim 1, wherein the monitoring of the abnormal operation of the supplier server and the financial institution server by the client server monitoring module mutually contracts normal operation discrimination reference data between the system, the supplier server and the financial institution server; The supplier server and the merchant financial institution server periodically transmit the normal operation discrimination reference data to the system; And the controller is configured to determine whether the mutually agreed data is identical to the transmitted data. The method of claim 1, wherein the notification module When the supplier server and the financial institution server request confirmation of the payment settlement status, when the payment settlement situation and the transaction specialized data processing are abnormally terminated, payment is impossible for the transaction to the transaction subject, and the supplier server and the financial institution server E-commerce online payment system, characterized in that further notification to the transaction entity of the operation status of the two servers.