KR20040046250A - Credit authorization terminal with gataway function - Google Patents

Abstract

PURPOSE: A credit card checker equipped with a gateway function is provided to facilitate the installation and the management of device by combining/connecting the devices having a communication function applying different protocols to one external network on a shop. CONSTITUTION: A broadband communication part(31) transmits/receives a signal from a broadband communication network. A security processor(32) processes the encryption and the access control for the internal/external communication. A certification processor(33) confirms an adequate user for the internal/external communication. A communication distributor(34) distributes the communication from the inside to the outside or vice versa. A credit card checking part(35) performs a process for reading/inquiring/approving a credit card. An internal communication distributor(36) connects the devices through each communication line. An application storage(37) stores an application for performing the function related to the devices. A protocol converter(38) converts the data of the device not supporting the TCP/IP(Transmission Control Protocol/Internet Protocol) into the TCP/IP and vice versa.

Description

CREDIT AUTHORIZATION TERMINAL WITH GATAWAY FUNCTION}

The present invention relates to a credit card inquiry device having a gateway function that can be connected to a single external network by combining lines connected to various information and communication devices in a home or store, thereby facilitating installation and management of the devices. will be.

Recently, due to the development of the Internet and various information home appliances, the type and number of information devices used in general homes and shops are increasing day by day.

For example, a few years ago, only telephones, faxes, and credit card checkers were used. In recent years, however, PCs for store sales and customer management, fire alarms to detect and detect fires, and gas leaks are detected. Various kinds of devices such as gas alarms, security devices, electronic ordering devices, LED advertising indicators, etc. are being used more and more, and the types are gradually increasing.

In addition, most of the above devices are connected to other external servers through a predetermined communication line to be controlled.

However, in the case of a communication line, a point-to-point method of exchanging 1: 1 digital signals or public telephone networks (PSTN), which performs simple 1: 1 exchanges between ordinary telephones, was used. Although only a Public Switched Data Network (PSDN) was in operation, a variety of complex and high-performance networks, such as the high-speed Internet represented by the Asymmetric Digital Subscriber Line (ADSL), the WIFI local wireless network, and the broadband wireless network such as the WLL. This is in operation.

The various information devices described above vary according to their characteristics. For example, as shown in FIG. 1, a credit card inquiry machine 13 which accesses a server via a telephone 11, a fax 12, and a communication line and performs an inquiry and approval process for credit card payment is provided. Since voice communication or a small amount of data is transmitted and received, a personal computer 14 used for a general public telephone network (PSTN) and used for store sales, merchandise, and customer management requires a lot of data to be transmitted and received and requires faster time for processing. Therefore, ADSL, which is a high-speed Internet network, and a security device such as the topic alarm 15 should immediately notify the set destination (for example, a fire station, a police station, or a topic management server) when a topic occurs, and thus immediately receive data in real time. Use this possible PSDN.

Therefore, from the standpoint of a telephone, a credit card checker, a PC, and a store equipped with a security device, a telephone line for a telephone call, a separate telephone line for a credit card inquiry, an ADSL line for a PC, and a security device PSDN lines must be laid, which complicates installation and management and creates redundant investment.

In addition, since the management of each device must be performed separately, it is difficult to use the entire devices connected to one line.

This problem is expected to intensify as more devices are developed and used in the future.

The present invention has been proposed to solve the above-mentioned conventional problems, and an object thereof is to be used in a shop and the like, and to connect a device having a plurality of communication functions with different protocols to connect to one external network. It is to provide a credit card inquiry machine with a gateway function that can facilitate the installation and management.

1 is a diagram illustrating a circuit coupling structure of information devices used in a conventional store.

2 is a view showing a structure in which a plurality of information devices in a store are integrated using a credit card inquiry device having a gateway function of the present invention.

3 is a block diagram showing the configuration of a credit card inquiry machine with a gateway function according to the present invention.

4 is a diagram illustrating a communication distribution principle based on a well known port method applied to a credit card inquiring device having a gateway function according to the present invention.

FIG. 5 is a diagram illustrating a communication distribution principle by a directory access method applied to a credit card inquiry machine having a gateway function according to the present invention.

6 is a block diagram showing the configuration of a credit card inquiry machine provided in a credit card inquiry machine with a gateway function according to the present invention.

7 (a) and 7 (b) are diagrams illustrating a connection structure with a display unit in a credit card inquiry machine having a gateway function according to the present invention.

