KR20040078954A - Method and System for Providing Location-Based Credit Card Authentication Service - Google Patents

Abstract

PURPOSE: A location based credit card authentication service method and a system for the same are provided to identify a location of a credit card holder by using a position of a mobile terminal carried by the credit card holder when the holder makes payment with the credit card, to compare the location of the credit card holder with that of an affiliated store, and to authenticate the payment with the credit card. CONSTITUTION: The system comprises a mobile terminal(110), an affiliated store(120), a credit card authentication server(140), a location authentication server(150), and a map server(190). The mobile terminal(110), carried by a credit card holder, is used in identifying a location of the credit card holder. The affiliated store(120) installs a credit card processing terminal for reading data from a credit card, and is registered at a location authentication service system as a member. The credit card authentication server(140) receives a payment request signal from the affiliated store, checks whether the credit card is registered at the location authentication service system, and authenticated the credit card. The location authentication server(150) receives a position authentication request signal from the credit card authentication server(140), receives location data of the mobile terminal from a mobile communication service system, performs a location authentication process, and transmits the location authentication result to the credit card authentication server(140). The map server(190) receives address data of the affiliated store from the location authentication server(150), extracts position coordinate values corresponding the address data, and transmits the extracted position coordinate values to the location authentication server(150).

Description

Method and System for Providing Location-Based Credit Card Authentication Service

The present invention relates to a method and system for providing a location based credit card authentication service. More specifically, when a credit card authentication request is generated from a credit card merchant, the position of the credit card holder is identified by the mobile communication terminal's positioning system, and the position of the credit card owner is compared with the position of the credit card merchant. The present invention relates to a method and a system for providing a location-based credit card authentication service for authenticating a credit card if it is determined to be within the credit card.

A credit card is an identification card, usually made of plastic, issued by a bank or a large store. The credit card holder pays in advance or pays cash in order to later calculate the price of the goods purchased or the service fee provided. It is used to withdraw cash from cash dispensers (CDs).

Credit cards generally come in two varieties: magnetic and chip-based. In the magnetic type, the magnetic stripe of the credit card stores information such as identification information and password of the credit card user. In the chip-based type, an integrated circuit chip is embedded in a credit card, and information such as identification information and password of a credit card user is stored in the integrated circuit chip.

In the case of purchasing goods or services using such various credit cards, a credit card payment system is a system that pays for a purchase of goods or services using a credit card. The credit card payment system includes a card reader that reads information stored on a magnetic strip or integrated circuit chip of a credit card, a communication device that transmits information read through a card reader, an output device that outputs a record of payment history, and the like. It includes a credit card checker installed in a plurality of merchants having a. In addition, the credit card payment system is a database that stores customer credit status, information on the use of the credit card, information about the credit card that caused the accident, such as lost or stolen, etc., the credit card that is sent through the credit card checker It includes a credit card company server that receives information about and performs authentication on whether or not to use a credit card to pay using a database.

Such a conventional credit card payment system has a problem that it can not prevent even if a credit card of another person is used illegally because only the authentication of the credit card itself is performed in a state where the credit card payment system cannot be authenticated. In other words, it is not possible to authenticate the credit card and the person using the credit card together, and various social crimes such as theft of the credit card are prevalent, and the use of the credit card is avoided, and the safety of the credit card is greatly threatened. It causes side effects that hinder the development of society.

To make up for these drawbacks, if you use a credit card, make sure that the signature is the same as the signature on one side of the credit card (usually on the back), or print a photo on the credit card itself to prevent others from using it and to steal the credit card. In the event of being lost or lost, the credit card company will promptly report the fact to limit the use of the credit card.

However, the method of making a signature when using a credit card has a problem that the signature itself can be easily forged by imitation and thus it is difficult to determine the authenticity without the help of a professional signature identification device. In addition, the method of discriminating a photograph printed on a credit card can be easily changed by the shape of a person, such as a hair form, makeup form, attire, glasses, etc. Observing his face closely is considered to be a offense, so its utility is not great. In addition, the method of limiting the use of the reported credit card by receiving a report regarding the loss or theft of the credit card is not recognized by the original owner of the credit card, or the state of fraud or obsession. If you are in a difficult situation, it is difficult to report it.

