KR20020081183A - System and Method for the settlement service of mobile device using Bluetooth communication - Google Patents

Abstract

PURPOSE: A system and method for payment of mobile communication device are provided to perform a payment using a local area blue tooth and Internet communication network without a public mobile telecommunication network although a mobile communication device including a mobile phone and a PDA is used. CONSTITUTION: A main server(200) is mounted in a payment service company. A PC(300) is used by a buyer when the buyer purchases a commodity or a service. A mobile communication device(400) includes a blue tooth device possessed by the buyer. A web server(500) is mounted in an Internet company for selling a commodity and a service. A payment server(600) is mounted in a payment institution. A relay device(700) includes a blue tooth device and is connected to the mobile communication device(400) through a blue tooth communication method. In addition, modems(250,350,550,650,750) are mounted. The above elements are connected through a communication network(100) such as the Internet.

Description

Payment service system and method for mobile communication device using Bluetooth communication {System and Method for the settlement service of mobile device using Bluetooth communication}

According to the present invention, a purchaser of a mobile communication device with a built-in Bluetooth device purchases goods and services on the Internet without having to store a separate payment means such as a credit card, an IC card, and an account number in the mobile communication device. The present invention relates to a payment service method that allows for convenient payment using a Bluetooth communication method using a mobile communication device.

Currently, payment methods on the Internet include credit card payment, bank transfer, prepaid card and mobile phone payment. Although credit card payment is a payment method that buyers have a feeling of rejection due to the side effect of leaking credit card number, the frequency of use continues to increase due to the convenience and post-payment advantages, and it is necessary to minimize the side effect of credit card number leakage. Holding it. Although the account transfer method is a relatively secure payment method, the utilization rate is gradually reduced as a payment method due to low convenience. Prepaid cards are safe to use, but they are not very active due to the inconvenience of having to buy or charge them in advance.

On the other hand, mobile phone payments are rapidly increasing in frequency due to safety and convenience. However, in the case of mobile phone payment service using SMS, the authorization number is output to the mobile phone of another person who does not want to pay. In addition, in the case of the ARS-type payment service in which a user calls a specific phone number and pays according to voice guidance, a payment time according to voice guidance takes a long time. In addition, since the public mobile communication method is used, it is difficult to process the payment in the place where the public mobile communication is disturbed or there is radio noise.

Therefore, the present invention is proposed to solve the above problems of mobile phone payment, and can use only a short-range Bluetooth communication method and an internet communication network without going through a public mobile communication network while using a mobile communication device including a mobile phone and a PDA. Provide means. In particular, while paying using a mobile communication device, there is no need to store payment information such as credit card, IC card, account number in the mobile communication device, and can prevent the disadvantage that the authorization number is output to the other person's mobile phone. As a result, the ARS method can reduce the slow payment time. It also aims to provide a way to use virtual services such as the Internet, payments in physical spaces (commercial facilities) such as stores, or financial services on CD / ATM.

The following drawings attached to this specification are illustrative of preferred embodiments of the present invention, and together with the detailed description of the invention to serve to further understand the technical spirit of the present invention, the present invention is a matter described in such drawings It should not be construed as limited to

1 is a view showing an embodiment of the present invention.

2 is a block diagram showing an embodiment of a main server installed in a payment service company.

3 is a block diagram illustrating an embodiment of a PC used by a buyer.

4 is a block diagram illustrating an embodiment of a mobile communication device possessed by a purchaser and equipped with a Bluetooth device.

5 is a block diagram illustrating an embodiment of a web server installed in an Internet company.

6 is a block diagram illustrating an embodiment of a payment server installed in a payment institution.

7 is a block diagram illustrating an embodiment of a relay device connected to the Internet and including a Bluetooth device.

8 is a flowchart illustrating an embodiment of a payment service method according to the present invention.

9 is a flowchart illustrating a process of delivering payment information by a web server to a main server when a buyer wants to purchase a product from a web server.

10 is a flowchart illustrating a process in which the main server receives the buyer's identification information from the PC.

11 is a flowchart illustrating a process in which a main server receives Bluetooth device address information of a mobile communication device of a purchaser.

12 is a flowchart illustrating a process in which a main server transmits and receives an authorization number to a mobile communication device or a PC.

FIG. 13 is a flowchart illustrating a process of transmitting a full payment approval request message to a payment server after the main server verifies that the approval numbers match.

14 is a flowchart illustrating a process of the payment server determining whether to approve payment and transmitting a full text of a payment approval or rejection response to the main server.

15 is a flowchart illustrating a process in which a main server transmits a payment approval to a web server and a buyer, and the web server sells the product to the buyer or rejects the sale.

16 is a flowchart illustrating a process in which a mobile communication device transmits a phone number of a mobile communication device to a relay device.

17 is a flowchart illustrating a process in which the main server checks and processes whether or not the telephone numbers of the mobile communication devices received from the relay device and the PC match each other.

* Brief description of the major symbols in the drawings *

100: predetermined communication network including the Internet

200: main server of the payment service company 240: operating system

255: network interface 260: processor

300: personal use PC 372: processor

375: Encryptor 378: Browser 380: Brutus device

400: a mobile communication device in which the buyer's Bluetooth device is embedded

472: processor 480: Bluetooth device

500: Internet company's web server 572: Processor

575: encryptor 578: browser 579: authenticator

600: payment server of the payment institution 672: processor

675: Encryptor 690: Memory

700: repeater 772: processor 780: Bluetooth device

The present invention relates to a method for making a payment using a mobile communication device with a built-in Bluetooth device, and is made through Bluetooth communication and Internet communication. In particular, the address of a Bluetooth device embedded in the mobile communication device and a resident registration of a buyer The payment is made by verifying the number.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Prior to this, terms or words used in the present specification and claims should not be construed as having a conventional or dictionary meaning, and the inventors should properly define the concept of terms in order to explain their invention in the best way. It should be interpreted as meaning and concept corresponding to the technical idea of the present invention based on the principle that it can.

Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiment of the present invention and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

Hereinafter, an interface for implementing the present invention in an embodiment will be described with reference to FIGS. 1 to 2. As shown in Figure 1, the devices implementing the present invention are connected through a predetermined communication network 100, including the Internet, the main server 200 is installed in the payment service company, the PC 300, the buyer used, the buyer The mobile communication device 400 with a built-in Bluetooth device, a web server 500 installed in an Internet company, a payment server 600 installed in a payment institution, a relay device 700 embedded with a Bluetooth device. ), Modems 250, 350, 550, 650, 750, and the like.

The payment institution installed with the payment server 600 refers to any company that holds or collects information on the mobile communication device of the buyer while having a function of approving the payment and collecting the payment amount from the buyer. In other words, a company having a payment and collection function and having information on a mobile communication device of a buyer means a mobile communication company such as SKT, LGT, KTF, and the like. In addition, companies that have payment and collection functions and collect information about buyers' mobile devices include financial institutions such as banks, savings banks, Saemaul vaults, capitals, prepaid / debit / credit card companies, and distribution companies such as department stores. Includes a variety of vendors.

The predetermined communication network 100 including the Internet refers to a communication network capable of transmitting and receiving data to and from a remote computer. Such communication networks include wired communication networks such as leased lines, PSTN, CO-LAN, and X.25 packet communication networks, as well as wireless communication networks such as PCS, CDMA, GSM, IMT-2000, and satellite communications. In addition, the Internet communication network can be connected through an Internet connection using a public switched telephone network (PSTN) provided by a communication company such as Korea Telecom, and the Internet dedicated line is also used. These leased lines are provided by various operators such as MegaPass of Korea Telecom, ADSL of Hanaro Telecom, and Bora Homenet of Dacom. In the present invention, a predetermined communication network 100 including the Internet is abbreviated as 'Internet'.

The web server 500 installed in the Internet company is a computer connected to the modem 250 of the main server 200 through the Internet 100 connected to the modem 550, where the Internet company is a product paid for by a buyer on the Internet. Means a company that sells or provides services and content. In addition, the payment server 600 installed in the payment institution is connected to the main server 200 through the modem 650, the PC 300 is connected to the main server 200 through the modem 350, relay Device 700 is also connected to main server 200 via modem 750.

Using these configurations, the buyer selects the purchase of goods and services on the screen provided by the web server 500, and then recognizes information such as his social security number and payment institution on the screen provided by the main server 200. Enter the identification code. The relay device 700 transmits the Bluetooth device address information, which is recognition information of the mobile communication device 400 recognized in the process of connecting to the mobile communication device 400 of the purchaser, to the main server 200. Since the main server 200 generates the approval number and transmits the approval number to one of the mobile communication device 400 or the PC 300 via the relay device 700, the other server is approved from the other device. After receiving the number and checking whether there is an authorization number that matches the authorization number received from the stored authorization number, the payment request information received from the web server 500 and the recognition information about the buyer and the mobile communication device input from the buyer The payment server 600 corresponding to the payment institution identification code is transmitted to request payment approval.

In FIG. 2, the main server 200 includes a computing unit (CPU) 210, a RAM 230, a ROM 220, an operating system 240, an authenticator 280, an encryptor 270, and a modem 250. , A network interface 255, a storage device 290 for recording data, and a processor 260.

A traditional personal computer, workstation or medium to large computer with a significant amount of memory and processing power may be used as the main server 200. In one embodiment it acts as a server to process identification information for purchasers and mobile communication devices received from multiple PCs 300 or relays 700, including payment request information received from multiple web servers 500. And, the payment server 600 of a plurality of payment institutions to process and transmit the payment approval or rejection response message received after requesting verification and payment approval for the recognition information of the buyer, mobile communication device.

The memory 290 for recording data may include magnetic or optical storage devices such as a CD-ROM drive, a flash memory, and a hard disk. The data storage device 290 includes a buyer database 291, an internet company database 292, a payment institution database 293, a payment request database 294, a payment approval request database 295, and a payment response database 296. By doing so, the data used in the payment service process according to the present invention are recorded.

The purchaser database 291 includes information on purchaser identification information, payment institution identification code, purchaser payment information (such as a credit card number or bank account number), maximum payment amount limit information, a mobile phone number, a Bluetooth device address of the mobile device, and the like. Contains information. This information is stored in a part of the information of the buyer database 691 stored in the payment server 600 by the main server 200, the main server 200 whether or not the buyer owns his mobile communication device (400) Database used when first checking. On the other hand, even if the buyer database 291 does not exist in the main server 200, it is naturally possible to perform the verification of the buyer and the buyer's mobile communication device 400 in the payment server 600, and the payment server 600 The main server 200 can also double check how much. When the main server 200 has the buyer database 291, the main server 200 is stored in the buyer database 291 even if the buyer skips inputting the payment institution identification code on the PC 300. There may also be a method configured to request a payment approval request to the payment server 600 corresponding to the payment institution identification code.

The internet company database 292 contains information such as the company profile (company name, address, telephone number, business registration number, etc.) of the internet company, the identification code of the internet company, the list of products sold and / or services, and the payment service. This information mainly records the contracted information regarding the contract and the information that is referred to for processing the full payment request from the Internet company.

The payment institution database 293 records information such as a payment institution profile (payment authority name, address, telephone number, business registration number, etc.), maximum payment amount limit, payment institution identification code, service start date, service end date, and the like. These information records the information contracted with respect to the payment service and the information referenced by the main server 200 to request the payment server 600 to approve payment.

