KR20040002035A - Electronic settlement system and method for protecting credit card information - Google Patents

Abstract

PURPOSE: A system and a method for the electronic settlement to protect the credit card information are provided to buy goods or to use a service through the Internet, and to prevent the card information from exposing to the outside while the personal information and the card information for paying price with the credit card are transmitted through the Internet. CONSTITUTION: A control management module(310) controls input/output of each database and a function of respective modules. A member management module(320) registers a user holding the card and a member shop as a member, stores the related data in a personal member information database(311) and a member shop information database(312), and manages the member information. A registration module(330) receives an ID and the settlement card information of a registered wireless terminal client from a card company server, receives the user information and the ID of the wireless terminal client from a member shop server, and matches and registers it. An approval module(340) manages an approval relation between both servers, and stores the settlement particulars in a settlement information database(315).

Description

Electronic settlement system and method for protecting credit card information

The present invention relates to an electronic payment system and method, and more particularly to an electronic payment system and method that can secure the reliability and safety of payment by preventing the leakage of credit card information to the outside in the payment process.

Electronic payment means payment or payment for goods and services through electronic means. In electronic commerce using the Internet, payment is made by credit card, check, bank transfer and cash. It can be divided into four.

Currently, the use of credit cards is mainly performed. This is a kind of credit loan, which uses an existing card payment system, and since the existing system is connected to a network, it is easy to implement payment methods and to increase liquidity of funds. It can be easily secured.

In addition, since the problem of simultaneous execution of payments along with commodity transactions on the network is solved, and it is a legal and customary method, it is presented as the most realistic way to implement e-commerce. Related personal information (real name, card number, password, expiration date, etc.) is easily exposed to others, which has security problems.

When personal information related to credit cards is exposed to others, social problems arise because payments can be made only by card number and password even in offline transactions, including online transactions.

Moreover, in the conventional e-commerce method, when a client wants to use an online shopping mall and a service, the client visits the corresponding homepage and provides his / her personal information to sign up for a membership. There is a hassle to enter information about the card.

In case personal information is exposed to others, there is a method to allow the cardholder to confirm the purchase by transmitting the purchase information to a personal wireless terminal. However, the card thief is the number of the wireless terminal by only sending a single message. If you input randomly, you will not be able to confirm the exact receipt of the goods irrelevant to your intention, or even if you pay for the goods you do not purchase.

Therefore, the present invention is to solve such a conventional problem, the object of the present invention is to purchase a product or use the service over the Internet and when the personal information and card information is to be paid with a credit card The purpose is to prevent external exposure of card information that may occur during transmission over the Internet.

Other objects and features of the present invention will be more clearly understood through the preferred embodiments described below.

1 is a block diagram showing an electronic payment system according to the present invention.

2 is a block diagram showing an operation server of the electronic payment system according to the present invention.

3 is a flowchart illustrating an electronic payment method according to the present invention.

4A to 4C are flowcharts illustrating data for each transaction in the electronic payment method according to the present invention.

5A to 5D are screen state diagrams showing a message transmitted to a mobile phone as an embodiment of an electronic payment system according to the present invention.

According to a first embodiment of the present invention, there is provided a wireless terminal client having a unique identifier; An affiliated store server that receives and registers an identifier of a wireless terminal client and user information corresponding to the user, and issues a user ID; A card company server receiving and registering an identifier of a wireless terminal client and payment card information of a user; Register the user ID and the identifier of the wireless terminal client by matching each other, and when the transaction approval request is requested together with the transmission of the user ID from the merchant server, the wireless terminal client identifier corresponding to the user ID is transmitted to the card company server for transaction approval. An electronic payment system for protecting credit card information including a requesting operation server is disclosed.

According to a second embodiment of the present invention, there is provided a wireless terminal client having a unique identifier; An affiliated store server that receives and registers an identifier of a wireless terminal client and user information corresponding to the user, and issues a user ID; A card company server receiving and registering an identifier of a wireless terminal client and payment card information of a user; Register by matching the user ID and the identifier of the wireless terminal client, and if the purchase information including the user ID is transmitted from the merchant server, the purchase information is transmitted to the wireless terminal client to confirm the purchase, and when the purchase is confirmed, it corresponds to the user ID. Disclosed is an electronic payment system for protecting credit card information including an operation server which transmits an identifier of a wireless terminal client to a card company server to request transaction approval.

