KR20030083865A - A system for an electronic account by off-line using mobile-phone inside combi-type smartcard - Google Patents

Abstract

PURPOSE: An off-line electronic payment system using a mobile communication terminal having a combination smart card is provided to execute an authenticating process by off-line by checking whether data for a user authentication are identified with data for a user authentication stored in the combination smart card and to selectively approve payment details being inputted based on the executed authenticating result. CONSTITUTION: A mobile phone(100) includes a PCB, a socket contact, and a combination smart card. An RF terminal(200) transmits and receives data to the combination smart card by an internal antenna mounted in the mobile phone(100). A company card server(500) transmits and receives data to the combination smart card through a wireless communication network(300) and an Internet network(400) sequentially by an external antenna mounted in the mobile phone(100). A royalty server(600) manages royalty information supported by the company card.

Description

Offline electronic payment system using a mobile communication terminal equipped with a combi-type smart card {A system for an electronic account by off-line using mobile-phone inside combi-type smartcard}

The present invention relates to an offline electronic payment system using a mobile communication terminal equipped with a combination smart card, and more particularly, to perform an offline authentication process using a mobile communication terminal equipped with a combination smart card and performed authentication. The present invention relates to an offline electronic payment system using a mobile communication terminal equipped with a combi-type smart card that selectively approves payment details using the results.

Smart-card refers to an IC (Integrated Circuit) card or CPU (attached to the upper left of the card by attaching a semiconductor chip having a memory device and a central processing unit). It is called various names such as Central Processing Card) and Chip Card.

In addition, the SIM (Subscriber Identity Module) card (the card which implements the smart card as a plug-in type), which significantly reduces the size of the card by configuring only the semiconductor chip separately from the smart card, is ETSI, a Western European communication organization. Proposed.

In addition, in order to implement contactless contactless data input / output SIM card, the internal antenna is combined (hereinafter, the smart card combined with the internal antenna will be referred to as “combi smart card”). Attempts have been made to mount a smart card in a mobile communication terminal.

As one of these attempts, Figure 1 is a combination perspective view of a mobile phone equipped with a combination smart card and Figure 2 shows a combination of the PCB 60 and the combination smart card 24 of FIG. As shown in FIG. 1, the cellular phone equipped with a card includes: a cellular phone main body 10 capable of communication and operation of an IC card; A battery 30 coupled to the rear of the mobile phone main body 10 to supply power to the mobile phone; A PCB (60) which is a collection of electrical elements embedded in a mobile phone for communication and information processing; An external antenna 70 for inputting / outputting signals to and from a mobile phone; A socket 22 formed at the rear of the mobile phone main body 10 in accordance with the smart card contact 25 of the combination smart card 24; A first contact point (23a) formed on the PCB according to the position of the socket 22 for exchanging information on the Internet while electrically connecting the combi-type smart card 24 and a mobile phone; Formed on the PCB (60) in accordance with the position of the socket 22 and electrically connected to the combination type smart card 24 and the mobile phone, but wirelessly through the card terminal (not shown) and the internal antenna (50) A second contact 23b for the PCB for exchanging; An internal antenna 50 formed at a suitable position of the PCB 60 or other structure and connected to the smart card second contact 25 b of the smart card contact 25; Combi-type smart card (24) for coupling the slide guide 21 to the socket 22 in a path to perform data processing and input / output functions; A first contact point 25a for smart card formed on the surface of the combination smart card 24 and coupled to the first contact point 23a for PCB (shown in FIG. 2); It is formed on the surface of the combination smart card 24 and comprises a smart contact second contact 25b (shown in Figure 2) coupled to the second contact 23b for PCB, smart contact type Combi-type smart card capable of both contact and contactless as the card is coupled to the internal antenna having an RF function has been proposed.

Therefore, the development of an offline electronic payment system using a mobile communication terminal equipped with the proposed combination smart card is urgently required.

The present invention has been created to meet these demands, and is based on whether the user authentication data input through the mobile communication terminal equipped with the combi-type smart card is the same as the user authentication data stored in the combi-type smart card. Its purpose is to provide an offline electronic payment system using a mobile communication terminal equipped with a combi-type smart card that performs the off-line authentication process and selectively approves the payment details based on the authentication result. .

In addition, the present invention, the payment information, such as electronic money recharge amount, application information, disapproval command information from the card server (download) to the combi-type smart card, or the financial information stored in the combi-type smart card, royalty ( In order to upload payment information such as loyalty information, card status information, etc. to the card server, a combination smart card configured to allow a combination smart card to transmit / receive data with a card server through the internal antenna or an external antenna. Another object is to provide an offline electronic payment system using the equipped mobile communication terminal.

