KR20050098429A - System and method for authenticating right for purchase, terminals and ic card(or ic chip) for it - Google Patents

Abstract

The present invention relates to a product purchase and management system that uses a Purchasing Authority of a card user for at least one or more purchased items as an integrated circuit (IC) card, and is specifically included in the purchase right in an IC card (or IC chip). Record personal information, item information and / or purchase authorization codes, and use these purchase rights to manage and control the issuance (or post-issuance) of purchase rights and the purchase of goods. Therefore, the card user authenticates the purchase right for the purchased goods in the process of purchasing the goods by the purchase right authentication method purchase and management system using the IC card (or IC chip) according to the present invention, and the goods It is possible to control what is sold to an unauthorized person (eg, a card user who does not have the right to purchase). In addition, the purchase right information (eg, card user personal information, purchased goods information and / or purchase authorization code, etc.) and the purchased goods information (eg, the goods delivery company, the purchase quantity, the purchase date, / Or purchase price, etc.) can remotely manage the distribution process of the goods, thereby simplifying the tax task and improve efficiency. In particular, when the article is a dangerous substance (eg, poison or explosive), the article is effectively blocked from being used for abnormal purposes or used in terrorism or crime.

Description

System and Method for Authenticating Right for Purchase, Terminals and IC Card (or IC Chip) for It}

The present invention relates to personal information and articles to be included in the card user's right to purchase goods using an IC (Integrated Circuit) chip card, and more specifically, to the card user's right to purchase goods in an IC card (or IC chip). Record information and / or purchase authorization codes and use these purchasing rights to authorize cardholders' purchasing rights to purchased items during the purchase process, so that they can automatically manage and control the distribution of the goods. A product purchase and management system using an IC card (or IC chip), and a method thereof.

An IC card (or IC chip) is a generic term for a card made by mounting an IC chip on a plastic card of a normal credit card size, and includes a processor part and a memory part, or simply a memory part and a contact type with an external device. Or communication with a contactless interface.

Among the IC cards (or IC chips) described above, the processor unit and the memory unit have their own arithmetic capabilities, so that the identification or processing of a password (for example, a PIN (Personal Identification Number)) is possible. As a result, it is being used as a financial card such as a credit card, debit card, check card, prepaid card, electronic wallet, and financial common network. The IC card (or IC chip) is almost impossible to duplicate due to the characteristics of the medium, and is provided with features to ensure confidentiality, authentication, authentication, integrity, and nonrepudiation. The present invention uses the above-described IC card (or IC chip).

Purchasing Cards are generally used in existing commodity purchasing systems, where purchasing cards are companies (eg, corporate card members with purchase card functionality) and / or customers (eg, purchase card functionality). Personal card member) or the like to pay for the purchase price of the purchased goods by the card, and the goods delivery company (for example, the purchase card merchant) is to be paid for the purchase price from the payment agency bank (for example, the card company) of the purchasing company.

For the purchase card, the payment agency bank (e.g., the card company) enters into a purchase card agreement with the goods purchaser and / or the customer (e.g., the card member) and the goods delivery company, and the purchase card to the goods purchaser and / or the customer. Issue a.

Existing goods purchase system using the purchase card issued as described above has a function to prevent some tax evasion on the purchased goods, but does not authenticate the legitimacy of the goods purchasing company and / or the customer who purchases the goods, and It can be difficult to keep track of which customers have been purchased.

SUMMARY OF THE INVENTION An object of the present invention for solving the above problems is to have a smart card with a purchase right of a card user (eg, an item purchasing company and / or a customer) for an item, and to use the purchase right to purchase an item. It is an object of the present invention to provide a system and method for purchasing and managing goods using an IC card (or IC chip) so as to automatically manage and control the distribution process of goods by authenticating the purchase right of a card user.

Another object of the present invention is to fundamentally block dangerous goods (eg, poisons or explosives) from being sold to unqualified persons for use in terrorism or crime.

One aspect of the present invention for achieving the technical problem to be achieved by the present invention is to issue (or post-issuance) of the card user's purchase rights for the purchased goods to the IC card (or IC chip).

According to the present invention, an IC card (or IC chip) purchase right is an input / output interface for inputting and outputting information and / or data through an APDU (application protocol data unit) connected to a card terminal device, a purchase right program, and / or a purchase right. And a memory unit for storing purchase right storage information, including a data set, and a processor unit for executing the purchase right program, wherein the memory unit includes purchase right information (eg, card user personal information, purchased item information, and / or the like). Or a purchase authorization code, etc.), a public certificate, a secret key, and a card user's purchase right usage history for the purchased item.

Further, according to the present invention, a purchase right authentication device (e.g., a card terminal device of a goods supply company) that authenticates the purchase right of a card user for a purchased item using an IC card (or IC chip) purchase right is the IC card. (Or IC chip) An IC card (or IC chip) through a card interface connected to a purchased right to exchange data, a user interface receiving user input, a screen output unit for visually recognizing the data, and an input / output interface. Card for the purchased goods using the memory for storing the purchase right storage information inputted from the) and an application program required for authenticating the purchase right of the card user for the purchased goods from the purchased right storage information, and the purchase right storage information. Operation with a processor or the like for executing a user's purchase right verification A communication processing unit for exchanging card user purchase rights authentication-related data for the purchase goods performed by the purchase right authentication unit with the goods management server through at least one communication means, for outputting and printing the input contents of the user And a storage unit for storing at least one or more information and / or data required for the output device and the purchase right authentication process or generated in the purchase right authentication process. In addition, the memory provided in the operation unit may include a routine for inquiring purchase card or purchase right issuance details of a card user for a purchase item, a routine for inquiring purchase history of the previous card user, or the user interface. And / or a routine for transmitting purchase right authentication related data input and / or extracted from the purchase right storage information to a goods management server, a routine for receiving the purchase right authentication related data from the goods management server, and the purchase right authentication. A routine for transmitting the relevant data to the screen output unit and the output device.