Meanwhile, with the recent development of mobile communication technology and the rapid spread of mobile communication terminals, various mobile communication services are provided. In particular, short message service (SMS) is widely used for various purposes. have. Therefore, even in the case of payment using a credit card, the SMS service applicant who notifies the payment details in a short message is provided with a service that informs the payment details in a short message to the registered credit card holder. However, since the payment history notification service using SMS transmits the payment details to the credit card owner after the payment is completed, it prevents illegal use of the lost credit card in case of loss or theft of the credit card. There is a disadvantage that it is insufficient.

In order to improve the difficulty of authenticating a credit card user, which is a disadvantage of the conventional credit card payment system described above, a credit card user is used by using a mobile terminal in Korean Patent Application No. 2000-42921, "Credit card payment system and its control method." A method of authentication has been proposed. In other words, when an authentication request of a credit card is received from a credit card merchant, the exchange attempts to access a call to the mobile terminal of the credit card user, receives an authentication number from the user, and compares the authentication number with the previously stored authentication number to determine whether or not it matches. .

However, the prior invention is cumbersome in procedure because the call connection must be performed to the mobile communication terminal of the credit card user, the call connection must be made, and the user must memorize a password, and waste communication resources by occupying a separate communication path. There is a problem that causes a lot of authentication time. In addition, when a password for authentication of a credit card user is leaked, there is a problem in that another person can be stolen.

In order to solve the above problems, the present invention is to identify the location of the credit card holder with the location of the mobile communication terminal when the authentication request of the credit card from the credit card merchant, the location of the credit card owner and the location of the credit card merchant The purpose of the present invention is to provide a method and system for providing a location-based credit card authentication service for authenticating a credit card if it is determined that the error is within an error range.

1 is a block diagram schematically illustrating a location-based credit card authentication system according to an embodiment of the present invention;

2 is a flowchart illustrating an authentication algorithm of a credit card in consideration of a positioning error between a mobile communication terminal and a card affiliate according to an embodiment of the present invention;

3 is a flow chart briefly illustrating an authentication process of a credit card according to an embodiment of the present invention;

4 is a flowchart illustrating an authentication process when the location of the mobile communication terminal is not detected when the credit card is registered in the location-based credit card authentication service according to an embodiment of the present invention;

FIG. 5 is a flowchart illustrating an authentication process when a location of a mobile communication terminal is determined when authenticating a credit card registered in a location-based credit card authentication service according to an embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

110: mobile communication terminal 120: card merchant

122: VAN 130: card company payment server

140: card company authentication server 142: member database

144: Merchant Database 150: Location Based Authentication Server

152: authentication log database 154: authentication matching database

160: location information server 170: mobile communication switching center

180: wireless base station 182: base station transmitter

184: base station controller 190: map server

192: Map database

To this end, the present invention is a system for providing a location-based authentication service for authenticating a credit card by comparing the location of the card merchant and the location of the credit card holder, possessed by the credit card holder, grasp the location of the credit card holder A mobile communication terminal used to make; A card merchant that reads card information embedded in the credit card using a card information query device and is registered as a member in the location-based authentication service; A card company authentication server for receiving a payment request signal transmitted from the card affiliate to determine whether the credit card is registered in the location-based authentication service, and authenticating the credit card; Receives the location authentication request signal from the card company authentication server to request and receive the position coordinate value of the mobile communication terminal to the mobile communication system, perform a location authentication operation using the built-in location authentication module to verify the authentication result of the card company Location-based authentication server for transmitting to the server; And a map server receiving address data of the card affiliate from the location-based authentication server, extracting the location coordinate value set in the corresponding address, and transmitting the extracted location coordinate value to the location-based authentication server. Provide a provision system.

According to another object of the present invention, the credit card payment card merchant, the credit card owner's mobile terminal, the map server and the mobile communication system for calculating the position coordinate values of the card merchant and the mobile terminal, respectively, the credit A method of providing a location-based authentication service in a system consisting of a card company authentication server performing a general authentication operation of a card and a location-based authentication server performing a location authentication operation of the credit card, the method comprising: (a) Transmitting a payment request signal to the card company authentication server; (b) the card company authentication server determining whether the credit card is registered in the location-based authentication service using the payment request signal; (c) the card company authentication server transmitting a location authentication request signal to the location based authentication server, and the location based authentication server requesting location data of the mobile communication terminal to a mobile communication system; (d) transmitting location data of the mobile communication terminal from the mobile communication system to the location-based authentication server, and calculating the location coordinates of the card affiliate store by the map server; (e) receiving, by the location-based authentication server, location data of the card affiliate store from the map server and performing a location authentication operation using a location authentication module; (f) generating, by the location-based authentication server, an authentication result code of the location authentication job to the card company authentication server; And (g) the card company authentication server transmitting the result code to the card merchant, and the card merchant performing the payment according to the authentication result code. Provide a method.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In addition, in describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

1 is a simplified block diagram of a location based credit card authentication system 100 in accordance with a preferred embodiment of the present invention.

