KR20060012729A - System and method of certificate for persons under age - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

The present invention relates to an accredited certification service system for a ward and a method thereof.

2. The technical problem to be solved by the invention

The present invention provides a certified certification service system and method for a protected person, which allows the protected person (minor) to participate in the electronic commerce safely within a limited range by receiving the identity verification through an authorized certificate and paying by a limited amount with the parental consent. An object of the present invention is to provide a computer-readable recording medium having recorded thereon a program for realizing the method.

3. Summary of Solution to Invention

The present invention, in the certified authentication service system for the guardian, if the purchase history of the protector purchased through the shopping mall server exceeds the payment amount limit allowed by the guardian, the payment amount limit registered in the certified certificate of the guardian, the guardian Authorized authentication means for transmitting the information on the contact information, payment method of the public packet network or a dedicated line to the application server; The application server for extracting a contact number of a guardian from the contents transmitted through the authorized authentication means and connecting a call to a corresponding telephone number through a service gateway; The service gateway controlling an actual network according to a command of an application program of the application server; And intelligent add-on with DTMF digit collection and text-to-speech (TTS) functions.

4. Important uses of the invention

The present invention is used in the certification service system.

Certificate, minor, payment amount limit, guardian, contact

Description

Accredited Certification Service System for Protected Persons and its Method {System and method of certificate for persons under age}             

1 is an exemplary configuration diagram of a system for issuing a certificate of a ward to which the present invention is applied;

2 is a flow chart of an embodiment of a method for accredited authentication service for a caregiver according to the present invention;

Figure 3 is an exemplary view showing the configuration of the official certificate of the protected person password confirmation screen according to the present invention.

Figure 4 is a configuration diagram of an embodiment of a protected person accredited authentication service system used in the present invention.

* Explanation of symbols for the main parts of the drawings

40: intelligent additional device 41: intelligent network hosting application server

42: intelligent network service gateway 43: public packet network

44: certification authority server 45: Internet shopping mall server

The present invention relates to an authorized authentication service system for a guardian (minor) and a computer readable recording medium recording the method and a method for realizing the method, and more specifically, electronic commerce (paid service) without the consent of the guardian. To ensure that the guardian (minor) who is unable to pay on an adult site, online game, online shopping mall, or phone information service that receives the certificate is authenticated by an accredited certification authority, and can make payments with a certain limit with the consent of the guardian. The present invention relates to an authorized authentication service system for a guardian, and a method and a computer readable recording medium storing a program for realizing the method.

The Internet is a global computer network system. It is an open network that can be freely connected and used by applying a common protocol called TCP / IP to other computers that anyone wants to access anywhere in the world. In addition, various services such as e-mail, file transfer, and the World Wide Web (WWW) can be used, such as those used for the delivery of multimedia information.

As the use of the Internet is rapidly increasing in Korea and around the world, it is rapidly increasing in importance as a strategic tool for improving efficiency and productivity in all parts of the existing industry, and new business opportunities are continuously created through the Internet. Of course, the area is expanding, and the number of Internet users is increasing.

Recently, sites that require identification, such as e-commerce through the Internet, that is, adult sites that provide paid services, online games, online shopping malls, and telephone information services, are spreading. You can sign up for the service by stealing your ID, so you can't effectively prevent minors from accessing the communication.Also, even if you are a paid site that uses a credit card to verify your identity, there is no reconfirmation process once you have registered your login account. It is possible for a number of minors to communicate with the site by sharing or stealing their accounts, providing emotional dysfunction to the minors.

On the other hand, in order to authenticate the user of the bank's Internet banking service, the accredited certification authority issues a unique accredited certificate for each user and goes through the authentication step through the accredited certificate when using services such as bank transfer. The accredited certificate used in the bank's internet banking service will be used for the internet shopping mall user verification step by step. Existing accredited certificates have been used as a means of identity verification, but when minors participate in e-commerce transactions, not only identity verification but also the guardian's consent must be checked. Therefore, a method for inducing minors to participate in safe e-commerce by issuing a minor certificate to verify the minor's identity and the guardian's allowable range is required.

 The present invention has been proposed in order to meet the above requirements, by receiving the identity verification with an authorized certificate and by allowing the payment to a certain limit under the consent of the guardian, so that the protector (minor) can participate safely in the e-commerce within a limited range. It is an object of the present invention to provide a computer-readable recording medium that records a certified authentication service system for a guardian, and a method and a program for realizing the method.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

The apparatus of the present invention for achieving the above object, in the authorized authentication service system for the protector, when the purchase history of the protector purchased through the shopping mall server exceeds the payment amount limit allowed by the protector, the certificate of the protector Certified authentication means for transmitting the contents related to the payment amount limit, the guardian's contact information, and the payment method registered in the public server via the public packet network or leased line; The application server for extracting a contact number of a guardian from the contents transmitted through the authorized authentication means and connecting a call to a corresponding telephone number through a service gateway; The service gateway controlling an actual network according to a command of an application program of the application server; And an intelligent additional device having a DTMF digit collection and a text-to-speech (TTS) function.