Further, according to the present invention, a system for authenticating the purchase right of a card user for a purchased item using an IC card (or IC chip) purchase right includes: an IC card (or IC chip) provided with purchase right storage information; The terminal program corresponding to the purchase right converted into the IC card (or IC chip) is stored, and the purchase right storage information corresponding to the purchase right of the card user for the purchased item is issued to the IC card (or IC chip) (or later). Issuing), and authenticates the purchase right of the card user for the purchased goods using the purchase right storage information, inputs and outputs the purchase right authentication related data through at least one communication means with the goods management server, and stores the purchase right information. Issuing (or post-issuance) to the IC card (or IC chip) through a card terminal device for outputting and a predetermined card user approval process for purchased goods Generate purchase right storage information, communicate with the card terminal apparatus through at least one or more communication means, issue (or post-issue) the generated purchase right storage information to the IC card (or IC chip) through the card terminal apparatus; In addition, it characterized in that it comprises a goods management server for managing and controlling the purchase process of the purchased goods by using the purchase rights authentication-related data input and / or extracted from the card terminal device.

According to the present invention, the IC card or the IC chip is mounted on or detached from the wireless terminal.

Hereinafter, with reference to the accompanying drawings and description will be described in detail the operating principle of the preferred embodiment of the present invention. However, the drawings and the following description shown below are for the preferred method among various methods for effectively explaining the features of the present invention, the present invention is not limited only to the drawings and description below. In addition, in the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout the present title.

For example, in the case of issuing an IC card (or IC chip) according to the present invention, the card issuing agency must first grasp the credit of the card user (e.g., a commodity purchaser and / or customer). Databases of credit card companies, financial institutions and / or credit rating agencies may be used.

In addition, when issuing (or post-issuance) a card user's purchase right for a purchase item on the IC card (or IC chip) as purchase right storage information, the goods management server purchases the goods for the card user. If the cardholder is a commodity purchasing company, a procedure is performed to verify that the company is authorized to purchase the commodity, or if the cardholder is a commodity purchasing customer, It is clear that a procedure is undertaken to verify that a person holds a qualification in this field.

In addition, according to the embodiment of the present invention, the information included in the purchase right storage information issued (or post-issued) to the IC card (or IC chip) may include card user personal information, purchased goods information, and / or a purchase authorization code. Includes purchase rights information, authorized certificates, secret keys, and details of the card user's purchase rights usage for the purchased items, which is a preferred implementation for efficiently explaining the purchase rights in the form of an IC card (or IC chip). It is only an example, and it is obvious that the information included in the purchase right storage information can be added or deleted, etc. according to the intention of the operator.

1 is a block diagram functionally expressing the internal configuration of the IC card 100 applied to the present invention.

With reference to IC chip specifications including ISO / IEC 7816 and / or ISO / IEC 14443, the smart card's ICC is based on the power supply (VCC), reset signal (RST), clock signal (CLK), ground (GND), An input / output interface 105 for communicating with the card terminal device (e.g., exchanging commands or data, etc.) via a contact point such as programming power supply (VPP), and / or input / output (I / O), a central process unit (CPU), A processor unit 110 including at least one computing element including a micro process unit (MPU) and / or a coprocessor, a read only memory (ROM), a random access memory (RAM), and an electrically (EPPROM) And a memory unit 115 including at least one memory device including an Erasable and Programmable Read Only Memory (FM), a flash memory (FM), and the like. In particular, at least one of the memory devices manages and operates an internal resource of a smart card. Chip operating system Is provided with a; (Chip Operating System COS), is also provided with at least one IC card (or the IC chip) storing information (120) for providing a service using a smart card, at least one of the remaining memory elements.

In particular, the IC chip storage information 120 included in the memory unit 115 on the IC chip included in the smart card is a data storage unit for storing a data set corresponding to data or information read and used by the card terminal program. And / or a program processing unit for storing and driving program code (eg, JAVA Applet) that can be used by the card terminal program, and the like. The data storage unit may be provided only, or the data storage unit and the program processor may be provided together.

Referring to FIG. 1, the purchase right storage information 125 is extracted by the card terminal program and used by the card terminal program and a data storage for storing information required to authenticate the purchase right of the card user for the purchased item. And a program processing unit specific to an IC card (or IC chip) for performing read / write control on at least one or more information stored in the data storage unit and a function of discriminating the data.

2 is a detailed configuration diagram of the purchase right storage information 125 according to a preferred embodiment of the present invention.