According to a third embodiment of the present invention, there is provided a wireless terminal client having a unique identifier; An affiliated store server that receives and registers an identifier of a wireless terminal client and user information corresponding to the user, and issues a user ID; A card company server receiving and registering an identifier of a wireless terminal client and payment card information of a user; Membership management module including an operation server for intermediary between the wireless terminal client, merchant server and card company server, the operation server registers the user and the merchant with a card as a member in the personal member information database and the merchant member information database, respectively ; A registration module for receiving the identifier and payment card information of the registered wireless terminal client from the card company server, receiving the user information and the identifier and ID of the wireless terminal client from the affiliate server, and registering the registered information; An authorization module that manages an authorization relationship between the card company server and the affiliate server and stores payment details in a payment information database; A purchase confirmation module for confirming a purchase by transmitting the purchase information to the wireless terminal client when the purchase information is transmitted from the affiliate server, and storing the transaction in the personal transaction history database and the merchant transaction history database, respectively; And a control module for controlling data input / output to each database and controlling the functions of the respective modules.

Preferably, the wireless terminal client includes a mobile phone, and the identifier may be a phone number of the mobile phone.

In addition, the purchase information includes a merchant number, a user ID, a purchase amount, and an installment period.

According to the fourth embodiment of the present invention, there is provided a wireless terminal client having a unique identifier, a merchant server through which a purchase is made through the wireless terminal client, a card company server and a wireless terminal client that perform approval for a transaction approval request from the affiliate server. Applied to an electronic payment system including an operation server for intermediary between the merchant server and the card company server, requesting a transaction approval for a purchase from the merchant server to the operation server; Extracting, from a database, an identifier of a wireless terminal client corresponding to the buyer ID in the purchase information transmitted with the transaction approval, and transmitting the identifier to the card company server; Extracting payment card information corresponding to the identifier of the transmitted wireless terminal client from a database and performing a transaction approval procedure; Disclosed is an electronic payment method for protecting credit card information including transmitting transaction approval information to an affiliated server through an operation server.

Preferably, the method may further include transmitting the purchase information transmitted to the wireless terminal client of the buyer when requesting the transaction approval from the affiliate server to the operation server, and receiving a purchase confirmation from the buyer.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing an electronic payment system according to the present invention, Figure 2 is a block diagram showing an operation server of the electronic payment system according to the present invention.

Electronic payment system according to the present invention is composed of a merchant server 200 and the card company server 400 to be associated with the wireless terminal client 100, the operation server 300 as a main axis, preferably operating server 300 and the merchant The server 200 may be connected by a TCP / IP dedicated line, and the operation server 300 and the card company server 400 may be connected by an X.25 dedicated line.

The wireless terminal client 100 has a unique identifier, for example, a telephone number, and a user who possesses it has a credit card and subscribes to the affiliate server 200 as a personal member to use a product or service online. The payment is made by credit card.

Merchant server 200 is joined to the operating server 300 as a member of the merchant, provides information of the wireless terminal client 100 to the operating server 300, the product or by the purchase request through the wireless terminal client 100 Provide services and receive equivalent payments from card companies.

The operation server 300 plays a pivotal role in the electronic payment system according to the present invention, and acts as an intermediary between the wireless terminal client 100, the affiliate server 200, and the card company server 400, and information transmitted from each server. Equipped with a system that receives and transmits to the server that processes the information.

The card company server 400 receives the electronic payment request directly from the wireless terminal client 100, compares and receives the personal information at the time of card issuance and the personal information at the time of electronic payment application, and receives the received personal information from the operation server 300 If the transaction is established, the card is inquired and the result is notified in response to the card payment request.

The operation server 300 matches the user ID with the identifier of the wireless terminal client 100 and registers them in the database, and when there is a transaction approval request along with the transmission of the user ID from the affiliate server 200, the operation server 300 corresponds to the user ID. The identifier of the wireless terminal client 100 is transmitted to the card company server 400 to request transaction approval.

In addition, preferably, the operation server 300 may confirm the purchase by transmitting the purchase information to the wireless terminal client 100 corresponding to the user ID when the purchase information including the user ID is transmitted from the affiliate server 200.

With reference to Figure 2 will be described in detail for the operation server according to the present invention.

Operation server 300 is composed of a control module 310, member management module 320, registration module 330, approval module 340, purchase confirmation module 350, personal member information database 311, affiliated stores Member information database 312, personal transaction history database 313, merchant transaction history database 314, payment information database 315, the classification of the database can be further subdivided or broadly combined.

The control module 310 controls the data input and output of each database and the function of each module.

The member management module 320 registers the user and the merchant having a card as a member and stores them in the personal member information database 311 and the merchant member information database 312, respectively, and continuously manages the information of the existing member and the new member. do.

The registration module 330 receives the identifier and payment card information of the wireless terminal client 100 registered from the card company server 400, and receives the user information and the identifier and ID of the wireless terminal client 100 from the affiliate server 200. Receive and register to match each other.