Location-based credit card authentication system 100 according to a preferred embodiment of the present invention is a mobile communication terminal 110, card merchant 120, value added network (VAN: Value Added Network, hereinafter referred to as 'VAN') network 122 ), Card company payment server 130, card company authentication server 140, location-based authentication server 150, location information server 160, mobile switching center (MSC) (170), wireless base station (BS: A base station 180 and a map server 190.

The mobile communication terminal 110 is a terminal possessed by a user using a location-based credit card authentication service according to an exemplary embodiment of the present invention. When the user pays a credit card, the mobile communication terminal 110 determines the location of the user by the location checking function of the mobile communication system. Used to figure out. Of course, when a device such as a Global Positioning System (GPS) chipset (Chipset) or the like is built in the mobile communication terminal 110 and the use of GPS is possible, the user's location can be confirmed by the GPS. That is, in the location-based credit card authentication system 100 according to an embodiment of the present invention, a cell ID, which is a unique location tracking method of a mobile communication system, is a method for identifying a location of a mobile communication terminal 110 possessed by a user. One or more of a (Cell-ID) method, a GPS method, and an Assisted-GPS (A-GPS) method may be used.

In general, the cell ID method has a disadvantage in that the location accuracy is somewhat lowered by the environment of the wireless channel. In other words, signal propagation time is reduced due to the effects of Hearability, Multipath due to buildings and terrain, and Non Line Of Sight (NLOS) in the signal propagation process on the ground. This is because the measurement is not accurate.

In addition, a method of measuring a location using a GPS method also generates a predetermined error. In particular, a mobile communication terminal in a city center due to a multi-path occurrence due to a high-rise building, a lack of visibility satellite, a poor DOP (Dilution Of Precision), etc. The position error of 110 frequently occurs. Here, the DOP is a value indicating an even degree of the arrangement state of the GPS satellites seen by the GPS receiver of the mobile communication terminal 110.

Recently, in order to compensate for the disadvantages of the cell ID method and the GPS method, the A-GPS method, which is a complex method combining the two methods, has been proposed. In the A-GPS method, the mobile communication terminal receives the information of the wireless base station related to the location determination from the wireless communication network by the cell ID method, and simultaneously receives the navigation data through the GPS method to determine its position more accurately in three dimensions. have. When using the A-GPS method, the error range of the position measurement is reduced to within a few meters. The principle of location measurement of a communication terminal using a cell ID method, a GPS method, and an A-GPS method is well known to those skilled in the art, and thus a detailed description thereof will be omitted.

On the other hand, the mobile communication terminal 110 according to an embodiment of the present invention includes a mobile phone, a PDA (PDA) and the like.

The card merchant 120 is a place where a user pays for goods using a credit card, and radiates card information and credit information stored in a credit card presented by the user through a credit authorization terminal (CAT). Read by frequency (RF: Radio Frequency) communication or infrared communication and transmits to the card company payment server 130 through the VAN (122). Card merchant 120 to provide a location-based credit card authentication service to a user according to an embodiment of the present invention must first register as a member merchant in the location-based credit card authentication system 100.

The VAN 122 increases the added value of the communication network by providing information required by the user based on the existing data communication network, and the information provider provides a communication network for implementing a new type of information service that benefits from the fee of the information service. to be. The VAN 122 functions to transmit and receive card information, credit information, card authentication information, payment processing information, and the like, between the card merchant 120 and the card company payment server 130.

The card company payment server 130 performs a function of paying a credit card using card information, card information such as card number, expiration date, etc., transmitted from the card merchant 120 through the VAN 122. . In addition, the card information, such as the received card number, the validity period for payment of the credit card is transmitted to the card company authentication server 140, and receives the authentication result from the card company authentication server 140 to determine whether to proceed with the payment.

