KR20060033829A - Internet credit card authentication blocking system by using dns zone information - Google Patents

Abstract

The present invention relates to a fire prevention system for an internet payment device using DNS area information.

Recently, due to the universalization of the high-speed Internet environment, financial terminals (credit card checkers, cash dispensers, etc.), which used conventional telephone lines or leased lines, are being replaced by high-speed Internet financial terminals, and are being actively reviewed abroad. In particular, when the 'cash receipt issuance system', which is scheduled to be implemented in 2005, begins, the demand for financial terminals using the Internet is expected to show a sharp upward curve. Such high-speed Internet will be emerging as a new industry worldwide by enabling all kinds of Internet networks such as Ethernet, HFC network, xDSL, WLAN and so on. However, since these high-speed Internet financial terminals transmit financial data using the TCP / IP protocol, anyone with a licensed financial terminal anywhere in the world can access Korean financial institutions to obtain payments. Numerous financial crimes can occur, including withdrawal of funds using ATMs and illegal foreign currency dealing.

In order to prevent financial crimes as described above, the present invention tracks the current location with DNS and IP in the high-speed Internet financial terminal, and stops the payment function of the financial terminal when it is used outside the service region. By sending the terminal's unique number, cause, and location information to the payment server, the payment server can identify the leaked status of the financial terminal, and reject the payment of the financial terminal. Analyzes the full text of the terminal and rejects the payment text of the financial terminal with regional information outside the service area, and leaves the contents in the system log to notify the administrator to prevent illegal financial transactions due to the outflow of the financial terminal.

Fire Protection System of Internet Payment Device

Description

Fire protection system of internet payment device using DNS local information {Internet Credit Card Authentication Blocking System by using DNS zone information}

1 is a schematic flowchart of a system scenario for a method for analyzing and coping with regional information of a payment server and a high speed internet financial terminal in accordance with the present invention;

Figure 2 briefly illustrates an example of the system configuration using a conventional high-speed Internet financial terminal.

Figure 3 shows the violation of national boundaries using the existing high-speed Internet financial terminal,

4 shows a functional block diagram of a financial terminal.

5 is a functional block diagram of a bank and a VAN company server.

<Description of the symbols for the main parts of the drawings>

10: Bank / VAN company payment server, 20: High speed internet network server

30: Internet financial terminal such as high speed internet card inquiry machine and cash dispenser

40: Card payment server program of the bank / VAN payment server

(CAP: Credit Card Authentication Program)

50: Terminal area analysis server program of the bank / VAN company payment server                 

(NPBP: National Position Blocking Program)

60: financial terminal area information analysis program

(PLP: Position Lookup Program)

70: financial terminal payment program

(CATP: Credit Card Authentication Terminal Program)

80: Process for analyzing regional information of financial terminal

90: Terminal area information analysis process of the payment server of the bank / VAN company

100 ~ 120: IP analysis processing unit for the location information of the financial terminal

140 ~ 170: DNS zone analysis processing unit for location information of the financial terminal

130, 180: processing unit due to financial terminal position violation

190: Notification of the location allowed in the terminal payment program of the financial terminal

200 ~ 240: terminal area analysis processing unit of the bank / VAN company payment server

300, 330, 500, 510: Internet financial terminals such as Internet card terminals, POS terminals, cash dispensers