8A and 8B are external perspective views illustrating a product implementation of a credit card inquiry machine with a gateway function according to the present invention.

9 is a network structure diagram constructed using a credit card inquiry machine with a gateway function according to the present invention.

10 is a flowchart illustrating a gas reading procedure as an embodiment of the present invention.

11 is a flowchart illustrating a fire alarm procedure as another embodiment of the present invention.

Explanation of symbols on the main parts of the drawings

31: broadband communication unit 32: security processing unit

33: authentication processing unit 34: communication distribution unit

35: credit card inquiry donation 36: internal communication distribution

37: application storage unit 38: protocol conversion unit

As a construction means for achieving the above object, the present invention provides a credit card query device having a gateway function for relaying a connection to a destination via a single broadband communication network for a device having a plurality of communication functions,

A broadband communication unit connected to a broadband communication network to perform signal transmission / reception processing to the broadband communication network;

Security processing unit for performing encryption and access control for external and internal communication;

An authentication processing unit for confirming whether an appropriate user is connected to the internal and external communication;

A communication distribution unit for distributing communication so as to be connected to a destination for communication from inside to outside or from outside to inside;

A credit card inquiry unit that reads, inquires, and authorizes a credit card;

An internal communication distribution unit connected to a plurality of devices through respective communication lines;

An application storage unit for storing other applications other than credit card processing;

Characterized in that it consists of a protocol conversion unit for converting the data of the equipment that does not support TCP / IP among the plurality of connected equipment to TCP / IP and the protocol of the corresponding equipment from TCP / IP.

Hereinafter, with reference to the accompanying drawings will be described in detail with respect to a credit card query machine having a gateway function and an Internet-based service providing method using the same.

2 is a diagram showing a local network configuration in a store constructed by using a credit card inquiry device 25 having a gateway function according to the present invention.

As shown, the credit card lookup device 25 with a gateway function is connected to an external high speed broadband Internet and internally installed in an information store, for example, a telephone 21 and a fax ( 22, the personal computer 23, and the fire alarm 24 are connected.

At this time, the telephone 21 and the fax 22 are respectively connected to a credit card inquiry device 25 having a gateway function on a PSTN line, and the personal computer 23 and the fire alarm 24 are connected to an Ethernet line, respectively. It is connected with a credit card inquiry device 25 having the gateway function.

In addition, when the credit card inquiry device 25 performs inquiry and approval processing for credit card payment, it internally relays data transmission and reception between an external network (broadband Internet) and an internal network (PSTN, Ethernet). The configuration and operation associated with it are described in more detail below.

The above configuration uses the credit card checker 25 as a management means of the internal network, thereby unifying the network outgoing from the store, thereby enhancing convenience by applying strong security and management functions. Can be. In addition, in view of the cost of the communication line, since the cost is generated only for one external network in the above configuration, it is possible to save economics. In addition, it is possible to obtain the advantages of management and use from the fact that the credit card inquiry machine is almost used in most stores, and that the device is familiar to the store operator, and that most of them are used more than other devices.

3 is a block diagram showing in detail a configuration of a credit card inquiry device 25 having a gateway function according to the present invention, wherein the credit card inquiry device 25 is connected to a broadband communication network to transmit and receive signals to and from the broadband communication network. Broadband communication unit 31 for performing processing, security processing unit 32 for performing encryption and access control for external and internal communication, and authentication processing unit 33 for confirming whether an appropriate user's connection is established for internal and external communication. And a communication distribution unit 34 for distributing the communication so as to be connected to the destination for communication from the inside to the outside or the communication from the outside to the inside, and a credit card inquiry unit for reading, inquiry, and authorization processing of the credit card ( 35), an internal communication distribution unit 36 for connecting the communication distributed by the communication distribution unit 34 to an internal device, and an application store for storing other applications other than credit card processing. It consists of a part 37 and a protocol converter 38 for converting the protocol in the TCP / IP protocol, or performs the reverse function of each of the connected equipment.

The broadband communication unit 31 is a means for processing communication with an external network, that is, a broadband Internet network. The broadband communication unit 31, for example, an access device such as an ADSL modem or a CDMA modem and software for driving the same, depending on the type of communication line connected thereto. It consists of. The present invention is not limited only to a specific connection device, but may be selected in consideration of the situation of a shop and the ease of providing a network, and the connection software is mounted to enable such selection.