The card company authentication server 140 performs a credit card authentication operation using the card information transmitted from the card company payment server 130. That is, it is determined whether the card number of the card information is a valid number, the expiration date has not elapsed, the card is reported for reasons such as loss or theft, or whether the card is suspended due to payment of the card. To the card company payment server 130 and the VAN 122 to the card merchant 120.

Meanwhile, the card company authentication server 140 determines, using the member database 142, whether the corresponding credit card is a credit card subscribed to the location-based credit card payment service according to the embodiment of the present invention by using the received card number. . If the credit card is determined to be a credit card subscribed to the location-based credit card payment service, the card company authentication server 140 uses the location-based authentication server 150 to verify the authentication request ID, the credit card owner's name, the mobile identification number (MIN), and the card. The name and address data of the affiliated store 120 is transmitted.

Here, the credit card holder means a person corresponding to the name and resident registration number written on the credit card issuance application, etc. when applying for a credit card. In addition, the card company authentication server 140 receives a location verification result from the location-based authentication server 150 to perform a credit card authentication operation or generate a verification success code (Code) or an error code and transmit it to the card company payment server 130. do.

The member database 142 linked with the card company payment server 130 and the card company authentication server 140 stores the personal information and the card information of the member issued by applying for the credit card of the corresponding card company, and the merchant database 144 includes: Information of the card merchant 120 registered as a member in the card company is stored.

The personal information of the member stored in the member database 142 includes name, gender, social security number, residential address, contact phone number (including MIN), e-mail address, etc. The card information includes card number, expiration date, and usage. Information on limits, late fees, payment details, etc. is stored. In addition, the member database 142 stores information on whether to subscribe to a location-based credit card payment service according to an embodiment of the present invention.

The merchant database 144 stores the name, address, data, payment of bills for each date or item, etc. of the card merchants 120 registered as members, and a management code is assigned and managed for each card merchant 120. .

When the location authentication request is generated from the card company authentication server 140, the location-based authentication server 150 performs a location authentication operation of the corresponding credit card using a predetermined location authentication module. In more detail, the location-based authentication server 150 receiving the location authentication request from the card company authentication server 140 transmits the MIN of the credit card holder included in the location authentication request data to the mobile communication system, The latitude and longitude coordinate information of the credit card holder determined by the terminal is transmitted. In addition, the location-based authentication server 150 transmits the address data of the card affiliate 120 included in the location authentication request data to the map server 190, and the diameter of the card affiliate 120 determined by the map server 190. Also receives coordinate information.

The location-based authentication server 150 receiving the latitude and longitude coordinate information of the credit card holder and the latitude and longitude coordinate information of the card affiliate store 120 from the mobile communication system and the map server 190 uses a built-in location authentication module. Perform the cardholder's location verification. The location-based authentication server 150 that performed the location verification operation includes an authentication request ID, a name and MIN of a credit card holder, a name and address data of a card merchant 120, a request time, a result code, an error range, an error code, and processing. Transmit location authentication result data such as time. Here, the request time is the time at which the location authentication request is generated from the card company authentication server 140, the error range is the distance between the location of the credit card holder and the location of the card merchant 120 exceeds the criteria set in the embodiment of the present invention. If an error occurs, it means the distance between the credit card holder and the card merchant (120).

Meanwhile, an algorithm of location authentication performed by the location authentication module according to an embodiment of the present invention will be described in more detail with reference to FIG. 2.

In addition, the location-based authentication server 150 generates authentication log information and authentication matching information for each authentication request ID whenever a location authentication request occurs, thereby generating an authentication log database 152 and an authentication matching database 154. Store in The authentication log database 152 includes a credit card holder's name, MIN, authentication request time, merchant name, merchant address data, authentication success, success code or error code, and authentication processing time for each authentication request ID where a location authentication request is generated. Authentication log information including information is stored.

The authentication matching database 154 includes a credit card owner's name, MIN, authentication request time, merchant name, merchant address data, merchant location data, merchant location error range, credit card owner location data, and location error by authentication request ID. Authentication matching information including information on a range, a positioning time, a matching result, a matching error range, an error code, and the like is stored. Here, the position data values of the card merchant 120 and the credit card owner may use latitude and longitude coordinate values, and the position error range of the card merchant 120 may vary depending on the location number of the card merchant 120. With a value, the matching error range refers to the actual distance between the measured card merchant 120 and the two points indicated by each location data value of the credit card holder.