320, 520: Credit card lookup

350, 540: Bank / VAN company server

400, 430, 440, 550, 560, 570: Internet financial terminal payment data

The present invention relates to a fire protection system of an internet payment device using DNS area information for preventing fraudulent financial transactions used in an internet financial terminal and a bank / VAN company payment server. More specifically, the conventional internet financial terminal is configured to access a bank / VAN payment server using the TCP / IP protocol using Ethernet, HFC network, xDSL network, etc. Payment is possible. 2 briefly illustrates an example of a system configuration using a conventional high-speed Internet financial terminal. In general, a high-speed Internet financial terminal decrypts and decrypts a credit card inquiry machine 320 and a credit card full text 420 that read and pay the existing magnetic and smart chip cards. Method to configure a high-speed Internet card payment gateway 300 to transmit, a method to configure a credit card inquiry function and a high-speed Internet gateway function as one system, a method to configure a POS system and a high-speed Internet card payment gateway 300 In this case, the cashier and the high-speed Internet card payment gateway 300 may be divided into a cash dispenser and a high-speed Internet gateway function. In the payment method using the high speed internet credit card payment terminal, the card payment terminal 320 transfers the credit card inquiry and payment data 420 to the card payment gateway 300. The card payment gateway 300 receives and encrypts the payment data 420, converts the payment data 420 into TCP / IP protocol data 400, and transfers the data to the IP address of the bank / VAN company server 350 through the Internet network 340. . In the payment process, the Internet card inquiry between the Internet financial terminal (300, 330) and the bank / VAN company server 350, payment data (400, 440) is secured by the bank / VAN company's unique encryption method, but this is a simple data It is impossible for protection.

Figure 3 shows a case of violating the national border using the existing Internet financial terminal.

Internet data delivered through the TCP / IP protocol in the payment process using existing Internet financial terminals can travel around the world like the Internet data we enjoy. That is, when attempting to make payment abroad using the authorized internet financial terminal 510, the internet card payment data 560 is paid to the domestic bank / VAN company server 540 through the internet network 530 as if it is settled domestically. The card payment data 550 is recognized and triggers payment approval. As a result

There is no way to prevent illegal financial transactions such as illegal card cans, overseas gambling funds, and black funds from abroad, which are like domestic payments.

In order to solve the above-mentioned problems, the present invention grasps regional information on the Internet financial terminal and the bank / VAN company server and determines the boundary violation so that payment is possible only when the terminal exists in the service area of the home country. It aims to present a system to prevent illegal financial transactions by informing prevention and operators.

To this end, the present invention operates a local information analysis program (PLP) to determine the installation location of the Internet financial terminal and the terminal local information analysis server program (NPBP) to track the installation location of the Internet financial terminal of the bank / VAN server server As a fire prevention system of an internet payment device using DNS information for preventing the violation of the installation boundary of a financial terminal,

Boundary violation prevention processing of the primary Internet financial terminal is carried out at the Internet financial terminal, and FIG. 4 is a basic functional block diagram of the Internet financial terminal. The function configuration of the Internet financial terminal is MAC / PHY unit 660 for WAN matching and management functions such as xDSL, HFC network, Ethernet, WLAN, TCP / IP unit 640 for processing Internet protocol, and public IP. DHCP Client unit 650, PLP unit 630 for analyzing and processing terminal location information, CATP unit 600 for processing credit card inquiry and payment, Security unit 620 for encryption and decryption in conjunction with a server of a bank / VAN company ), And a GUI unit 610 for processing user matching and output functions.

Boundary violation prevention processing of the secondary Internet financial terminal is carried out in the bank / VAN server, Figure 5 is a functional block diagram of the bank / VAN company server. The function configuration of the bank / VAN company server includes Ethernet MAC / PHY unit 750 for WAN matching and management function, TCP / IP unit 740 for processing Internet protocol, and NPBP unit 730 for analyzing and processing terminal location information. ), CAP unit for processing credit card inquiry and payment, VAN-Security unit 720 for decrypting and deciphering payment text in conjunction with Internet financial terminal, and GUI unit 710 for administrator matching and output function. .

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are used as much as possible even if displayed on different drawings. In describing the present invention, when it is determined that the detailed description of the related well-known configuration or function may obscure the gist of the present invention, the detailed description thereof will be omitted.

1 is a diagram illustrating a credit card inquiry and payment process that has been processed to prevent the violation of the installation boundary of the first and second Internet financial terminals between the Internet financial terminal and the bank / VAN company server according to a preferred embodiment of the present invention.

Fire protection system of the Internet payment device using the DNS (DNS) region information according to an embodiment of the present invention, the bank / VAN company server 10, the backbone network (Network server 20), the Internet financial terminal We include 30.

Internet financial terminal 30 is a device installed in the credit card merchant stores the existing high-speed Internet card payment gateway 300 described in Figure 2 or the local information analysis program (PLP) to determine the installation location on the Internet cash machine (330) ) (60) is built in, depending on whether the installation location violations, card inquiry, payment attempts are determined.