Referring to FIG. 2 according to a preferred embodiment of the present invention, the data storage unit 200 of the purchase right storage information 125 includes a personal information storage unit 205, a purchase item information storage unit 210, and a card user; A purchase right information storage unit including a purchase approval code storage unit 215, an authorized certificate storage unit 220, a secret key storage unit 225, a purchase right usage history storage unit 230, and a mileage or discount coupon; Other information storage unit 235 and the like are functionally provided.

In addition, the program processor 240 controls the data determination unit 250 for determining data input / output through the input / output interface 105 and reading or storing information stored in the data storage unit 200. Read / write control unit 245 and the like. In particular, the program processor 240 is part of the COS configuration provided on the IC card (or IC chip), or is linked to a part of the COS configuration.

3 is a simplified diagram showing an embodiment of the functional configuration of the card terminal device 300. As shown in FIG.

When a card user inserts an IC card (or IC chip) into the card insertion unit 305, the card user includes the IC card (or IC chip) in the purchase information obtained by converting the IC card (or IC chip) through the card interface 310 provided in the card insertion unit 305. The purchase right program and / or the purchase right data set included in the purchased purchase right storage information 125 are exchanged with the operation unit 315 of the card terminal device 300.

The card user uses at least one input device including a keyboard, a mouse, or a touch pad screen to provide personal information of the card user corresponding to the requirements of the screen output unit 335 (for example, a card user purchases an item. If not, enter the business registration number, or if the card user purchases goods, such as a social security number) and / or a secret key. The key data input through the input device is provided to the calculator 315 through the user interface 330.

The memory 320 in the computing unit 315 corresponds to the card card (or IC chip) storage information, and the card terminal corresponding to the purchase right storage information 125 corresponding to the IC card (or IC chip) purchase right. A program is provided, and the purchase right storage information 125 exchanges purchase right authentication related data. The operation of the operation unit 315 and other peripheral devices (eg, output devices) is performed by the processor 325.

The personal information and / or secret key of the card user input through the user interface 330 is used in the card user's purchase right authentication process for the purchase item performed by the operation unit 315. Both the case of authenticating offline in the card terminal device 300 and the case of authenticating online at the goods purchase server through the communication processor 340 may be performed.

For example, if a purchase authentication code for authenticating the purchase authorization code included in the purchase right storage information 125 is provided in the storage unit 350 of the card terminal device 300, the card user's purchase right authentication process for the purchased item is provided. Is preferably made offline in the card terminal device (300).

In addition, if the purchase authentication code is provided in the goods management server, for example, the card user's purchase right authentication process for the purchased goods may be performed online in the card terminal device 300 and / or the goods purchase management server. That is, the purchase authorization code included in the purchase right storage information 125 is encrypted and transmitted to the product purchase server through the communication processing unit 340 to authenticate the purchase right through a process in which the product purchase server is compared with the purchase authentication code. Alternatively, the purchase authorization code may be received from the goods purchase server through the communication processing unit 340 to the card terminal device 300 to be compared with the purchase approval code, thereby authenticating the purchase right.

The purchase right authentication related data inputted through the user interface 330 or extracted and / or generated by the calculator 315 in the process of authenticating the purchase right of the card user for the purchased goods as described above is displayed on the screen output unit ( 335 is displayed on the screen, or output to the output device.

4 is a simplified diagram of a system for purchasing and managing a purchase right authentication method article according to a preferred embodiment of the present invention.

Referring to FIG. 4 according to a preferred embodiment of the present invention, a purchase right authentication type goods purchase and management system includes a card user 445 corresponding to an item purchasing company and / or a customer, and a card affiliate store corresponding to an item delivery company ( 450), the card company corresponding to the payment agency 440, and the purchase right issued to the IC card (or IC chip) (for example, the purchase right issued (or post-issued) to the IC card (or IC chip) of the card user). It consists of a goods management server 405 that manages the purchase rights and purchase process of the card user 445 for the purchased goods through the storage information 125, and converts the IC card (or IC chip) to the card user online. A purchase right approval server 435 is added to perform a predetermined purchase right approval process for issuing (or postissuing) a purchase right.

The card user 445 is an item purchasing company and / or a customer who is authorized to purchase a specific item from the goods management agency 400. The card user 445 is provided with a purchase right that is an IC card (or IC chip). According to a preferred embodiment of the present invention, the purchase right, which is converted into an IC card (or IC chip) as described above, is purchased by the goods management server 405 through a predetermined purchase right approval process for the card user 445. The rights storage information 125 is generated and issued (or post-issued) to the IC card (or IC chip).

Card merchant 450 is a goods delivery company that has been approved for the handling and sale of a particular product from the goods management institution 400, the card terminal device 300 provided in the card merchant 450 is a purchase right as shown in Figure 3 Authentication function is provided.

Accordingly, the card user 445 purchases the goods, and provides the card terminal device 300 provided in the card merchant 450 to purchase the IC card (or IC chip) of the card user 445 for the purchased goods. (For example, the purchase right of the card user 445 for the purchased goods from the IC card (or IC chip) provided with the purchase right storage information is transferred to the operation unit 315 through the user interface 330 of the card terminal device 300.) The card terminal device 300 authenticates the purchase right of the card user 445 for the purchased goods in an offline or online manner by using the purchase right information 125, and the authentication process is normally performed (for example, After the purchase right of the card user for the purchased goods is authenticated), the card terminal device 300 performs payment processing for the purchased goods.