The location information server 160 transmits the location information request signal received from the location based authentication server 150, the name of the credit card holder and the MIN to the mobile communication switching center 170 of the mobile communication system. In addition, the location information data such as the name of the credit card holder, MIN, latitude and longitude coordinates, the error range, the location of the location and the like received from the mobile communication exchange station 170 is received and transmitted to the location-based authentication server 150. Here, the error range refers to the range of the distance error that occurs when the position of the credit card holder mobile communication terminal 110 in the mobile communication system. That is, when determining the position of the mobile communication terminal 110 in the mobile communication system, an error occurs due to various causes, which will be described in more detail with reference to FIG. 2.

The mobile switching center 170 generally performs a control function for allowing a plurality of wireless base stations 180 to operate efficiently and an interworking function with a public switched telephone network (PSTN). In addition, according to an embodiment of the present invention, the mobile communication switching center 170 receives the location information request signal, the name of the credit card holder and the MIN from the location information server 160 and uses the three or more wireless base stations 180 to receive credit. The card holder determines the location of the mobile communication terminal 110 and transmits the location information to the location information server 160.

The wireless base station 180 generally performs a function such as allocating or releasing a wireless channel to the mobile communication terminal 110, and performs a base transceiver station (BTS) 182 and a base station controller (BSC). 184. The wireless base station 180 transmits and receives a signal including a pseudo-random noise (PN) code with the mobile communication terminal 110 and calculates a distance to the mobile communication terminal 110.

The map server 190 receives the address data of the card affiliate 120 from the location-based authentication server 150 and searches the address number corresponding to the received address data using the map database 192. That is, the map database 192 stores information about addresses included in each station number set nationwide, and location coordinates are set in one-to-one at each station number. For example, the address of '170-1' is set in '105-7', Nonhyeon-dong, Gangnam-gu, Seoul, and the latitude and longitude coordinates such as '(37.34, 127.30)' are designated as the location coordinates in the address of '170-1'. The value can be set. Of course, exactly the coordinates of minutes and seconds are set.

2 is a flowchart illustrating an authentication algorithm of a credit card in consideration of positioning errors of a mobile communication terminal 110 and a card affiliate 120 according to an embodiment of the present invention.

As described in FIG. 1, the location authentication module of the location-based authentication server 150 receiving the location authentication request from the card company authentication server 140 receives the location coordinates and the position error range of the mobile communication terminal 110 from the mobile communication system. Using the map server 190, the location coordinates corresponding to the branch number of the card affiliate store 120 and the position error of the branch number are checked. The position error of the branch number will be larger as the area covered by each branch becomes larger.

In the flowchart of FIG. 2, r is the position error radius of the branch number by the address of the card affiliate 120, t1 is the average position error radius of the branch number for each administrative unit (old, city, etc.), and t2 is the position of the mobile communication terminal 120. The average position error radius, D, represents the actual distance between the calculated position coordinates of the mobile communication terminal 120 and the position coordinates of the card affiliate 120. The larger the values of r, t1, and t2, the larger the area covered by the address and the area of the cell covered by the wireless base station 180 becomes. In addition, A is the position of the card merchant 120, A 'is the position coordinate value of the card merchant 120, B is the position of the mobile communication terminal 110, B' is the position coordinate value of the mobile communication terminal 110. to be.

First, the location authentication module compares whether r is greater than t1 (S200). If r is greater than t1, since the area of the branch number to which the card affiliate 120 belongs is greater than the average number of areas in the region, the probability that the location coordinates of the card affiliate 120 is the position coordinate value of another branch becomes low. If r is greater than t1, the calculated position coordinate value of the card affiliate store 120 becomes the position of the card affiliate store 120 (A '= A), and the calculated position coordinate value of the mobile communication terminal 110 represents the mobile communication terminal ( A position of 110 is obtained (B '= B) (S202). The location authentication module checks whether the location coordinates of the card affiliate 120 and the location coordinates of the mobile communication terminal 110 are the same (A '= B') (S204). If A '≠ B', it is determined that the location authentication has failed (S208).

On the other hand, if r is not greater than t1 in step S200, the location authentication module checks whether t1 is less than or equal to t2 (t1? T2) (S210). If t1 is less than or equal to t2 in step S210, it is checked whether D is less than or equal to t1, which is a small value (D≤t1) (S212). In step S212, the location authentication module determines that location authentication is successful when D is less than or equal to t1, and when D is greater than t1, it is determined that location authentication has failed.