On the other hand, in the method of the present invention, in the certified certification service method for the protector (minor), the identification of the protector through the certified certificate of the protector, the limit of payment amount allowed by the protector, the contact number of the protector, the authentication method of the protectee A registration step of registering with; A transmission step of transmitting, to the authorized certification authority server, the purchase history and the protector's deity information purchased by the protector when it is confirmed that the protector agrees to the protector himself / herself when using the electronic commerce of the protector; A first checking step of checking whether the payment limit and usage history of the protectee are exceeded based on the personal information of the guardian and confirming whether the payment amount limit is exceeded; A second verification step of confirming whether or not the guardian agrees by connecting an automatic call to the registered guardian's contact information when the payment amount limit permitted by the guardian is exceeded according to the verification result of the first verification step; And receiving the guardian's official certificate password as DTMF (Dual Tone MultiFrequency) by interworking with the authorized authentication server according to the verification result of the second verification step, and performing payment processing. It is done.

The present invention may further include a payment step of completing a payment by transmitting a purchase history to a payment bank or a payment card company when the limit of payment amount allowed by the guardian is not exceeded according to the confirmation result of the first verification step. Characterized in that made.

On the other hand, the present invention, the registration function for confirming that the guardian through the official certificate of the guardian in the authorized authentication service system equipped with a processor, and registers the payment amount limit, the contact number of the guardian, and the payment method in the certified certificate of the protector ; A transmission function of transmitting the purchase history purchased by the ward and the deity information of the ward to an authorized certification authority server when it is confirmed that the ward is the ward of the ward, when the ward uses the electronic commerce; A first checking function for checking whether the payment limit and usage history of the protectee are exceeded based on the personal information of the guardian and checking whether the payment amount limit is exceeded; A second confirmation function for confirming whether or not the consent of the guardian is made by connecting an automatic call to the contact number of the registered guardian according to a result of the verification of the first verification function, when the payment amount limit permitted by the guardian is exceeded; And a program for realizing a function of receiving a guardian's official certificate password as DTMF (Dual Tone MultiFrequency) by interworking with the authorized authentication server according to the verification result of the second verification function and receiving payment. Provide a computer-readable recording medium for recording.

The accredited certificate acts like a seal certificate in online transactions, and is issued and managed by an accredited certification body. When using the Internet banking service, the certificate will be issued by an accredited certification authority to receive the user's certificate and use the service. In the future, the user will be able to use the service by using the certificate when using the online shopping mall.

In a similar manner, a certifier may issue an accredited certificate to a custodian (minor), but when the issuance of the accredited certificate is made, the child is encouraged to participate in safe e-commerce.                     

First of all, an accredited certification body issues a certificate to minors in a form similar to that used in existing Internet banking or e-commerce. However, when issuing an accredited certificate, a certificate is issued with the consent of the guardian. To check the guardian, a method such as linking with the certificate used by the guardian can be used.

When issuing a minor certificate, the limit can be used for one month and the limit can be used at a time, and the guardian's payment account or credit card can be linked to make payment through the certificate. When you pay, the certificate is automatically popped up on your PC or mobile phone, and you can authenticate by entering your password or by entering your password over the phone.

When paying a landline phone, you can enter your password and verify your identity by interworking with a server of an accredited certification authority. When paying for a mobile phone, you can use a public certificate like a landline phone, or you can download and use a public certificate on your mobile phone just as you can download and use a public computer certificate. If you want to pay more than the limit set by the guardian, the automatic call is made to the guardian's phone number, and if the guardian agrees, payment is allowed.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary view illustrating a configuration of a system for issuing a certified certificate of a ward to which the present invention is applied, and using the user terminal 11 such as a personal computer (PC), a wireless communication terminal, a wired terminal, etc. to participate in an electronic commerce transaction. It shows the process of using the service.

An example of purchasing a product from an Internet shopping mall through a PC among personal computers (PCs), wireless communication terminals, and wired terminals for participating in an e-commerce will be described as the following scenario of issuing a certificate and providing authentication services. .

As shown in FIG. 1, when a minor purchases an item from the Internet shopping mall server 13 through a PC, first, a minor official certificate should be issued. To do this, the minor certificate must be issued by the guardian, and the guardian's certificate is used to verify the guardian's identity.

Subsequently, if a minor chooses to issue an accredited certificate, he / she confirms that he / she is a guardian by receiving a previously issued guardian's certificate certificate password. If the guardian is confirmed, he / she enters the monthly payment limit and the one-time payment limit allowed by the guardian and enters the guardian's contact phone number and payment method.