In the case where the payment agency 440 is authorized to purchase the card user 445 for the purchased item through the IC card (or IC chip) purchase right, the purchase price of the item (eg, the card user) according to the payment processing Position) or an agency that pays for the delivery of goods (eg, from a card merchant), and corresponds to a general term of a card company, a value added network (VAN) company, or a card slip purchase bank.

The goods management server 405 is a management server operated by a goods management institution 400 for the purpose of managing the distribution of specific goods. According to a preferred embodiment of the present invention, the goods management server 400 is a purchase right provider. 410, the purchase authentication information D / B 430, the purchase right authentication unit 420, the purchase goods management unit 415, and / or the goods management information D / B 425.

The purchase right providing unit 410 of the goods management server 405 performs a predetermined approval process for the card user 445 (for example, a process of judging whether the card user is eligible for purchase and / or handling of a specific item). The card user 445 may be provided with an IC card (or IC chip) purchase right.

According to a preferred embodiment of the present invention, the purchase right providing unit 410 purchases a specific purchase item to the card user 445 through a predetermined approval process related to the purchase of the specific purchase item for the card user 445. Issuing an IC card (or IC chip) issued with the right storage information 125, or an IC card (or an open platform) provided among the IC cards (or IC chips) possessed by the card user 445. IC chip) is provided with the purchase right of the IC card (or IC chip) through a process of post-issuing the purchase right storage information 125 for a specific purchased item.

In addition, in the present invention, a predetermined approval process relating to the purchase of a particular purchase item for the card user 445 may be performed through, for example, the card user 445 submitting documents related to the handling of the purchase item and reviewing the documents. Alternatively, when the card user 445 inputs a license number related to the handling of purchased goods, the certificate number is transmitted to a server of the corresponding certification management institution (for example, the purchase right approval server shown) to perform an online examination.

The purchase authentication information D / B 430 of the goods management server 405 authenticates the purchase right converted into an IC card (or IC chip) issued (or post-issued) to the card user 445, thereby providing the card user ( A D / B for storing information required for authenticating the purchase right of 445, and the card user personal information of the purchase right information 125 included in the purchase right obtained by the IC card (or IC chip) of the card user 445; It includes at least one or more of the matching information, information matching the purchase item information, and / or information matching the purchase authorization code.

According to the present invention, the purchase authentication information D / B 430 is preferably provided in the goods management server 405, or may be provided in the storage unit 350 of the card terminal device 300 of the goods delivery company. Do. For example, when the purchase authentication information D / B 430 is provided in the goods management server 405, the purchase rights authentication process of the card user 445 for the purchased goods is made online through the goods management server 405. Or, if the purchase authentication information D / B (430) is provided in the card terminal device 300 of the goods delivery company, the card user's purchase rights authentication process for the purchased goods is made offline in the card terminal device (300) It is possible.

The purchase right authentication unit 420 of the goods management server 405 purchases authentication information provided in the purchase authentication information D / B 430 and an IC card (or IC chip) issued (or post-issued) to the card user 445. ), And compares the purchase right information 125 included in the purchased right, and authenticates the purchase right of the card user 445 with respect to the purchased goods from the comparison result.

According to the present invention, the purchase right authentication unit 420 is preferably provided in the goods management server 405, or may be provided in the storage unit 350 of the card terminal device 300 of the goods delivery company. For example, when the purchase right authentication unit 420 is provided in the goods management server 405 (in this case, the purchase authentication information D / B is preferably provided in the goods management server together with the purchase right authentication unit), The purchase right authentication process of the card user 445 for the goods is performed online through the goods management server 405, or when the purchase right authentication unit 420 is provided in the card terminal device 300 of the goods supply company. If the purchase authentication information D / B 430 is provided in the goods management server 405, the purchase right authentication process of the present invention is performed online (eg, from the purchase authentication information D / B 430) of the card user 445. If the purchase authentication information is received in the card terminal device 300), or if the purchase authentication information D / B 430 is provided in the card terminal device 300, the purchase right authentication process of the present invention is a card terminal device ( Done offline at 300) It is possible.

The purchase goods management unit 415 of the goods management server 405 uses the purchase rights obtained by converting the IC card (or IC chip) into the purchase right authentication process of the card user 445 for the purchased goods, and the payment processing for the purchased goods. Is performed, the purchase right information of the card user 445 who purchased and paid for the goods extracted and / or generated in the purchase right authentication process and / or the payment processing process from the card terminal device 445, and the purchased goods information. Receiving and storing the item management information D / B 425 and managing the distribution process for a specific item using the purchase right information and the purchase item information stored in the item management information D / B 425. It is characterized by.

The goods management information D / B 425 of the goods management server 405 authenticates the purchase right of the card user 445 with respect to the purchased goods by using the purchase right that is converted into an IC card (or IC chip), and the purchased goods. After the payment processing is performed, the D / B storing the purchase right information and the purchased goods information of the card user 445 received from the card terminal device 300, the goods management authority 400 is the goods management information D By querying / B 425, it is possible to manage and / or control the distribution process of managed goods.

5 is a simple flowchart illustrating a process of post-issuing a purchase right obtained by converting an IC card (or an IC chip) to a card user according to a preferred embodiment of the present invention.