On the other hand, if t1 is greater than t2 in step S210, it is checked whether D is less than or equal to t2, which is a small value (D≤t2) (S214). In step S214, the location authentication module determines that location authentication is successful when D is less than or equal to t2, and when D is greater than t2, it is determined that location authentication has failed.

The location authentication algorithm described in FIG. 2 is for minimizing the probability of a location authentication error occurring in location authentication, and the distance D between the calculated mobile communication terminal 110 and the card merchant 120 is determined by the distance D. This is a method of determining the location authentication success only when the smaller than the smaller value of the average error radius (t1) and the average error radius (t2) of the mobile communication terminal 110. Meanwhile, the location authentication algorithm according to the embodiment of the present invention is not limited to that described in FIG. 2, and any method for authenticating a credit card based on the location of the mobile communication terminal 110 is included in the technical idea of the present invention. do.

3 is a flow chart briefly illustrating an authentication process of a credit card according to an embodiment of the present invention.

When a credit card payment request is generated by the card merchant 120, the payment request signal is transmitted to the card company payment server 130 through the VAN 122, and the card company payment server 130 transmits the credit card for payment of the credit card. The authentication request signal is transmitted to the card company authentication server 140 (S400). Here, the authentication request signal includes a management code and a card number of the card affiliate store 120 in which the payment request signal is generated.

The card company authentication server 140 receives the card number from the card company payment server 130 and inquires the credit card authentication method using the member database 142 (S302). The card company authentication server 140 determines whether the location-based authentication service is registered in the member information corresponding to the card number received in step S302 (S304).

If the card company authentication server 140 determines that the location-based authentication service is registered in step S304, the card company authentication server 140 proceeds to ⓐ and performs the location-based authentication process according to the embodiment of the present invention. The process of ⓐ will be described in detail with reference to FIG. 4.

If the card company authentication server 140 determines that the location-based authentication service is not registered, the card company authentication server 140 performs a general authentication operation for authenticating the credit card using a card number, an expiration date, and whether to stop using the service (S306). In addition, the card company authentication server 140 receives the location authentication result value of the credit card registered with the location-based authentication service in step S306 (©) and performs the general authentication operation described above.

The card company authentication server 140 checks whether the authentication of the credit card is successful in step S306 (S308), and if it is determined that the authentication of the credit card has failed, generates a predetermined error code and transmits it to the card company payment server 130, The card company payment server 130 transmits the error code received through the VAN 122 to the corresponding card affiliated store 120. That is, a credit card registered in the location-based credit card authentication service according to an embodiment of the present invention undergoes both a location verification process and a general authentication process.

On the other hand, if the card company authentication server 140 determines that the credit card authentication is successful in step S308, and transmits the success code to the card company payment server 130, the card company payment server 140 performs a credit card payment operation (S310). ). The result of the credit card payment operation performed by the card company payment server 140 is transmitted to the card affiliate store 120 through the VAN 122 (S312).

On the other hand, according to an embodiment of the present invention, the card merchant 120 receives the payment code to proceed with the payment operation of the credit card, and transmits the payment result to the card company payment server 130. In addition, the card company payment server 130 receiving the payment result from the card merchant 120, the payment history and the card merchants (SMS) to the mobile terminal 110 using SMS both when the payment is made normally and when the payment is not made. It is connected with an SMS server (not shown) to transmit the information (address, name, telephone number, etc.) of the 120. Therefore, in the case where payment using the credit card is normally made or failed, the original owner of the credit card may check the payment details and the information of the card merchant 120.

This notification method is used even if an illegal credit card user uses the credit card in close proximity to the original owner of the credit card in the event that the credit card is stolen or lost, even if an error occurs in the location-based credit card authentication according to the present invention. The original owner of can immediately identify and respond to the use of illegal credit cards.

FIG. 4 is a flowchart illustrating an authentication process when the location of the mobile communication terminal 110 is not determined when the credit card is registered in the location-based credit card authentication service according to an embodiment of the present invention.

If the card company authentication server 140 determines that the credit card is registered in the location-based authentication service in step S304 described with reference to FIG. 3, the card company authentication server 140 transmits a location authentication request signal to the location-based authentication server 150 (S400). Here, the location authentication request signal includes information such as MIN, affiliated store address.