The payment request database 294 includes a payment institution identification code, an Internet company identification code, a payment request tracking number, a payment amount, an address of a Bluetooth device attached to the mobile communication device, a phone number of the mobile communication device 400, and a resident registration of a buyer. Record the number, sales item, payment request date, payment request time information and IP address of the buyer PC. The information includes payment request information received from the web server 200 as well as identification information for the purchaser and the mobile communication device 400 received from the PC 300 and the relay apparatus 700. The buyer's identification information is unique information that can identify the buyer. In the present invention, the social security number is preferably used as the buyer's identification information, but if there is other information that can uniquely identify the buyer, It may be used additionally. In addition, the recognition information of the mobile communication device 400 with a built-in Bluetooth device means a Bluetooth device address that can be distinguished from all other Bluetooth devices, and in one embodiment of the present invention, the mobile communication device is used as identification information of the mobile communication device. The phone number of may also be added. The payment institution identification code is an identification code input from a buyer to distinguish a plurality of payment institutions, and the Internet company identification code is an identification code for easily distinguishing a plurality of Internet companies. In addition, the payment request database 294 includes an authorization number, which is information distinguished from the payment authorization number included in the payment response database 296, and the authorization number actually includes the mobile communication device 400 of the buyer. Since the main server 200 is used to check whether there is a positive integer that is preferably valid only within a certain time (for example, 5 minutes) means a single-use random number. When the main server 200 outputs the approval number to the mobile communication device 400 via the relay device 700, the main server 200 stores the identification information and the approval number of the mobile communication device 400 and is received from the PC 300. The identification information of the buyer corresponding to the authorization number is matched. In contrast, when the authorization number is output to the PC 300, the authorization number and the identification information of the buyer are stored and correspond to the authorization number received from the mobile communication device 400. It performs a function to match the recognition information of the mobile communication device 400. In addition, the IP address information of the buyer PC 300 includes information such as an IP address for recognizing the PC 300 used by the buyer on the Internet 100, and the IP address information of the PC 300 is main The server 200 may be used as information for outputting an input screen to the PC 300 or as a record for tracking payment contents after the payment service is completed. The payment request tracking number is given when the web server 500 transmits the full payment request to the main server 200, and the main server 200 includes the payment request tracking number in the payment approval or rejection response message. By transmitting to 500, it is used as information to match the request message and the response message with each other.

The payment authorization request database 295 includes a payment institution identification code, a main server identification code, an internet company identification code, a payment request tracking number, a payment approval request tracking number, a payment amount, a sale product, a payment approval request date, a payment approval request time, The payment server 600 records information for requesting and processing payment approval, such as a payment request date and a payment request time. In particular, the payment institution identification code and the Internet company identification code is composed of the same code system as the payment institution identification code and the Internet company identification code recorded in the payment request database (294). The payment approval request tracking number is assigned when the main server 200 transmits the full payment approval request to the payment server 600. The payment server 600 includes the payment approval request tracking number in the payment approval or rejection response message. By transmitting to the main server 200 is utilized as information for matching the request message and the response message to each other.

The payment response database 296 includes a payment institution identification code, a main server identification code, an Internet company identification code, a payment request tracking number, a payment approval request tracking number, a payment amount, a sale product, a payment approval request date, a payment approval request time, and a payment. Information such as the request date, payment request time, payment approval number, response code, the payment server 600 transmits the payment approval or rejection response message to the main server 200 with respect to the payment approval request message and the main server 200. In the web server 500 consists of information for transmitting the full payment approval or rejection response. The response code contains information that informs you of the result of the payment authorization. If the response code contains a reason for the chargeback, the payment authorization number is zero. If the response code contains payment authorization information, the payment is made. It is desirable that the authorization number be a positive integer rather than null.

The network interface 255 connects the PC 300, the relay device 700, the web server 500, and the payment server 600 through the modem 250 so that the main server 200 processes the payment service. Gateway to send and receive information. Synchronous communication ports (cards) and Asynchronous communication ports (cards), including conventional LAN cards, function as network interface 270. However, it should be possible to connect a plurality of computers described above. In particular, since the main server 200 exchanges information with the purchaser's mobile communication device 400 via the relay device 700, even if the main server 200 does not directly connect with the mobile communication device 400. The present invention can be preferably implemented.

The processor 260 performs a function of transmitting / receiving information in the process of authenticating the PC 300, the relay device 700, the web server 500, and the payment server 600 that the authenticator 280 uses. And, it receives the payment request information from the web server 500, and receives the recognition information about the buyer, the mobile communication device 400 from the buyer to transmit the full payment approval request to the payment server 600. Further, the web server 500, the PC 300, and / or the mobile communication device 400 are notified of the information of the payment approval and rejection response message received from the payment server 600. The processor 260 also performs a function of recording the transmitted and received information in the storage device 290, and generates an approval number to output or receive the purchaser's PC 300 or the mobile communication device 400. For this operation processor 260 includes a number of modules, which will be more specific while describing the operation of the present invention described below.

The authenticator 280 stores the public key and uses the digital signature in the information transmitted to the web server 500, the payment server 600, the relay apparatus 700, and the PC 300 to authenticate each other. do. In general, authentication is used to authenticate each other's identity by encrypting an electronic document with a public key and decrypting the electronic document with a corresponding private key.Another purpose of authentication is to tamper with, reuse, leak, and deny an electronic document. To prevent it.

And, optionally, may further include an encryptor 270. The encryptor 270 operates in the same manner as the encryptor used in the payment server 600, the web server 500, the relay apparatus 700, and the PC 300 described below, and encrypts information transmitted and received between each other. Is used. For example, a Korean signature-based Digital Signature Algorithm (KCDSA) may be used. The KCDSA can provide strong security by allowing the user to select the number of bits of parameters used for signing based on a certificate. Preferably, in the present invention, information transmitted between computers is encrypted to protect the information from being stolen.

The operating system 240 refers to an operating system (OS) in which the main server 200 can perform a function as a computer. For example, in addition to the WINDOW series of UNIX, LINUX, and MS, many OSs are commercially available and in use, so the operating system 240 can select and use an OS suitable for the H / W platform and an application program can be appropriately executed.

Although one computer has been described as acting as the main server 200 in the above embodiments, those skilled in the art will recognize that the functionality may be distributed among a plurality of computers.

3, 4, 5, 6, and 7, detailed descriptions of components that are partially the same as those described in FIG. 2 will be omitted.

In FIG. 3, the PC 300 includes a CPU 310, a RAM 330, a ROM 320, a monitor driver 340, an input device 360, a modem 350, a Bluetooth device 380, and an operating system ( 370, browser 378, processor 372, encryptor 375, authenticator 379, and data storage 390.