In particular, the present invention, in order to use a mobile communication terminal equipped with a combination smart card for electronic money payment, the mobile device equipped with a combination smart card is stored in the combi-type smart card of the electronic money charging amount of the downloaded payment information Another object is to provide an offline electronic payment system using a communication terminal.

In addition, the present invention, in order to use a mobile communication terminal equipped with a combination smart card for the electronic payment associated with at least one or more card servers, storing the respective application information corresponding to the card server of the downloaded payment information Another object is to provide an offline electronic payment system using a mobile communication terminal equipped with a combination smart card.

In addition, the present invention, in order to prohibit the use of the mobile communication terminal in the case of the loss of the mobile communication terminal equipped with a combination type smart card or by a bad credit, stored in the combi-type smart card by the disapproval command information of the downloaded payment information Another object of the present invention is to provide an offline electronic payment system using a mobile communication terminal equipped with a combi-type smart card for disabling the payment information inputted after changing the state.

1 is a combined perspective view of a mobile phone equipped with a combination smart card,

2 illustrates a coupling relationship between the PCB 60 and the combination smart card 110 of FIG. 1,

3 is a configuration diagram of a payment system using a mobile communication terminal equipped with a combination smart card according to the present invention,

4 is an internal block diagram of a mobile phone according to the present invention;

FIG. 5A illustrates a file structure stored in the memory unit 101 of FIG. 4.

5B and 5C illustrate the structures of a PIN file and a state file, respectively.

<Explanation of symbols for the main parts of the drawings>

23: PCB contact point 50: Internal antenna

60: PCB

100: cell phone with a combination smart card

110: combination smart card 111: smart card contact

112: CPU 113: ROM

114: EEPROM 115: Cryptographic Processor

The present invention for achieving the above object in the offline electronic payment system using a mobile communication terminal equipped with a combination smart card combined with an internal antenna, providing a payment menu items to the user, user authentication when selecting the payment menu items A mobile communication terminal for inducing data input; And a combination mounted on the mobile communication terminal to compare user authentication data input from the mobile communication terminal with previously stored user authentication data, and to selectively approve payment details requested by the user based on a comparison result. Characterized in that it comprises a smart card.

The user authentication data is a personal identification number (PIN).

The upload payment information includes at least one of financial information and royalty information.

The download payment information includes at least one of electronic money charge amount, application information, and disapproval command information.

The combi-type smart card controls the payment details to be approved when the two user authentication data are the same as the comparison result, and changes the prestored state information to correspond to the comparison result.

The combination smart card maintains state information corresponding to the payment approval for a preset time t _D , and restores the state information to status information corresponding to the payment disapproval when the preset time is exceeded.

The combination smart card controls the payment details to be approved when the two user authentication data are the same as the comparison result, and changes the prestored state information to correspond to the comparison result.

The objects, features and advantages of the present invention will be more readily understood by reference to the accompanying drawings and the following detailed description.

In the embodiment of the present invention, the mobile communication terminal may be applied to a PCS, a mobile phone, a PDA, and the like.

In addition, the mobile phone includes a connection board having an internal antenna and a connection contact point, a combination smart card provided with a contact point for a smart card, and the connection board and the combination type smart card by the connection contact point and the smart card contact point. The socket to be fitted is mounted.

Accordingly, a card terminal transmits and receives a combination smart card and data by an internal antenna provided on the connection board, and a card server receives data received by a card terminal by the internal antenna or data on the card terminal. Transmits the received data to the combination smart card by the internal antenna.

In addition, the card server may directly transmit and receive data with the combination smart card by the external antenna provided in the mobile phone.

In the following embodiment, it is assumed that the mobile phone equipped with the combination smart card is preferably configured as shown in Figure 1, the electronic payment is performed only for a company card and royalty information supported by a company card is royalty Assume only A, and assume that the card terminal is an RF terminal.

3 is a configuration diagram of an electronic payment system using a mobile communication terminal (shown in FIGS. 1 and 2) equipped with a combination smart card according to the present invention, a PCB substrate 60 (shown in FIG. 1), A mobile phone 100 equipped with a socket contact 22 (shown in FIG. 1) and a combination smart card 110; RF terminal 200 for transmitting and receiving the combination type smart card 110 and the data by the internal antenna (50) provided in the mobile phone (100); Combi-type smart card 110 and the combination by passing through the wireless communication network 300 and the Internet network 400 (in the embodiment described later it is assumed that the communication network is the Internet network) by the external antenna provided in the mobile phone 100 and A company card server 500 for transmitting and receiving data; And a royalty A server 600 for managing and operating royalty A information supported by the a company card.