The location-based authentication server 150 receiving the location authentication request signal from the card company authentication server 140 requests the location information server 160 to determine the location of the mobile communication terminal 110 (S402). The location information server 160 requests the mobile communication switching station 170 to determine the location of the mobile communication terminal 110, and the mobile communication switching station 170 uses the wireless base stations 180 to locate the mobile communication terminal 110. Attempts to identify (S404). Of course, if the mobile communication terminal 110 is a terminal capable of using the function of the GPS, the mobile communication switching center 170 will receive the position coordinate value of the mobile communication terminal 110 measured by the GPS.

The mobile communication switching center 170 checks whether the positioning of the mobile communication terminal 110 is properly performed in step S404 (S406). When the location of the mobile communication terminal 110 is determined in step S406, that is, when the position coordinate value of the mobile communication terminal 110 is calculated, the process proceeds to ⓑ. The process of ⓑ will be described in detail with reference to FIG. 5.

Otherwise, when the location of the mobile communication terminal 110 is not determined in step S406, that is, when the location coordinate value of the mobile communication terminal 110 is not calculated, the error code is located through the location information server 160. Based on the authentication server 150 is transmitted (S408).

The location-based authentication server 150 receiving the error code of the location determination from the location information server 160 generates the authentication log data and stores it in the authentication log database 152 (S410). The location-based authentication server 150 receiving the error code of the location determination transmits the authentication failure code to the card company authentication server 140 (S412).

FIG. 5 is a flowchart illustrating an authentication process when a location of the mobile communication terminal 110 is determined when authenticating a credit card registered in a location-based credit card authentication service according to an embodiment of the present invention.

When the location of the mobile communication terminal 110 is determined in step S406 described with reference to FIG. 4, the captured position coordinate values are transmitted from the mobile communication switching center 170 to the location-based authentication server 150 via the location information server 160. It becomes (S500). The location-based authentication server 150 transmits the address of the card affiliate store 120 received from the card company authentication server 140 to the map server 190 (S502).

The map server 190 receiving the address of the card affiliate 120 searches for the number corresponding to the card affiliate 120 using the address information for each number stored in the map database 192 to be interlocked, The set position coordinate value is extracted (S504).

The location-based authentication server 150 receives the location coordinate value of the card affiliate 120 from the map server 190 and performs an authentication operation comparing the location coordinate value of the mobile communication terminal 110 received in step S500. (S506). The location authentication module generates authentication matching data while performing location authentication of the mobile communication terminal 110 and the card affiliate 120 and stores the authentication matching data in the authentication matching database 154 (S508).

The location authentication module determines whether the location authentication is successfully performed (S510). If the location authentication is successfully performed, the location authentication module generates an authentication success code and authentication log data and stores it in the authentication log database 152 (S512). Then, the location-based authentication server 150 transmits an authentication success code to the card company authentication server 140.

Otherwise, if it is determined in step S510 that the location authentication fails, the location authentication module generates an authentication failure code and authentication log data and stores it in the authentication log database 152 (S516). Then, the location-based authentication server 150 transmits an authentication failure code to the card company authentication server 140.

The above description is merely illustrative of the present invention, and those skilled in the art to which the present invention pertains may various modifications without departing from the essential characteristics of the present invention. Accordingly, the embodiments disclosed herein are not intended to limit the present invention but to describe the present invention, and the spirit and scope of the present invention are not limited by these embodiments. It is intended that the scope of the invention be interpreted by the following claims, and that all descriptions within the scope equivalent thereto shall be construed as being included in the scope of the present invention.

As described above, the conventional credit card authentication system is difficult to authenticate the credit card user only authenticates the credit card itself, but caused many problems, but according to the present invention, the location of the card merchant where the credit card is used and the original owner of the credit card. By comparing the location of the card and verifying the credit card, you can effectively prevent illegal use of the credit card due to theft or loss.

In addition, even if the payment is made through the authentication service of the location-based credit card, the payment details and the information of the card merchant where the payment occurred are transmitted to the original owner mobile terminal of the credit card at the same time as the payment of the credit card. This can compensate for the shortcomings that may arise with location-based credit card services.