The approval module 340 manages the approval relationship between the card company server 400 and the affiliate server 200 and stores the payment details in the payment information database 315.

The purchase confirmation module 350 confirms the purchase by transmitting the purchase information to the wireless terminal client 100 when the purchase information is transmitted from the affiliate server 200, and confirms the purchase with the personal transaction history database 313 and the merchant transaction details. Each is stored in the database 314.

3 is a flowchart illustrating an electronic payment method according to the present invention.

In response to a purchase request of the wireless terminal client 100, the affiliate server 200 transmits a buyer ID to the operation server and requests a transaction approval for the purchase (step S41), and the operation server 300 corresponds to the purchaser ID. Extract the identifier of the wireless terminal client from the database and transmit it to the card company server 400 (step S42), the card company server 400 extracts payment card information corresponding to the identifier of the transmitted wireless terminal client from the database to approve the transaction. The procedure is performed (step S43).

When the transaction approval procedure of the card company is completed, the transaction approval information is transmitted to the operation server 300 (step S44), and the operation server 300 transmits the received transaction approval information to the affiliated store server 200 (step S45). .

Meanwhile, the purchase confirmation may be transmitted from the wireless terminal client 100 corresponding to the purchaser ID with reference to the purchase information transmitted from the affiliate server.

Preferably, the purchase information may include an affiliate store number, a user ID, a purchase amount, and an installment period.

4A to 4C are flowcharts showing data by transaction details of the electronic payment method according to the present invention. FIG. 4A is a data flowchart at the time of registration of payment. FIG. 4B is a data flowchart at the time of approval. Data flow chart.

For example, in the transmission of purchase information from the operation server 300 to the wireless terminal client 100, a case in which a process of sending a message to the mobile phone 110 through the mobile communication company server 500 will be described as an example. .

Looking at the data flow at the time of payment registration, the wireless terminal client 100 applies for electronic payment to the card company server 400 (step S11), the card company server 400 transmits personal information and card company code to the operation server 300 And, the operation server 300 registers the received information in the database (step S12).

The wireless terminal client 100 applies for online membership to the merchant server 200 (step S13), and the merchant server 200 grants an ID and a password (step S14) together with the operation server 300 for the merchant information. And transmits the member's personal member information (step S15).

The operation server 300 requests personal information from the card company server 400 (step S16), and the card company server 400 extracts the corresponding customer from the database and transmits the personal information to the operation server 300 (step S17). , Receiving the personal information, the operation server 300 compares the information received from the merchant server 200 and the information received from the card company server 400 and registers in the database if there is no abnormality.

Looking at the data flow at the time of approval, if the wireless terminal client 100 makes a purchase request to the affiliate server 200 (step S21), the merchant server 200 transmits the buyer's ID and transaction history to the operation server 300 and Request the transaction approval (step S22), the operation server 300 transmits the transaction history to the card company server 400 and requests the transaction approval (step S23), and also transmits the transaction history to the mobile carrier server 500 (Step S24).

The mobile communication company server 500 transmits a message for confirming the purchase history to the mobile phone 110 of the wireless terminal client 100 (step S25), and the card company server 400 approves the card transaction (step S26). Notifying the result (step S27), the operation server 300 notifies the mobile communication company server 500 that the card approval is completed to transmit a message to the wireless terminal client 100 (step S28, step S29).

Looking at the data flow at the time of transaction cancellation, if the intention of the wireless terminal client 100 for the goods or services that were to be purchased through the approval step is changed to request cancellation (step S31), the merchant server 200 is operating server The request for cancellation of transaction approval is sent with the ID of the purchase cancelor and transaction cancellation details to step 300 (step S32), and the operation server 300 transmits the transaction cancellation details to the card company server 400 and cancels the transaction approval cancellation. The request is made (step S33), and the transaction cancellation history is also transmitted to the mobile communication company server 500 (step S34).

Accordingly, the mobile communication company server 500 transmits a message confirming the cancellation of the transaction to the mobile phone 110 of the wireless terminal client 100 (step S35), and the card company server 400 performs the transaction approval cancellation procedure. The operation server 300 is notified of the processing result (step S36), and the operation server 300 notifies the merchant server 200 that the transaction approval is canceled (step S37).

In addition, the operation server 300 notifies the mobile communication company server 500 that the cancellation of the transaction approval is completed (step S38), and the mobile communication company server 500 transmits a message indicating that the cancellation of the transaction approval is completed. (Step S39).

5A to 5D are screen state diagrams showing a message transmitted to a mobile phone according to an embodiment of an electronic payment system according to the present invention. FIG. 5A is a screen for confirming a transaction history before a payment is approved. 5c is a screen for confirming the cancellation of the purchase when the purchase is canceled, and FIG. 5d is a screen for notifying that the purchase procedure and the card payment have been canceled.