The mobile phone 100 provides a payment menu item to a user, and enables the user to input data for user authentication when the payment menu item is selected. In other words, the user can easily know by outputting a guide message on the screen.

In addition, the combi-type smart card 110, a company card server 500 connected to the Internet network 400, the upload payment information for the company A by the external antenna provided in the internal antenna or the mobile phone (100) Or, to receive the download payment information for the company A card input from the company a card server 500.

The upload payment information is a company's financial information, royalty information, and the like, and the download payment information belongs to an electronic money recharge amount, application information, and disapproval command information.

4 is an internal block diagram of the mobile phone 100 according to the present invention, in addition to the components for driving the mobile phone (memory unit 101 to the control unit 108), the PCB contact 23 and the internal antenna ( A PCB 60 having 50; And a smart card contact point 111, a ROM 113 for storing a card operation algorithm and an encryption algorithm for operating a combination smart card, an EEPROM 114 for storing user data, and a combination smart card. An encryption processor 115 performs encryption and decryption operations to ensure safety in use, and a combination smart card 110 including a CPU 112 for controlling each component in the combination smart card.

In the following embodiment, in the combination type smart card 110 mounted on the mobile phone 100 of the electronic payment system EEPROM 114 stores the user authentication data and state information (state) and the CPU 112 is a mobile phone Through the RF terminal 200 by comparing the user authentication data input by the user with the stored user authentication data using the key operation unit 107 provided in the 100 and changing the status information to correspond to the comparison result. Perform an offline authentication process that controls the input payment details to be selectively approved.

At this time, the CPU 112 allows the corresponding status information (corresponding to "OK") to be maintained only for a preset time t _D when the comparison result is the same, and compares the status information when the time t _D is exceeded. If the result is different, that is, a time-process operation for restoring the status information ("NOK") corresponding to the disapproval is performed.

Hereinafter, assuming that the user authentication data is a personal identification number (PIN) for the operation of the first payment mode in the payment system using a mobile communication terminal equipped with a combination smart card according to the present invention Each will be described.

Example (first payment mode)

First, when the mobile phone user requests the first payment mode by pressing the key operation unit 107 (shown in FIG. 4), the control unit 108 of the mobile phone 100 controls the image signal processing unit 102 to provide a personal identification number ( PIN) to output a video message to the display unit 103 to input.

Subsequently, when the mobile phone user inputs a personal identification number (PIN), the controller 108 temporarily stores the input personal identification number in the memory unit 101 and then combines the smart type through the interface unit 104. Each component 111 to 115 of the card 110 is reset. Accordingly, each component of the combination smart card 110 is activated by receiving power.

Of course, if the mobile phone user does not enter a personal identification number (PIN), or the control unit 108 of the mobile phone does not reset the combi-type smart card 110, the present embodiment is terminated.

The CPU 112 of the combination type smart card 110 reset in this state reads ATR (Answer To Reset) from the ROM 113, and then the smart card contact point 111-PCB contact point 23-. The control unit 108 of the mobile phone 100 is applied via the interface unit 104. When the ATR is input, the controller 108 further reads the personal identification number from the EEPROM 114 by referring to the card information read from the memory unit 101.

That is, the file structure stored in the memory unit 101 may be illustrated as shown in FIG. 5A. The card information read by the controller 108 of the mobile phone 100 is 'offline credit' corresponding to the dotted line. The code information follows 'Code File' and 'state', which correspond to information on personal identification number and state information, respectively.

5B and 5C illustrate the structures of a personal identification number (PIN) file and a state information file stored in the EEPROM 114, respectively. The controller 108 reads the card information read from the memory unit 101. FIG. Read the state information file of FIG. 5C from the EEPROM 114 by using the EEPROM 114 and further read the personal identification number (PIN) information of FIG. 5B only when the value of the read state information file is "00". do.

Subsequently, when the controller 108 transmits the read personal identification number to the CPU 112, the CPU 112 compares the input personal identification number with the transmitted personal identification number.