Payment methods include a guardian's credit card, bank account or telephone number, which can be linked. That is, the monthly cumulative payment amount management may be directly managed by the server of the accredited certification authority, or may be managed by a credit card company or a bank designated as a payment method. In the case of collective management by a certification authority, the limit can be managed collectively even if various payment methods are registered.However, whenever a payment request is made, each payment institution checks the limit with the certification authority server and uses it cumulatively. A step is needed to save the amount. In addition, when the billing institution manages each monthly limit, it is advantageous to check the limit on the server and save the cumulative usage amount.However, when the guardian receives the certificate, the limit for each institution must be set and the cumulative usage amount must be set. There is a disadvantage that is not known at once.

In the case of payment through a certificate issued by a minor issued by a minor, it is allowed to make a payment without entering a credit card password or a payment account password within the limit specified by the guardian. Once a minor is issued, it can still be used within its validity period. In addition, when issuance of an accredited certificate is required, proof of the relationship between the guardian and the guardian may be required. Enter a password from a minor who is the owner of the certificate and store the encrypted password in the certificate.

FIG. 2 is a flowchart illustrating an example of a method for accredited authentication service for a caregiver according to the present invention. After the issuance process of an accredited certificate, a process in which a minor (user) participates in an e-commerce transaction using an accredited certificate will be described below. Same as

As shown in FIG. 2, first, the user supplies the goods at the Internet shopping mall server 22 through the user PC (the PC having the official certificate issued by the public certification authority or the registration authority participating in the public certification service) 21. When requesting a purchase application (201), the public certificate automatically pops up as shown in Figure 3 (202).

Subsequently, when the minor enters the password, the user checks the identity against the password encrypted in the public certificate (203).

As such, when the result of confirming the identity is transmitted to the Internet shopping mall server 22 (204), the Internet shopping mall server 22 transmits the user's personal information and purchase history to the authorized certification authority server 23 (205).

Then, the accredited certification authority server 23 searches for the user's payment limit and usage history based on the user's personal information and checks whether the payment limit is exceeded (206).

As a result of confirmation (206), if the payment limit is not exceeded, the payment is completed by sending the purchase history to the payment bank or payment card company. At this time, the allowable limit and the amount used may be recorded and confirmed in association with the authorized certification authority server 23, may be recorded and confirmed in the payment institution server, or may be stored by encrypting in the PC's authorized certificate itself.

As a result of the check (206), if the payment limit is exceeded (i.e., the payment amount exceeds the allowance of the guardian), the guardian's telephone number and payment can be made in the mutually negotiated format by the certification authority server 23 or the payment account server. The amount and payment information is transmitted to the intelligent network hosting application server 24 via a public packet network or a dedicated line (207).

At this time, the application program in the intelligent network hosting application server 24 extracts the guardian's telephone number from the transmitted contents and connects the telephone to the telephone number through the intelligent network service gateway 25 (208 and 209).

Subsequently, when the guardian receives a call through the guardian terminal 27, the intelligent payment device 26 converts the payment amount and the usage history into voice using the TTS function, and the guardian accepts the intention. If it is revealed as DTMF, the payment is processed (213 to 216). That is, by connecting to the certification authority server 23 to check the guardian to have the guardian enter the guardian's own certificate certificate through the guardian terminal 27, so that the password is matched and the payment will be processed if the payment will be revealed. do.

Therefore, in addition to the intelligent network hosting application server 24 and the intelligent network service gateway 25 of the telecommunication company proposed in the present invention, it is apparent that a server that can implement the proposed technology such as an existing intelligent network system or a dedicated server may replace the system. Do.

4 is a block diagram of an embodiment of a certified guardian service system used in the present invention, and is for a certified certification procedure for checking a guardian when a payment limit is exceeded.

As shown in FIG. 4, the ward certified authentication service system includes a certifying authority server 44 and an internet shopping mall server 45 on the service provider side. It is composed of a telecommunication company's intelligent network hosting application server 41, intelligent network service gateway 42, Advanced Intelligent Peripheral (AIP) (VoIP, public switched telephone network (PSTN), mobile communication network) (40).

Intelligent network hosting application server (41) equipped with an application program for automatically calling a guardian, intelligent network service gateway (42) for controlling the actual network according to the application command of the intelligent network hosting application server (41), DTMF digit collection And an intelligent additional device 40 having a text-to-speech function.

Even if a minor makes an online transaction using a terminal other than a PC, the method of using a public certificate is similar.

In the case of online transactions using a mobile terminal, a public certificate is issued through a wireless Internet in a similar manner to that of a PC. In other words, similar to the case of using a PC for online transactions, they go through the steps of authenticating themselves.