The accompanying drawings show a preferred embodiment of a message transmitted from the mobile carrier to the mobile terminal 110 of the wireless terminal client 100 to check the transaction history, the contents of the message can be changed, if necessary, payment In addition to the approval and cancellation of the transaction can also be applied to the transaction history occurs.

In addition, the present invention has been shown a case of transmitting a text message (SMS) to the mobile phone, it can be applied to the same method as the voice message.

Although the above has been described with reference to the preferred embodiment of the present invention, various modifications and changes are possible without departing from the scope of the present invention. Therefore, the technical scope of the present invention should not be limited to the contents described in the detailed description of the specification but should be defined by the claims of the patent.

As described above, the electronic payment system for protecting credit card information according to the present invention, by applying directly to the card company to manage the data for the individual in the operation server, there is no need to enter information every time online sign-up to the merchant Discomfort can also be eliminated, time can be saved, and hacking that occurs during the transmission of subscription information at the time of transmission has the effect of preventing information theft of others.

In addition, it is easy to confirm that the transaction is made by the user through the procedure in which the operation server sends the purchase information to the purchaser whenever a transaction such as a transaction is established or canceled, and can be appropriately handled even if the purchase intention is changed. .

Claims (7)

A wireless terminal client having a unique identifier; An affiliated store server that receives and registers an identifier of the wireless terminal client and user information corresponding to the user, and issues a user ID; A card company server which receives and registers an identifier of the wireless terminal client and payment card information of the user; The user ID and the identifier of the wireless terminal client are matched with each other and registered, and when there is a transaction approval request along with the transmission of the user ID from the merchant server, the identifier of the wireless terminal client corresponding to the user ID is transmitted to the card company server. Electronic payment system for credit card information protection, characterized in that it comprises an operation server for requesting a transaction approval. A wireless terminal client having a unique identifier; An affiliated store server that receives and registers an identifier of the wireless terminal client and user information corresponding to the user, and issues a user ID; A card company server which receives and registers an identifier of the wireless terminal client and payment card information of the user; The user ID and the identifier of the wireless terminal client are matched with each other and registered, and when the purchase information including the user ID is transmitted from the affiliate server, the purchase information is transmitted to the wireless terminal client to confirm the purchase. And an operating server for requesting the transaction approval by transmitting an identifier of a wireless terminal client corresponding to a user ID to the card company server. A wireless terminal client having a unique identifier; An affiliated store server that receives and registers an identifier of the wireless terminal client and user information corresponding to the user, and issues a user ID; A card company server which receives and registers an identifier of the wireless terminal client and payment card information of the user; It includes an operation server for intermediary between the wireless terminal client, merchant server and card company server, The operation server A member management module for registering a user and a member who have a card as a member and storing the member in a personal member information database and a member member database; A registration module for receiving the identifier and payment card information of the wireless terminal client registered from the card company server, receiving the user information and the identifier and ID of the wireless terminal client from the merchant server, matching each other, and registering the registration information; An approval module that manages an approval relationship between the card company server and the affiliate server and stores payment details in a payment information database; A purchase confirmation module for confirming a purchase by transmitting the purchase information to the wireless terminal client when the purchase information is transmitted from the affiliate server, and storing the transaction in a personal transaction history database and a merchant transaction history database, respectively; And And a control module for controlling data input and output to each of the databases and for controlling the functions of the respective modules. 4. The electronic payment system according to any one of claims 1 to 3, wherein said wireless terminal client comprises a mobile phone, said identifier being a telephone number of said mobile phone. [4] The electronic payment system of claim 2 or 3, wherein the purchase information includes an affiliate store number, a user ID, a purchase amount, and an installment period. A wireless terminal client having a unique identifier, a merchant server through which the purchase is made through the wireless terminal client, a card company server that performs approval for a transaction approval request from the merchant server, and between the wireless terminal client, the merchant server, and the card company server. Applied to an electronic payment system including an operation server for mediation, Requesting a transaction approval for a purchase from the affiliate server to the operation server; Extracting, from a database, an identifier of a wireless terminal client corresponding to the buyer ID in the purchase information transmitted with the transaction approval to the card company server; Extracting payment card information corresponding to the identifier of the transmitted wireless terminal client from a database and performing a transaction approval procedure; And transmitting transaction approval information to the affiliated server through the operation server. The method of claim 6, further comprising: transmitting the purchase information transmitted to the wireless terminal client of the purchaser when requesting the transaction approval from the affiliate server to the operation server, and receiving a purchase confirmation from the purchaser. Electronic payment method for protecting credit card information.