As a result of the comparison, if the two personal identification numbers are the same, the CPU 112 reads the state file (shown in FIG. 5C) from the EEPROM 114 using the previously read card information (offline credit) and reads the read. After changing the state (state) of the file to "OK", the time data (t) is initialized to "0" to be updated by the time elapsed thereafter.

Of course, if the two personal identification numbers are not the same as a result of the comparison, the CPU 112 changes the status information to "NOK" and ends the first payment mode.

Subsequently, the mobile phone user brings the mobile phone 100 close to the RF terminal 200, so that the RF terminal 200 includes an internal antenna 50-a PCB contact 23-of the PCB 60 provided in the mobile phone 100. When each of the components 111 to 115 of the combination smart card 110 is reset via the smart card contact 111, the CPU 112 applies the ATR to the RF terminal 200, and the RF terminal ( When an authentication request is made from 200, the CPU 112 transmits an encrypted authentication value stored in the ROM 113 to the RF terminal 200.

When the RF terminal 200 decrypts the transmitted encrypted authentication value and determines that the decrypted authentication value is associated with the previously inputted ATR, the CPU 112 requests status information from the CPU 112. The state information is read from 114 and transmitted to the RF terminal 200.

The RF terminal 200 requests input of payment information by the user only when the transmitted state information is "OK", and the user requests payment details (or payment information, also referred to as a card number and payment amount). Can be entered).

In addition, when the RF terminal 200 requests royalty information, the CPU 112 reads the royalty information, that is, royalty A from the ROM 113, and transmits the royalty information, ie, royalty A, to the RF terminal 200 in turn. An additional point is given to the card user in relation to the input payment history, and Loyalty A can be assumed to be one of, for example, KTF members or OK cashback.

At this time, the CPU 112 checks whether the time data t being updated has passed the preset time t _D according to the time elapsed, and when the preset time has elapsed, the status information stored in the EEPROM 114 is " NOK " By restoring to "" and transmitting it to the RF terminal 200, the RF terminal 200 disapproves the payment for the previously entered payment details.

On the contrary, in the above-described case, if the preset time has not elapsed, the RF terminal 200 transfers the previously entered payment information and royalty A through the Internet network 400 to the a company card server 500 and the royalty A server ( 600 to accumulate additional points of electronic payment and royalty A, respectively.

On the other hand, the electronic payment system using the mobile communication terminal to which the present invention is applied can perform some additional functions in addition to the electronic payment operation described above.

When the mobile phone user inputs an electronic money amount to be charged using the key control unit 107, the CPU 112 connects to the wireless communication network 300 through an external antenna of the mobile phone 100 and then a company card server 500 By downloading the input electronic money charge amount from the) and stored in the EEPROM (114) to perform the electronic payment using the charged electronic money.

Next, when the mobile phone user requests electronic payment of another company card in addition to the company a card by using the key operation unit 107, the CPU 112 is a server of the third-party card requested through the external antenna of the mobile phone ( By downloading the application information (for example, an applet program) for performing electronic payment by connecting to the electronic device (not shown) and storing it in the EEPROM 113, the mobile phone user subsequently controls the key operation unit 107. One card may be selected from among a plurality of cards from which application information is downloaded, and electronic payment may be performed using the card.

Finally, if you want to forcibly stop using the card at the request of the mobile phone user (when the phone is lost) or at the card company's request (if the mobile phone user belongs to the bad credit list (blacklist)), If the disapproval instruction information is downloaded from the company card server 500 to the CPU 112 on the assumption that the card is a private card, the CPU 112 may integrate any payment, electronic payment, electronic money, or application information download using the company a card. Control card usage to be blocked.

For example, the CPU 112 changes the status information stored in the EEPROM 114 to " NOK " and prevents the status information from being changed until the disapproval release information is downloaded from the company card server 500, The electronic money charging operation and application information download is controlled so as not to be performed.

In the present embodiment, it has been described on the assumption that the electronic payment using the mobile phone equipped with the combination smart card is performed only on the company a card and the addition points are accumulated only on royalties A when the electronic payment using the company a card is performed. It is, of course, scalable to a plurality of cards including four cards and accumulates additional points for a plurality of royalties for each card.

The present invention is not limited to the above described embodiments, and various modifications and changes can be made by those skilled in the art, which are included in the spirit and scope of the present invention as defined in the appended claims.

As described above, the present invention performs an electronic payment using a mobile communication terminal equipped with a combi-type smart card by using an internal antenna coupled to the combi-type smart card or an external antenna provided in the mobile communication terminal. By performing the authentication process, it is possible to perform the electronic payment regardless of whether the card terminal is contact or contactless, there is a more convenient and quick effect.