Specifically, in FIG. 5, a card user uses a card management device 405 of a card terminal device 300 (for example, a client computer equipped with an IC card (or IC chip) terminal function) to manage a particular purchased item. The card user through the predetermined purchase right approval process based on the purchase right approval information, and the goods management server 405 based on the purchase right approval information. The process of generating and issuing the purchase right storage information 125 for the purchased goods in the IC card (or IC chip) of the. However, FIG. 5 illustrates an embodiment of post-issuance through online among various methods of issuing (or post-issuance) an IC card (or IC chip) purchase right according to the present invention. Those skilled in the art will clearly understand the various methods for providing the card user with the IC card (or IC chip) the purchase right for the purchased item based on the drawing 5.

A card user inserts an IC card (or IC chip) into the card terminal device 300, and performs a process of determining the validity of the IC card (or IC chip) (500), ISO / IEC 7816 and / or EMV. According to regulations and the like, validity such as confidentiality, authentication, integrity, and nonrepudiation of an IC card (or IC chip) is authenticated through a process such as a PIN input.

If the validity of the IC card (or IC chip) is not authenticated (505), the process of converting the purchase right for the purchased item into an IC card (or IC chip) to the card user is terminated.

On the other hand, if the validity of the IC card (or IC chip) is authenticated (510), the card user is connected to the goods management server 405 through the card terminal device 300, and the goods management server 405 According to the user interface 330, an item to be purchased is selected (515).

When the item to be purchased is selected as described above, the card user uses the interface provided by the goods management server 405 through the card terminal device 300 to provide the purchase right of the goods management server 400. Provide the purchase right approval information (for example, a license number for authenticating the handling of the purchased item) to the 410, and the purchase right of the card user for the purchased item from the purchase right providing unit 410; Chip) to request post-issuance (520).

Upon receiving the purchase right approval information from the card user, the purchase right providing unit 410 transmits the purchase right approval information to the purchase right approval server 435 (for example, the certificate management server) to approve the purchase right provided by the card user. The validity of the information is determined (525).

According to a preferred embodiment of the present invention, if the purchase right approval server 435 is entitled to handle the goods in the purchase right approval information provided by the card user, the purchase right approval information may be added to the purchase right approval information 410. The result of the validation is returned, and if it is not qualified to handle the item, a validation error is returned.

If the validity of the purchase right approval information as described above is not authenticated (530), the goods management server 405 transmits and outputs a purchase right approval error message to the card terminal device 300, and then purchases the purchased goods to the card user. The process of issuing post-issuance by converting the purchase right for the IC card (or the IC chip) into the process (535).

On the contrary, if the validity of the purchase right approval information is authenticated (540), the purchase right providing unit 410 of the goods management server 405 purchases the purchased goods to be post-issued by the card user's IC card (or IC chip). Generate the right storage information 125 (545), and transmits the purchase right storage information 125 generated as described above to the card terminal device 300 to post-issue to the IC card (or IC chip) of the card user ( 550).

If the card user's purchase right for the particular purchased item is converted into an IC card (or IC chip) through the above process, the purchase right providing unit 410 of the goods management server 405 performs the IC card (or IC chip) as described above. Generate the purchase authentication information required for authenticating the purchased purchase right information (555), and convert the purchase authentication information generated for authenticating the purchase right information into an IC card (or IC chip) as described above. Stored in B (430) (560).

According to the present invention, the purchase authentication information D / B 430 is both provided in the goods purchase server 405, the case of being provided in the card terminal device 300 storage unit 350 of the goods delivery company, etc. If the purchase authentication information D / B 430 is provided in the card terminal device 300 storage unit 350 of the goods delivery company, the purchase right providing unit 410 through the at least one communication means The purchase authentication information is provided to the card terminal device 300 and stored in the purchase authentication information D / B 430 provided in the storage unit 350 of the card terminal device 300.

6 is a simplified flowchart of a process of authenticating a card user's IC card (or IC chip) purchase right for a purchased item through an online method according to a preferred embodiment of the present invention.

6 according to a preferred embodiment of the present invention is for the preferred case where the purchase authentication information D / B 430 and the purchase right authentication unit 420 is provided in the goods management server 405 as shown in FIG.

When the card user determines the purchased goods from the goods delivery company, the card user preferentially provides the IC card (or IC chip) provided with the purchase right storage information 125 for the purchased goods for the payment processing for the purchased goods. (Eg, a purchase right in which an IC card (or IC chip) is made) is inserted into the card terminal device 300 of the goods delivery company, and the item purchase validity of the IC card (or IC chip) is determined (600).

Referring to Figure 2 in accordance with a preferred embodiment of the present invention, the purchase right storage information 125 for the purchased goods is provided with a secret key storage unit 225, the card user through the card terminal device 300 the secret Through the process of inputting the secret key stored in the key storage unit 225 is authenticated the validity of the goods purchase for the IC card (or IC chip).

If the validity of the purchase of the goods for the IC card (or the IC chip) is not authenticated (605), the card terminal device 300 of the goods delivery company is the user of the card user for the purchased goods through the IC card (or the IC chip). The process of authenticating the purchase right is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the validity of the goods purchase for the IC card (or IC chip) is authenticated (610), the card terminal device 300 of the goods delivery company extracts the purchased goods information for the goods to be delivered to the card user (615).

According to a preferred embodiment of the present invention, it is preferable that the purchased goods information on the goods to be delivered to the card user is extracted to the card terminal device through a point of sales (POS) terminal device or the like, or a user (for example, a goods delivery company). The card terminal device operator) can be directly input through the card terminal device screen and the user interface (330).