And, the security processing unit 32 for the internal communication section and the external communication section,

It provides functions such as encryption and communication access control on the communication section, and can be implemented by software running on the main computing device. For example, it provides standard encryption schemes such as IPSec-based VPNs and HTTPS, and security features required by specific applications or connected devices. In addition, for communication transmitted from outside to inside, certificate-based security systems and firewall functions are configured to prevent unauthorized communication.

Then, the authentication processing unit 33 provides a function of confirming whether the connection of the appropriate use for the internal and external communication connected to the credit card inquiry machine 25, for example, an IC card or a smart card. The reading device for the storage medium 33a storing the certificate or the personal identification information such as, and the software installed in the main computing device connected to the reading device to process the authentication of the user. The user authentication may be performed by the authentication processing unit 33 itself, or may be performed by inquiring an external authentication server through the broadband communication unit 31. Preferably, an IC card is used, and the IC card records the authorized certificate of the affiliated store, additional information of the affiliated store, affiliated store registration information of the card issuer, and stores information recorded on the inserted IC card in an external server (for example, credit). Server's server) to inquire whether or not to authenticate. In addition, as an official certificate, it is possible to use an X.509 type certificate that has a legal effect in the Republic of Korea, and adds a PI field to record merchant information. As a result, a legally valid transaction can be performed by using a stored certificate in case of commerce using a web browser.

In addition, the communication distribution unit 34 distributes the communication between the device connected to the internal network and the external network. The communication distribution unit 34 distributes communication to all connected internal devices according to the TCP / IP protocol. If a particular device does not use TCP / IP and follows another communication, for example, a serial communication method such as USB, the serial communication method 38 converts the serial communication method to the TCP / IP method and inputs the data. do. The communication distribution unit 34 may be implemented using a function such as NAT (Network Address Translation).

In the network as described above, when the gas meter reader is connected, the external metering server needs to be connected to the gas meter through the credit card checker 25.

Therefore, the present invention provides a port designation method (Well Known Port method) or a directory access (Directory Access) method so that the communication distribution unit 34 can process this.

As shown in FIG. 4, the port kown port method corresponds to a specific TCP / IP port for each device connected to an internal device, and the external device uses a TCP / IP port assigned to the device as a destination. The data is connected, and the communication distribution unit 34 distributes data transmitted from an external device to a specific port so as to be transmitted to a device corresponding to the corresponding port. Similarly, data transfer in an internal device is a way to connect and transfer data to the corresponding device.

In more detail, each TCP / IP communication port is allocated to a device connected to the internal network regardless of the actual communication medium, and the communication received for each port is transmitted to the corresponding device. At this time, if the final communication interval is not Ethernet, the protocol conversion unit 38 is converted into an appropriate communication method.

Next, the directory access method controls access to a specific device to a specific web directory concept. As shown in FIG. 5, a connection to the device is performed through the web. That is, a web address is assigned to each internal device, and an external device accesses the corresponding device through each web address. At this time, the communication distribution unit 34 determines the target equipment from the destination address from the external device, and transmits to the corresponding device.

In addition, the credit card inquiry unit 35 is a block for performing reading, authorization inquiry, receipt issuance, etc. on the credit card, for example, a configuration means such as a magnetic strip card reader, an IC card reader, a printer, a display, a keypad, and the like. And software to handle credit card services.

FIG. 6 is a block diagram showing a specific configuration of the credit card inquiry unit 35. As shown, the credit card inquiry unit 35 is a magnetic strip reader 351 for reading a credit card made of a magnetic strip type. And a smart card reader 352 for reading a smart card, a key input unit 353 for inputting an operation command or an authorization amount, an output unit 354 for printing a receipt, and controlling operations of the means. And a display unit 356 for displaying the processing state and the result.

Since the credit card inquiry unit 35 configured as described above performs the same function as the existing credit card inquiry unit, a detailed description thereof will be omitted.

However, the display unit 356 of the credit card inquiry unit 35 is configured to exchange two display modules including a low resolution character LCD, a high resolution graphic LCD, and a touch screen.

As shown in Figs. 7A and 7B, the structure includes a first connection portion 71 for low-resolution character LCD and a high-definition graphic LCD. And a second connection unit 72 for a touch screen. The first and second connectors 71 and 72 are formed at different positions, respectively, and include control ports 71a and 72a and sensing contacts 71b and 72b, respectively.

In addition, the character LCD 356a and the touch screen graphic LCD 356b respectively form connection parts 73 and 74 at positions corresponding to the first and second connection parts 71 and 72, respectively. 74 connects the control ports 73a and 74b through which control signals are input and output, and the contact points 71b and 72b without signal input and output. It consists of ports 73b and 74b.