Optionally, the Bluetooth device 380 is a device used when the PC 300 includes or replaces the role of the relay device 700. The Bluetooth device 380 may communicate with the Bluetooth device 480 embedded in the mobile communication device 400 in a Bluetooth communication manner. An interface for connecting and transmitting and receiving data is provided, and a Bluetooth device module built in or connected to the PC 300 functions as the Bluetooth device 380. When the purchaser wants to connect his mobile communication device 400 to the Bluetooth device 380 of the PC 300 in an authenticated mode, the purchaser enters the PIN of the Bluetooth device 480 of the mobile communication device 400. The code information is input through the input device 360 of the PC 300 so that the processor 372 can be connected through an authentication procedure, or the PC 300 is connected to the Bluetooth device 480 of the mobile communication device 400 in advance. With the pin code stored in the memory device 390, the processor 372 can connect through an authentication procedure. However, in the present invention, when the Bluetooth device 480 of the mobile communication device 400 connects to the Bluetooth devices 380 and 780 of the PC 300 or the relay apparatus 700 in a non-secured mode, As described above, the procedure for entering or verifying the pin code can be omitted, so that the payment service can be more preferably processed.

Optionally, the authenticator 379 and the encryptor 375 may be included to operate in the same manner as the authenticator 280 and the encryptor 270 of the main server 200.

Modem 350 preferably supports ultra-high speed data transmission because the Internet is currently based on TCP / IP based Html.

The browser 378 performs mainly functions for generating web pages and transmitting data therein, which can communicate with the PC 300. The browser 378 has a lot of commercial application software, for example 'Netscape Navigator' by Netscape, 'explorer' by Microsoft. The purchaser may search, input, correct, or delete information for purchasing goods and services in the web server 500 through the browser 378, and input information for payment in the main server 200, It works for correcting and deleting.

In one embodiment of the present invention, the purchaser is connected to the Internet 100 through a modem 350 connected to the PC 300, and communicates with the web server 500 and the main server 200.

The PC 300 may be a PC owned by a buyer, but may be a public PC installed in a PC room or a public place. In some cases, while performing the functions required for the PC 300, a POS or credit card checker or CD / ATM installed in a commercial facility such as a shop or a shopping mall is also included in the scope of the PC 300. Details will be detailed later.

In FIG. 4, the mobile communication device 400 includes a CPU 410, a RAM 430, a ROM 420, a monitor driver 440, an input device 460, a Bluetooth device 480, a processor 472, and a mobile device. An operating system 470 and a data storage 490.

The Bluetooth device 480 is connected to the Bluetooth devices 780 and 380 embedded in the relay apparatus 700 or the PC 300 in a Bluetooth communication manner and provides an interface for transmitting and receiving data, and the mobile communication device 400. The Bluetooth device module embedded in or connected to the Bluetooth device 480 functions as the Bluetooth device module 480. Optionally, the Bluetooth device 480 may be configured to connect after the mutual authentication procedure in the process of connecting with the relay apparatus 700 or the Bluetooth devices 780 and 380 of the PC, and the encryption key generated in the connection process may be used. It can also be configured to perform the role of encrypting or decrypting information transmitted and received using. Generally, this authentication and encryption function is used to disallow the connection with other Bluetooth devices or to protect the information transmitted and received from other Bluetooth devices.

Mobile operating system 470 is largely commercially available such as Microsoft's Windows CE, Sun Microsystems' Java and Linux, but more various products will be released in the future, so that mobile communication device 400 can be used as a computer. Function.

The processor 472 processes the procedure of connecting with the relay apparatus 700, and transmits the approval number input by the purchaser to the relay apparatus 700 through the input apparatus 460 or receives the approval received from the relay apparatus 700. A function of outputting the number to the monitor 441 is performed. In some cases, the processor 472 may be configured to transmit its own phone number stored in the storage device 490 to the relay device 700 after connecting to the relay device 700. At this time, the processor 472 function of the mobile communication device 400 for transmitting and receiving information with the relay device 700 serves as a Bluetooth profile. In general, the Bluetooth profile of a Bluetooth device is a communication program for exchanging information with each other after connecting with other Bluetooth devices, and Bluetooth Profiles such as Printer Profile and FAX Profile have already been released. This will continue to be developed and commercialized.

In FIG. 5, the web server 500 may include a CPU 510, a RAM 530, a ROM 520, a monitor driver 540, an input device 560, a modem 550, an operating system 570, and a processor ( 572, encryptor 575, browser 578, authenticator 579, and data storage device 590.

The data storage 590 includes a goods and service database 591, a payment request database 592, and a payment response database 593 to record data used in the payment service process according to the present invention.

The goods and services database 591 includes information such as goods and services specifications, prices, inventory, and delivery periods, and consists of information related to goods and services for sale to buyers.

The payment request database 592 includes purchase information input or selected by the purchaser on the input screen of the web server 500 from the PC 300 and payment request information transmitted to the main server 200. That is, it consists of information related to the price, quantity, purchase date, purchase time, delivery date, payment request tracking number, specialized transmission date and time of goods and services that the buyer wants to purchase.

Payment response database 593 records the contents of the payment approval or rejection response text received from the main server 200, the information included at this time payment amount, payment request tracking number, full text transmission date, response code, payment approval number It consists of information related to the back. In particular, the response code and the payment approval number serve as important information for determining whether to approve the payment request from the main server 200.

The processor 572 receives the purchase information from the buyer and makes a payment request to the main server 200, and receives a full response to the payment request to determine whether to sell the goods and services to the buyer, thereby notifying the buyer. Play a role.

In FIG. 6, the payment server 600 includes a CPU 610, a RAM 630, a ROM 620, a monitor driver 640, an input device 660, a modem 650, an operating system 670, a processor ( 672, encryptor 675, authenticator 678, and data storage 690.

The data storage 690 includes a buyer database 691, an internet company database 692, a payment approval request database 693, and a payment response database 694 to record data used in the payment service process according to the present invention. Doing.