When the purchase goods information on the goods to be delivered to the card user through the above process is extracted or input, the card terminal device 300 of the goods delivery company corresponding to the purchased goods information from the IC card (or IC chip) The process of extracting the purchase right information is attempted (620).

Referring to an IC card (or IC chip) standard such as ISO / IEC 7816, each stored information included in the IC card (or IC chip) has at least one identifier assigned to it. The device 300 may extract purchase right information corresponding to the purchased goods information through the identifier.

If the purchase right information corresponding to the purchased goods information is not extracted in the process (625), the card terminal device 300 determines that there is no purchase right for the purchased goods to the card user, and the purchased goods After outputting a purchase error message for 630, the process of authenticating the purchase right of the card user for the purchased goods is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the purchase right information corresponding to the purchased goods information is extracted (635), the card terminal device 300 reads the purchase right information extracted from the IC card (or IC chip) of the card user, and read as described above The card user purchases right information on the purchased goods and the purchased goods information extracted or input to the card terminal device is encrypted (640).

Referring to FIG. 2 according to a preferred embodiment of the present invention, the purchase right storage information 125 for a purchased item is provided with an authorized certificate storage unit 220, and the card terminal device 300 is disclosed through the authorized certificate. The purchase right information 125 and the purchased item information are encrypted through a public key infrastructure (PKI) and an electronic signature.

As described above, when the purchase right information of the card user and the purchased goods information about the purchased goods are encrypted, the card terminal device 300 may obtain the encrypted purchase right information and the purchased goods information as described above through at least one or more communication means. It transmits to the purchase right authentication unit 420 of the article management server 405 (645).

After receiving the encrypted purchase right information and the purchased goods information from the card terminal device 300 of the goods delivery company, the purchase right authentication unit 420 decrypts the password, and then purchases from the purchase authentication information D / B 430. Search and compare purchase authorization information corresponding to the right information and the purchased item information, and as a result, authenticate the card user's purchase right for the purchased item (650).

If the purchase right of the card user for the purchased goods is not authenticated in the process (655), the purchase right authentication unit 420 of the goods management server 405 is a card terminal device of the goods delivery company through at least one communication means In operation 660, the card user purchase right error for the purchased item is transmitted (660), and the card terminal device 300 outputs an error message corresponding to the purchase right error. The process of authenticating the purchase right is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the purchase right of the card user for the purchased goods is authenticated (665), the purchase right authentication unit 420 of the goods management server 405 to the card terminal device 300 of the goods delivery company through at least one or more communication means The card user's purchase right authentication result of the purchase item is transmitted (670), and the card terminal device 300 processes the payment for the purchase item based on the purchase right authentication result (675).

The payment processing process for the purchased goods as described above is dependent on each payment means and payment system, and the card terminal device 300 determines whether the payment is completed.

If the payment processing for the purchased goods is completed (680), the card terminal device 300 transmits to the goods management server 405 (for example, the purchase rights authentication unit of the goods management server) that the payment for the purchased goods is completed. The goods management server 405 (eg, the purchased goods management unit of the goods management server) stores the purchase right information and the purchased goods information of the corresponding card user provided in the card user's purchase right authentication process on the purchased goods. Store in B 425 (685).

As described above, the purchase right information and purchase goods information of the card user stored in the goods management information D / B 425 may be used to inquire the goods delivered to the specific card user by the purchased goods management unit 415, or purchase the specific goods. Goods management agencies are used to manage and control the distribution of certain purchased goods, such as to look up card users.

7 is a simple flowchart for a process of authenticating a card user's IC card (or IC chip) purchase right for a purchased item in an offline manner according to a preferred embodiment of the present invention.

According to a preferred embodiment of the present invention Figure 6 is a preferred case that the purchase authentication information D / B (430) and the purchase right authentication unit 420 shown in Figure 4 is provided in the card terminal device 300 of the goods delivery company It is about.

Referring to FIG. 7, when a card user determines a purchase item from a goods delivery company, the card user preferentially stores the purchase right storage information 125 for the purchase item for payment processing for the purchase item. A card (or IC chip) (e.g., a purchase right in which an IC card (or IC chip) is made) is inserted into the card terminal device 300 of the goods delivery company, and the validity of the purchase of goods for the IC card (or IC chip) is checked. Determine (700).

If the validity of the purchase of the goods for the IC card (or the IC chip) is not authenticated (705), the card terminal device 300 of the goods delivery company is the user of the card user for the purchased goods through the IC card (or the IC chip). The process of authenticating the purchase right is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the validity of the goods purchase for the IC card (or IC chip) is authenticated (710), the card terminal device 300 of the goods delivery company extracts the purchased goods information for the goods to be delivered to the card user (715).

According to a preferred embodiment of the present invention, it is preferable that the purchased goods information on the goods to be delivered to the card user is extracted to the card terminal device through a point of sales (POS) terminal device or the like, or a user (for example, a goods delivery company). The card terminal device operator) can be directly input through the card terminal device screen and the user interface (330).

When the purchase goods information on the goods to be delivered to the card user through the above process is extracted or input, the card terminal device 300 of the goods delivery company corresponding to the purchased goods information from the IC card (or IC chip) The process of extracting the purchase right information is attempted (720).