The bank / VAN company server 10 is a terminal area analysis server program (NPBP) 50 that matches with a plurality of Internet financial terminals 30 and tracks the installation location of a specialized transmission Internet financial terminal, depending on whether the installation location is in violation. Determine card inquiry, payment authorization.

The internal structure and various functions of the fire protection system of the Internet payment device using the DNS area information according to an embodiment of the present invention will be described in more detail with reference to FIGS. 1 and 4. The bank / VAN company server 10 will be described in more detail with reference to FIGS. 1 and 5.

Internet financial terminal 30 is MAC / PHY unit 660, TCP / IP unit 640, DHCP Client unit 650, CATP unit 600, VAN-Security unit 620, GUI unit 610, etc. The PLP unit 60,630 was added to the existing internet financial terminal.

The PLP unit 60,630 activates the DHCP client unit 650 through the TCP / IP unit to obtain the public IP 100 obtained from the DHCP server of the network server 20 in the installation area IP Lookup Table. If it is installed in the authorized area, it activates the DNS-query 140, obtains the DS information 150 from the DNS server, and analyzes the local information contained in the information. Check the installation area again (160), and if there is no abnormality, the CATP unit 70 delivers the message of the normal information 190. When the CATP unit 70 receives the local information normal 190 from the PLP unit 60, the CATP unit 70 may transfer the payment and approval data 200 generated later to the bank / VAN server 10 to process the inquiry and payment approval. Will be. If the installation area violation occurs in the installation area IP Lookup Table analysis (110) and the DNS table analysis (160), a warning message (120, 170) is transmitted to the PLP unit (60) bank / VAN company server (10). It is possible to prevent (130, 180) to query the ID, payment approval processing.                     

Bank / VAN server 10 is a conventional bank / consisting of a MAC / PHY unit 750, TCP / IP unit 740, CAP unit 700, VAN-Security unit 720, GUI unit 710, etc. NPBP units 50 and 730 are added to the VAN server.

NPBP units 50 and 730 analyze 210 the routing data of the inquiry and payment data 200 received from the CATP unit 70 of the Internet financial terminal 30 and present the internet financial terminal 30 in the permitted area. Inquiry to the CAP unit 40, the payment data is passed to enable the normal approval 240 is made. On the other hand, if there is a violation of the installation area, NPBP unit 50 transmits the full text of the rejection authorization 220 to the Internet financial terminal 30 and inquires the corresponding ID, and blocks the payment attempt.

As described above, the conventional internet financial terminal transmits financial data using the TCP / IP protocol, so anyone with a financial terminal authorized anywhere in the world can access Korean financial institutions and obtain payment. There are a number of financial crimes that can occur, such as escaping funds using ATMs and dealing with illegal foreign currency. According to the present invention it is possible to completely prevent the above-mentioned illegal financial crime by grasping the location information of the Internet financial terminal.

Claims (3)

As a fire protection system of an internet payment device using DNS information for preventing illegal foreign financial transactions using an internet financial terminal, The Internet has the function to prevent the inquiry and payment approval of the financial terminal when the location of the Internet financial terminal is intended to be used outside the service region country by tracking the current location in the Internet financial terminal with DNS and IP. Financial terminals; Including the banking / VAN server having the function of preventing the inquiry and payment approval of the financial terminal when the Internet installation terminal to analyze the routing information of the inquiry and payment professional to track the current installation location to use outside the service region country Fire prevention system of the Internet payment device using the DS area information, characterized in that. The method of claim 1 An internet financial terminal with a fireproof function analyzes public IP obtained by DHCP Client to track the current location to determine whether it exists in a service area country, and analyzes local information by obtaining DNS information from a DNS server. Internnet payment device arson system using the DS area information. The method of claim 1 A bank / VAN server having a fire prevention function is an internet payment device fire prevention system using DNS area information, characterized in that it is present in a service area country by analyzing an inquiry of a financial terminal and a routing table of a payment specialist.

Images