The buyer database 691 includes information on the purchaser's personal information, the mobile phone's telephone number, payment buyer's payment information (such as a credit card number or bank account number), communication password, maximum payment amount limit information, remaining payment amount, and whether or not it was lost. , The purchaser's mobile communication device's Bluetooth device address, the purchaser's social security number, and the like. This information consists of information to approve the payment requested by the buyer and to charge the payment from the buyer. In particular, the payment server 600 stores the Bluetooth device address of the buyer mobile communication device and the social security number of the buyer and optionally the telephone number information of the mobile communication device received from the main server 200 in the buyer database 691. Compare with the information to verify whether the buyer owns his mobile device.

The payment approval request database 693 and the payment response database 694 include the full text of the payment approval request received from the main server 200 and the full text of the payment response sent to the main server 200, respectively.

Optionally, the authenticator 678 and the encryptor 675 may be included to operate in the same manner as the authenticator 280 and the encryptor 270 of the main server 200.

The processor 672 receives the full payment approval request from the main server 200 to determine whether the payment is approved, and responds to the main server 200 with the result, and stores the processing result in the storage device 690. To record.

In FIG. 7, the relay device 700 includes a CPU 710, a RAM 730, a ROM 720, a monitor driver 740, an input device 760, a modem 750, a Bluetooth device 780, and an operating system. 770, processor 772, encryptor 775, authenticator 778, and data storage device 790.

The Bluetooth device 780 of the relay apparatus 700 provides an interface for connecting to the Bluetooth device 480 embedded in the mobile communication device 400 in a Bluetooth communication manner and transmitting and receiving data. Optionally, the Bluetooth device 780 also performs mutual authentication and encryption functions in the process of connecting with the Bluetooth device 480 of the mobile communication device. When connecting to the Bluetooth device 480 of the mobile communication device in the authenticated mode, the purchaser inputs pin code information, which is a password of the Bluetooth device 480 of the mobile communication device 400, to the input device of the relay device 700 ( 760 inputs through the processor 772 to authenticate or the relay 700 stores the pin code of the Bluetooth device 480 of the mobile communication device 400 in the storage device 790 in advance. In FIG. 6, the processor 772 may be configured to connect after the purchaser authenticates even if there is no procedure for inputting a pin code in the input device 760.

Also, the authenticator 778 and the encryptor 775 may optionally be included to operate in the same manner as the authenticator 280 and the encryptor 270 of the main server 200.

The modem 750 preferably supports the high speed data transmission currently based on TCP / IP.

The processor 772 may be connected to the mobile communication device 400 in a Bluetooth communication manner to transmit and receive information, and the main server 200 may be connected in a TCP / IP manner to transmit and receive information. In particular, after the processor 772 is connected to the Bluetooth device 480 of the mobile communication device 400, the processor 772 also transmits address information of the Bluetooth device 480, which is recognition information of the mobile communication device, to the main server 200. Perform. In addition, when the Bluetooth device 480 of the mobile communication device 400 transmits the telephone number of the mobile communication device 400, the processor 772 moves the identification information of the mobile communication device to the address of the Bluetooth device 480. The phone number of the communication device 400 is configured and transmitted to the main server 200.

In general, the relay device 700 is preferably installed at a short distance from the PC (300). Here, the basis means that the buyer wants to purchase goods and services from the web server 500 on the PC while possessing the mobile communication device 400, the Bluetooth device of the mobile communication device 400 possessed by the buyer It means the range of the place 480 can communicate with the Bluetooth device 780 of the relay apparatus 700. The current technology level is limited to a few tens of meters, but in the future, it is expected to extend beyond a few hundred meters by installing an amplifier.

In one embodiment of the present invention, the relay device 700 connects to the main server 200 based on TCP / IP, and connects to the mobile communication device 400 in a Bluetooth communication manner to relay information between them. . Preferably, the relay apparatus 700 may be used in a place such as a PC room in which a plurality of buyers and the PC 300 are installed, so that the payment service of the present invention may be used even when a Bluetooth device is not installed in the plurality of PCs 300. It performs the function. If a plurality of PCs are equipped with Bluetooth devices, the relay apparatus 700 may be configured not to be used.

Referring to Figure 8, it will be described in detail how the payment service according to the invention is performed.

When the purchaser selects the purchase of goods and services of the web server 500 on the PC 300, the web server 500 completes a payment request message including information such as a payment amount and a payment date and time to the main server 200. (S100: first procedure)

The contents of the information transmitted by the web server 500 to the main server 200 in the full text of the payment request have been described in detail in the payment request database 592 of FIG. 5.

Hereinafter, the first procedure S100 will be described in more detail with reference to FIG. 9.

When the web server 500 outputs the merchandise and service sale screen to the purchaser PC 300 (S110), the purchaser selects a purchase button on the sale screen (S120). At this time, the web server 500 records the purchase price, purchase request time, etc. in the payment request database 592 (S130), and then transmits the full payment request to the main server 200 (S140).

The web server 500 may transmit the payment request message to the main server 200 in the form of a payment request information in a specific message format, but preferably, the payment request amount, payment request date, web Information such as an identification code of the server 500 may be attached and transmitted.

The main server 200 outputs an input screen to the PC 300, and receives its identification information and payment institution identification code from the buyer (S200: second procedure).

The information received from the buyer on the input screen of the PC 300 by the main server 200 is recorded in the payment request database 294 of FIG. 2.

Hereinafter, the second procedure S200 will be described in more detail with reference to FIG. 10.

The main server 200 records the purchase amount received from the web server 500 and the IP address information of the buyer PC 300 in the payment request database 291 (S210), and then, the residents who are the buyer's identification information on the buyer PC. Outputs an input screen to enter the registration number and payment institution identification code (S220). The buyer inputs his identification information and payment institution identification code in the input screen (S230), the main server 200 records the information received from the buyer's PC 300 in the payment request database (294) (S240). . Here, the method of inputting the payment institution identification code may be more preferably configured by selecting a specific payment institution from a plurality of payment institution lists. In some cases, the main server 200 may add the phone number information, which is the identification information of the mobile communication device 400, together with the purchaser's identification information and payment institution identification code. Another embodiment may be configured.