If the purchase right information corresponding to the purchased goods information is not extracted in the process (725), the card terminal device 300 determines that there is no purchase right for the purchased goods to the card user, and the purchased goods After outputting a purchase error message for 730, the process of authenticating the purchase right of the card user for the purchased goods is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the purchase right information corresponding to the purchase goods information is extracted (735), the card terminal device 300 from the purchase authentication information D / B 430 provided in the storage unit 350 and the purchase right information and purchase goods The purchase authentication information corresponding to the information is retrieved and compared, and as a result, the card user's purchase right for the purchased item is authenticated (740).

If the card user's purchase right for the purchased item is not authenticated in the process (745), the card terminal device 300 outputs an error message corresponding to the purchase right error, and then the card user's purchase right for the purchased item. The process of authenticating the purchase right is terminated, and as a result, the purchased goods are not delivered to the card user.

On the other hand, if the card user's purchase right for the purchased goods is authenticated (750), the card terminal device 300 determines whether the payment is completed after processing the payment for the purchased goods based on the purchase right authentication result ( 755).

If the payment processing for the purchased goods is completed (760), the card terminal device 300 authenticates the purchaser's purchase right for the purchased goods to the goods management server 405 (e.g., the purchased goods management unit of the goods management server). The purchase right information and the purchased goods information extracted and / or generated in the process are transmitted (for example, encrypted and transmitted through an authorized certificate provided in the purchase right storage information), and the purchased goods management unit 415 of the goods management server 405. ) Stores the purchase right information and the purchased goods information in the goods management information D / B 425 (765).

As described above, the purchase right information and purchase goods information of the card user stored in the goods management information D / B 425 may be used to inquire the goods delivered to the specific card user by the purchased goods management unit 415, or purchase the specific goods. Goods management agencies are used to manage and control the distribution of certain purchased goods, such as to look up card users.

According to the present invention, a predetermined goods management agency that manages a particular item mounts or stores the purchase right information on the purchased item in a smart card of a goods purchaser (or a goods purchasing agency) who purchases the goods, By authenticating the purchase right information mounted or stored in the smart card through a goods sales agency during the purchase process, the goods management institution checks the distribution path and the final purchaser of the goods, and automatically manages the goods. For example, when the goods managed by the goods management institution contain dangerous substances that are handled only by a legally qualified person (or agency), the goods management authority authenticates the purchase right information loaded or stored in the smart card, It can automatically manage the distribution channels and end users of dangerous substances in real time.

The present invention mounts or stores the purchase right information for the purchased goods in a smart card of a goods purchaser (or a goods purchasing agency) that purchases the goods by a predetermined goods management agency managing a specific goods, and purchases the goods. By authenticating the purchase right information mounted or stored in the smart card through the goods sales agency, the goods management agency checks the distribution path of the goods and the amount of goods purchased (or sold) in the distribution path in real time Data can be collected and accumulated automatically. For example, when the goods managed by the goods management agency are goods that need to prepare a tax invoice, the goods management authority authenticates the purchase right information loaded or stored in the smart card, thereby allowing distribution and distribution paths of the goods. By checking the amount of goods purchased (or sold) in real time, the tax data for the goods can be automatically obtained and managed.

1 is a block diagram functionally expressing an internal configuration of an IC card applied to the present invention.

Figure 2 is a detailed configuration of the purchase right storage information according to a preferred embodiment of the present invention.

Fig. 3 is a simplified diagram showing an embodiment of the functional configuration of the card terminal apparatus.

4 is a simplified diagram of a system for purchasing and managing a purchase right authentication method article according to a preferred embodiment of the present invention.

Fig. 5 is a simple flow diagram of a process of post-issuing a purchase right obtained by converting an IC card (or IC chip) to a card user according to a preferred embodiment of the present invention.

Fig. 6 is a simple flow diagram of a process of authenticating a card user's IC card (or IC chip) purchase right for a purchased item through an online method according to a preferred embodiment of the present invention.

7 is a simple flowchart of a process of authenticating a card user's IC card (or IC chip) purchase right for a purchased item in an offline manner according to a preferred embodiment of the present invention.

<Description of main parts of drawing>

100: IC card or IC chip 105: input and output interface

110: processor unit 115: memory unit

120: IC chip storage information 125: Purchase rights storage information

Claims (15)