In addition, the present invention, by using the internal antenna or the external antenna to download the application information for a plurality of credit cards to the combination smart card mounted on the mobile communication terminal, it is possible to electronic payment using the user's desired credit card There is a more easy effect.

In addition, the present invention, by downloading the electronic money charge amount to the combination smart card mounted on the mobile communication terminal using the internal antenna or an external antenna, by using the electronic money charged in the combination smart card in the mobile communication terminal It is effective to make electronic payment.

In addition, the present invention, by downloading the disapproval command information to the combi-type smart card mounted on the mobile communication terminal using the internal antenna or an external antenna, the security effect of preventing illegal electronic payment using the mobile communication terminal in advance There is.

Claims (14)

A mobile communication terminal for providing a payment menu item to a user and inducing data input for user authentication upon selecting a payment menu item; And A combination type mounted on the mobile communication terminal, comparing the user authentication data input from the mobile communication terminal with previously stored user authentication data, and selectively allowing payment details requested by the user based on the comparison result. Offline electronic payment system using a mobile communication terminal equipped with a combination smart card, characterized in that configured including a smart card. The combination smart of claim 1, further comprising a card server configured to receive and store upload payment information transmitted from the combination smart card and to transmit download payment information to the combination smart card. Offline electronic payment system using a mobile communication terminal equipped with a card. The method of claim 1, The user authentication data is a personal identification number (PIN) offline electronic payment system using a mobile communication terminal equipped with a combination smart card, characterized in that. The method of claim 2 or 3, The upload payment information is offline electronic payment system using a mobile communication terminal equipped with a combination smart card, characterized in that it comprises at least one of financial information, royalty information. The method of claim 2 or 3, The download payment information is an offline electronic payment system using a mobile communication terminal equipped with a combination smart card, characterized in that it comprises at least one of electronic money recharge amount, application information, disapproval command information. The method of claim 4, wherein The download payment information is an offline electronic payment system using a mobile communication terminal equipped with a combination smart card, characterized in that it comprises at least one of electronic money recharge amount, application information, disapproval command information. According to any one of claims 1 to 3, The combination smart card, If the two user authentication data is the same as the comparison result, the payment details are controlled, and the pre-stored combi-type smart card is installed, wherein the state information is changed to correspond to the comparison result. Offline electronic payment system using a terminal. The method of claim 7, wherein the combination smart card, Equipped with a combination type smart card, characterized in that to maintain the state information changed in accordance with the payment approval for a predetermined time (t _D ), and to change the status information to the state information corresponding to the payment disapproval when the predetermined time is exceeded. Offline electronic payment system using a mobile communication terminal. The method of claim 4, wherein the combination smart card, If the two user authentication data is the same as the comparison result, the payment details are controlled, and the pre-stored mobile communication terminal equipped with the combination smart card, characterized in that for changing the pre-stored state information to correspond to the comparison result. Offline electronic payment system. The method of claim 9, wherein the combination smart card, Equipped with a combination type smart card, characterized in that to maintain the state information changed in accordance with the payment approval for a predetermined time (t _D ), and to change the status information to the state information corresponding to the payment disapproval when the predetermined time is exceeded. Offline electronic payment system using a mobile communication terminal. The method of claim 5, wherein the combination smart card, If the two user authentication data is the same as the comparison result, the payment details are controlled, and the pre-stored mobile communication terminal equipped with the combination smart card, characterized in that for changing the pre-stored state information to correspond to the comparison result. Offline electronic payment system. The method of claim 11, wherein the combination smart card, Combination type smart card, characterized in that to maintain the state information changed in accordance with the payment approval for a predetermined time (t _D ), and to change the stored state information to the state information corresponding to the payment disapproval when the preset time is exceeded Offline electronic payment system using a mobile communication terminal. The method of claim 6, wherein the combination smart card, If the two user authentication data is the same as the comparison result, the payment details are controlled, and the pre-stored mobile communication terminal equipped with the combination smart card, characterized in that for changing the pre-stored state information to correspond to the comparison result. Offline electronic payment system. The method of claim 13, wherein the combination smart card, Combination type smart card, characterized in that to maintain the state information changed in accordance with the payment approval for a predetermined time (t _D ), and to change the stored state information to the state information corresponding to the payment disapproval when the preset time is exceeded Offline electronic payment system using a mobile communication terminal.