In addition, when using a telephone payment, first enter a phone number to allow telephone payment when a public certificate is issued to a PC or mobile terminal. At the time of payment, the telephone number is transferred from the certification authority server 44 to the intelligent network hosting application server 41 to connect the automatic call. The password is collected by the DTMF from the user and transmitted to the authorized certification authority server 44 through the intelligent network service gateway 42 and the intelligent network hosting application server 41 to check whether the passwords match.

As a result of the check, when the user makes a phone call and pays, the caller may call the accredited organization's phone number to find the user's certificate and enter the password of the certificate by phone. In this case, it is possible to prevent problems caused by lack of identity verification procedures in existing telephone payments and telephone information.

In other words, when you make a payment using a telephone, make an automatic call to the phone number you entered to make a phone call when issuing a certificate, enter your password using DTMF, verify your identity, and complete the payment. When dialing the number assigned to, compare the calling number with the phone number of the certificate to find the user's certificate information, enter the password by DTMF and confirm that it is the same as the password of the certificate and complete the payment.                     

As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

The present invention as described above, by issuing a certificate for minors to verify the minors participating in the e-commerce, by allowing the user to make payments without the intervention of the guardian within the allowance of the guardian, by using the existing telephone payment or telephone information There is no way to verify that there is an effect that can prevent the situation in which minors make a phone call or use a paid service.

In addition, the present invention is to allow the minor's guardian to issue a minor certificate, and the guardian to set the payment allowance at the time of issuance, the e-commerce company can also minimize the disadvantages caused by transactions with minors, limited to minors There is an effect to have an economic concept within which one can make a purchase decision on its own.

Claims (5)

In the authorized certification service system for the ward, If the purchaser's purchase history through the shopping mall server exceeds the payment amount limit allowed by the guardian, the public packet network or leased line may be used for information about the payment amount limit, the contact number of the guardian, and the payment method registered in the parent's certificate. Certified means for transmitting to the application server through; The application server for extracting a contact number of a guardian from the contents transmitted through the authorized authentication means and connecting a call to a corresponding telephone number through a service gateway; The service gateway controlling an actual network according to a command of an application program of the application server; And Intelligent add-on with DTMF digit acquisition and text-to-speech Accredited certification service system for the ward including a. In the method of authorized certification service for a ward (minor), A registration step of confirming that the guardian is a guardian through the guardian's official certificate and registering the guardian's allowable amount of payment, the guardian's contact information, and a payment method in the guardian's official certificate; A transmission step of transmitting, to the authorized certification authority server, the purchase history and the protection information of the protector purchased by the protector when it is confirmed that the protector agrees to be the protector himself / herself when using the electronic commerce of the protector; A first checking step of checking whether the payment limit and usage history of the protectee are exceeded based on the personal information of the guardian and confirming whether the payment amount limit is exceeded; A second verification step of confirming whether or not the guardian agrees by connecting an automatic call to the registered guardian's contact information when the payment amount limit permitted by the guardian is exceeded according to the verification result of the first verification step; And In response to the verification result of the second verification step, if the guardian agrees, in connection with the authorized authentication server, receiving the guardian's official certificate password as DTMF (Dual Tone MultiFrequency) to process payment Accredited authentication service method for a protector comprising a. The method of claim 2, According to the verification result of the first verification step, if the payment amount limit allowed by the guardian, the payment step to complete the payment by sending the purchase history to the payment bank or payment card company Accredited authentication service method for a ward further comprising a. The method of claim 2 or 3, The amount of payment limit management allowed by the guardian, Before the billing process of each credit card company, bank, and telecommunication company is collectively managed by the accredited certification authority server, check whether the monthly payment amount limit is exceeded through the accredited certification authority server, and make monthly payments. A method for accredited authentication services for a protector, which is stored in a cumulative payment amount or stores a monthly cumulative payment amount in its own server by managing a monthly payment amount limit in each payment institution. In an authorized certification service system equipped with a processor, A registration function of confirming that the guardian is authorized by the guardian's certificate and registering the limit of the payment amount, the contact number of the guardian, and the payment method in the guardian's certificate; A transmission function of transmitting the purchase history purchased by the ward and the deity information of the ward to an authorized certification authority server when it is confirmed that the ward is the ward of the ward, when the ward uses the electronic commerce; A first checking function for checking whether the payment limit and usage history of the protectee are exceeded based on the personal information of the guardian and checking whether the payment amount limit is exceeded; A second verification function for confirming whether or not the guardian agrees by connecting an automatic call to the registered guardian's contact information when exceeding the payment amount limit allowed by the guardian according to the verification result of the first verification function; And According to the confirmation result of the second verification function, if the guardian agrees, the function of receiving the guardian's official certificate password as DTMF (Dual Tone MultiFrequency) in connection with the authorized authentication server and processing the payment. A computer-readable recording medium having recorded thereon a program for realizing this.

Images