Therefore, it is possible to determine which display module is mounted in the operation unit 355 through connection of specific contacts 71b and 72b, and from this, it is possible to determine which module of the processing software is loaded into the memory and used. .

By implementing the contact portion as described above, it is possible to provide two different display equipments of different levels with a single mold, and to upgrade from a low resolution display device to a high resolution display device.

Next, the application loading unit 37 is a place for executing a driving program other than the credit card inquiry unit 35 among the applications driven in the respective blocks, and may be composed of a main operation unit and software driven on the main operation unit. Can be. For example, when a device connected internally is a multimedia advertisement device, a program for controlling the device may be stored.

Next, the internal communication distribution unit 36 distributes communication for a plurality of devices connected therein. In the case of a device supporting TCP / IP, the device is directly connected to the internal communication distribution unit 36, but devices that do not support TCP / IP are protocol converted through the protocol conversion unit 38.

As described above, the protocol conversion unit 38 converts the connection equipment that does not support TCP / IP into the TCP / IP protocol and processes the virtual IP address. In addition, it is possible to provide plug and play functionality for each device. Examples of the connection device that can be provided above include USB, FireWire, RS-232C, RS-422, and Infra Red.

8A and 8B illustrate an example of the appearance of a credit card inquiry device 25 having a gateway function according to the present invention. In consideration of being used as a credit card terminal, as shown in FIG. (32), the authentication processing unit 33, the communication distribution unit 34, the credit card inquiry unit 35 and the application storage unit 37 is configured in the main body 81 in the form of a terminal, and other broadband connection cable required The communication unit 31, the internal communication distribution unit 32, and the protocol conversion unit 38 are configured as separate communication units 82, and the main body 81 and the communication unit 82 are connected by one cable 83. do.

By separating the main body 81 and the communication unit 82 as described above, the main body 81 may be installed on the desk, the communication unit 82 may be convenient to be installed below the desk or invisible to the floor. .

In addition, the connection of the power source or the communication line is made in the communication unit 82, and by exchanging power and control and data signals through a single cable 83 connecting the main body 81 and the communication unit 82, Solve management problems caused by cables.

In addition, as shown in FIG. 8B, the main body 81 and the communication unit 82 may be combined into one and implemented as a single device.

As such, various services desired by a store may be provided using a credit card inquiry device having a configured gateway function, and FIG. 9 illustrates an embodiment of a system built using a credit card inquiry device having the gateway function. will be.

As shown, the system connects devices 1, 2 (91, 92) performing a predetermined function in a store to a credit card inquiry machine 93 having a gateway function, and the credit card inquiry machine 93 Is connected to the Internet 94, which is a broadband communication network, and the device 94, corresponding to the devices 94 and 95 for managing data by exchanging data with the devices 1 and 2 (91, 92), respectively. Is connected.

In the above, the devices 1,2 and 91 have a unique address, which is registered and managed by the credit card lookup 93.

In addition, the server 1, 2 (95.96) transmits the authentication information provided in advance for access to the device 1, 2 (91, 92) corresponding to the credit card lookup machine 93 having the gateway function, which is transmitted Information can be protected using a segment encryption function such as a VPN between the credit card lookup 93 and the servers 1,2 and 95.

After receiving the information, the credit card checker 93 checks the authentication information included in the transmitted data, and transmits the requested content to the corresponding device 91 or 92 when the server or user is allowed. The response is then received from the device 91 or 92 and sent to the corresponding server 1, 2 (95, 96).

The operation in such a system is described with some examples.

As a first example, the device 1 (91) is called a gas meter reading device, and the server 1 (95) is called a gas meter management server, and the gas metering service procedure in this case will be described with reference to the flowchart of FIG. Explain. As a second example, the device 2 92 is a fire alarm, and the server 2 96 checks the fire and informs the user or the police station or the fire department. In this case, the procedure of the fire alarm service is described. It demonstrates with reference to the flowchart of FIG.

Example 1

In the present embodiment, the apparatus 1 (91) is a gas metering device, the server 1 (95) is a gas metering server. The device 1 91 and the credit card inquiry machine 93 having a gateway function are connected by a USB method, and the credit card inquiry machine 93 and the server 1 95 perform TCP / IP communication.

In the state configured as described above, the gas reading request is sent from the server 1 95 to the credit card inquiry machine 93. At this time, the transmitted data includes a certificate indicating the access authority (101).