When the purchaser connects his mobile communication device 400 to the relay device 700 by the Bluetooth communication method, the relay device 700 receives the Bluetooth device address which is the identification information of the mobile communication device 400 in the main server. (S300: third procedure).

Hereinafter, the third procedure S300 will be described in more detail with reference to FIG. 11.

The Bluetooth device 780 embedded in the relay 700 becomes a Bluetooth master device and changes from the ready mode to the inquiry mode (S310), and is embedded in the purchaser's mobile communication device 400 in the piconet. Inquiry is made (S315). At this time, the Bluetooth device 480 embedded in the mobile communication device 400 becomes a Bluetooth slave device and transmits its Bluetooth device address BD_ADDR in response to an inquiry (S320), and in some cases, the Bluetooth device. You can also send a name. Thereafter, the Bluetooth device 780 of the relay apparatus 700 notifies the page command to the Bluetooth device 480 of the mobile communication device 400 (S325). At this time, when the Bluetooth device 480 of the mobile communication device 400 determines whether to connect in an authenticated mode (S330) and attempts to connect in a non-authenticated mode, the Bluetooth device 480 of the mobile communication device 400 is connected. While transmitting the communication connection packet to the Bluetooth device 780 of the relay apparatus 700 (S335), the Bluetooth devices 480 and 780 connect with each other while transitioning to the connection mode (S340). If the Bluetooth device 480 of the mobile communication device 400 wishes to connect to the Bluetooth device 780 of the relay apparatus 700 in the secure mode, the PIN code and the BD_ADDR of its own are input. The link key is generated by combining, the random number RAND is generated, and the cryptographic value SRES is substituted by assigning to a specific function that combines the link key, the random number RAND, and BD_ADDR information. Next, the random number RAND is transmitted to the relay apparatus 700 (S345). At this time, the purchaser must input (S350) the pin code of the Bluetooth device of the mobile communication device to the input device 760 of the relay device 700, the Bluetooth device 780 of the relay device 700 is a mobile communication device After calculating the encryption value (SRES) in the manner calculated by the Bluetooth device 480 of (400) and transmitting (S355) to the Bluetooth device 480 of the mobile communication device 400, both Bluetooth devices 480, 780 connects (S360) while transitioning to the connection mode with each other. Subsequently, the relay apparatus 700 transmits the address information of the Bluetooth device 480 of the mobile communication device 400 recognized in the connection process with the Bluetooth device 480 of the mobile communication device 400 to the main server 200 ( S365).

Meanwhile, the third procedure S300 may be configured as another embodiment as shown in FIG. 16. That is, the procedure of (S310) to (S360) of FIG. 11 is performed as it is, and (S365) is a procedure in which the mobile communication device 400 transmits phone number information, which is its identification information, to the relay apparatus 700 (S367). ), The relay apparatus 700 configures the identification information of the mobile communication device as the phone number of the mobile communication device 400 and the address information of the Bluetooth device 480 of the mobile communication device 400 to the main server 200. It can be configured to change to transmit (S369).

When the main server 200 generates the approval number and outputs the approval number to one of the mobile communication device 400 or the PC 300 via the relay device 700, the purchaser approves among the two devices. Input the authorization number to another device that does not output the number is transmitted to the main server 200. (S400: fourth procedure)

When the main server 200 outputs the approval number to the mobile communication device 400 or the PC 300, the approval received by recording the identification information of the mobile communication device or the purchaser in the payment request database 294 together with the approval number. Make the number searchable.

Hereinafter, the fourth procedure S400 will be described in more detail with reference to FIG. 12.

When the main server 200 generates the approval number (S410) to determine whether to output to the PC 300 (S415), and outputs to the PC 300 (S420), the buyer in the mobile communication device 400 When the approval number is input (S425), the mobile communication device 400 transmits the received approval number to the relay apparatus 700 (S430), and the relay apparatus 700 transmits the approval number information to the main server 200 ( S435). If the output to the relay device (S440) (S440), the relay device 700 transmits the approval number to the mobile communication device 400 (S445) to display the approval number received by the mobile communication device 400 on the screen. Output (S450), the buyer will enter the approval number (S455) on the input screen of the PC (300).

Preferably, when the relay device 700 transmits the approval number to the main server 200, the relay device 700 transmits the approval number information together with the Bluetooth device address information of the mobile communication device, and the purchaser can enter the input screen of the PC 300. In the case of inputting the approval number, the main server 200 should naturally recognize that the approval number has been input on the screen corresponding to the recognition information of the specific buyer.

In addition, as shown in FIG. 17, in the second to third procedures, the main server 200 simultaneously receives telephone number information of the mobile communication device 400 from the relay apparatus 700 and the PC 300. In this case, the main server 200 extracts the phone number information, which is the recognition information of the mobile communication device 400 received from the relay apparatus 700 and the PC 300 (S402), and then the phone of the mobile communication device 400. After checking whether the number information matches each other (S404), if it matches, proceed with the fourth step (S400), and if it does not match, transmit the full text of the rejection response to the web server 500 (S406). And output the payment declined content to the PC 300 or the mobile communication device 400 (S408), the web server 500 may be configured to reject the sale of goods to the buyer (S409).

If the main server 200 stores the approval number received from the relay device 700 or the PC 300 among the approval numbers stored, and if there is a matching approval number, the payment server 600 completes the payment approval request. If not, the web server 500 and the PC 300 or optionally the mobile communication device 400 notifies the payment rejection. (S500: fifth procedure)

The full payment approval request transmitted from the main server 200 to the payment server 600 is recorded in the payment approval request database 295 of FIG. 2 and the payment approval request database 693 of FIG. 6, respectively. The full text of the payment decline response transmitted by the 200 to the web server 500 is recorded in the payment response database 296 of FIG. 2 and the payment response database 593 of FIG. 5, respectively.

Hereinafter, the fifth procedure S500 will be described in more detail with reference to FIG. 13.