Claims (14)

A system for providing a location-based authentication service that authenticates a credit card by comparing the location of the card merchant and the location of the credit card holder, A mobile communication terminal possessed by the credit card holder and used to determine the location of the credit card holder; A card merchant that reads card information embedded in the credit card using a card information query device and is registered as a member in the location-based authentication service; A card company authentication server for receiving a payment request signal transmitted from the card affiliate to determine whether the credit card is registered in the location-based authentication service, and authenticating the credit card; Receives the location authentication request signal from the card company authentication server to request and receive the position coordinate value of the mobile communication terminal to the mobile communication system, perform a location authentication operation using the built-in location authentication module to verify the authentication result of the card company Location-based authentication server for transmitting to the server; And Receiving the address data of the card merchant from the location-based authentication server, the map server to extract the location coordinate value set in the corresponding address and transmit to the location-based authentication server Location-based credit card authentication service providing system comprising a. The method of claim 1, The location coordinate value of the mobile communication terminal is calculated by using one or more of the cell ID (Cell-ID) method, GPS method and A-GPS method. The method of claim 1, Location-based credit card authentication service providing system, characterized in that the mobile terminal includes a mobile phone and a PDA (PDA). The method of claim 1, The card company authentication server includes a member database that stores personal information of the credit card holder, a mobile identification number (MIN) of the mobile communication terminal, a card number, and information on whether to register with the location-based authentication service, and the card. Location-based credit card authentication service providing system, characterized in that the name, address and phone number of the merchant is linked to the merchant database, which is stored classified by management code (Code). The method of claim 1, The location-based authentication server generates an authentication log data and an authentication matching data according to the location authentication operation, and stores them in an authentication log database and an authentication matching database to be linked, respectively. Authentication service provision system. The method of claim 1, The map server is interlocked with a map database server that stores the number corresponding to the address data of the card merchant and the country number data of which one location coordinate value is set in the number. Card authentication service provision system. The method of claim 1, A card company payment server is installed between the card merchant and the card company authentication server to receive a payment request signal from the card merchant, and receive the authentication result of the credit card from the card company authentication server to perform the payment function of the credit card. Location-based credit card authentication service providing system, characterized in that. The method of claim 7, wherein The card company payment server is connected to a short message service server for transmitting the payment details, the settlement time, the name, address and phone number information of the card affiliate to the mobile terminal using a short message service. Location-based credit card authentication service providing system. A card server and a mobile communication system for calculating the position coordinate values of the card merchant, the credit card owner's mobile communication terminal, the card merchant and the mobile communication terminal, respectively. A method of providing a location-based authentication service in a system consisting of a card company authentication server and a location-based authentication server that performs location authentication of the credit card, (a) transmitting a payment request signal sent from the card affiliate to the card company authentication server; (b) the card company authentication server determining whether the credit card is registered in the location-based authentication service using the payment request signal; (c) the card company authentication server transmitting a location authentication request signal to the location based authentication server, and the location based authentication server requesting location data of the mobile communication terminal to a mobile communication system; (d) transmitting location data of the mobile communication terminal from the mobile communication system to the location-based authentication server, and calculating the location coordinates of the card affiliate store by the map server; (e) receiving, by the location-based authentication server, location data of the card affiliate store from the map server and performing a location authentication operation using a location authentication module; (f) generating, by the location-based authentication server, an authentication result code of the location authentication job to the card company authentication server; And (g) the card company authentication server transmitting the result code to the card affiliate, and the card affiliate performing the payment according to the authentication result code Location-based credit card authentication service providing method comprising a. The method of claim 9, wherein in step (a) The payment request signal is a location-based credit card authentication service providing method, characterized in that the information relating to the management code of the card merchant and the card number of the credit card. The method according to claim 9 or 10, And the card company authentication server determines whether the credit card is registered in the location-based authentication service using the card number. The method of claim 9, wherein in step (c) The location authentication request signal includes the MIN of the mobile communication terminal and the address data of the card affiliate store providing method for location-based credit card authentication. The method of claim 9, wherein in step (d) Location-based credit card authentication service, characterized in that the location data of the mobile communication terminal includes information on the position coordinate value of the mobile communication terminal and the position error radius of the mobile communication terminal generated when the location of the mobile communication terminal is measured. How to Provide. 10. The process according to claim 9, wherein in step (e) The location data of the card affiliate stores the location-based credit card authentication service providing method comprising information on the location error radius of the card affiliate generated when calculating the location coordinate value of the card affiliate and the location coordinate of the card affiliate. .