An input / output interface connected to a predetermined card terminal device to input / output information and / or data; A memory unit for storing the purchase right data set including predetermined purchase item information and / or purchase approval code provided through the interface, and the purchase right storage information having a predetermined purchase right program for controlling the purchase right data set. ; And And a processor unit for executing the purchase right program, wherein the memory unit further includes a routine for storing a purchase right usage history of a card user for the purchased goods. IC card or IC chip with information. The method of claim 1, wherein the purchase right storage information, Purchase rights information, including user personal information, purchase item information, and purchase authorization codes, Public certificate information, Secret key information, IC card or IC chip provided with the purchase rights storage information, characterized in that it comprises at least one of the purchase rights usage history information of the user for the purchased goods. The method of claim 1, wherein the IC card or IC chip, IC card or IC chip provided with the purchase right storage information, characterized in that the mounting or detachment to the wireless terminal. A card interface for carrying out a predetermined data transaction with an IC card or IC chip having predetermined goods purchase right storage information; And an operation unit configured to perform purchase right authentication of the card user based on the purchase right storage information after extracting or receiving purchase right storage information from the IC card or IC chip through the card interface. The method of claim 4, wherein the calculation unit, The user's personal information included in the purchase right storage information issued (or post-issued) to the IC card or the IC chip in a predetermined goods management server, and / or the purchased goods information, and / or the purchase approval code, the predetermined purchase authentication information. A purchase authentication information database stored and managed by; And A purchase that compares the purchase right storage information extracted or provided from the IC card or the IC chip with the purchase authentication information provided in the purchase authentication information database, and authenticates the purchase right of the user for the purchased goods according to the comparison result. And a rights authentication unit. The method of claim 4, wherein the calculation unit, Routines for inquiring the card user's purchase rights or purchase rights issued history for the purchased goods, A routine for querying a purchase history of the card user's previous items, A routine for transmitting, to the goods management server, purchase right authentication related data input and / or extracted from a predetermined user interface and / or the purchase right storage information; A routine for receiving the purchase right authentication related data from the article management server; And a memory unit for storing at least one routine for transmitting the purchase right authentication related data to a screen output unit and an output device. According to claim 4, The card terminal device, Further comprising a communication processing unit for exchanging the purchase rights authentication-related data of at least one or more of the card user in the purchase right storage information with the goods management server corresponding to the goods to be purchased by the user through at least one or more communication means; Terminal device, characterized in that made. An IC card or IC chip having predetermined purchase right storage information for a predetermined article; A terminal device for authenticating a purchase right of an IC card or an IC chip user for the purchased goods using the purchase right storage information; And The IC card or the IC chip user connects a communication channel with the terminal device through at least one communication means and uses at least one purchase right authentication related data input and / or extracted from the terminal device through the communication channel. And a goods management server that manages and / or controls the goods purchase process of the card user. The method of claim 8, wherein the purchase right storage information, Purchase rights information, including user personal information, purchase item information, and purchase authorization codes, Public certificate information, Secret key information, Card user purchase rights authentication system for a purchase item, characterized in that it comprises at least one of the user's purchase rights usage history information for the purchase item. The article management server of claim 8, wherein A card user's purchase right authentication system for a purchased item, characterized in that the purchase right storage information is issued (or post-issued) to the IC card or IC chip through a predetermined terminal. The article management server of claim 8, wherein Issuing, or possessing, an IC card or IC chip to which the purchase right storage information for a particular purchased item is issued to the user through a predetermined approval process relating to the purchase of the particular purchased item to the IC card or IC chip user. A purchase right providing unit for issuing purchase right storing information with one IC card or IC chip; A purchase for storing predetermined purchase authentication information associated with the user's personal information, and / or purchased goods information, and / or a purchase authorization code by purchasing purchase right storage information issued (or post-issued) to the IC card or IC chip. Authentication information database; The purchase authentication information included in the purchase authentication information database is compared with the purchase right storage information issued (or post-issued) to the IC card or IC chip, and according to the comparison result, a user's purchase right for the purchased goods is determined. A purchase right authentication unit for authenticating; And The purchase right authentication process for the purchased goods of the user, and / or the purchase history of the goods of the user in association with the user information and / or purchase right storage information provided in the IC card or IC chip, predetermined goods management information Purchasing goods management unit for storing and managing in a database; card user's purchase rights authentication system for a purchase item characterized in that it comprises a. Providing, by the goods management server, the IC card or the IC chip with predetermined purchase right storage information for the goods; Extracting or receiving the purchase right storage information from the IC card or the IC chip in a predetermined terminal device when purchasing the item using the IC card or the IC chip; And Authenticating the purchase right of the IC card or the IC chip user for the purchased goods by using the purchase right storage information extracted or provided by the terminal device; and a card user for the purchased goods, comprising: How to authenticate your rights to purchase. The method of claim 12, wherein the authenticating the purchase right of the IC card or the IC chip user for the purchased item by using the purchase right storage information extracted or provided by the terminal device comprises: Transmitting, by the terminal device, the purchase right storage information extracted or provided to the article management server; Authenticating, by the goods management server, a purchase right of an IC card or IC chip user for the purchased goods by using the purchase right storage information transmitted from the terminal device; Transmitting, by the article management server, a purchase right authentication result of the IC card or IC chip user to the terminal device; And Authenticating, by the terminal device, the purchase right of the IC card or IC chip user for the purchased item, based on the purchase right authentication result of the IC card or IC chip user transmitted from the article management server; Card user's purchase rights authentication method for a purchased item, characterized in that made. The method of claim 12, wherein the authenticating the purchase right of the IC card or the IC chip user for the purchased item by using the purchase right storage information extracted or provided by the terminal device comprises: Providing, by the terminal device, the purchase right storage information of the IC card or the IC chip user and the product purchase history to the article management server; And storing and managing the purchase right storage information of the IC card or the IC chip user and the item purchase history in the goods management server in association with each other. How to authenticate your rights to purchase. The method according to claim 12 or 13 or 14, wherein the purchase right storage information, Purchase rights information, including user personal information, purchase item information, and purchase authorization codes, Public certificate information, Secret key information, Card user purchase rights authentication method for a purchase item, characterized in that it comprises at least one of the user's purchase rights usage history information for the purchase item.