The main server 200 determines whether there is a matching approval number by searching for the approval number input from the PC 300 among the approval numbers in storage (S510), and if there is the same approval number, the main server ( 200 transmits the full payment approval request to the payment server 600 (S530), and if there is no same approval number, the main server 200 transmits the full payment rejection response to the web server 500 (S540) and the PC (300). Or outputs that the payment is rejected to the mobile communication device 400 (S550), and the web server 500 does not sell goods and services to the buyer (S560).

The payment server 600 checks whether the mobile communication device 400 and the purchaser's recognition information included in the full text received from the main server 200 are correct, whether the lost mobile communication device is exceeded, and whether the payment limit is exceeded. After determining whether to approve or not, the result is transmitted to the main server 200. (S600: Sixth procedure)

The full payment approval or rejection response transmitted by the payment server 600 to the main server 200 is recorded in the payment response database 296 of FIG. 2 and the payment response database 694 of FIG. 6, respectively.

Hereinafter, the sixth procedure S600 will be described in more detail with reference to FIG. 14.

The payment server 600 extracts identification information of the buyer and the mobile communication device 400 from the payment approval request text and the purchaser database 691 received from the main server 200 (S610), and whether the information is consistent or not. After checking whether or not the mobile communication device and the payment limit is exceeded (S620), if there is no reason to decline the payment, the main server 200 transmits the full payment approval response (S630), and if there is a reason to decline the payment, the main server ( 200 to transmit a payment rejection response message (S640).

The main server 200 transmits the entire payment approval or approval rejection response message to the web server 500 and notifies the PC 300 or the mobile communication device 400 whether the payment is approved, and the web. The server 500 sells the product to the buyer or rejects the sale according to the approval of the payment. (S700: 7th procedure)

The web server 500 records the full payment approval or rejection response received from the main server 200 in the payment response database 193 of FIG. 5.

Hereinafter, the seventh procedure S700 will be described in more detail with reference to FIG. 15.

When the main server 200 transmits the full payment approval or rejection response to the web server 500 (S710) and notifies the purchaser's PC 300 or the mobile communication device 400 whether the payment is approved (S720), The web server 500 records the received message (S730) and determines whether the payment is approved (S740). If the payment is approved, the product and the service are sold to the buyer (S750). If the payment is rejected, the product and the service are sold to the buyer. It will not be (S760).

On the other hand, when a POS or credit card inquiry machine or CD / ATM (hereinafter referred to as 'POS') installed in a commercial facility such as a shop or a shopping mall performs the functions of the PC 300 and the relay apparatus 700, Preferably also performs the function including the web server 500. In addition, the POS includes the H / W and S / W components included in the PC 300, the relay apparatus 700, and the web server 500, that is, the components of FIGS. 3, 7, and 5. It should be included, and the functions and procedures processed by the PC 300, the relay apparatus 700 and the web server 500 are similarly processed. In other words, if the POS environment is established as described above, the purchaser can use a product purchase or a financial transaction using the Bluetooth device of the present invention in a real space (commercial facility) such as a CD / ATM or a store or a shopping mall.

According to the present invention, a purchaser having a mobile communication device incorporating a Bluetooth device provides a means for making a payment using only a Bluetooth communication method and an internet communication network without using a public mobile communication network. In particular, while making payments using a mobile communication device, it is not necessary to store payment information such as credit cards, IC cards, and account numbers in the mobile communication device, thereby minimizing the possibility of financial accidents, and reducing the Bluetooth device of the mobile communication device. Since the owner of the mobile communication device can accurately check whether the owner of the mobile communication device is actually used by using the address information, the payment processing is accurate. In addition, there is an effect that can prevent the privacy infringement of the individual that may occur by the approval number is output to the other person's mobile phone in advance. In addition, by using only the Bluetooth communication method and the Internet communication network without using the public mobile communication network, it is possible to shorten the payment time by using the mobile communication network, and in particular, an error may occur because the payment method does not intervene at all. There is an advantage in minimizing the possibility and saving time due to voice guidance. In addition, since the mobile communication costs are not generated due to payment, communication costs can be saved even in the country.

In addition, payments can be made in virtual spaces such as the Internet, physical spaces such as shops (commercial facilities), and financial services on CD / ATM.

Claims (15)