Accordingly, the credit card lookup machine 93 receives the meter reading request received from the server 1 (95), and determines whether or not the certificate received together (102, 103). As a result of the determination, if the access is not permitted, the server 1 (95) notifies the access denial (104, 105). On the contrary, if the connection is authorized, the received message is transmitted to the corresponding device 1 (91) by the port known method or the directory access method described above (104, 106).

After receiving the reading request 107 transmitted as described above, the device 1 91 reads the gas meter (not shown) accordingly (108), and transmits the reading result to the credit card checker 93 ( 109).

The credit card lookup machine 93 converts the received meter reading result of the device 1 91 into TCP / IP to match the external communication method (110), and then transmits it to the corresponding server 1 (95) (111). . Then, the server 1 (95) is terminated by receiving the meter reading result transmitted through the relay of the credit card inquiry machine (93) (112).

The above procedure corresponds to a case where a connection from an external server to an internal device is required, and the external connection request and the response thereof are performed in the same process as the above-described procedure.

Example 2

FIG. 11 illustrates a process of a fire alarm service in which communication is started first, and in this embodiment, device 2 92 is regarded as a fire alarm and server 2 95 is regarded as a fire alarm server. The communication method of the apparatus 2 92 and the credit card inquiry machine 93 is RS-422, and the credit card inquiry machine 93 and the server 2 95 comply with the TCP / IP protocol.

The device 2 92 is a device for detecting whether a fire has occurred in a store, and when a fire occurs (201), a device generates and sends a fire alarm signal (202).

The fire alarm signal of the device 2 92 is transmitted to the credit card inquiry machine 93, and the credit card inquiry machine 93 converts the received fire alarm signal of the device 2 92 into a TCP / IP signal. In operation 204, the server 2 transmits to the server 2 95, which is set together with the authentication information of the device 2 92.

At this time, the communication distribution from the device 2 92 to the server 2 95 follows the well-known port method or the directory access method described above.

After receiving the alarm signal transmitted through the credit card inquiry machine 93, the server 2 95 extracts the authentication information transmitted together (205, 206), and then performs a fire alarm according to the setting procedure ( 207).

The above procedure is a case where the external transmission signal is first generated from the internal access device.

According to the above, by applying a credit card inquiry machine having a gateway function according to the present invention, it is possible to integrate and install a variety of communication lines in the store, as a result has an excellent effect to increase the cost and efficiency of management.

Claims (6)

A broadband communication unit connected to a broadband communication network to perform signal transmission / reception processing to the broadband communication network; Security processing unit for performing encryption and access control for external and internal communication; An authentication processing unit for confirming whether an appropriate user is connected to the internal and external communication; A communication distribution unit for distributing communication so as to be connected to a destination for communication from inside to outside or from outside to inside; A credit card inquiry unit that reads, inquires, and authorizes a credit card; An internal communication distribution unit connected to a plurality of devices through respective communication lines; An application storage unit for storing an application that performs a function related to a device connected internally other than credit card processing; Gateway function characterized in that it consists of a protocol conversion unit for converting the data of the equipment that does not support TCP / IP among the multiple equipment connected to TCP / IP and the protocol of the corresponding equipment from TCP / IP One credit card checker. The method of claim 1, wherein the communication distribution unit Assign TCP / IP communication port for each connected device, Credit card lookup device having a gateway function, characterized in that for distributing the communication received by the port to the corresponding device. The method of claim 1, wherein the communication distribution unit A credit card inquiry device having a gateway function, which allocates a web address for each connected device and distributes communication based on the assigned address. The method of claim 1, wherein the protocol conversion unit A credit card inquiry device with a gateway function, characterized in that virtual IP is assigned to an access device that does not support TCP / IP. The method of claim 1, wherein the security processing unit Credit card lookup device having a gateway function, characterized in that during the communication from the outside to the inside and from the outside to the inside, the access right is confirmed through an authorized certificate set between the server and the access device. The method of claim 1, wherein the credit card checker A display device comprising a low resolution LCD or a high resolution LCD, It is installed at different positions corresponding to the low resolution LCD / LCD of high resolution, respectively, and provided with a first and second connection portion consisting of a control port for inputting and outputting control signals of the LCD and a sensing port for detecting whether the corresponding LCD is connected, A credit card inquiry device with a gateway function, characterized in that configured to determine the type of connected LCD and to install a control program according to whether the first and second detection ports are detected.