A web server located in an Internet company and connected to a predetermined communication network including the Internet and selling goods or services; A PC which can be used by a buyer who wants to purchase goods or services from the web server and is connected to a predetermined communication network including the Internet; A mobile communication device possessed by a purchaser and containing a Bluetooth device; A repeater device having a built-in Bluetooth device and connected to the mobile communication device through a Bluetooth communication method and connected to a predetermined communication network including the Internet; A payment server located in a payment institution, connected to a predetermined communication network including the Internet, and performing a function of approving or rejecting a payment; A main server located in a payment service company and connected to the web server, the PC, the relay device, and the payment server through a predetermined communication network including the Internet; And When the buyer selects the purchase of goods and / or services on the input screen of the web server displayed on the PC, the web server transmits the full payment request to the main server, and the main server recognizes the buyer from the PC. Receiving information and a payment institution identification code from a purchaser, and transmitting address information of a Bluetooth device, which is identification information of a mobile communication device recognized by the relay device in connection with the mobile communication device, to the main server; Generates an authorization number and transmits the authorization number to one of the mobile communication devices or PCs via the relay device, and receives the authorization number from the other device to see if there is an authorization number that matches the authorization number received from the authorization number in storage. After confirming, the payment request information received from the web server and the relay device or ( ) If the full payment approval request including the identification information of the purchaser and the mobile communication device received from the PC is transmitted to the payment server corresponding to the payment institution identification code, the payment server determines whether the payment is approved and notifies the main server. And, the main server transmits whether the payment approval to the web server and the PC or optionally the mobile communication device to make a payment; Payment service system of a mobile communication device using a Bluetooth communication, characterized in that the configuration. The method of claim 1, The main server receives the buyer's identification information and payment institution identification code from the PC from the buyer; Process The main server receiving telephone number information, which is identification information of a mobile communication device, from a purchaser, in addition to the purchaser's identification information and a payment institution identification code, from the PC; As a course Payment service system of a mobile communication device using a Bluetooth communication, characterized in that the configuration. The method of claim 1, Transmitting address information of a Bluetooth device, which is recognition information of a mobile communication device, recognized by the relay device in connection with the mobile communication device, to the main server; Process When the mobile communication device and the relay device are connected, the mobile communication device transmits its own phone number to the relay device, and the relay device recognizes the address information and movement of the Bluetooth device of the mobile communication device recognized in the process of connecting with the mobile communication device. Configuring phone number information of the mobile communication device received from the communication device as recognition information of the mobile communication device to transmit to the main server; As a course Payment service system of a mobile communication device using a Bluetooth communication, characterized in that the configuration. The method of claim 2, Transmitting address information of a Bluetooth device, which is recognition information of a mobile communication device, recognized by the relay device in connection with the mobile communication device, to the main server; Process When the mobile communication device and the relay device are connected, the mobile communication device transmits its own phone number to the relay device, and the relay device recognizes the address information and movement of the Bluetooth device of the mobile communication device recognized in the process of connecting with the mobile communication device. Configuring phone number information of the mobile communication device received from the communication device as recognition information of the mobile communication device to transmit to the main server; In the case of a process, The main server generating an authorization number; Process Generating a confirmation number after the main server confirms that the telephone numbers of the mobile communication devices received from the PC and the relay device match each other; As a course Payment service system of a mobile communication device using a Bluetooth communication, characterized in that the configuration. The method according to any one of claims 1 to 4, The role of the main server installed in the payment service company is a payment service system of a mobile communication device using Bluetooth, characterized in that configured to perform in the payment server installed in the payment institution. The method according to any one of claims 1 to 4, The role of the main server installed in the payment service provider is a payment service system of a mobile communication device using Bluetooth communication, characterized in that configured to perform in the web server installed in the Internet company. The method according to any one of claims 1 to 4, The payment service system of a mobile communication device using Bluetooth communication, characterized in that configured to perform the role of the relay device in the PC. The method of claim 5, The payment service system of a mobile communication device using Bluetooth communication, characterized in that configured to perform the role of the relay device in the PC. The method of claim 6, The payment service system of a mobile communication device using Bluetooth communication, characterized in that configured to perform the role of the relay device in the PC. The method according to any one of claims 1 to 4, If the role of the PC is configured to play in the CD / ATM or POS or credit card checker, The role of the web server and the relay device installed in the Internet company is a payment service system of a mobile communication device using Bluetooth, characterized in that configured to perform in the CD / ATM or POS or credit card inquiry. The method of claim 5, If the role of the PC is configured to play in the CD / ATM or POS or credit card checker, The role of the web server and the relay device installed in the Internet company is a payment service system of a mobile communication device using Bluetooth, characterized in that configured to perform in the CD / ATM or POS or credit card inquiry. When the purchaser selects the purchase of goods and services sold by a web server installed at an Internet company on the PC, the web server includes a payment including information such as the payment amount and payment date and time to the main server installed at the payment service company. A first procedure for sending the full request; A second procedure in which the main server outputs an input screen to the PC and receives its identification information and payment institution identification code from the buyer; When a purchaser connects a mobile communication device with a built-in Bluetooth device to a relay device with a built-in Bluetooth device, the Bluetooth device address which is recognition information of the mobile communication device recognized by the relay device in connection with the Bluetooth device of the mobile communication device is provided. A third procedure of transmitting information to the main server; When the main server generates the authorization number and outputs the authorization number to one of the mobile communication devices or the PC via the relay device, the purchaser sends the authorization number to another device that does not output the authorization number among the two devices. A fourth procedure of inputting and transmitting to the main server; If there is a matching authorization number by searching for the authorization number inputted from the relay device or PC among the authorization numbers stored by the main server, and transmits the entire payment approval request to the payment server. A fifth procedure of notifying the mobile communication device of a chargeback; The payment server checks whether the recognition information of the mobile communication device and the buyer included in the full text received from the main server is correct, whether the lost mobile communication device and the payment limit are exceeded, and determines whether to approve the payment. A sixth procedure of transmitting to the main server; The main server transmits the full payment approval or rejection response to the web server and notifies the PC or the mobile communication device whether or not the payment is approved, and the web server sells the product to the buyer according to the payment approval. Seventh proceeding to refuse or to sell; Payment service method of a mobile communication device using a Bluetooth communication, characterized in that comprises a. The method according to claim 12, The second procedure A process of the main server outputting an input screen to a PC, and receiving, from a buyer, buyer identification information such as a social security number, payment institution identification code, and telephone number information which is recognition information of a mobile communication device; Payment service method of a mobile communication device using Bluetooth communication, characterized in that configured as. The method according to claim 12, The third procedure When a purchaser connects a mobile communication device with a built-in Bluetooth device to a relay device with a built-in Bluetooth device, the mobile communication device transmits phone number information, which is its identification information, to the relay device, and the relay device transmits A process of transmitting the Bluetooth device address information of the mobile communication device or the telephone number information of the mobile communication device received from the mobile communication device as the identification information of the mobile communication device to be transmitted to the main server; Payment service method of a mobile communication device using Bluetooth communication, characterized in that configured as. The method of claim 13, The third procedure When a purchaser connects a mobile communication device with a built-in Bluetooth device to a relay device with a built-in Bluetooth device, the mobile communication device transmits phone number information, which is its own identification information, to the relay device, and the relay device transmits A process of transmitting the Bluetooth device address information of the mobile communication device or the telephone number information of the mobile communication device received from the mobile communication device as the identification information of the mobile communication device to be transmitted to the main server; If configured with The fourth procedure After the main server confirms that the telephone numbers of the mobile communication devices received from the relay device and the PC coincide with each other, the main server generates an authorization number to one of the mobile communication devices or PCs via the relay device. If the approval number is outputted, the purchaser inputting the approval number to another device which does not output the approval number among the two devices and transmits the approval number to the main server; Payment service method of a mobile communication device using Bluetooth communication, characterized in that configured as.